last executing test programs: 5m57.487812178s ago: executing program 3 (id=349): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff7010203010902240001000010000904020202f3bff50009050602000202000a090582bb"], 0x0) 5m56.210637348s ago: executing program 3 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006002600"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40086303, {0x3, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m56.086155117s ago: executing program 3 (id=356): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) lseek(r0, 0x2004, 0x500000000000000) 5m55.595222949s ago: executing program 3 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) (fail_nth: 7) 5m54.951892146s ago: executing program 3 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x3, 0x88000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001180)=0x400000) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8002) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r4, 0x89e1, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xffffffff}) read(r3, 0x0, 0x0) r5 = memfd_secret(0x0) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '{'}, {0x20, '$\xae'}, {0x20, '@,]'}, {0x20, 'veth0_vlan\x00'}, {0x20, '+}*,'}, {0x20, '/dev/sg#\x00'}, {0x20, '\x12]./{('}], 0xa, "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"}, 0x1037) 5m54.028533304s ago: executing program 3 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f4eee0f30260f013c660faeb99ee80fc7af008036f30f1edfd2924b00b8ce008ee00f070f09", 0x26}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x58}}, 0x0) 5m38.938582278s ago: executing program 32 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f4eee0f30260f013c660faeb99ee80fc7af008036f30f1edfd2924b00b8ce008ee00f070f09", 0x26}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x58}}, 0x0) 2m40.523202791s ago: executing program 2 (id=1690): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd00000a0000008d0000f56809c2b4002833"], 0xfdef) 2m40.411980448s ago: executing program 2 (id=1691): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1, 0x0, 0x60000}, 0x0) 2m40.185394208s ago: executing program 2 (id=1693): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6, 0x2000000}) 2m40.156397772s ago: executing program 2 (id=1694): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYRES8=r0], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x80d1) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb", 0x40}], 0x1, 0x0, 0x0, 0x4000080}], 0x1, 0x40040000) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/203, 0xcb}], 0x1}, 0xc3}], 0x1, 0x2003, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x9) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x416d, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) r4 = syz_open_dev$audion(&(0x7f00000000c0), 0x8d, 0x8c00) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (async) socketpair(0x22, 0x2, 0x21, &(0x7f0000000000)) 2m40.062758139s ago: executing program 2 (id=1695): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x4000000000001d7) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 2m39.121240435s ago: executing program 2 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="440fbae516660f38820501000000f24283d1dfb9800000c00f3235002000000f30663e420f2085660f3882a1faffffff410f01cf0f013f66ba420066b88c0066ef660f2023", 0x45}], 0x1, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd57f2500) 2m38.856921932s ago: executing program 33 (id=1702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="440fbae516660f38820501000000f24283d1dfb9800000c00f3235002000000f30663e420f2085660f3882a1faffffff410f01cf0f013f66ba420066b88c0066ef660f2023", 0x45}], 0x1, 0x33, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xd57f2500) 2m38.031759733s ago: executing program 0 (id=1713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) syz_open_dev$vim2m(0x0, 0x10003, 0x2) syz_open_dev$vim2m(0x0, 0x4, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m37.960487273s ago: executing program 0 (id=1714): setreuid(0x0, 0xee00) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@md0, r0, &(0x7f0000000100)='./file0\x00') r1 = fanotify_init(0x200, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m37.911030392s ago: executing program 0 (id=1715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)='!', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000340)="e8ef791d3d44d20806ac3701e5e2453a844123634f7951205c48f3524b34e7f8be04", 0x22}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)="7ad94479e177c2b528e75aca2e212e76bde095c46422c1ae420e405fab87c881c5410bfa95c217c41f60c42b12e9daba6b75f50596e9bf1d6e9fe05bb0484d377cfd900f7512968a70e70d8ddd8329a78296b260fda385d93fba5e01ed8f4a36a77b474c7536ab9d34947050e58aabaf1ba2b553774a1b62243d8546570b18c364d0d0d2cb210df342ea90d42bfee0d3faecb9f9837e23fc7a382674dfe08bf9a19a2cac755b0b869906fcb67a2e4d4598c033380e2dac068589a16b1320df8624e80438146844df8c0c7dd0e5778c49edcb4db4e012d12c50cb2919b0446a3b0203f1665668e2a6f98ffd28764c", 0xee}, {&(0x7f0000000540)="427018449752565c2b3d3a9b88b671079cd0fadcfb45abe75169567833a2dcfeccfc3abb258958a11183968dbfe9222f3023b8438e68d2a0cd75f54113da8a119522689867599a8e1e060fa2688585ac436bcf2eff076f6d084a9ac0316e32e931382cd1b7b39ee4caca592dbd9b44b9a8de413829c1f73ae27236c89c7ebd5adb451b7950b4c80ea67f47c0f1b864e9bacc5219532e8cb9954209b169b68152db0565f43afa82be86b1306e416fe62cc2edaf763d5bd0697284b1a7c3cdddc72c32b8cce8538d180edf8c368a0414e6a90864703a694a6a2ef2fff5f54702889f7cf502de", 0xe5}, {&(0x7f0000000380)="888de4579a9662d76d2188ff47da99a540df6de2cc237eef50bebe2cf144ee8858f0de319bed35cb6836bcad3615c86ccf3619853579a75c49b94a126772492493fa", 0x42}, {&(0x7f0000000640)="b8e98fc8ee12667b1b7b74cdb195cb197aaa43e210c17a5841f5db0a9cec45cab5add9ded0d2711c361af6914aa68288299bdb68f7ed4776a5aed3cf8f15cc0920e90c2eab19a3936ddb853f95f87a5c3358254f6d4263f9d704067a411dbd911e43ff66d6dadd9114d328d2d292319bac24dadec0623bd9719c2c9af0f352ffa1327fe3ea7a778bc56a69cc148fb397e8f27ddf23eb52fb169a8ac7737141f1fa75590f78a7ef77858721885fc517e1391fb79bfc80af8c9d8e87ef754a0a0db9abd25971471710d138add35cb9e3386d904f", 0xd3}, {&(0x7f0000000740)="07234454d2ccb5bf4e6dc6c4191bfc331a3778ddf4850f6b0d7ee086f6fea145ea5a3c9a510d3b493965bb9e8f6182cdb35646fe55a163dfafd91ca5b4dc7dce2537a76c479de762d936547cae344866295dfe3b84d93312395a6b9aef49f6156ac372934533cce62e39fa3038ac63d3e98c218dff3d2508486ee61eb60868673f2deb0fec09d522b7647e63884808b1d1cccc77d27b708330981b30d922cf6e41372ca3", 0xa4}, {&(0x7f0000000800)="75fab620586846aeee614348dea57734b024c0318b64b70fbc322b29a9343325414c4edba29a5b215b1414f2517cfcfd3c0ebfaf55519e2af1f7a340942ea1d01fb6cf4622da83ed16d3dd185623caf927b3c08f0b86d7be6682119290be5f03cbfa521e9a533d40dde262f3adc6567e5c831c4b8df04bd4c91c6dc591ecd41145f51193c62ffe63117f53a4a6c9440c303f8067443d0c5685aca9188987e386bb7a453cf413d5647d15ffd14dad270bc92ffcb543cd6df375586d4b869375b865ae268f37022605a44b7f8bde637b4c521ba8e0577af1f7753a5cd54521f97572dc", 0xe2}, {&(0x7f0000000900)="e7a41bcfe35ba860dc9e9ea13c310fc245980a820913c2a8826e67b54de645f40eaaf5418b785222343cd565fd2452fcc15f33f56507f11bae358c00ba44aa3db910d1b34f9f06afe9c92ca09e80a700f1089e8455ec18f8", 0x58}], 0x7}}], 0x3, 0x80) 2m37.816669641s ago: executing program 0 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014006f56225a6c98ca006d67656e0000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) statx(r0, &(0x7f0000000700)='./file0/file0\x00', 0x6000, 0x800, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000089c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x20}}], 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000880)={{}, {0x1, 0x3}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x2, r3}, {0x8, 0x2, r4}, {0x8, 0x4, 0xee01}, {0x8, 0x1, r5}], {0x10, 0x1}, {0x20, 0x8}}, 0x64, 0x2) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x60}}, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ts_info}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 2m37.551222739s ago: executing program 0 (id=1718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40086303, {0x3, 0x1000000, 0x0, 0x1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m37.06001432s ago: executing program 0 (id=1721): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r2]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) r8 = socket(0x5, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r9, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$BLKDISCARD(r11, 0x1277, &(0x7f0000000040)=0x4) setresgid(0x0, 0x0, r10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 2m36.84859092s ago: executing program 34 (id=1721): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r2]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) r8 = socket(0x5, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r9, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$BLKDISCARD(r11, 0x1277, &(0x7f0000000040)=0x4) setresgid(0x0, 0x0, r10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 5.539988579s ago: executing program 6 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f0000003e00)=""/4093, 0xffd}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/4088, 0xff8}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000080)=""/136, 0x88}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x6}], 0x8, 0x40010022, 0x0) 5.500234948s ago: executing program 6 (id=2750): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="4500ff00060000000000594915ed91e6a3e9d322b799d6c53c000000000000000000000000000000000000000080001c00f8ffff732f6b65726e656c2f64656275672f73796e632f696e666f0000000000"], 0x45) r1 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x5, 0x0, 0x5}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x200, 0x70bd29, 0x25dfdbfe, {0x6, 0x1, 0x0, 0x0, 0xa, 0x1, 0xfffffffc, 0x7fffffff, 0x0, 0x8, 0x7}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040041}, 0x20000080) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x27) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @raw_data=[0x0, 0x81, 0x300b, 0x400, 0x9, 0xfffff4f1, 0x2, 0x0, 0x4, 0x4, 0x1, 0x6, 0xfffffb15, 0x2, 0x7f]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0xffffff72, 0x5, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x67, 0x0, 0x40, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) setresuid(0xee00, 0xee00, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) capset(&(0x7f0000000040)={0x20071026, 0xffffffffffffffff}, &(0x7f00000001c0)={0x6, 0xff, 0x3b306c28, 0x2, 0x9, 0x8}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000340)=0xe, 0x8) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12015f5600e2ffff6905350340000102030109022400010109d0f9090400150203010202092108000401222708090581034006140505"], &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x89, 0x0, 0x0, 0x40, 0x7e}, 0x4a, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x3, [{0x8f, &(0x7f0000000200)=ANY=[@ANYBLOB="bb8fcd6ec19996c43eeac2a4cd8a67dcee110137e1bd41b9dab94e532918b2d953b411b9ce4978497dd3633be3f5b8c5f51f28815a5027400000d85a115a729b5903030787846d5fc254a8cd5225213307caa579abc32229a28feb2c5200f4ffc497ab55f0113bd959297d674a4b24ad9f4b1b4b2723000000000000000000006e8d6e"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1033}}]}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x2084000, 0x0) 4.94291092s ago: executing program 6 (id=2753): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdf9, {0x0}, 0xd90b}]}, 0x6}) 4.802463365s ago: executing program 6 (id=2755): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f2a, 0x7, 0x10000, 0x5, 0x1000, 0xcc7, 0x8, 0x7, 0x200000a, 0x6, 0x2, 0x0, 0x1, 0x22, 0x6, 0x101, 0x4, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x4, 0xe69, 0x3d, 0x8, 0x4088, 0x0, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00000f35c0)=[{0xa000005, 0x22da, &(0x7f0000000180)=[0x1, 0x1, 0x401, 0x10000, 0x81, 0x9, 0x4, 0xf2e, 0x7ff, 0x80000001, 0x3, 0xb5, 0x0, 0x8001, 0x3, 0xfb6e, 0x3, 0x1, 0x3, 0x9, 0x63df5b44, 0x5, 0x56b4f0a3, 0xd5, 0x251, 0x6, 0x8, 0x5, 0x80000000, 0x2, 0x3, 0x8, 0x2b, 0x5, 0x6, 0xb, 0x0, 0x3820, 0x0, 0x57bde77d, 0x5, 0xba14, 0x100, 0x7f, 0xf, 0x2, 0x0, 0xd, 0x1, 0x5, 0x6af2, 0x0, 0x5, 0x2, 0x7, 0x401, 0x0, 0x8000, 0xd, 0x4000, 0x4, 0xdb, 0x7, 0x9, 0x0, 0x7, 0x1ff, 0x80, 0x8, 0x7, 0x7f, 0x1, 0xe, 0xf, 0xfbb, 0x400, 0xffff8001, 0x7, 0x40, 0x8, 0x7f, 0x7, 0x401, 0x7ff, 0xffff, 0x4, 0xfffffff7, 0x5, 0x9, 0x6, 0x9, 0x9, 0x8, 0x0, 0x4, 0x9, 0x4, 0x9, 0x8, 0x800, 0x5, 0x6, 0x101, 0x0, 0x1, 0xc9, 0xb9067c67, 0xfffffffa, 0x6, 0x6, 0x4, 0x6, 0x200, 0x1000, 0xfffff000, 0x2, 0x9d4, 0x6, 0x8000, 0xffffffe6, 0x5, 0x6, 0x7, 0x7, 0x3, 0x6, 0x6, 0x4, 0x4, 0x6, 0x4, 0x1ff, 0xd9, 0x40a1, 0x0, 0x20, 0x5, 0x8, 0x59bc, 0x6, 0x7, 0xd, 0x6, 0x9, 0x7, 0x5, 0x400, 0x1000, 0xfb, 0x6, 0x1c9c1268, 0x0, 0x0, 0x3, 0xd714, 0xa, 0x7fff, 0x1, 0xd, 0x4, 0xf8000000, 0xb9c, 0xde5, 0xfff, 0x7, 0x7, 0x4, 0xffffffab, 0x1000, 0xffff0001, 0x4, 0x200, 0x4, 0x10001, 0x9, 0x9, 0xdc, 0x6, 0x1cb6b65a, 0x0, 0x3, 0x0, 0xfffffffb, 0x2, 0x0, 0x3, 0x3, 0xcd0, 0x0, 0x1, 0x6, 0x6a8, 0x8, 0xfffffffe, 0xc, 0x33cf, 0xffffffff, 0x0, 0x9, 0x8, 0x1, 0xfffffff8, 0x0, 0x40000000, 0xf5ec, 0x0, 0x17d3, 0x40, 0x9, 0x0, 0x2709, 0x6, 0xf, 0x36bf, 0xb87, 0x3, 0xa2a, 0xc, 0x10000, 0x3d8, 0x7fffffff, 0x0, 0x5f, 0xc2, 0xd18, 0x100, 0x6, 0x4, 0x7, 0x6, 0x3, 0x7, 0x3, 0x401, 0xe0000000, 0x8, 0x10, 0x1, 0xffffff8d, 0x1, 0x0, 0xfff, 0x4, 0xc, 0x8, 0x33f4, 0x8, 0x6c, 0x9, 0x8, 0x6658, 0x5, 0x6, 0xffff0000, 0x2892, 0x8bc, 0x1, 0x5, 0x5, 0x10000, 0x8, 0x8, 0xff, 0x5, 0xfff, 0x4, 0x1, 0xe0e8a8ac, 0x678b, 0x7, 0xf, 0x3, 0x1, 0x7643, 0x7, 0xe9, 0xd33, 0x9, 0x85, 0x7f, 0x3, 0xfffffc01, 0xc1d6, 0x932f97e, 0xfffffffd, 0x0, 0x7fff, 0x2, 0x5, 0xffffff5f, 0x6, 0x9, 0x5, 0x9, 0x8, 0x9, 0x1, 0x3, 0x4, 0x3ff, 0xc1, 0x598ad1c7, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x4, 0xfffffff8, 0x3ff, 0x101, 0x7, 0x0, 0x3, 0xffff5a25, 0x8, 0x10, 0x302, 0x10001, 0x0, 0x60f2, 0x3ff, 0xfc, 0x1d2, 0xfff, 0x0, 0x2, 0x101, 0x0, 0x23fc527a, 0xc2, 0xffffffff, 0x1, 0xf2f, 0xced, 0xb097, 0x5, 0x4, 0xa00000, 0x4, 0xe1, 0x2, 0xd5be, 0x9c03, 0x8, 0x7ff, 0xb, 0x6, 0x3, 0x7, 0x200, 0x9, 0xb22f, 0x81, 0x9c, 0x2, 0xfffffff7, 0x3, 0x8001, 0x5, 0x9, 0xd, 0x0, 0x7f, 0x8, 0x2, 0x8, 0x7fff, 0xb66, 0xf362, 0x4051, 0x401, 0x6, 0x6a, 0x1, 0x95b, 0x10000, 0x6, 0x80, 0x929, 0x1, 0xdfb, 0x7, 0x100, 0x8d1, 0x3, 0x80000000, 0x7, 0x8, 0x2, 0x4000000, 0x4, 0x5, 0x19f, 0xdfb, 0x6, 0x3, 0x92, 0xc47b, 0x9, 0x0, 0x1, 0x2, 0x1, 0x9, 0x9, 0x2, 0x15, 0x9, 0x100, 0x7, 0xfff, 0x7, 0x2, 0x6, 0x4, 0x7, 0x6, 0x9, 0x837a, 0x4, 0x7, 0x6, 0x0, 0x9, 0x0, 0x3ff, 0x3, 0xf, 0x5, 0x1800, 0xa, 0xffff, 0x10000, 0x5c3, 0xc, 0x800, 0x8001, 0x6, 0x3ff, 0x3, 0x1, 0x7, 0x2, 0xbbdb, 0x3, 0x4ea, 0xfffffffa, 0x4, 0x4, 0x4, 0x9aa, 0x9, 0x5f59ff8f, 0x0, 0x80, 0x2e, 0x8000, 0x1000000, 0x8, 0x31e, 0x401, 0x401, 0x9, 0x2, 0x0, 0x200, 0x5, 0x0, 0x811a, 0xffff, 0x70, 0xb, 0xe64, 0xd2a4, 0x3b4a, 0x7, 0x1, 0x8, 0x5, 0x0, 0x2, 0xbea1, 0x5, 0x8, 0xfff, 0xa, 0x3, 0xac, 0xf, 0x81, 0xecc, 0x2, 0x6, 0x15f, 0xbe, 0xf, 0x7fffffff, 0x4, 0xc357, 0xf8f8, 0x38000000, 0x0, 0x8000, 0xb2, 0x5, 0x800, 0x0, 0x4, 0xe, 0x1, 0x0, 0xb8e, 0x0, 0x9f71, 0xf3b, 0x6, 0x7ff, 0xfffffff7, 0x9, 0x3ff, 0x9, 0x4ef, 0x9, 0xabe, 0x27, 0x1, 0x5, 0x0, 0x9, 0x0, 0xd7, 0x0, 0x8, 0xa0000000, 0x0, 0x1, 0x4, 0x1397, 0x7, 0x6, 0xfffffffe, 0x3, 0x10, 0x4, 0xfffffffe, 0x6, 0x9, 0x60a2c2a0, 0x6, 0x6, 0xfffffffd, 0x5, 0x4, 0x7fff, 0x1ff, 0x1, 0x5fe, 0x360, 0x31d0, 0x7, 0x8, 0x6, 0x401, 0x6, 0x5, 0x703c303, 0x6, 0x101, 0xc, 0x0, 0x716, 0xfffff801, 0x7fff, 0x1, 0x1, 0x4, 0x7fff, 0x3ff, 0x3, 0x2d03, 0x1, 0x1f800, 0x4, 0x6, 0x8, 0xfffffffc, 0x10, 0x7, 0x3, 0x9, 0x5, 0x77b, 0x7ff, 0x7, 0x1, 0x5d32, 0xd67f, 0x5, 0x5, 0x4, 0x7, 0x8, 0x9, 0x0, 0x9, 0x92, 0x2, 0x200, 0xf2fb, 0xc, 0x9, 0x5, 0x4, 0x101, 0x1, 0x6, 0x6, 0xfffffff9, 0x10001, 0x7, 0x8, 0x51c8, 0x8, 0x7fffffff, 0x9, 0x0, 0xc, 0x319d, 0x3, 0x24000000, 0x400, 0x8, 0x6, 0x8000, 0x4, 0x3, 0x4, 0xb8, 0x80000000, 0x7, 0x9, 0xfff, 0x2, 0xa4, 0x6, 0x9, 0x4, 0x6, 0x4, 0x9, 0x14000000, 0xe7fa, 0x6, 0x7, 0x1, 0x8, 0x9, 0x7f, 0x1, 0x7f, 0x7f, 0x9, 0x5, 0x6, 0x1, 0xd6f, 0x58, 0x9, 0x7, 0x3a05e259, 0x641, 0x10001, 0x68000000, 0x6, 0x1ff, 0xf17b, 0x1, 0x36d98305, 0x7fff, 0x3ff, 0x6, 0x5, 0xa1f, 0x6, 0x1, 0x0, 0x8, 0xd, 0xf8, 0x1, 0x401, 0x40, 0x1, 0xfffffff7, 0x5, 0x8, 0x7, 0x2, 0x5, 0x2, 0x3, 0x0, 0x0, 0x4, 0x9, 0xffffff80, 0x3, 0x1, 0x5, 0x5, 0x6, 0x10, 0x3, 0x7, 0x98, 0x6, 0x7fff, 0xa, 0xf, 0x3, 0x115f, 0x1, 0x6, 0x8001, 0xae1, 0xd, 0xffffffff, 0x5, 0x4, 0xfffffffe, 0x0, 0x81, 0x6, 0x1, 0x0, 0xff, 0x1ff, 0x9, 0x80000001, 0x5, 0x9, 0xffffffee, 0x40, 0x9, 0xe61, 0x5b2, 0x7fffffff, 0x7, 0xffff5c65, 0x1, 0xfffffffb, 0x8, 0x7, 0x4, 0x7, 0xd70f, 0x0, 0xfffffff9, 0x101, 0x7, 0x9, 0x0, 0x3, 0x7, 0xffff, 0x6, 0x2, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2, 0xffff8000, 0x4, 0x4, 0x65, 0x4dc0, 0x8, 0x4, 0x1, 0x7ff, 0x2, 0x2, 0x10000, 0x2, 0x5, 0x2, 0x80000000, 0x4be, 0xf95, 0x1, 0x6, 0x0, 0xa55e, 0xffff8000, 0x1, 0x8, 0x2cd011a5, 0x0, 0x3, 0x1, 0x2, 0x5, 0x7, 0x0, 0x8, 0x8, 0x3ff, 0x8, 0xffffff01, 0x7, 0x2, 0x4, 0x8, 0x3, 0x69ff1638, 0x81, 0xdf, 0x800, 0x8, 0xb, 0x1, 0x6, 0x4, 0x101, 0x7, 0x7, 0x80, 0x6, 0xb, 0x3f, 0x8, 0x10000, 0x8c3, 0xffff7fff, 0x9, 0xfffffff8, 0x8, 0x90, 0x400, 0xa2, 0xa, 0x2, 0xfffffff7, 0x2, 0xf, 0x3, 0x3, 0x10, 0x8, 0x6, 0xff, 0x4, 0x3, 0x9c, 0x9, 0x6, 0x4, 0x7f, 0x7, 0x80, 0xffffffff, 0x3, 0x8, 0x5, 0x7, 0x7, 0x2, 0x5, 0x6803, 0xfffffffb, 0x8, 0x5, 0x40, 0xe664, 0x4, 0x6, 0x0, 0x8, 0x8001, 0x12000000, 0x4, 0x4f18, 0x7ff, 0x8, 0x305400, 0x2, 0xd2e, 0x4, 0x1, 0x4, 0x3, 0x4, 0x0, 0x92e, 0xfffffbff, 0x8001, 0x5, 0x3, 0x40, 0x2, 0x401, 0x5, 0x1, 0xff, 0xc2d, 0x6, 0x4, 0x1, 0x7, 0x2, 0xffffffff, 0x8f, 0xff, 0x5, 0xebf, 0x1, 0x4, 0x7, 0x5, 0x4, 0x5, 0x8, 0x1, 0x4, 0x6, 0x5, 0x9, 0x71, 0x7, 0x5, 0x4, 0x4, 0x0, 0x8, 0x6, 0x3, 0x2, 0x2, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x6, 0x3, 0x0, 0x2, 0x6, 0x6, 0x5ee, 0x0, 0x5, 0x3, 0x7ff, 0x80, 0x8, 0x22b3, 0x2, 0x2, 0x2, 0xc0, 0xfffffffa, 0x6, 0x0, 0x8, 0x1, 0x2, 0x2, 0x5, 0x6bfa, 0xa17, 0x6, 0x67aa, 0x1, 0x3, 0x4a, 0x10001, 0x0, 0xffffffff, 0xff, 0x6, 0x9a, 0x3, 0xfffffff7, 0x0, 0x6, 0x2, 0x1ffc, 0x2, 0x0, 0x5fa7, 0x3eb, 0x0, 0x3, 0x3, 0x1, 0xbd, 0x2, 0x1, 0x4, 0x0, 0xdae, 0x2, 0x6, 0x7ff, 0x9, 0x1000, 0x81, 0x8, 0x3ff, 0xff, 0xaed5, 0xfffffffd, 0x200, 0x42, 0x7ff, 0x7f, 0x6, 0x4, 0x7c5, 0xfffffff6, 0x812e, 0x80000000, 0x7, 0x80000001, 0x1, 0x7ff, 0x9, 0x5, 0x8, 0xdd9, 0x4, 0x8, 0x7, 0x9, 0x52, 0x0, 0xd87, 0x0, 0xfffffe00, 0xa, 0x8000, 0x9, 0x9, 0x76, 0xfff, 0x2, 0x32c, 0x400, 0xb, 0x4, 0x0, 0xffffff00, 0xd28, 0x2, 0x64f4800, 0x9, 0x27, 0xffffff01, 0x5, 0x480000, 0x1, 0x2, 0x6, 0x3, 0x7, 0x3, 0x4fc, 0x4, 0x5, 0x9, 0xe, 0x40, 0x1, 0x6, 0x5, 0x8, 0x5, 0xe, 0xffffffff, 0xba, 0x9, 0x9, 0x3, 0x3, 0xc7, 0x5, 0xe, 0x4, 0x40008000, 0x9, 0xffff0001, 0x6, 0x1, 0xfffffffa, 0x7fffffff, 0xef89, 0x1, 0x80000001, 0x80000000, 0x0, 0x80, 0x401, 0x1, 0xb, 0xdc0, 0x5, 0x8, 0xfea, 0x3, 0xfffff1ab, 0x1, 0xffffffff, 0x5, 0x1ff, 0x80, 0xf, 0xd, 0xd, 0x3, 0x3, 0x8, 0x200, 0x800000, 0x80000000, 0x7, 0x1, 0x8, 0x9, 0x3, 0x9, 0x4, 0x4, 0xff, 0x7, 0xf2b, 0xe4b84310, 0x4, 0x81, 0x1000, 0x1, 0x80000001, 0x1e58000, 0x7, 0x4, 0x9, 0x2857, 0x3, 0x8, 0x1, 0x8, 0x63, 0x8, 0x5, 0x0, 0x4, 0x6, 0xb27d5989, 0x5, 0x0, 0xc9, 0xcd, 0x10, 0x401, 0x0, 0x9, 0x2, 0x10000, 0x1000, 0x2, 0xf110, 0x8, 0x7, 0x4, 0xa, 0x7275, 0x7, 0xa773, 0x4, 0x1200, 0x5, 0xfffffffc, 0x6, 0x4, 0x1, 0xff, 0x7, 0x6, 0x6, 0x0, 0x7, 0x83, 0x7, 0x80000001, 0x4d4e4a57, 0x6, 0x5, 0x4, 0x7, 0x4, 0x3, 0xd, 0x10, 0x30, 0x0, 0x7f, 0x5, 0x1, 0x2b2, 0x1, 0x5, 0xac6, 0x0, 0x8, 0x5, 0x6, 0x4, 0x1, 0x1, 0x5, 0x1ff, 0x9, 0x6f1, 0x80000000, 0x1, 0x3, 0x6, 0x5, 0x4, 0x9, 0x4, 0x5, 0x3, 0x4, 0x9, 0x8, 0x1, 0x8, 0x3, 0x4, 0x6, 0x3, 0xfffffffe, 0x2, 0x0, 0x4, 0x5, 0x9, 0x40, 0x5, 0x3ff, 0x7, 0x1c8a, 0x5d9, 0x0, 0x2, 0x7, 0x3, 0x4, 0xfffffffc, 0x1, 0x4, 0x3, 0x1ff, 0x2, 0x0, 0x69, 0x101, 0x100, 0x4, 0x0, 0xf, 0x4, 0x3ff, 0xfffffff1, 0x35, 0x1, 0x0, 0xad, 0x5e3, 0x3, 0x4d, 0xd, 0x5, 0x7ff, 0x0, 0x5, 0x86, 0xfffffffa, 0x1, 0x3, 0x6, 0x45, 0xfffffff8, 0x81, 0x8, 0xb, 0x4, 0xe9, 0x800, 0x1, 0xf73, 0x6, 0x2, 0xde0f, 0x3, 0x1ff, 0x2, 0xe69, 0x1, 0x7f, 0x7, 0x0, 0x4, 0x7, 0xfffffff8, 0x9, 0x1ff, 0x6, 0x4, 0x1, 0x1, 0x5, 0xfffffff9, 0x0, 0x2, 0x80000000, 0x5, 0x1, 0x4, 0xfffffffa, 0x1, 0x2, 0x6, 0x6e3f, 0x1, 0x3, 0xf, 0x40, 0x3, 0x1ff, 0xb2d, 0xa4, 0x10, 0xb, 0xb, 0xffff, 0x1, 0xfffffff9, 0xa, 0x7cc, 0xf94b, 0x8, 0xfffffcb3, 0x0, 0x4, 0x40, 0xb, 0x5, 0x9, 0x5, 0x9, 0x80000001, 0xffff, 0x4, 0x6, 0xfff, 0x8, 0x4, 0x3, 0x1, 0x80, 0x3, 0x8, 0x8, 0xfffffff8, 0x1, 0x9, 0xc, 0xfffffffe, 0x4, 0x8, 0x6a49, 0x9, 0x75500000, 0x10, 0x1, 0x7, 0x4, 0xfffffff3, 0x0, 0x8, 0x3, 0x3, 0x9, 0x314, 0x3, 0x9, 0x80, 0x81, 0x800, 0xffffffff, 0xcd, 0x3, 0x23, 0x3, 0x0, 0x7, 0x4, 0x10000, 0x2, 0x5, 0x3, 0x9, 0x1, 0xbc5, 0x7, 0x40, 0x35b, 0xb, 0x79b5d0ec, 0x6, 0x8, 0xd1f, 0x6, 0xfff, 0x65306255, 0x992, 0x1, 0x9000000, 0x9, 0x1, 0x1, 0x7ff, 0x5, 0x101, 0x4, 0x9, 0x3, 0x2e7, 0x8001, 0x0, 0x8, 0x7fffffff, 0x6, 0x0, 0x4, 0x6, 0x9, 0x9, 0x0, 0x10, 0x1ff, 0x7fff, 0x9, 0x1000, 0x5, 0x0, 0x8, 0x8, 0x3, 0x2, 0xf00, 0xd, 0x9, 0xfffffffb, 0x6, 0xfffffff8, 0x0, 0x3, 0x1, 0x7, 0xe, 0x0, 0x2, 0x8000, 0x10000, 0x5, 0x0, 0x101, 0xf, 0x7, 0x0, 0x4, 0x1ff, 0x3, 0x7, 0x4, 0xffff, 0x9, 0x80000001, 0x800, 0x7, 0x4, 0x4, 0x7170531a, 0x7ff, 0x7, 0x995cce68, 0x2, 0x200, 0x3, 0x7, 0x6, 0x3, 0xbd50, 0x3, 0x60b, 0x6, 0x7, 0x0, 0x2, 0x24, 0x795a, 0x401, 0x101, 0x5, 0xb, 0x4, 0x6, 0x74b, 0x80, 0x7, 0x8001, 0x4, 0xc, 0x7, 0x1, 0x80000000, 0x1, 0x5, 0x10000, 0x9, 0x4, 0x5, 0x9f, 0x2, 0x400, 0x8, 0xf, 0x8000, 0x9, 0x0, 0x5, 0x67d, 0x4, 0x4, 0x7, 0xb, 0x4, 0x780d, 0x10, 0x9, 0xd7a2, 0x100, 0xa9f, 0x9, 0x4, 0x200, 0x8, 0x5, 0x9, 0x7, 0x2, 0x0, 0xfffffff9, 0x945, 0x1, 0x80, 0x401, 0xa3f, 0x9, 0x4, 0x5, 0x7ff, 0x1, 0x6, 0x7fffffff, 0xb7, 0x10, 0x3, 0x7fff, 0xb0, 0x4, 0x3, 0xf4, 0x4, 0x0, 0x1, 0xfffff1f6, 0x3, 0x0, 0x8, 0xd, 0x2, 0x27, 0x692a, 0x8, 0x6, 0x8, 0xdb, 0x4, 0x8, 0x81, 0x426e85c1, 0x1, 0x7fff, 0xeca1, 0x8, 0xc9, 0x7, 0x0, 0xffff426c, 0x3, 0x7fff, 0x10001, 0x1, 0x6, 0x6, 0x8, 0xfde, 0x10, 0x65, 0x1, 0x5, 0x56, 0xac9, 0x4, 0x0, 0x2, 0x6, 0x1000, 0x4, 0x6, 0x7f, 0x100, 0x0, 0x6, 0x2, 0x629a, 0x5, 0x6, 0x9, 0x7, 0x8000, 0xe, 0x5, 0xfd5, 0x2, 0x6, 0x4, 0x2, 0x7, 0x0, 0x40, 0x6, 0x0, 0xfffffff7, 0x1, 0xb88, 0x5, 0x7, 0x1, 0xd41, 0x9e, 0xf, 0x0, 0x7, 0x55, 0x5, 0x9, 0x100, 0x4, 0x5, 0x10001, 0x2, 0x1, 0x5, 0x80000001, 0x2, 0x6, 0x5, 0x2c5f4c59, 0xe73, 0x5, 0x8, 0x7, 0x8, 0x4, 0x7ff, 0xfffffff8, 0xc, 0x7, 0xd23, 0x4, 0xc, 0x401, 0x0, 0xdadc, 0xe, 0x400, 0x3, 0x6, 0xa4, 0x6, 0x3, 0xefb, 0x8, 0x9, 0x3, 0x7ff, 0x7, 0x9, 0x1, 0x1, 0x1, 0x3, 0x8, 0xfffffffb, 0x339460bc, 0x663, 0x67, 0x5, 0x7fffffff, 0xffffffff, 0x4, 0x7, 0x6, 0xd, 0x401, 0x7, 0x6, 0x800, 0xca, 0xc5, 0x0, 0xe4e, 0x3, 0x5, 0x6, 0x3, 0xcf, 0x9, 0x17e, 0x2, 0x5, 0x0, 0x4, 0x7, 0x5, 0xffff, 0x7, 0x85e, 0xff, 0x7fff, 0x3, 0x8001, 0x691, 0xfffffff8, 0x3, 0x0, 0xdddb, 0x6, 0x1, 0x8, 0x8f, 0x6, 0xa, 0x2, 0x1, 0xffffffff, 0x9, 0x1, 0x7ff, 0x72, 0x7fff, 0x2, 0x3, 0x7, 0xfffffe00, 0x1, 0x0, 0x5, 0x7, 0xfe9, 0x3, 0x80000000, 0x5, 0x80000001, 0x6, 0xa8, 0x7, 0x7, 0x1cd3, 0x4, 0x7, 0x5, 0x8, 0x4000, 0x0, 0x7, 0x0, 0x6, 0xef, 0x8, 0x5, 0x0, 0x2a6, 0x8, 0x2, 0x6, 0x0, 0x6, 0x8, 0x5, 0x3, 0x8, 0x66, 0x34, 0x9, 0x9, 0xe, 0x9, 0x9, 0x1, 0x7, 0x480c, 0x5, 0x44a, 0x35d8, 0x7, 0xdfaf, 0x24cd, 0x6a, 0x6, 0x7fffffff, 0x0, 0x7, 0x1, 0x4, 0x8, 0x1, 0x3ff, 0x1, 0x1000, 0x5, 0x1, 0x9, 0x0, 0x4, 0x5, 0x6, 0x3, 0x3ff, 0x1, 0xe83, 0x101, 0x9, 0x8, 0x902, 0xff, 0x5, 0x8000, 0xfffffffc, 0x10, 0x4, 0xe, 0x6, 0x7, 0xfffffffb, 0xa7d, 0x5, 0x8, 0x6, 0xffffcf38, 0x8, 0x1, 0x800, 0x2, 0x0, 0x7, 0x5, 0x8, 0x40, 0x1, 0x9, 0x1, 0x400, 0x8, 0xa, 0xee92, 0x7, 0x5, 0x800, 0x1, 0x7, 0x7, 0x9, 0xbcf, 0x2, 0x8, 0x4400, 0x6, 0x7f, 0x7, 0x2, 0xfffffff8, 0x58f5d96, 0x1, 0xb, 0x7, 0x0, 0x36e, 0x1b0c8d0e, 0x53, 0xe960, 0x6, 0x3, 0x1, 0x7, 0x3, 0x9, 0xf7e, 0xb, 0x39, 0x8, 0x4, 0x2, 0x8, 0x3, 0xfffffffe, 0x3, 0x8, 0x9, 0x10b7, 0xe0000000, 0x9, 0x1, 0x1ff, 0x5, 0xb48, 0x0, 0xfff, 0x6, 0x101, 0x1, 0x6, 0x8000, 0x6, 0x0, 0x396, 0xfffffffb, 0x4, 0x500, 0xd5a8, 0x2, 0x1, 0x7, 0x1, 0x2, 0x8, 0xffff, 0x880, 0x2, 0x595, 0x3, 0x3, 0x5, 0x9, 0x90cc, 0x3, 0xfffffbff, 0x4, 0x6, 0x0, 0x3, 0x6, 0x0, 0x7, 0xffffffff, 0x8, 0x556b6752, 0xfff, 0x4, 0x4, 0x100, 0x6, 0x7fff, 0x1, 0x7ff, 0x40, 0x1, 0x8, 0xe, 0x33, 0x0, 0x6, 0x101, 0x33bd, 0x9, 0xb531, 0xffffffff, 0x6, 0x0, 0x4, 0x300000, 0x6, 0x9, 0x7fff, 0x2, 0x3, 0x3, 0xfffffff7, 0x63e33139, 0x419, 0xffff, 0x0, 0xaf79, 0x1, 0xfffffffc, 0x7fff, 0xa52, 0x7, 0x9a6a, 0x7, 0x41, 0x0, 0x5, 0x20, 0x8, 0x6, 0x3, 0x69, 0x0, 0x0, 0x5, 0x3ff, 0x80000001, 0x1, 0x1, 0x5, 0x3, 0x8, 0x6, 0x1, 0x9, 0x2, 0x3, 0x8, 0x0, 0x0, 0x5, 0xb, 0x3, 0xc7a9, 0x7, 0x84c3, 0x3ff, 0x3, 0x9, 0x3, 0x2, 0x10001, 0x8, 0x9, 0x8, 0x0, 0xfffffffd, 0xffff, 0x8, 0x8, 0x4, 0xe34, 0x9, 0x7, 0xfffffff9, 0xffff289d, 0x5, 0x2, 0x2, 0xcd, 0x3c, 0x0, 0x0, 0x3, 0x7, 0x10, 0x3, 0x3, 0x4, 0x5, 0x6, 0x2813, 0x9, 0x8, 0x1, 0x6, 0x7, 0x3, 0x7, 0x9, 0xffff, 0x81, 0x3, 0x916, 0xe, 0xfffffffe, 0x9, 0x0, 0x14940000, 0x7f, 0x900, 0x8, 0x0, 0x5, 0x57971918, 0xa, 0x7, 0xaaa, 0x4, 0x40000, 0x7, 0x7, 0xb, 0xfffeffff, 0x7, 0xf1, 0x7, 0x1ff, 0xffffffff, 0x1, 0x1, 0xc, 0x1, 0x10, 0x6, 0x0, 0x800, 0x1, 0x7, 0x9a9f, 0x3, 0x5, 0xff, 0x80000001, 0x6, 0xffff1fe1, 0x80, 0xcd4e, 0xff, 0x8, 0xc0000, 0xffff0000, 0x10, 0xadf, 0x1, 0x1, 0x8000, 0x1, 0x6, 0x80000000, 0xfff, 0x5, 0x5, 0x3, 0x19f2, 0x9, 0x4, 0xe, 0xcbd, 0x4, 0x2, 0x10001, 0x7, 0x1, 0xfffffeff, 0x400, 0x1ff, 0x7, 0x3, 0x9, 0x7, 0x40, 0x3ff, 0x6, 0xd, 0x1, 0x7, 0x3f0e, 0x1, 0x3, 0x7, 0x100, 0xbd5, 0x3064, 0x2, 0x7d, 0x3, 0xfffffff7, 0x1, 0x5, 0x7, 0xa, 0x2, 0x7, 0x2, 0xfffffff2, 0xe02e, 0xd, 0x8, 0x51, 0x10, 0x4, 0x2, 0x0, 0x5, 0x1, 0x1, 0xffffffff, 0x200, 0x202b, 0x7, 0x2, 0x37, 0x2, 0x4, 0x3, 0x3, 0x10000, 0x7f, 0xfffff6fe, 0x2, 0x5, 0x3, 0x3265, 0x9, 0x2, 0x4, 0x5, 0x81, 0xffffffff, 0x10000, 0x5, 0x9, 0x81, 0xcd000000, 0x7, 0x9, 0x1ff, 0xff, 0x7, 0xa103, 0x6, 0x8, 0x8, 0xd, 0x1000, 0xe, 0x8, 0x4, 0x4, 0x9, 0x4, 0x2, 0x55fdbe47, 0x0, 0x3, 0x9, 0x3, 0xf, 0x6c48, 0x6a61, 0xfffffffd, 0x7f, 0x695, 0x5, 0x400, 0x9552, 0x6, 0x1, 0x6, 0x3, 0x7ff, 0x7, 0xc5, 0xfffffffc, 0xb290, 0x7e3, 0x2, 0x6, 0x8, 0xd, 0x3, 0xd, 0x10001, 0x4, 0x9, 0x5, 0x4, 0x5, 0xff, 0x838, 0x800000, 0x1ff, 0x4, 0x9, 0x5, 0xff, 0xff, 0x400, 0x1ff, 0x50, 0x100, 0x8, 0x5, 0x2, 0x101, 0x6, 0x81, 0x40, 0xbd9a, 0xfffffffe, 0x4, 0x6, 0x159785f8, 0x10000000, 0x1, 0x0, 0x2, 0x8, 0x7, 0x8001, 0x7, 0x1000, 0x39727e6, 0x3, 0x6, 0x2, 0x7, 0x8, 0x5, 0x4, 0x1000, 0x4, 0x9146, 0x8, 0x6, 0x4, 0x3, 0x7, 0xec, 0x0, 0xfffffef7, 0xfffffffe, 0x5, 0xfffffff9, 0x7, 0x0, 0x1, 0x8, 0xa5cd, 0x8, 0xabbc, 0x6e1e5a49, 0x0, 0x1000, 0xffffffff, 0x7ff, 0xffff8000, 0xa2b, 0x7, 0x4, 0x6, 0xfff, 0x6, 0x1, 0x673404e7, 0x9, 0xe, 0x5, 0x1, 0x200, 0x9, 0x2, 0x9, 0x3, 0x80000000, 0x0, 0x7, 0x188d, 0xffff, 0x9, 0x10, 0xb, 0x9, 0x0, 0x200, 0x6, 0x40, 0x0, 0x33, 0x2, 0x40, 0x4, 0x7, 0xffffc719, 0xc1, 0x6, 0x4, 0x6, 0x8, 0x0, 0x7, 0x6, 0x7e, 0xa, 0x1, 0xffff, 0x9, 0x4, 0xe, 0x9, 0x4, 0xfff, 0x2, 0x6, 0x100, 0x4, 0x5, 0x3, 0x5, 0x101, 0xfffffffd, 0x4, 0x3, 0xfffffffe, 0x1, 0x8, 0xecc1, 0x4, 0x9a, 0xffffffff, 0xfc, 0x10, 0xfffffffb, 0xc3a9f1a, 0x1a3, 0x5, 0x3, 0x7, 0x7, 0x6, 0x8, 0x9, 0x7, 0xfffffffd, 0x3, 0x1, 0xb9, 0x9, 0xf, 0x6, 0x5, 0x7, 0x4, 0x0, 0xf, 0x10000, 0x6, 0x2000000, 0x3, 0x7ff, 0x6, 0x9, 0x1, 0x4, 0x1, 0x3ff, 0x100, 0x1, 0x5, 0x7, 0x4, 0xa2, 0x1000, 0x2, 0x8, 0x3, 0x8001, 0x19, 0x7, 0xf5, 0x40, 0x40, 0x9, 0x5, 0x2, 0x4, 0x7f0000, 0x2, 0x2, 0x1, 0xda, 0x2, 0x80000001, 0x6, 0x0, 0x8, 0x4, 0x5, 0x0, 0x701, 0x4, 0x80, 0x4, 0x3, 0x4, 0x5, 0x5, 0x4, 0xfffffffa, 0x401, 0x8, 0xfffffffd, 0xfffff4d6, 0x7, 0x5, 0xd, 0x6, 0x4, 0x5, 0x8, 0x8, 0x5, 0x5, 0x10001, 0xfffffff9, 0x8, 0x3, 0x7, 0xbc61, 0x2bf2, 0x7fff, 0x7, 0x2, 0x9, 0x1ff, 0xe, 0xe, 0xdb, 0xd, 0xffffffff, 0xe, 0x9, 0x0, 0x3, 0x9, 0x4, 0x6, 0x1ff, 0x5, 0x4c, 0x9, 0x7, 0x5, 0x9, 0x1, 0xfffffff7, 0x8, 0x6, 0x3, 0x8001, 0x3, 0xb41, 0x7, 0x34, 0x1, 0x3, 0x100, 0x4800000, 0x1, 0x5, 0xff, 0x0, 0x101, 0x6, 0x2, 0x80000001, 0x4, 0x9, 0x3, 0x3, 0x6, 0x3, 0x1, 0xf, 0x0, 0xa30, 0x532, 0x5, 0x0, 0xd1c, 0x5, 0xe, 0x20000, 0x80000001, 0x2, 0xa0b, 0x3, 0x349c7a6e, 0x4, 0x4, 0x1, 0xe, 0x6, 0x9, 0x20000, 0x9, 0x1, 0xe80, 0x2, 0x4, 0x3, 0x5, 0x5, 0x8, 0x7, 0x5, 0x93, 0x6, 0x3, 0x7, 0x3986, 0x4, 0xfffffff5, 0x0, 0x7, 0x1, 0x80, 0x306, 0x7, 0x4, 0xfffffffb, 0x459, 0x3, 0x0, 0x5, 0x0, 0x9, 0x0, 0x9, 0x9, 0x9, 0x81, 0xa0000, 0x9, 0x6f61, 0x9, 0x4, 0x401, 0xfffffffa, 0x91, 0x1ff, 0x2c, 0x7, 0xed6c, 0x4, 0x3, 0xe74, 0x5, 0x7, 0xfffffffb, 0x1000, 0x7ff, 0x401, 0xc, 0x6, 0x8001, 0x1, 0x127, 0x7, 0x6, 0x80000000, 0x80000001, 0x9, 0x65, 0xd5, 0x80000000, 0xc731, 0x0, 0x9, 0x80000001, 0x8, 0x1, 0xcd000000, 0x40000000, 0x10000, 0x7, 0x4, 0x4, 0x6, 0x6, 0x3, 0x4, 0x7fffffff, 0x1, 0x101, 0x6, 0x9, 0x5, 0x1ff, 0xedd, 0x4, 0x7fffffff, 0x8000, 0x8, 0xe, 0x9, 0x40, 0xfffffffb, 0x0, 0x5, 0x3, 0x400, 0x3, 0xffffc4d4, 0x80, 0x2, 0x6, 0x3, 0x9000, 0x4, 0x0, 0xffffffff, 0x6, 0x3, 0xfffffffe, 0x200, 0xa6, 0x3, 0x3, 0x32f5, 0x0, 0x4, 0x5, 0x6, 0x0, 0xf6, 0x120, 0x7, 0x7, 0x9, 0xbe, 0x4, 0x7, 0x6, 0x1000, 0xec, 0x6, 0x8, 0x30000000, 0x8, 0xfff, 0x4, 0x9, 0xffffffff, 0x1, 0xe172, 0x5, 0x9, 0x8001, 0x8, 0x198c, 0x0, 0x9, 0x5, 0x4, 0x8, 0x10, 0x5601, 0x1, 0x553284a9, 0x5b0, 0x5, 0xff, 0xc5d, 0xe, 0x4f, 0x5, 0x1000, 0x2, 0x9, 0x81f, 0x9, 0xa90, 0xd, 0x0, 0x9, 0xea5, 0x9, 0x9, 0x8, 0x7f, 0x4, 0xffffffff, 0x400, 0x2, 0x9, 0x10, 0x3, 0xe0, 0xffff, 0xf5c, 0x3, 0x1, 0x14e3, 0x9, 0x18a7, 0x8, 0x7f, 0x1, 0xa40, 0x7fffffff, 0x1a6, 0x8, 0x9, 0x46, 0x3, 0x6, 0xfffffff7, 0x2, 0xffff8001, 0x0, 0x5, 0x0, 0x3, 0x40, 0x2, 0x3, 0x59a, 0x8, 0x3, 0x3, 0xb6, 0x9, 0x5da, 0x4, 0x5, 0xd3, 0xd, 0x3, 0x0, 0x8, 0x1, 0x40000, 0x6, 0x8, 0x6, 0x400, 0xd72b, 0x9, 0x0, 0x25c96989, 0x80000001, 0x7ff, 0x2, 0x38be, 0x3, 0xffffffff, 0x0, 0x6, 0x9, 0x3, 0x1, 0xfffffffd, 0x7, 0x4, 0xffff, 0x38bb, 0x6, 0x91e, 0x3, 0x5, 0x400, 0x1, 0x4, 0x5, 0x6, 0xed7, 0x8000, 0x4, 0x3e, 0x3, 0x2, 0x4, 0x87, 0xffffff12, 0xc9, 0x6, 0x1000, 0xffffffc0, 0x6, 0x1, 0x1ff, 0xff, 0x5, 0xb, 0x6, 0x7, 0x2, 0x3, 0xf, 0x4d9d, 0x4f3d, 0x61, 0xee7, 0x3, 0x29734183, 0x4, 0x6, 0x1, 0x1, 0x8001, 0x80, 0xe, 0x4fe3, 0x0, 0xfffffffe, 0x0, 0x0, 0xb771, 0x8, 0x2, 0x9, 0x0, 0x2, 0x2, 0x4, 0x0, 0x8, 0x7, 0x9, 0x6, 0xc9, 0x6, 0xd33, 0x5, 0x4, 0x0, 0x1, 0xfffffffe, 0x978f, 0x0, 0x7, 0x5, 0x8, 0x1, 0x10, 0x8f5, 0x7, 0x0, 0x1ff, 0xf7b9, 0x4, 0xfd9e, 0x8000, 0xffffffff, 0x6, 0x5, 0x4, 0x5, 0x2, 0xfffff801, 0x9, 0x5e, 0x6, 0x0, 0x4, 0x3, 0x0, 0x4, 0x8, 0x7, 0x2, 0xfbd60, 0x5, 0x3, 0x2, 0xff, 0x6d, 0x80, 0x2, 0x0, 0x4, 0x895, 0x8, 0xfff, 0x8, 0x1, 0x2, 0x6, 0x9, 0x0, 0x0, 0x8001, 0x9, 0x1ff, 0x5, 0xaf, 0x4, 0x8, 0x3, 0xfffff800, 0xa, 0x27dc895a, 0x6, 0x7, 0x10, 0x401, 0x2, 0xd1e6098, 0xffff479b, 0x2, 0x3, 0xfff, 0x892d, 0x5, 0xe9f, 0x6, 0x7, 0x2, 0x1, 0x400, 0x4, 0x9, 0x14000, 0x7, 0x10001, 0x1, 0x9, 0xffffffff, 0x8, 0x7f, 0x200, 0x4, 0x1, 0x0, 0x2, 0x4, 0x3ff, 0x4, 0x500e, 0x9, 0x7fffffff, 0x40, 0xe61b, 0x3ff, 0x40, 0x2c, 0x3ff, 0xfffffff8, 0x15dd12ef, 0x1, 0x3, 0x6713, 0x6, 0xae3, 0x80000001, 0x7f, 0x7f, 0x6, 0x7ab14705, 0x7, 0xffff0000, 0x400, 0x0, 0x86, 0x4, 0x6792, 0x6, 0x4c11, 0x4cd1, 0x80000001, 0x1, 0x2, 0x3ff, 0x4, 0x0, 0x7, 0x8, 0x8b2a, 0x10000, 0xde7, 0x8, 0x7, 0x8, 0xe8, 0x5, 0x6, 0x5, 0x8, 0x0, 0x3e3f, 0x1ff, 0x317, 0x612, 0x3, 0x8, 0x21, 0x53, 0x40, 0xfc0, 0x9, 0x7, 0x307, 0x480000, 0x6, 0x3, 0x3, 0x7, 0x8, 0x10, 0x10001, 0x0, 0x1, 0x69, 0x7, 0x7, 0x5, 0x10001, 0x3, 0x1ff, 0x0, 0x3, 0x6, 0x5, 0x4, 0x0, 0x80000001, 0x489, 0x80000001, 0x4, 0x0, 0x2, 0x3, 0xff, 0xfffffe01, 0x100, 0xef, 0xd, 0xdf, 0x8000, 0xa, 0x8, 0x4, 0x5, 0x1, 0x3, 0x1, 0x2591, 0x81, 0x76ba, 0xffffffff, 0x40, 0x7, 0x3, 0x61, 0x819, 0x4e, 0x10000, 0x0, 0xd, 0x1, 0x3, 0x43, 0x5, 0x7fff, 0x9, 0xff, 0x6, 0x4, 0xfb7, 0xcac, 0x0, 0x2d21, 0x2, 0x1, 0x67, 0x7, 0x4, 0x3, 0xc, 0xffff, 0x2, 0x3, 0x5, 0x8001, 0x0, 0x80000001, 0x4, 0xe, 0x9596, 0x7, 0x7, 0x6292, 0x10000, 0x1, 0x80000001, 0x7, 0x9, 0xffffffff, 0xd0, 0xfffffff8, 0x4, 0x3, 0x7, 0x1000, 0xffffffff, 0x5, 0x0, 0x3, 0x5a5, 0xfffffff8, 0xfffffffb, 0x7, 0x246c, 0x80, 0x200, 0x10, 0x8, 0x7, 0xe370, 0x2, 0xffffff00, 0x1ff, 0x0, 0x0, 0x8000, 0x4, 0x10000, 0x6, 0xfffffffc, 0x7, 0x1, 0x9, 0x8ec, 0x5, 0x7, 0x9, 0x2, 0x7, 0x1000, 0x8, 0x1, 0x9, 0x8000, 0x5, 0x772, 0xbdd, 0x73c5, 0xbf47, 0x8, 0x9, 0x100, 0x0, 0x6, 0x0, 0x8, 0x100, 0x89b4, 0x0, 0xc343, 0x0, 0x401, 0xfffffffa, 0x8, 0x26, 0x5, 0x4, 0x3, 0xf, 0xb7a, 0x6, 0xb, 0x80000001, 0x5, 0xfffffffd, 0x9, 0xffff8733, 0x4, 0x2, 0x39202e4, 0x5, 0xfffffff9, 0x3ff, 0x9, 0x0, 0x911, 0x1, 0x7, 0x1, 0x1, 0x2, 0xfffffffd, 0x5, 0x1, 0x93, 0xc, 0x45, 0xffffff00, 0xdf, 0xffff2463, 0x4, 0x0, 0x7518, 0x4, 0x0, 0xfff, 0x0, 0xac, 0xfffffffc, 0x2, 0x40, 0x8001, 0x6, 0x7c9e, 0x2, 0xcaf, 0x7, 0x0, 0x4, 0xf6bf, 0x80, 0x3, 0x8, 0xfffffffd, 0x5, 0x7, 0x2, 0xe1, 0x8, 0x7fffffff, 0x5, 0x8, 0x8, 0x4, 0x3, 0xf, 0x4, 0x8, 0x200, 0x9, 0xff, 0xdb6, 0xad9, 0x3, 0x5, 0x180a2418, 0x7, 0x80000000, 0x3, 0x7fffffff, 0x401, 0xfffffecc, 0x7, 0x94, 0x0, 0x80000001, 0x4e, 0x1000, 0x3da497b8, 0x4, 0x1ff, 0xa, 0x5, 0x8, 0x6, 0xc90c, 0x7, 0xff, 0x200, 0xa, 0x7, 0xfffffff9, 0x2, 0x2, 0x4, 0x6a, 0xfffffe01, 0x400, 0x5, 0x7, 0x2, 0x5, 0x6, 0x1000, 0x0, 0x3c4, 0x769e, 0x9b, 0x4, 0x7fffffff, 0x2, 0x4, 0x5, 0x6, 0x0, 0x8000, 0x10001, 0x200, 0x3ff, 0x2, 0x7, 0x8001, 0x5, 0x0, 0x6, 0x8, 0x0, 0x9, 0x4, 0x7, 0xffffffff, 0x72f9, 0xce97, 0x4, 0x6, 0xb, 0x4, 0x73, 0x1c0000, 0x200, 0x4, 0x3ff, 0x0, 0x100, 0xb, 0x4, 0x8, 0x1, 0x3, 0xfffffff4, 0x2, 0x0, 0x4, 0x9825, 0xd68, 0x8, 0xab, 0x8, 0x8001, 0xa65, 0x2, 0xf40, 0xe, 0x7, 0x400, 0x1, 0x10, 0x4, 0x5, 0x8000, 0x400, 0xfff, 0x0, 0x3, 0xd, 0x800, 0x7, 0x2, 0x2, 0x44, 0x1, 0x3, 0xa, 0x5, 0x2, 0xfffffffb, 0x86, 0x710c, 0x3, 0x4, 0x0, 0x1, 0x80000000, 0x1, 0x3, 0x7, 0x1ff, 0x6, 0xcc00000, 0x3, 0x10000, 0x800, 0xe0, 0xfff, 0x6, 0xdd4, 0x10000, 0x58, 0xf0, 0x0, 0x4, 0x7, 0x8, 0x70, 0x4, 0x4, 0x389a, 0x1ff, 0x4, 0x1, 0xb, 0x8, 0x800, 0x9, 0x2, 0x2, 0x1, 0x0, 0x1, 0x7ff, 0x9, 0x2, 0xa, 0x4, 0x1, 0xc, 0xfffffe00, 0x0, 0x6, 0x3, 0x131, 0x78, 0x3, 0xc4, 0xbac8, 0x8, 0x6, 0x800, 0x2, 0xa1, 0x9, 0xfffff68b, 0x1, 0xf1, 0x8, 0x7f, 0x7, 0xffffff68, 0x7, 0x9, 0xf, 0x5f, 0x1, 0xfffffbff, 0x1, 0x7, 0x800, 0x800, 0x4, 0x26, 0x7ff, 0x1, 0x5, 0x5, 0x1, 0x5, 0x2, 0x8, 0x5, 0x9, 0x250402e3, 0x8, 0x0, 0x1, 0x5, 0x3, 0x101, 0x8b8, 0x80, 0x7fffffff, 0x8001, 0xc6da, 0x8, 0x86, 0x9, 0xfffff8b0, 0x6, 0x0, 0x4, 0xa5f, 0x5, 0x7, 0x3, 0x9, 0x72f, 0x7fffffff, 0x4, 0x4, 0x7246, 0x80000001, 0x9, 0x3, 0x62e, 0x8001, 0x7ff, 0x81, 0xb, 0xffff, 0x58e9, 0x400, 0x5, 0x4, 0x2, 0x7, 0x6, 0x4, 0x1, 0x3, 0xff1, 0x3, 0xfff, 0x1, 0x8, 0x3, 0x4, 0x6, 0xcd4, 0x9, 0x3, 0x3, 0x6, 0xe, 0x5, 0x2, 0x2, 0x7fffffff, 0x4, 0x2, 0x9, 0x3, 0x5c, 0x9, 0x4, 0x9, 0x5, 0x8b7, 0x7560, 0x2, 0x2, 0x7fffffff, 0x5, 0x1, 0x3, 0xfffffffe, 0x95, 0x20, 0x5, 0x6, 0xe0c0, 0x6, 0x1, 0x1, 0x8, 0x6cf, 0x100, 0x5, 0x1000, 0xfffffece, 0xede, 0x8, 0x4, 0x1ff, 0x9, 0x7, 0x3ff, 0x1ff, 0x3, 0x2, 0x7, 0xa59, 0xfffffffd, 0x2, 0x1000, 0x7, 0x0, 0x3, 0xc5, 0x3, 0xfffffff8, 0x5c9, 0xfffffff7, 0x6, 0x80000001, 0x0, 0x200, 0x1, 0x8001, 0x7fff, 0x10, 0x0, 0x3, 0x2, 0x5, 0x10, 0x4, 0x10000, 0x9, 0x9, 0x302, 0xc8f8, 0x3, 0x1, 0x4, 0x7, 0x800, 0x8, 0xfffffdaf, 0x0, 0x100, 0x9, 0x80, 0x3c, 0x6, 0x7, 0xffffff80, 0x1, 0x4, 0x2, 0x5, 0x7, 0x5, 0xfffffffd, 0x5, 0x0, 0xfffff4c8, 0xfff, 0xc, 0x0, 0x7, 0x8, 0x8, 0x7, 0x5, 0x3, 0xf, 0xc878, 0x7, 0xfffffff9, 0x80, 0x96, 0x2, 0x7fffffff, 0x6, 0xeb4, 0x5d3, 0x101, 0x81, 0x191, 0x4, 0xb98, 0x6, 0x401, 0xe1, 0x8, 0xfffffff9, 0xfff, 0x6, 0x1000, 0xfffffffd, 0xccb, 0x1d, 0x3, 0x8, 0x7ff, 0xd, 0x9, 0x200, 0x6, 0x0, 0xe156, 0xd, 0x0, 0xfffffff8, 0x80000000, 0x6, 0x7fff, 0x9, 0x8, 0x285, 0x4977, 0x7, 0x6, 0x0, 0xe9, 0x9, 0x80000000, 0x80, 0x0, 0xa787, 0x9, 0x6, 0x6, 0x58, 0x1, 0x1, 0x3, 0x3b4, 0x6, 0x5f54, 0x8, 0xdc68, 0xffffffff, 0x9, 0x100, 0x5408, 0x9, 0x9, 0xfff, 0x8, 0xffffff1a, 0x0, 0x668, 0x0, 0x1, 0xffffffff, 0x2, 0x4, 0x1, 0x4, 0x717, 0x6, 0xa, 0x1, 0xd, 0x8000000, 0x5, 0x2, 0x8, 0x4ccf7c50, 0x1, 0x65b, 0x9, 0x6, 0x9, 0x5, 0x2, 0x8, 0x2e, 0x3, 0x3, 0x7, 0x8, 0xf69, 0x4, 0x4, 0x6, 0xf, 0x800, 0x8bf0000, 0x9, 0xee84, 0xffff, 0xffff3c83, 0x40, 0xff, 0x7, 0x6, 0xfffffc00, 0xa2, 0x26, 0x677, 0xc4, 0xffff, 0x5, 0x9, 0x9, 0xffffd9e2, 0xfffff7e5, 0x8, 0xc4, 0x4, 0x8, 0x8, 0x0, 0xde, 0xfff, 0x4, 0xc, 0x4, 0x2, 0x2bd, 0x0, 0x8, 0x9, 0x200, 0x10, 0xfff, 0x8, 0xed7f, 0x6, 0x1c, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x401, 0x1000, 0x2, 0x10001, 0x4, 0x0, 0x4, 0x0, 0x6, 0x3dfd, 0xd, 0x6, 0x101, 0x53dce59f, 0x80000000, 0x2, 0x10000, 0x9, 0x8, 0x8, 0xfffffffd, 0x6c, 0x4, 0x0, 0x7, 0x6, 0x7fff, 0xffff3530, 0xfffffe00, 0x5, 0x0, 0x7, 0x7fff, 0x9, 0x525f, 0x100, 0x9, 0x9, 0x1, 0x4, 0x1, 0x2, 0x2a, 0x649, 0x5, 0x1, 0xb7e, 0x1, 0x1ff, 0x8, 0x5, 0xe, 0x3, 0x8, 0x8997, 0x4d2, 0x779c, 0x6, 0x0, 0x8, 0x40, 0xdaa8, 0x9489, 0x5, 0x200, 0xfe, 0x9, 0x9, 0x9, 0x80, 0x3, 0x1, 0x8, 0x7, 0xac0, 0x5, 0x10001, 0xbc5, 0x20fd, 0x8, 0x7, 0x44, 0x4, 0x9, 0x7fff, 0x0, 0x2, 0xcd3, 0x7e83, 0x3, 0x800, 0xb14, 0xe0000, 0x50a9, 0x4, 0x2, 0x0, 0x37, 0xd, 0x7, 0xdee, 0x0, 0x4, 0x54, 0x1, 0x0, 0x7fffffff, 0x4, 0xffff, 0x80000000, 0x8000, 0x9, 0x7f, 0x8, 0xfffff0d1, 0x9, 0x8, 0x2, 0xc, 0x6, 0x6, 0xff, 0x4eda, 0x8, 0xb, 0x7, 0x0, 0xb, 0x200, 0x7, 0x9, 0x0, 0x1600, 0x3, 0x1, 0x7, 0xbc12, 0xb, 0x96, 0x2, 0x2, 0x7fff, 0x7ff, 0x5, 0xc76, 0x8, 0x10001, 0xfffffff8, 0x2, 0x5, 0xffff, 0x9, 0x1, 0x6607, 0x0, 0x5, 0x0, 0x7, 0x81, 0x1, 0x644, 0xfff, 0x1, 0x80000000, 0x1, 0x9ba3d2ff, 0x2, 0xffffffff, 0x10001, 0x0, 0x2cf, 0x2, 0x1, 0x1b0, 0x1e4b, 0x68, 0x9, 0x4, 0xfc29, 0xf, 0xdc, 0x1, 0xa, 0x1, 0xfffffffc, 0x7, 0x6, 0x4, 0x10000, 0x0, 0x4, 0x200, 0xf, 0x5, 0xffffffff, 0x6, 0x8, 0x4504, 0x5, 0x5, 0x7c63, 0x4, 0xffffff80, 0x2, 0x277, 0xff, 0x0, 0x3, 0x100, 0xd, 0x9, 0x3, 0x3, 0x5821, 0x3, 0x3ff, 0x8, 0x7, 0xcb, 0xffffffff, 0x0, 0x401, 0x6, 0xfffffffc, 0xf7, 0x4, 0x5c, 0x0, 0x2, 0x8, 0x9d1, 0xfffffffd, 0x0, 0x2, 0x3, 0xea1, 0x4a0, 0x8, 0x750c3098, 0x10, 0x1, 0x2, 0x3, 0x4, 0x9, 0x8, 0x9, 0x7, 0xa1a, 0x10001, 0x9, 0x999c, 0x0, 0x6, 0x4, 0x6, 0x3, 0x1000, 0x40, 0x366, 0x4, 0x80, 0x6, 0x17d7, 0xfffffff5, 0x8, 0xfff, 0x200, 0x401, 0xa, 0x4, 0x0, 0x9, 0x10000, 0xffffffff, 0x2, 0xf4, 0x7fff, 0x2, 0xc, 0x2, 0x1, 0x9, 0x3, 0x4, 0x6, 0x2, 0x40, 0x5, 0x8, 0x10000, 0xb, 0x5, 0xbdd3, 0x4, 0xf, 0x2, 0x4, 0x6, 0x91e, 0x1, 0x8000, 0x9, 0x55f, 0x5, 0x6, 0x80000000, 0x7fff, 0x5, 0x4, 0x2, 0x97, 0x9, 0x40000000, 0x7, 0x9, 0x200, 0x0, 0x7, 0xffffff41, 0x0, 0x101, 0xffffffff, 0x1, 0x6, 0x2, 0xffffffff, 0x0, 0x4, 0xc2, 0xfffffffa, 0x4, 0xd, 0xc, 0x4, 0x9, 0x2, 0x3, 0xd, 0xfff, 0x0, 0x9, 0x101, 0x80, 0x193, 0x7, 0x4edde2a0, 0x9, 0x8, 0x2, 0xf7, 0x6, 0x1, 0x40, 0x0, 0x0, 0xf, 0x6, 0xf8, 0x1ff, 0x955, 0x6, 0x6, 0xe5, 0x5df, 0x9, 0x5, 0x4, 0xffffffff, 0x75c, 0x9, 0x1, 0x9bbf, 0xffffffff, 0x0, 0x8, 0x2, 0x2, 0xffff, 0x7, 0xfffffffd, 0xf, 0x9, 0x7fffffff, 0x59, 0x4, 0x81, 0x1, 0x30e1, 0x3, 0x0, 0x8, 0x0, 0x4, 0x1, 0x8, 0x5, 0x7, 0x6, 0x4, 0xc0e, 0x1, 0x1, 0x10000, 0x7fff, 0x0, 0x0, 0x7fff, 0x7ff, 0x0, 0x5, 0x9, 0x5, 0xfff, 0x3b, 0x2, 0x1, 0x5d, 0x5, 0x367, 0x7, 0x9, 0x9, 0x3, 0x2, 0x1, 0x7ff, 0x7f13, 0x10000, 0x4, 0x6, 0xffffff9e, 0x0, 0x1, 0x3, 0x4, 0x9, 0x3, 0x65e50b4d, 0xc, 0x1, 0xc1, 0x100, 0x1, 0x0, 0x1, 0xfffffff9, 0x0, 0x2, 0x9, 0x1, 0xfffffff8, 0x5, 0x9, 0xd, 0x8, 0x3ff, 0x4, 0x8, 0x7, 0x5, 0x6cf, 0x7, 0x8, 0x3, 0x1, 0x3, 0x800, 0x2c4, 0x0, 0x4, 0x8, 0x12f, 0x3, 0x8, 0x1, 0x3, 0x4, 0x5, 0x7fffffff, 0xfffffff8, 0x9, 0xe7, 0x5, 0x3, 0xff, 0x6, 0xfff, 0x5, 0x66, 0x0, 0x0, 0x4, 0x0, 0x7, 0xf877, 0x8, 0x2, 0x800, 0x4, 0xd640, 0x6, 0x7b6a, 0x85, 0x7, 0xf56, 0x3, 0x2, 0x8, 0x800, 0xffff2b66, 0xbf, 0x4, 0xcf35, 0xf1, 0x20, 0x3, 0x13d5, 0x4, 0x40000, 0x7, 0x4, 0xa8, 0xf, 0xc9bf, 0xfdc, 0x6, 0xfffffff0, 0x3, 0x5ac877b4, 0xc, 0x5, 0x8, 0xfffffffb, 0x87f, 0x6, 0x3, 0x8, 0x6, 0x6, 0x2, 0x10, 0x3ff, 0x35f, 0x8, 0xda8, 0xa, 0x4, 0x400, 0xb, 0x1e, 0x71, 0x5, 0x2, 0x0, 0xfffffffd, 0x3, 0x34, 0x6, 0x6, 0x12000000, 0x9, 0x2, 0xd2d4, 0xa1, 0x6, 0x400, 0x0, 0xff, 0x18, 0x3, 0xc00, 0x7, 0x80, 0xa3e, 0x2, 0xc5, 0xe, 0xfffffffd, 0xd7, 0x86, 0x10, 0x2, 0xffff8001, 0x2, 0x28, 0xdf, 0x3, 0x2, 0x4, 0x6, 0x2, 0x0, 0x5, 0x9, 0x9, 0x9, 0xa, 0x80000001, 0x7fff, 0x9, 0x1, 0x3, 0x200, 0x10, 0x6, 0x3, 0x9000, 0x6, 0x8, 0x4, 0x8, 0x1, 0xef24, 0x2, 0xa9, 0x5, 0x6, 0x7fffffff, 0x8, 0x7, 0x4, 0x94, 0xef16, 0x5, 0x9, 0x8, 0xb8cf, 0xc, 0x8, 0x10001, 0x1, 0x2, 0x9, 0xffffffff, 0xfd, 0x4, 0x0, 0x200, 0xf, 0x1, 0x7f, 0x40, 0x10000, 0x8, 0x1, 0x7, 0x6, 0xae, 0x1000, 0xffff0bad, 0xf, 0x2, 0x7, 0x7, 0x8001, 0x7f, 0x5, 0xfffffffb, 0x7, 0x2, 0xff, 0x80000001, 0x5, 0x9, 0x8, 0x3, 0x4, 0x7, 0x72c9d5f, 0xd, 0x8001, 0x400, 0x5, 0x8, 0x3, 0x8, 0x3, 0x4, 0x1, 0xfffffff9, 0x2, 0x10001, 0x0, 0x8fc3, 0xffffffff, 0x1c7d, 0x9, 0x21d35e6f, 0x15d, 0x7, 0x3, 0x56, 0xff, 0x0, 0x0, 0xfffff94d, 0x5c6, 0xf1, 0x3, 0x8, 0x44, 0x2, 0x8, 0x5, 0x7, 0x6, 0x7ff, 0x1, 0x4, 0x4, 0x4, 0x7, 0x80000001, 0x1, 0x0, 0x0, 0xd, 0xb8640d4, 0x10000, 0x0, 0x6, 0x7, 0x3, 0x4, 0x8, 0x4, 0x800, 0x84, 0x5, 0x0, 0xffffffff, 0x0, 0x6, 0x858c, 0x5, 0x8000, 0x2, 0xfff, 0x4, 0x101, 0x100, 0x5, 0x3, 0x2, 0x0, 0x6, 0xed, 0x8001, 0x1, 0x178, 0x23fdee1c, 0x4, 0x0, 0x4, 0x5, 0x7, 0x1ff, 0x0, 0x9, 0x6a, 0x0, 0xffff, 0xe5, 0x8, 0xfffffffb, 0x0, 0xf9, 0x8, 0x0, 0x401, 0xc, 0x6, 0x1, 0x8, 0xb, 0x400, 0xf, 0x4, 0x400, 0x33a, 0x6, 0x4, 0xa5, 0xf8cd, 0xffffffff, 0x1, 0x5c39, 0x10000000, 0xdcd, 0x1ff, 0x1, 0x9, 0x3, 0x85, 0x3, 0x7fffffff, 0x5, 0x9939, 0x5, 0x1, 0x7, 0x0, 0xb8, 0x2, 0x7fffffff, 0x401, 0x4, 0x3, 0x400, 0x1ff, 0x1, 0x93, 0x3, 0x7, 0x7, 0x9, 0x80, 0x2, 0x4, 0x0, 0x2, 0x3, 0x3d, 0x9, 0x10, 0x10, 0x9, 0x5, 0x4f2, 0x7fffffff, 0x3ff, 0x9, 0x5, 0x107, 0x3, 0x4, 0x4cc, 0x1, 0x4, 0x6, 0x8, 0x4552, 0x461d, 0x8, 0x200, 0x8001, 0xfffffffc, 0x5, 0x5, 0x8, 0x9, 0x4, 0x4, 0xfffffff9, 0x9, 0xeec00000, 0x7, 0xff, 0x1ac4, 0xcf, 0x5, 0xfffffffe, 0x6d, 0xfffffff8, 0x141, 0x8, 0x8, 0x1, 0x305, 0x0, 0xc1, 0x2, 0x0, 0x3, 0x1, 0x9, 0x80, 0x4, 0x8000, 0x5, 0x6, 0xc7, 0xe, 0x8001, 0x10001, 0x8, 0x100, 0x44ff, 0x3, 0xfff, 0x80, 0x1, 0x7f, 0x0, 0xa739, 0x1, 0x650b, 0x7, 0x5, 0xd17, 0x9, 0x8, 0x3, 0xf, 0xece, 0x3, 0x1, 0x18, 0x56c, 0x8, 0x400, 0x7, 0x5e361ad6, 0x40, 0x1, 0x100, 0x18, 0x7, 0x9, 0x65b, 0x1, 0x9, 0x10, 0x2, 0x9, 0x3e7, 0x9, 0x8, 0x1, 0x4, 0x6, 0x81, 0x0, 0x5, 0x10, 0xe8, 0x31, 0xf, 0x7, 0x0, 0x3, 0xc6c6, 0x2c, 0x9, 0x8001, 0xe5a3, 0x40, 0x4, 0x36f3, 0x795, 0x3, 0xb1fc, 0x5, 0x9, 0xe, 0xc, 0x1, 0x8, 0xf8, 0xa, 0x8, 0x0, 0x5, 0x8, 0x6, 0x3, 0x7f, 0x16a, 0x8, 0xffff, 0x9, 0x7, 0x0, 0x98f7, 0x8, 0x0, 0x1, 0x9caf, 0x6, 0x4, 0x4, 0x5, 0x8, 0x7, 0x100, 0x2, 0x1ff, 0xf, 0xfffffffa, 0x10000, 0x0, 0x8, 0x0, 0x6, 0x401, 0x80000001, 0x2, 0xe28c, 0xfffffffe, 0x1, 0x2, 0x6, 0xfff, 0xfffffffc, 0x0, 0x3, 0xf1, 0x2, 0x7f, 0x0, 0x1, 0x0, 0x7, 0x4, 0xe4, 0x8, 0x4, 0x200, 0x48ba2df, 0xd1, 0x8, 0x7fffffff, 0x3, 0xb, 0x4, 0x8, 0x3, 0x1, 0x10000, 0x2, 0x5, 0x200, 0x7, 0x7, 0xd69f, 0x3, 0x6, 0x10000, 0x101, 0x6, 0x6, 0x6, 0x7fff, 0x6, 0x6635, 0x1, 0x8, 0x53, 0x2, 0x1, 0xa, 0x2, 0x2a5, 0x9, 0x101, 0xc3, 0x20, 0x0, 0xc, 0x0, 0x3ff, 0x2, 0xd1f, 0x1, 0x6, 0x1, 0x5, 0x1, 0x4, 0xea2c, 0x10000, 0x4, 0x481e1f0, 0x101, 0x200, 0x6, 0x8, 0x5, 0x6, 0x0, 0x3, 0x6, 0x1ff, 0x9, 0x6, 0x3, 0x6, 0x10001, 0x4, 0xfffffffe, 0x8, 0xa346, 0x3, 0x4, 0x6, 0x5, 0x98, 0x4, 0x1, 0x101, 0x7, 0xfffffffc, 0xb, 0xffff0000, 0x5, 0x4, 0x5, 0x5, 0xffffffff, 0x8001, 0x4c5, 0x8, 0x3, 0x8, 0x1, 0x8000, 0x8, 0x5162, 0x1, 0xffff8000, 0x3bd7, 0x8, 0x0, 0x2, 0xba5, 0x8, 0x4, 0x326, 0x6, 0x1, 0x3d5, 0xc6e5, 0x6, 0x20000, 0x0, 0x9, 0x5, 0x10000, 0x6, 0x466, 0x8, 0x5, 0x7ff, 0x20, 0x8, 0xfffffffc, 0x14dde19e, 0x3, 0x8, 0x1, 0x1, 0xe, 0x34, 0x2, 0x3, 0x4, 0x8, 0x6, 0x5000000, 0x5, 0x3, 0xe2b1, 0x9, 0x40, 0x5, 0x6e, 0x4, 0x7, 0xc, 0x7, 0x7, 0x29f, 0x8, 0x4, 0xa0000, 0xaa1, 0x10001, 0x7, 0xfffffffd, 0x5, 0x4, 0xca87, 0x3, 0x80000001, 0x0, 0x5, 0xe, 0x7f, 0x7, 0x7, 0xe758, 0x40, 0x242, 0x1, 0x40, 0x8, 0x80000000, 0x1ff, 0xfffffffa, 0x800, 0x6, 0x7, 0x7, 0x8, 0x4403c3a6, 0x80000000, 0x0, 0x3, 0x1, 0x75, 0x5, 0x10, 0xeccd, 0x0, 0x4, 0x9, 0xfffffffd, 0xffffff80, 0x7, 0x2, 0x3, 0x2, 0x1, 0x7fffffff, 0x10001, 0x416, 0x6, 0x0, 0x0, 0xff, 0x0, 0x5, 0x5, 0x1, 0x5, 0x80000000, 0x1, 0x2, 0xb, 0x4, 0x4, 0x6959, 0x7ff, 0x446a, 0x3, 0x8, 0x0, 0x200, 0xfff, 0x5, 0x1000, 0x4, 0x53, 0x8, 0x8, 0xa2, 0x9, 0x9, 0x80000001, 0x1000000, 0x9, 0x8, 0x7, 0x2, 0xf, 0x63, 0x3, 0x7c2c266, 0x515e, 0x4, 0x8, 0x8, 0x5, 0x4, 0x8000, 0x4, 0x18ab, 0x1, 0x7, 0x200, 0x7fff, 0x1, 0x10000, 0x6, 0xb, 0x4, 0x877a, 0x401, 0x10000, 0x4, 0x9, 0x0, 0x8d6f, 0xb, 0x481, 0xa0, 0x2000000, 0xffffffff, 0x6, 0x2, 0x1, 0x5623, 0x4, 0xe, 0xebb, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x6, 0x80, 0x6d4b, 0x7fff, 0x0, 0xffffd7b6, 0x6, 0x8, 0x7fffffff, 0x5, 0x6be, 0x6, 0x5, 0xd84, 0xf, 0x9701, 0x7fff, 0x2, 0x3a9, 0x7, 0xfffffff8, 0x5, 0x277, 0x5, 0x88ec, 0x0, 0x7, 0x3353, 0x0, 0x2, 0x3, 0x1, 0x9, 0x40, 0x5, 0x6, 0x3, 0x8001, 0x5, 0x7, 0x7, 0xffffffb9, 0x80000001, 0x7, 0x89, 0x7fffffff, 0x100, 0x95, 0xfffffff9, 0x8, 0x7, 0x10, 0x1000, 0x3, 0x7, 0xb7, 0xffffffed, 0xcb, 0xb25, 0x1, 0x6, 0x9, 0x0, 0x5, 0x4, 0x1, 0x5, 0x9, 0x4, 0x583, 0x9, 0x0, 0x3, 0xfdb5, 0x57, 0x10, 0x3, 0x8, 0x2, 0x2, 0x80, 0x4, 0xc, 0xf, 0x200, 0x7fff, 0x200, 0x4, 0x5, 0x8, 0x2, 0x4, 0x7f, 0x4, 0x1, 0x9, 0x40, 0x3, 0xffffffff, 0x0, 0x59ea0068, 0x3, 0x342e, 0x4, 0x5fd, 0x3a00, 0x1000, 0x3, 0x2, 0x9, 0x3, 0x0, 0x1ff, 0x7, 0x7, 0x1ff, 0x80000000, 0x9, 0x10001, 0x3, 0x6, 0xa, 0xffff, 0x3ff, 0x80000001, 0x3, 0x6, 0x8, 0xf1d1, 0x1000, 0x1, 0xffff8000, 0x1, 0xa, 0x0, 0x401, 0x8, 0x80, 0xc, 0x1000, 0x7, 0x7, 0xfffffffa, 0x7, 0x3a2, 0x3, 0x1ff, 0x9, 0x1, 0x4, 0x39fe, 0x8, 0x2, 0x2, 0x4, 0x3, 0x7, 0x2, 0x10001, 0x800, 0x7183, 0x7, 0x5, 0xb6, 0x4, 0xdc, 0x5, 0x3, 0x10001, 0x400, 0x2, 0x7, 0xfffffffd, 0x6, 0xd70a, 0x6e8, 0x1, 0x80000000, 0xc9b, 0x5b90, 0xbe3a, 0x6, 0xffff0001, 0x2, 0x40, 0x4, 0x922c, 0xfffffffe, 0x2, 0x10001, 0x7, 0x200, 0x9, 0x4, 0x7, 0xfff, 0x1, 0x9, 0x1, 0x9, 0x0, 0x6, 0x9, 0x8, 0x8, 0x10001, 0x3, 0x101, 0xc403, 0x0, 0xf9913f40, 0x1, 0x8, 0xe, 0xffffff2e, 0x10, 0x10000, 0x3, 0x80, 0x2, 0x8, 0x3, 0x101, 0xfffffff7, 0x9, 0x2, 0x9, 0x400, 0x1ff, 0x0, 0x8, 0xa, 0x40, 0x2, 0x6, 0x3d, 0x10, 0x81, 0x40, 0x5, 0x9, 0x1, 0x9, 0x0, 0x0, 0x4, 0x7, 0x0, 0x9, 0x5, 0xc, 0xbbd, 0x6, 0x0, 0x4, 0x0, 0x9, 0xa, 0x80000001, 0x80, 0x2, 0x4, 0x90, 0x9, 0x30, 0x9, 0x9, 0x2, 0xfffff800, 0x5, 0x1, 0x800, 0x200, 0x80000000, 0x3, 0x8, 0x1, 0x4e79, 0x0, 0x4, 0x8001, 0x4, 0x6, 0xfffffff4, 0x100, 0x80, 0x3256, 0x6, 0xb, 0xeda3, 0xff, 0x9, 0x9, 0x6, 0x6, 0x0, 0x3ff, 0x1, 0x800, 0x2, 0x7, 0x9b4, 0x8, 0x3, 0xd, 0x8, 0x9a, 0x1, 0xe, 0x4, 0x0, 0x9, 0x0, 0x0, 0x94, 0x10001, 0x400, 0xdf, 0xfffeffff, 0x4119078a, 0xfffffffa, 0x8, 0x2c00000, 0x3, 0x2, 0x4, 0x1, 0xb2, 0x6, 0xffffff00, 0xf, 0x3, 0x2, 0x200, 0xfffffffb, 0x5, 0x0, 0x4, 0x634, 0x9, 0x8, 0x200, 0xb, 0xfffffffb, 0x1, 0x10001, 0x9, 0xc, 0xa, 0x4, 0x3c, 0x3, 0x9, 0xb, 0xfffffff9, 0x7, 0x4, 0x816, 0x7, 0x4d7, 0x2, 0xc, 0x8f, 0x10, 0x3, 0x9, 0xffff0001, 0x101, 0xfb6b, 0x1, 0x8, 0x5, 0x2, 0x1ff043d3, 0x3, 0x1, 0x87c, 0xffffffff, 0x8, 0x7, 0x800, 0x6, 0x0, 0x6, 0x1000, 0x3, 0x2, 0xf2, 0x9, 0x4, 0x6068, 0x4c43, 0x7fffffff, 0x1000, 0x7, 0x7, 0x0, 0x6, 0xb4d, 0x3ff, 0x3, 0x8, 0x5, 0x7, 0x1, 0x3, 0x3ff, 0x7, 0x8, 0x2, 0xff, 0x81, 0x3, 0x4, 0x1000, 0x0, 0x302, 0x3, 0xffffffff, 0x6, 0x77, 0x1, 0x3, 0x6, 0x0, 0xffff7fff, 0xa800, 0x200, 0x7, 0xcee, 0x69, 0x9, 0x2, 0x4, 0x2d, 0xe, 0x1, 0x2, 0x1, 0xffff02af, 0x0, 0x5, 0xb, 0x8001, 0x7, 0x86, 0x3, 0x3, 0xfffffffa, 0x6, 0xfff, 0x2, 0xfffffffd, 0x5, 0x4, 0x5, 0x3, 0xd3, 0x0, 0x9, 0x7, 0x8, 0x2, 0x9, 0x9, 0xf, 0x59e, 0x1, 0x2, 0xa9, 0x6, 0x8, 0x0, 0x3, 0x5, 0x3e408262, 0x6, 0x2, 0x4, 0x7d, 0x1, 0xfff, 0x400, 0x7fff, 0x100, 0xa3, 0x7f, 0x8, 0x6, 0x5, 0x2, 0x0, 0x80000001, 0xffffffff, 0x1, 0x2, 0xfffeffff, 0x6, 0x101, 0x7, 0x5, 0x5, 0x4, 0x4, 0x0, 0x10, 0x6, 0x0, 0x0, 0xe, 0x2ad, 0x7, 0x4, 0xb16, 0x3, 0x7, 0x9, 0x7, 0x100, 0xffff, 0xd, 0x8, 0x7, 0x7, 0x5, 0xcf, 0x80000001, 0x3, 0x9, 0x7, 0x4, 0x6, 0x3, 0x48, 0x80, 0x1, 0x2, 0x0, 0xba, 0x7, 0x465aff1e, 0x6, 0x3ff, 0xee67, 0x97, 0x2, 0xd3, 0x7ff, 0xa9, 0xb, 0x3, 0x80000001, 0x9, 0x100, 0x100, 0x10000, 0x1, 0x9, 0x8000, 0x5, 0x4, 0x100, 0x2, 0x7, 0x0, 0xffffffff, 0x18, 0x8, 0x10, 0x3200000, 0xb, 0x6, 0xc, 0x6, 0x400, 0x0, 0x7fffffff, 0x2, 0x2, 0x80, 0x7fff, 0xe3d, 0x80000001, 0x9, 0x8000, 0xc06, 0x5, 0xf75, 0xff, 0x7, 0xc2, 0xfff, 0x6, 0xa, 0x8, 0x8, 0xffffff01, 0xf150, 0x6, 0x4, 0x7, 0x9, 0x2, 0xbb, 0x6, 0x3, 0x6, 0x0, 0xffff, 0x40, 0x7, 0x7f, 0x101, 0x7, 0x6, 0x1, 0x5, 0x7, 0x8, 0x7fff, 0x4, 0x3, 0x6, 0x6, 0xb900, 0x0, 0x9, 0x5, 0x9, 0x100, 0x101, 0x4, 0x10001, 0x1, 0x401, 0x6, 0x1f6, 0x401, 0x0, 0x3, 0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x0, 0xffff9f90, 0x7, 0x2, 0x5, 0x0, 0xaf, 0x800, 0x8, 0x3, 0x10000, 0x0, 0x80000000, 0x1ff, 0x4, 0x6, 0x1ff, 0x8, 0x7868, 0x1, 0x0, 0x1, 0x5, 0x4, 0x8, 0x0, 0x1, 0x8, 0x8, 0x0, 0x8, 0xc6, 0xfffffff1, 0x8, 0xd407, 0x80000000, 0x3, 0xa, 0xffff, 0x30, 0x3, 0x1ff, 0x80, 0x6, 0x3, 0xfffffff7, 0x8406, 0x7, 0x5, 0x9, 0xb, 0x3, 0x4e, 0x800, 0x10, 0x2, 0xaf, 0x4bde, 0x7, 0x2, 0x7ff, 0x9, 0x3, 0xffffff1d, 0x200, 0x5, 0x2, 0x800, 0x2, 0x5, 0xc, 0x8, 0x7f, 0x101, 0x8000, 0xecb, 0xcd35, 0xffff, 0x2, 0x5, 0x8, 0x6, 0x8, 0x3, 0x9, 0x40, 0x5, 0x8, 0xda0, 0x401, 0x35e8, 0x800, 0x8, 0x2, 0x1, 0x40, 0x3b9, 0x4, 0x0, 0x3, 0x80000001, 0x2, 0x7, 0xffffffff, 0x7, 0x421, 0x4, 0x3, 0x7, 0x7, 0x9, 0xa97, 0x2, 0x100, 0x401, 0x7b, 0x0, 0x8, 0x1ff, 0x7b, 0x0, 0x10, 0xe56, 0x4, 0x2, 0x1, 0x7, 0x8001, 0x7, 0xffffffff, 0xffffffff, 0x6, 0x1, 0xb, 0x0, 0x2, 0x8, 0x101, 0x1, 0x7e, 0x0, 0x4, 0x80000000, 0x240000, 0x7ff, 0x7ff, 0x1e, 0xaf, 0x8, 0x7, 0xe380, 0x3, 0x4, 0x5, 0xe3d7, 0x4, 0x80000000, 0x0, 0x5, 0xffffff80, 0x50, 0x6, 0x5c, 0xcb, 0xe, 0x6, 0xffff, 0x2c, 0x5, 0xb, 0x8b50, 0x3, 0xc, 0x9, 0x6, 0x2, 0x1, 0x6, 0x91, 0x4, 0x7, 0x7, 0x101, 0x5, 0xd251, 0xc, 0x6, 0x6e, 0xa, 0x6d92, 0xd3, 0x40, 0x7, 0x8, 0x5, 0x0, 0xffff, 0x5, 0x9c, 0x0, 0xfff, 0x4c2e, 0x10000, 0x44d994e4, 0x7, 0x9, 0x8, 0x4, 0x105826fb, 0x2, 0x537d, 0x9, 0x400, 0xe0000000, 0x3, 0x0, 0x62f9, 0x2, 0x2, 0x10000000, 0x8, 0x6, 0x6, 0xbf, 0x2, 0x333, 0x8, 0xfffffffa, 0x4, 0x9, 0x9, 0x3, 0x4, 0x3, 0x8, 0x51, 0x1ff, 0x2, 0x40, 0x3, 0x81, 0x8000, 0x3, 0x0, 0x4, 0x6, 0xffffffff, 0x71, 0xca09, 0xfffffffa, 0x7f, 0x1, 0x1, 0x46, 0xa986, 0x2, 0x3, 0x1, 0x7f, 0x1, 0x6, 0xf, 0x2093, 0xfffffff9, 0xfffffff7, 0x8, 0xe0000000, 0x86, 0xa692, 0x8, 0x4, 0x5, 0x4, 0x244, 0x4f46, 0xe8ab, 0x3f49, 0x7, 0xde, 0x6, 0xd, 0x0, 0x6, 0x4, 0x6, 0x7f, 0x5, 0x0, 0xd, 0x7ff, 0x3, 0x7fffffff, 0x4, 0x5, 0x5, 0x2, 0xa, 0xfffffe01, 0x9, 0x9, 0x8000, 0xe89a, 0x1, 0xfb, 0x100, 0x5, 0xffffff81, 0x9, 0x5, 0x10, 0x9, 0x0, 0x9, 0x0, 0x3, 0x400, 0x80000001, 0x3, 0x0, 0x7fff, 0xc62, 0x1000, 0x7ff, 0x400, 0x6d190, 0x73, 0x3, 0x6, 0x2, 0xfffffff7, 0xfffffff7, 0x6, 0x2, 0x3, 0x0, 0x8, 0xfffffffc, 0x80, 0x9, 0x3, 0x3, 0xffffffff, 0x0, 0x84da, 0x7, 0x3, 0x5581, 0x2, 0x10000, 0xf, 0x0, 0x8, 0x3ff, 0x4, 0x0, 0x40, 0x8, 0x6, 0xfffffffe, 0x75, 0x4, 0x7, 0x8f, 0xc782, 0x9, 0x5, 0xc906, 0xbd12, 0x84b, 0x7f, 0x8000, 0x7, 0x9d, 0x8000, 0x3ff, 0x6, 0x2, 0x90, 0x5, 0x6, 0x9, 0x4, 0x3, 0xea, 0x6, 0x8001, 0x8, 0x4, 0x0, 0x7fff, 0x0, 0x9, 0xcb, 0x187, 0x4, 0x852, 0x280000, 0xfffffffe, 0x10000, 0x7, 0x8, 0x4, 0x4, 0x6, 0x2, 0x85e2, 0x8, 0x7, 0x4, 0x5, 0x10000, 0xfffffff7, 0x3, 0x8a0, 0x0, 0x8, 0xfff, 0xd2e, 0x0, 0x200, 0xa, 0xfffff7cb, 0x1d, 0x5, 0xe9a, 0x2, 0x5, 0x1, 0x6, 0x10000, 0xfa, 0xfffffff7, 0x1, 0x5, 0x59c, 0x4, 0x9, 0xd, 0x7, 0x8cf, 0x3ff, 0x53d24076, 0x8, 0x0, 0x4, 0x5, 0x7, 0x8, 0x7, 0xf, 0x7ff, 0x21953423, 0x1, 0x6, 0x5, 0x400, 0x4, 0x4, 0xff, 0x71, 0x8, 0x100, 0x8, 0x11, 0x4, 0x1, 0x3, 0x6, 0x8001, 0x6, 0x81, 0x1, 0x4a, 0x1, 0x7, 0x4, 0x2, 0x9, 0x8, 0x4, 0x2, 0x4, 0x5, 0x8, 0x1, 0x1, 0xd98, 0x0, 0x6, 0x7, 0x9, 0x575, 0x0, 0xffffffff, 0x4, 0x2, 0x3, 0xfffffffb, 0x6, 0x9, 0x5, 0x0, 0xfffffff7, 0xca7, 0x8, 0x5, 0x4, 0x8000, 0x9, 0x300000, 0x0, 0x9, 0xfffffffa, 0x2, 0x1, 0xd, 0xffffef37, 0x10, 0x0, 0x1, 0x101, 0x4, 0x66e, 0xa, 0x9, 0x8, 0x4, 0x5, 0xffffffea, 0x1ff, 0x5, 0x4, 0x3, 0x2, 0x4, 0x1, 0x7, 0xd94, 0x2, 0x142, 0x40, 0x9, 0xfff, 0x0, 0x3, 0xfffffffa, 0x2, 0x86, 0x4, 0x4, 0xfffffffc, 0x6, 0xb0, 0xfff, 0x9, 0x1000, 0x1, 0xe0, 0x8, 0x80000001, 0x1, 0x5465, 0xea, 0xe, 0xc83, 0x5, 0xd, 0x0, 0xc, 0x2, 0x8, 0x6, 0x3, 0x5, 0x6, 0x6, 0x100, 0xfffffff9, 0xfffffffe, 0x8, 0x9, 0x8001, 0x9, 0xffffffff, 0x2, 0x41, 0x8001, 0x7fffffff, 0x57c, 0x6, 0x4, 0x5c, 0x9, 0xfff, 0x34, 0x3, 0x0, 0x6, 0x9, 0x4, 0x3, 0x7fffffff, 0x7fffffff, 0x4, 0x7fc, 0xffffffff, 0x9, 0x7b16, 0x80000001, 0x5, 0xfff, 0x8, 0x5, 0x7086e651, 0xb, 0xd, 0xe, 0x7, 0x8, 0xfffffffd, 0x9, 0x5, 0x8, 0x6, 0x9, 0x2, 0x6, 0xb, 0x13fd6708, 0x0, 0x1, 0x359, 0x3, 0x3, 0x9, 0x5, 0x200, 0x3, 0x80000001, 0x5, 0xfffffff8, 0x37, 0x5, 0x4, 0xfec, 0x1c1, 0x0, 0x1ff, 0x80000001, 0x1, 0x6, 0x3, 0xf9, 0x8, 0x4, 0x7f, 0x9, 0x3, 0xa129, 0x0, 0x1, 0xd, 0xfffffffa, 0x5, 0x80000000, 0x7fad986e, 0x9, 0x3, 0x9, 0x1ff, 0x8, 0x7fff, 0x3, 0xfffffffb, 0x2, 0xffff, 0x80, 0x80000000, 0x80000000, 0xfffffd8d, 0x6, 0x27, 0x10, 0x3, 0x36a, 0x7ff, 0x5, 0x3, 0xbc, 0x4, 0x7, 0x6, 0x6, 0x6, 0x2, 0x0, 0x200, 0x2, 0x4, 0x0, 0x3d, 0x2, 0x41a, 0xffff8001, 0x4, 0x9, 0x7fff, 0x8, 0x553, 0xcdd8, 0x2, 0x4, 0x1d, 0x200, 0x0, 0x2, 0x2, 0xd48, 0x1ff, 0x7, 0x1ff, 0x0, 0x9, 0x2, 0xdb, 0xfffffffc, 0xd, 0x0, 0x100, 0x6, 0x100, 0x5, 0x45a0, 0x4835, 0x6, 0x210, 0x5, 0x1, 0x200, 0x896, 0x10000, 0x5, 0x8, 0x3ff, 0x9, 0x6, 0x8001, 0xcb1, 0x9, 0x81, 0x0, 0x4, 0x80, 0x7, 0x3, 0x1ff, 0xa4, 0x3ff, 0xffff, 0x5, 0x81, 0xff, 0x6, 0x5, 0x4, 0x63, 0x40000000, 0x15, 0x6, 0x81, 0x8, 0xfffff7a0, 0x7, 0x8, 0x9, 0x6, 0x7fff, 0x7fff, 0x2, 0x80, 0x46, 0xe32, 0x8, 0xfffffffb, 0xd, 0xfffffff8, 0x270a, 0x3, 0x1, 0x5, 0x8, 0x3300000, 0x2, 0x4, 0x9, 0x4aa8be0e, 0x2, 0x9, 0x42, 0x0, 0x8, 0x5, 0x0, 0x2, 0x9, 0xfffeffff, 0x9, 0x9, 0x4, 0x5b, 0x100, 0x9, 0xfffffff9, 0x5, 0x10, 0x7, 0x2, 0xbbf, 0x9, 0x401, 0x9, 0x2, 0x0, 0x48, 0x7, 0x1, 0x40, 0x8, 0xe49, 0x1f, 0x3, 0x7fffffff, 0x8, 0x10001, 0x10000, 0xb, 0x5, 0x9, 0x9, 0x8, 0x0, 0x5, 0x5, 0x1, 0xe0e, 0x8, 0x7fff, 0x3, 0x80000001, 0x81, 0x6, 0x8, 0x0, 0x8000, 0x4, 0xf, 0xfffffffd, 0x1a71, 0x97b, 0x2, 0x5, 0x8, 0xd346, 0xc, 0x3, 0x2, 0x2, 0xd, 0x6, 0x2212, 0xec7, 0x4, 0x4, 0x4, 0x6, 0x5, 0x2, 0x6, 0x7, 0x2800, 0x7ff, 0x2, 0x2, 0x5, 0xd, 0x1ff, 0x5, 0xffffffff, 0x8, 0x0, 0x5, 0x1fc0, 0x9, 0xfa0, 0x81, 0x4, 0xd8b, 0x80000000, 0x8000, 0xfffffffb, 0x9, 0x1, 0xa3d, 0x2, 0x7, 0x5, 0x7, 0xac7, 0x4, 0x0, 0x2, 0x0, 0x0, 0x400, 0x5, 0x3, 0x8001, 0x4, 0x38, 0x80000000, 0x6, 0x7, 0xcd, 0x101, 0x9, 0x2, 0x0, 0x4, 0xad6, 0x100, 0xd7c, 0x0, 0xff, 0x101, 0x10001, 0x5b8, 0x4, 0x101, 0x0, 0x5, 0x3, 0x2, 0x2, 0xcbcb, 0x3, 0x7, 0xeeb, 0x2, 0x5, 0xca, 0x7, 0x6, 0x4, 0x1, 0x7f, 0xfffffff8, 0x3, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x1, 0x3, 0x71c, 0x3, 0x5, 0x44a7, 0x6, 0x7, 0x0, 0xfffffc01, 0x8, 0x0, 0x1, 0x3, 0x4, 0x9, 0xd1e, 0x3ff, 0xa, 0x3, 0x6, 0x1, 0x9, 0x80000000, 0x8000, 0x2, 0xd0000000, 0x5, 0x10000, 0xe225, 0x9, 0x5, 0x9, 0x80000000, 0x400, 0x8000, 0xc48, 0x2, 0x4, 0x7, 0x6, 0x1, 0x0, 0x7f, 0x101, 0x146, 0x80000000, 0x2, 0x8, 0x8, 0x9, 0x5, 0x0, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x0, 0x8000, 0x7, 0x3, 0x0, 0x4, 0x0, 0x29b233fc, 0x6, 0x42, 0x0, 0xfffffff8, 0x4, 0xfffffffd, 0x6b, 0x3, 0xfff, 0x2, 0x2, 0x7fffffff, 0x0, 0x7, 0x7fffffff, 0xa5, 0x48000, 0xb0, 0x3, 0x4, 0x0, 0x1, 0x0, 0xe2f, 0x8, 0xe7a, 0x7, 0x3, 0xe8, 0x8001, 0x6, 0x3, 0x7fffffff, 0x8, 0x8df2, 0x2, 0x9d, 0x6, 0x80, 0x5, 0x401, 0x4, 0x0, 0x4, 0x6, 0x8, 0x5, 0x28000, 0x0, 0x0, 0x4, 0xc, 0x905f, 0x7, 0x1, 0x7f, 0xc7b, 0x2, 0x4, 0x2, 0x6, 0xbee, 0xcba9, 0x12000000, 0x9f, 0x1, 0x9, 0x40, 0x7, 0xffffff47, 0x5, 0x3, 0x8, 0xb, 0x5, 0x8100000, 0x9, 0x4, 0xffffff81, 0x800, 0x1c00, 0xa, 0x1f, 0x4, 0x4, 0x1, 0x100, 0x2, 0xfffffffe, 0xa, 0xf, 0x5157c18e, 0x705, 0x6b5, 0xc7a3, 0x3, 0x80, 0x2, 0x7, 0x2, 0x5, 0xffffffff, 0x6, 0x8, 0x7fffffff, 0x477db625, 0x7, 0x8001, 0x1, 0x3, 0x6, 0x3, 0x1ff, 0x6, 0x0, 0x9, 0xffff, 0xff8000, 0xffff, 0x8, 0x7, 0xd37a, 0x9, 0x1c, 0x1, 0x6, 0x4, 0x7, 0x1, 0x2, 0x5, 0xe, 0x42, 0xffffffff, 0x3, 0x1, 0x7, 0x4, 0x5, 0xecc, 0xffff, 0x0, 0x101, 0x1, 0x3, 0x400, 0xbf, 0xa7cb, 0x0, 0xb28, 0x8000, 0x7, 0x101, 0xfffff191, 0x4, 0x9, 0x9, 0x8, 0x1, 0x213, 0x81, 0x6, 0x5, 0x81, 0x4, 0x7fff, 0xf, 0x1000, 0x2, 0x8000, 0x4, 0x7, 0x40c, 0x1, 0x8, 0x5b5, 0x8, 0x80000001, 0x6, 0x3, 0xffffffff, 0x10001, 0xc, 0x0, 0x0, 0x40, 0x1, 0x4f7, 0x8, 0x1, 0x7f, 0x4, 0x40, 0x9, 0x14, 0x48, 0x316aafd7, 0x6, 0x500000, 0x2, 0x7, 0x3, 0xffff, 0xffffffff, 0xa, 0x1, 0xfffffffd, 0xc13e, 0xffffffff, 0x5, 0xd, 0x7, 0xf20e, 0xfffffff7, 0x19, 0x3, 0xd166, 0x9, 0xe, 0xb, 0x8001, 0xfffffc00, 0x41d, 0x6, 0xffffffff, 0xfffffffb, 0x7fffffff, 0x44d, 0x1, 0xb, 0x9, 0x8, 0x9, 0x9, 0xf, 0xd2b, 0x8, 0x73a6, 0x57, 0x9, 0x401, 0x800, 0x6, 0xca, 0xa, 0x0, 0x9, 0x5, 0x87ba, 0x81, 0x0, 0x5, 0xfffffffb, 0x5, 0x5, 0x2, 0x0, 0x81, 0xf, 0x2, 0xa0f, 0x8, 0x800, 0x9, 0x3, 0x559, 0x522ba31d, 0x6, 0x1000, 0x4, 0x5, 0x6, 0x8, 0x3ff, 0x4, 0x40, 0x9, 0x0, 0xd2, 0x5, 0x81, 0x331e, 0x10000, 0x3, 0x2, 0x8, 0xfffffff8, 0x7f, 0x9, 0x9, 0x1, 0x6, 0x0, 0x9, 0x8e, 0x782, 0x200, 0x3549, 0xea, 0x4, 0xe, 0x5, 0x1, 0x80000000, 0x9, 0x5, 0x1, 0x7, 0x5, 0x5, 0x8, 0xf, 0x3, 0x8e74, 0x7, 0x7fff, 0x3, 0xdb1, 0x10, 0x9, 0x508, 0x9, 0x8, 0x9, 0x3, 0x2, 0x8, 0x5, 0x9, 0x6312, 0x6, 0x8, 0xfd, 0x5, 0x2d8, 0x5, 0x5, 0x9, 0x8, 0x1, 0x5, 0x2, 0x3, 0xc2f0, 0x26, 0x0, 0x9, 0x162, 0xff, 0x7, 0x6, 0xe, 0x728, 0xd, 0x1, 0xd, 0xff, 0x400, 0x8, 0x800, 0x7, 0xffff561d, 0xb2, 0x5, 0x3, 0x3, 0x9, 0x7, 0x5, 0xb2, 0x5, 0x7, 0x200, 0x71ad, 0x2, 0x5, 0xb, 0x5, 0x8, 0x33, 0x9d4c, 0x2, 0xb3a, 0x2, 0x16079aa2, 0x6, 0x5, 0x2, 0x3ff, 0x4, 0x7fff, 0xffffff50, 0x7f, 0xfff, 0x9, 0x6, 0x1ff, 0x10000, 0xb15, 0xd80, 0x0, 0x5, 0x8, 0x0, 0x8, 0x5, 0x8, 0x5, 0x9, 0x3, 0x4, 0x7fffffff, 0x6, 0x0, 0xef, 0x42f, 0x200, 0x8, 0x8, 0x5, 0x1, 0x5, 0x6, 0x2, 0x2, 0xd, 0x70e6, 0x6, 0x4, 0xffffffff, 0x0, 0x4, 0x7, 0x7, 0x6, 0xffff, 0xd26, 0x7, 0xfd, 0x1, 0x2, 0x0, 0xe, 0x8, 0x1ff, 0x5, 0x1, 0x6a, 0xfffff2aa, 0xb358, 0x40, 0x10001, 0x2, 0x2, 0x9, 0x4, 0xcc, 0x5, 0xffff, 0x40, 0x6, 0xcd, 0x3, 0x5, 0x3000000, 0x0, 0x2, 0x9, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x5, 0xf, 0xad, 0x9, 0x7, 0x7f, 0x200, 0x36d, 0x9, 0x4, 0x5, 0xffffffff, 0x9, 0x9, 0xf, 0x8, 0x8, 0x3, 0x1, 0xf7, 0x2, 0xc, 0x200, 0x7, 0x1000, 0x6, 0x4, 0x7, 0x8, 0x8, 0x800, 0x5, 0xe8, 0x8, 0x7ff, 0x0, 0xfffffffe, 0x1, 0x5, 0x3, 0x3, 0x7, 0x2, 0x10000, 0x0, 0x80, 0x1, 0x1, 0x8, 0x66, 0x2, 0x7fff, 0x4, 0x2, 0xfff, 0x8, 0x2, 0x8, 0x4, 0x26, 0x7, 0x4, 0x3, 0x9, 0xb24b, 0x7, 0x6, 0x4, 0x6, 0x5, 0x8, 0x6, 0x6, 0x46, 0x10000, 0xfe, 0x401, 0xffff8001, 0xb, 0xb82, 0x7, 0xffff, 0x474, 0x1, 0x2, 0x6e9, 0x9000000, 0x0, 0xe, 0xe0000000, 0xffff, 0x20a2d0c1, 0xc66, 0x7, 0x8000, 0xebf6, 0xffffffff, 0x7, 0x6b, 0x7ff, 0x95, 0xe3b, 0x9, 0x10, 0x7, 0x5, 0x7fff, 0x2, 0x3ff, 0x5, 0xfff, 0x7, 0x4, 0x2, 0x52d7, 0x5, 0x6, 0x9c000000, 0x8, 0x4, 0x36, 0xf, 0x7, 0x7f, 0x0, 0x4, 0x0, 0x3, 0x6, 0x6, 0x2, 0x8, 0x0, 0x9, 0x9, 0x1, 0x6, 0xe44000, 0x0, 0x0, 0xf70, 0x5, 0x0, 0xb, 0x4b98567f, 0x3, 0x5000, 0x3, 0x2, 0x7, 0x4, 0xc, 0x10000, 0xfffffff7, 0x943, 0x6, 0x7, 0x1, 0x4, 0x80, 0x7, 0x7, 0x8, 0x1, 0x2, 0x4, 0x58, 0x7, 0x4, 0xffff4765, 0x8, 0x0, 0xc, 0x7, 0x2, 0x0, 0x0, 0xf97, 0x101, 0x800, 0x3, 0x7, 0x7, 0x5, 0x2, 0x9, 0x9, 0x4, 0x81, 0x7, 0x3, 0xffff, 0x9, 0x6, 0x9, 0x7, 0x5, 0x9, 0xa, 0x1, 0x9, 0x9, 0xfe24, 0x8, 0x4, 0x10001, 0x1ff, 0xb, 0xa, 0x2, 0x8000, 0x8001, 0x3, 0xc, 0xfff, 0xe9a4, 0x1, 0xfff, 0x82, 0x9a, 0x5, 0xfffffffb, 0xf57, 0x5, 0x3, 0x4, 0x64, 0x5, 0xfffffffb, 0xdf, 0x7, 0x5, 0x80000001, 0xbe88, 0xc4, 0x10, 0x2, 0xe4e, 0x7, 0x7, 0x3, 0xff, 0x6, 0x7, 0xd, 0xd, 0x0, 0x7fff, 0x80000000, 0xfffffffa, 0x3, 0xed, 0x2f93, 0x1000, 0x0, 0x7, 0x3ec, 0x1, 0x4, 0xfffff631, 0x7ff, 0x4, 0x80000000, 0xfb, 0x8, 0x7, 0x101, 0x7fffffff, 0x0, 0x5, 0x7, 0x9, 0x2, 0x5, 0x3, 0x4, 0xc0, 0x9, 0x5, 0xc, 0xe72, 0x0, 0x800, 0x9, 0xdc000000, 0xcf, 0x10000, 0x1, 0x3, 0x8001, 0x1, 0xffff, 0x6, 0x5, 0x7, 0xcddf, 0x9, 0x8, 0x6f3, 0x6, 0x2, 0x6, 0x3, 0x8, 0x7, 0x28a, 0x0, 0x5, 0x1, 0x9, 0xfffffff7, 0x2, 0x9, 0xf, 0x4, 0x3, 0x1, 0x3, 0x3, 0x1e4, 0x48b, 0xfffff801, 0x9, 0x4, 0x3ce, 0xe62, 0x5, 0x1, 0x8, 0x60, 0x3, 0xa, 0xffff, 0x1, 0x1, 0xb6e5, 0xc0, 0x6bf1, 0x0, 0x8fa, 0x80000001, 0x10001, 0x4, 0x9, 0x4, 0x9, 0xfffffffa, 0x8, 0x5, 0x0, 0x3ff, 0x7f, 0x7, 0x1, 0x2, 0x97, 0xb, 0x0, 0x8001, 0x2, 0x5, 0x2, 0x6, 0x7, 0x3, 0x7f, 0x9, 0x4, 0x9, 0x8, 0x6, 0x80, 0x4, 0xfffffffa, 0x800, 0x3, 0x0, 0x0, 0x2, 0x8, 0x2, 0x8, 0x40, 0x8, 0x40, 0x8, 0x4, 0x9, 0x3e53, 0xfffffffa, 0x2, 0x5, 0x40, 0x5, 0x7, 0x100, 0x9, 0x9, 0x0, 0x3, 0x7, 0xff, 0x1, 0x1, 0xfffffffe, 0x1, 0x8001, 0xe, 0xffffffff, 0x3, 0x9, 0x8, 0x4, 0x0, 0xc2b, 0x0, 0x6, 0x80, 0x67, 0x6, 0xffffff7d, 0x8, 0x31619fab, 0xd6, 0x4, 0x5810d400, 0x3e8, 0x6b44, 0x401, 0x9, 0x98b, 0x0, 0xb, 0x4, 0x9, 0x7, 0x1, 0x1, 0x2, 0x1000, 0x4, 0xf, 0x2, 0x10000, 0x1, 0xfffffffb, 0x7, 0x8, 0x1, 0xa72e, 0x14, 0x9, 0x843c24a, 0x1d5, 0xff, 0x0, 0x3, 0x8, 0x5, 0x7, 0x4, 0x4, 0x8, 0x9000, 0x7, 0x8, 0x1, 0x1, 0xa, 0xfffffff6, 0x4, 0x1ff, 0x9, 0x3, 0x7, 0x5, 0x2, 0xff, 0x2, 0xfffffff8, 0x4, 0x0, 0x1, 0x7, 0x6, 0xa1d, 0x2, 0x4, 0x8, 0x1, 0xfff, 0x1, 0x1, 0x9, 0x6, 0x3, 0x4, 0xc1a, 0x3ef8, 0x4664, 0x113d, 0x7d5, 0x25, 0x1, 0x6, 0x5, 0xffffffff, 0xd4, 0x5, 0x7, 0x7, 0xcb9, 0xfffff0ee, 0x4, 0x5, 0x5, 0x8, 0x3b43, 0x3, 0x4, 0xa49f, 0x7f, 0x3ff, 0xc6a, 0x1000, 0x9, 0x4, 0xff, 0x7, 0x6, 0x4, 0x1, 0x2, 0x8, 0x1, 0x6, 0x5, 0x5, 0x1, 0x40, 0x1000, 0x1, 0x79c, 0x4, 0x9, 0x3, 0x1000, 0xf, 0x0, 0x67, 0x80000001, 0x6, 0x0, 0x81, 0x9, 0xc, 0xd2, 0x1000, 0x9, 0x73ec, 0xba76, 0x8, 0x7fff, 0x0, 0x4, 0xe9a9, 0x0, 0x138d, 0x6, 0xdf9, 0x9c8e, 0xffff, 0x5, 0xc, 0xffff, 0x8, 0x81, 0x2, 0x528, 0xff, 0x1, 0x2, 0x2, 0x1, 0x1, 0x7, 0x6, 0x30000000, 0x8000, 0x6, 0x3, 0x5, 0xc1e, 0x152, 0x8, 0xffc000, 0x10001, 0x8, 0x4, 0x9, 0x0, 0x7, 0xffff, 0x9, 0x8, 0x9, 0x224, 0x4, 0x0, 0x9d, 0xae3e, 0x5, 0xf, 0x80, 0xa, 0x3, 0x3a, 0x9, 0xa86, 0x1000, 0x0, 0x8000, 0xf, 0x0, 0x0, 0xc, 0x4, 0x2, 0x9, 0x10000, 0x6, 0x8, 0x6, 0x7f2f, 0x1ff, 0x0, 0x9, 0x1, 0xa, 0xfffffff7, 0x4, 0x2, 0x6, 0x0, 0x8, 0x9e1, 0x200, 0xfffffffe, 0x9, 0x53, 0x5, 0x1940000, 0x8, 0x64, 0x7fff, 0x9, 0x9, 0x5, 0xbc7c, 0x4, 0x89, 0x0, 0x58136835, 0xfff, 0x0, 0x6, 0x6d48, 0x1, 0x81, 0x40, 0x2, 0x4, 0x1, 0x80, 0x9, 0x5, 0x5c474a34, 0xa, 0x9, 0x7, 0x10000, 0x6, 0xcad3, 0x100, 0x9, 0x2, 0x6, 0x6, 0x40, 0x2, 0x8, 0x2, 0x7, 0x1e, 0x0, 0x10, 0x100, 0x8, 0x0, 0xd, 0xbb, 0xfffffffe, 0xe2, 0x6, 0x80200000, 0x1, 0x2, 0x8001, 0x2, 0x6000, 0x6, 0x7, 0x80000001, 0xc, 0x9, 0x4, 0x2, 0x1, 0xaf, 0x5, 0x3, 0x400, 0x5, 0xafe, 0xc0a, 0xfffffff9, 0x4, 0x4, 0x68ec45, 0x8, 0x3, 0xfffffffb, 0x1ff, 0x40, 0x8, 0x5, 0x7, 0x603, 0x1, 0x800, 0x100, 0x5ef8da94, 0xed, 0x0, 0x6, 0xd1f, 0xd, 0xfffffe01, 0x9156, 0xcf3, 0x7, 0x5, 0x2, 0x8000, 0x2, 0x0, 0x7, 0x1, 0x9, 0x8, 0x40, 0x8, 0x7fff, 0x2d03814c, 0x2447, 0x7, 0x8, 0x6, 0x1, 0x3ac9, 0x3, 0x4, 0x6, 0x8, 0xa, 0x7fff, 0x800, 0x5d0f, 0xfffffffc, 0x7fffffff, 0xa318, 0x41, 0x4, 0x5, 0x49, 0x5, 0x4, 0xfff, 0x4, 0x9, 0x7, 0x0, 0xffffffff, 0x8ec, 0x3800000, 0x4, 0xb204, 0x4, 0x46e, 0x800, 0x4, 0x9, 0x776, 0x0, 0xffffffff, 0x2, 0xff, 0x4, 0x1, 0x10, 0x6, 0x10000, 0x8, 0x1000, 0x8, 0x6, 0x7fffffff, 0x7fffffff, 0x9, 0xb8d0, 0x0, 0x0, 0x4, 0x3, 0x2, 0x1, 0x7, 0x0, 0xd1, 0x3, 0x9, 0x8, 0xfffffff3, 0x9, 0x0, 0x3, 0x9, 0x320c, 0x9, 0x1000, 0x6a, 0x81, 0xc1, 0xabe7, 0x1, 0x8, 0x6, 0x484, 0xb3, 0x5344, 0x10000, 0x8, 0x33, 0x3, 0x80000001, 0x2c, 0x48, 0x1, 0x80000000, 0x7, 0x12, 0x4, 0x0, 0x2, 0x2, 0x5, 0x81, 0x5b5d, 0x5, 0xef51, 0x8001, 0x6, 0xfff, 0xfffff4d4, 0x140, 0x1, 0xfffffff8, 0x3, 0x400, 0x3ff, 0xa5, 0x6540, 0x7fff, 0xffff, 0x2, 0x7, 0x7, 0x4, 0x0, 0x0, 0xb, 0x4, 0x8, 0xd6d9959, 0x5, 0xe, 0x2, 0xc, 0x8, 0x8, 0xfffffff7, 0x9, 0x2, 0x7, 0x400, 0x8, 0xffff8000, 0x6, 0x1, 0x7, 0xff, 0x3, 0x8, 0x2, 0x2, 0x0, 0xb9, 0x7ff, 0xfffffffc, 0x8, 0x4, 0x7, 0x5, 0x3, 0xfff, 0x0, 0xc, 0x0, 0x5, 0x7, 0x8, 0x1, 0x1, 0x7fff, 0x9, 0x8, 0x72a74395, 0x8, 0x6, 0xff, 0x0, 0x3, 0x6, 0xfffffff4, 0x0, 0x4, 0xd6a, 0x0, 0x6, 0x6, 0x5, 0x9, 0x6, 0x6, 0x0, 0x7, 0x17e5ed79, 0xc16, 0xc0, 0x800, 0x10001, 0x809, 0x1, 0x3, 0x6, 0x10001, 0x6258, 0x1, 0x9, 0x9, 0x0, 0xad7f, 0xf, 0x200, 0x6, 0x101, 0x82da, 0x10, 0x8, 0xe, 0x6, 0x101, 0x9, 0x6800000, 0xfffffb76, 0x6, 0x6, 0x2, 0x100, 0xfffffbff, 0x5, 0x67, 0x7851474c, 0x5, 0x3, 0x80000000, 0x5, 0x9, 0x9, 0x4, 0xd3fc, 0x1, 0x1000, 0xbf97, 0xa60, 0x8, 0x6bae3d41, 0xfffffff7, 0xf, 0x9, 0x4, 0x40, 0x8, 0x8, 0x1, 0x1, 0x200, 0xf8, 0x6, 0x2d8, 0x2, 0x2, 0x1, 0x9d02, 0x0, 0x3, 0x200, 0x1, 0x9cf5, 0x1, 0xf, 0x2, 0x7fff, 0x4, 0x6, 0x8001, 0x0, 0x8, 0x1, 0x81, 0x7b, 0x4, 0x40, 0x4, 0x4, 0x3cc, 0x5, 0x40, 0x0, 0xcc4eed33, 0x7, 0x7fff, 0x100, 0x6, 0x3, 0xdac7, 0x9, 0x1, 0x8, 0x3, 0x4, 0x4, 0x7fffffff, 0x2, 0x6, 0x370, 0x0, 0x9, 0x0, 0xffffffc0, 0x3, 0x8, 0x59, 0x8, 0x4, 0x5, 0x5, 0x80000000, 0x9, 0x3, 0x7, 0x3, 0xa1a, 0x7, 0x82cf, 0x5, 0xfffffff6, 0x4, 0x7ff, 0x6, 0x0, 0x7f, 0xfffffff8, 0x7, 0x2, 0x7342, 0x800, 0xa4, 0x0, 0xffff82d2, 0x0, 0x80000000, 0x1, 0xb, 0x9, 0x3, 0x9, 0x3, 0x5, 0x9, 0x4, 0x8, 0x869, 0xffff, 0x81, 0x5, 0xae25, 0x2, 0x7, 0x9, 0x9, 0x86e, 0x401, 0x7, 0x3, 0xc, 0x5, 0xeb11, 0x8, 0xda, 0x1, 0x7, 0x3, 0xa45, 0x5, 0x1, 0x3ff, 0x7, 0x5, 0x1, 0x5, 0x1ff, 0x7fff, 0x5, 0x8, 0xc182, 0x2, 0x7, 0x2, 0x5, 0x9, 0x4, 0xd4d4, 0x0, 0x9a, 0x0, 0x8, 0x80000000, 0x3, 0x2, 0x932d, 0xc, 0xc3b9, 0x6d, 0x1, 0x200, 0xfff, 0x6, 0x1, 0x8000, 0x9, 0xfffffffc, 0x9, 0x7f, 0x5, 0x9, 0x8, 0xf53, 0x9, 0xa, 0x3, 0x1, 0x173, 0x8, 0x4fe, 0x5, 0x7, 0xda0, 0x6, 0x8, 0xffffffff, 0x5, 0x637b, 0x1, 0xfffffffe, 0x2, 0x140, 0x5, 0x7f, 0x8, 0x0, 0x4, 0x7, 0x6, 0xffffffff, 0x2, 0x27, 0x400, 0x5, 0x7, 0x7, 0xb87, 0x2056, 0x2e2f, 0x80000000, 0x2, 0xd13, 0x3, 0x4, 0xff, 0x1a, 0x8e61, 0xb, 0x2, 0x100, 0xffff, 0x2, 0x3, 0x2, 0x1000, 0x8, 0xfff, 0x1000, 0x1, 0x7, 0x7, 0x3ff, 0x101, 0x1, 0x4, 0x3ff, 0x10000, 0x3, 0x2, 0x61bc, 0x6, 0x7f, 0x6, 0x8, 0x7fff, 0x2, 0xfffffffc, 0x1ff, 0x1, 0x81, 0x800, 0x1, 0x200000, 0xbec2, 0x1, 0x8001, 0x10, 0x7, 0xd, 0x0, 0x0, 0x2, 0x0, 0x7, 0x7, 0x3, 0xc9, 0x6, 0x7, 0x4, 0xa, 0x0, 0x2, 0x60, 0xff, 0x8000, 0x400, 0x8, 0x8001, 0x0, 0x5, 0x401, 0x174, 0x80000001, 0xf, 0x800, 0xffff, 0xfffff001, 0x40, 0x5, 0x10, 0x5, 0x6f4, 0x7, 0x0, 0x7, 0x1, 0x1b, 0xe, 0x0, 0xfff, 0x0, 0x9, 0x4, 0x8, 0x7, 0x8, 0x4, 0x5, 0x0, 0x1, 0x8, 0x8, 0x9, 0x1, 0x74, 0x400, 0x1, 0x10, 0x7fffffff, 0x10, 0x2, 0x4, 0xf, 0x7, 0xe, 0x1, 0x0, 0x5, 0x8c, 0x6, 0x7, 0x0, 0x0, 0xc501, 0x4, 0x42d, 0xd8, 0x9, 0x313fdb38, 0xd, 0x9, 0x9, 0x400, 0x2, 0x6, 0x1, 0x9, 0x8e9e, 0x0, 0x1, 0x4, 0x7, 0x5, 0x8e, 0x401, 0x5, 0x3, 0xae, 0x3ff, 0x4, 0x4, 0x11, 0x4, 0x4c4, 0x3, 0x5, 0x6, 0x7, 0x4, 0x0, 0x3, 0x5, 0x3, 0xba, 0x7, 0x2, 0x847a, 0x4, 0x7, 0x8, 0x1, 0x8ca4, 0x900a, 0x8, 0x0, 0x5, 0x3ff, 0x2, 0x1, 0x5, 0x6, 0x7, 0xc83, 0x1, 0xb1, 0x1, 0x9e, 0x200, 0x3, 0x4, 0x1, 0xff, 0xeb, 0x800, 0x8, 0x7520, 0xfffffffc, 0x67, 0x7fff, 0xc, 0x9, 0x2, 0x7fff, 0x6, 0x40, 0x7, 0x8, 0x7, 0xfffffff8, 0x9, 0x3, 0x8, 0x7, 0xd8, 0x7af, 0xa, 0x0, 0x4, 0x2, 0x9, 0x1, 0x4, 0x4, 0x8, 0x9, 0x7, 0x3, 0x400, 0x7, 0x5, 0x4, 0x10, 0x3, 0xd, 0x77, 0x2fc, 0x0, 0x5, 0x7, 0xab82, 0x800, 0x3, 0x80000000, 0x2, 0x6, 0x8, 0xfc000000, 0x0, 0x40008172, 0x3, 0x3, 0xb, 0xfffffffb, 0x9, 0x5, 0x7, 0x5, 0x8, 0x8, 0x8, 0x5cd, 0x1, 0xe, 0x400, 0x1, 0x0, 0x43e3, 0x3, 0x5, 0x1a27d99a, 0x9, 0xf, 0xa, 0x401, 0xc56, 0x7fff, 0x200, 0x5, 0x8, 0x400, 0x1, 0x5, 0x964, 0x2, 0x2, 0x9, 0x8, 0x800, 0x5, 0x78, 0xa4, 0x1, 0x3, 0x4, 0x4, 0x2, 0xe, 0x0, 0xae7, 0x9, 0x5d24, 0x9, 0x2, 0x7, 0x80000001, 0x0, 0x4, 0xef, 0xb, 0x7, 0x1, 0x8001, 0x101, 0x9, 0x10000, 0xf, 0x80000000, 0x3, 0x5, 0x9, 0x3, 0xfffffffd, 0xdd, 0xfffffff9, 0x0, 0xa6d, 0x80, 0x68c0382d, 0x2, 0x4, 0x3, 0x1, 0xfffffffd, 0x400, 0x80000000, 0x8, 0x7], 0x0, 0x5}]}) 4.772973205s ago: executing program 6 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x2bb4bf1e017492a2}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x60}}, 0x44) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)={0x3d6, 0x19, 0x200, 0x1, 0xfffffffc, "", [@nested={0xc, 0x13b, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid=0xee00}]}, @nested={0x360, 0x9, 0x0, 0x1, [@nested={0x35a, 0x83, 0x0, 0x1, [@nested={0x188, 0x37, 0x0, 0x1, [@typed={0x8d, 0x102, 0x0, 0x0, @binary="3181e52c0ee316a748d5f0afabc42b58c345348582eb2598f3459ca90a16eea81bd4a8ac9529cf517883319a917883d8ebc93adf1ff96278bce043a086033aef29f0869a7ab47469da8f967a0565c15e825e4df72c41182d8bf100bba2912b5c9a6415ac6f88179089ec698eb6c55bf4609f93d282f3f8422287f3fed26cf76dd02373c1eebc9d1ac0"}, @nested={0x4, 0x3a}, @nested={0x4, 0x14d}, @nested={0x4, 0xa8}, @generic="81d8e5a31376e08767bf568e71c109421410933ae8712dc4283bf4720edcff6a8338c045eb68b90570c27771c8b20f8f9a564ac6d0c135717bc5d6c54eaec5a6aeab1c3f8aa7c695a9331299c9c522b0cb151cfeeeb3d884edc9fdba3089cc8e1e2e32e795f9f2e80b940f28dae038ddd3df50afe317c769d1a73452d1068f85aa099aee637ca7c263d0c27860cc30be571869825784d971bf4fb9d41b7e35f31965bfb57aa43e9d4f271b6577de79e0cff818584606ae487550bc041eb325149784da6f72714ff8282a45ddb18a638e0bcd88b8bb6f15d42365b357cb2b913010065e36", @nested={0x4, 0x121}]}, @generic="bad3ea96c19dd77689d19cb11558185ab21c210c80f3d74c5c9a37e9180f3caeb356a164237611d12a1de4b57fd5133821f590986f728e2871a86ba896759038f6cdaceb9ab692a87061fc6fd006e6181cb879ffd2e57324d888afd3efd7d6625d9ed224fee86328174157efc0c7e05fcfef893fae22bc2e5312", @nested={0x76, 0x1a, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @u32=0xff}, @generic="f01b6d52c5a824b57a81ca8fa84f3d8b46221acbc94b62a1a42696efd35775f72d966273be249b4aecc35dbae5e52518cb103c0ad2a4152d9ddb322b473cbaec660e35a1ce306c2d87059c40a070ab5cdf6e290e3c79", @typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@private0}]}, @generic="81450366799bd11a6bb8c088bb6805abd4a63952c83311eee649209d70a9e49f85b0c3454fcbacfb2e096c0b087fd13a499f368f6e7fa14d91a5a33c732df8de12abc32be95f933d8fff10f8658f19d073381cb0e3352b1f432d11a636ad557542ecc3c6c9f5fcbe2cc349cf5e3d21b32d43e6072a7738aa7b4060ed8b099ac361971bad8c406613578065558afdf34c742473ee38595db487d10345bace688adda49fe0130070c5643f22485f38db61d7540b44ca96de67609057fe1bdc9c552f27b763f191ed5782dfe5b546c67af54df2ab491addb1f4c411b4a2"]}]}]}, 0x37c}], 0x1}, 0x4008804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000140)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2270469, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x9}}]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000)=0x59c8, 0x4) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) r5 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xac3e, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000005c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000640)=@multiplanar_userptr={0x66, 0x1, 0x4, 0x2, 0x6, {}, {0x5, 0x2, 0x6, 0x4, 0x2, 0xa, "7425adfe"}, 0x3, 0x2, {&(0x7f0000000400)=[{0x251d, 0x0, {&(0x7f0000000200)}, 0x46be}, {0x4, 0xdc, {&(0x7f00000002c0)}, 0x200}]}, 0x1, 0x0, r7}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000000)={0x20, 0x15, 0x4, "81100000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.49380429s ago: executing program 5 (id=2773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000650000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a090300000000000000000a0000060900020073797a31000000000900010073797a310000000018000380140000800500064072000000080003400000000214000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007b9aa2021046c0217c80102030109023600020000000009045fec010202ff09090503104000030505090498fa022fe9ed0109050f00000208260909aa02000800091a06bef9ff5d31151d2257ab661331dc9cbd619789df3782168af0798d1a47fbab1fadb16b69005f1f56ab00c7dd786d862583ccaeaa823c034b27fa032465c9e6cd257d0c546b4aca9c071324a828e7ecea38a42cbe1c32306e8b662690008adc859267d476bc178590894d00a78b55273f2890ec9f79d1c35fcc96ab4f5b6f7d1f4d27b798beee7e5252a22302b5cc10f069f90c28"], 0x0) 3.485776167s ago: executing program 4 (id=2774): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8}, @val={0xc, 0x99, {0xffffff51, 0x7c}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r3, &(0x7f0000000380)=[{&(0x7f0000000600)="002ec56be0d52f355b3adf", 0xb}], 0x1, 0x528, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, r6, 0x60b, 0x70bd30, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x52}, 0x4040040) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc963}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc963}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 3.422749201s ago: executing program 4 (id=2775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000210000010000000900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 3.343830215s ago: executing program 4 (id=2776): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ef}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0xe, 0x7, {0x7, 0x3, '\t\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x60b, 0x500a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xf0, 0xf0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x386}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x3, 0x7f}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xfd, 0x69, 0x43, 0x10, 0x1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0xad, &(0x7f0000000180)=@string={0xad, 0x3, "d4c35f171e2beb04f12996bbd063804b636c62c9e54698e8f7d29c0bd6d7f29c10f3d42b8509db1cef1c0c6b749628a7791e5a5290dbd085c3c9497566a49acb341cc0cc79056bf42aa9a98ef9ba68c8fe5dab78821ee13a7b030a51c6ddc5f6ea1bf49c25b19c89d2317623f39e1a6f9b24fc267ff0fbb2a62c71af9b40413266456006aa793301c8ae444a943d828cc9a0b42500632185e3698bc3b3159d80f3a35e8c11a16ca99934d2"}}, {0x16, &(0x7f0000000240)=@string={0x16, 0x3, "f4acc873f12b3ac87225ab7d148236fcfa98614a"}}, {0x31, &(0x7f0000000280)=@string={0x31, 0x3, "30e2c5e7ef75f8b85ecb05fa5488f1ea8cd1830bbe30b8e54880eeff34a0064e8937bef92e469f6dd5e2ea2d9082a2"}}, {0x58, &(0x7f00000002c0)=@string={0x58, 0x3, "bfe297d89aa22cb0ac7a0cb8c16c6d713a9c8a2f0b1df6e397294dd22bc24a3ffc92dd067633a5fe70492f30ad0384595c215cce322097b4355178c38fc5f0ba619c79365b541e3cfbb8be878b615ff11e0a3b765c36"}}]}) syz_usb_connect(0x3, 0x67f, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x5f, 0x4f, 0x58, 0xff, 0x411, 0xf4, 0xf1d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66d, 0x3, 0x4, 0xbc, 0x0, 0x80, [{{0x9, 0x4, 0xeb, 0x10, 0xc, 0xe1, 0xaf, 0x76, 0x4, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x2, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0xd}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x1, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0xa, 0x2, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x0, 0x6}}, {{0x9, 0x5, 0xea217cbaa0f35073, 0x9, 0x3ff, 0x4, 0x8, 0x1}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x6e, 0x54, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xdc, 0x8, 0x10, [@generic={0x7d, 0x4, "7a1ea25d6ddc0a08d543d894eab67e8c916be91607e8a084542031074198c67b66ef5f68f8588b421b37c19e8ebfd569131642e93db16280b6eee353e75a1c61b4b39118152a424fdf5d1b2901940dafe85f347ab0b42abc088478d7040988670fc3831aeda52dc089858c68cebe62d9a94a2ff7cbe008bc7d1958"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x2, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5006}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0xce, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xe97c}]}}, {{0x9, 0x5, 0xe, 0x0, 0x1d7, 0x40, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xac, 0x1ff}, @generic={0x5, 0x6, "221f0b"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x9, 0x0, [@generic={0xe2, 0xd, "49f3a2d7bfcd56ecaa004f29d149b6efeea90a2c0a91155d4248cb679547ffffadde5b8340fd1ef84779f5d212ad57364b80026115c867b13202a94e91b9501aef5648a1f45f29f1b3e540b14e9ab6e05e3ef2f3ac5f711a07c55656e0465236a874e097c35e62fe3ebad0473aa91838845e180d6c11494293fcc321591acd14a83a79f36eccb0a5b07401264b4378bcfbf3b97b85b0fbbf2a0a75fc1ecb728200ef5f2a497d4f762540b78d9ebd53118aacde3f05366ec4b8bac21d0fbdb66cb5382c48a4f36c5cdffb2d07d9c8e2b644fe69495a9c2f33bb58d6dc939cd357"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x7, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x96, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2}]}}]}}, {{0x9, 0x4, 0x20, 0x1, 0x1, 0xc1, 0xb2, 0x4e, 0x7f, [], [{{0x9, 0x5, 0xc, 0x2, 0x8, 0x5, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x84}]}}]}}, {{0x9, 0x4, 0x0, 0x8, 0xd, 0xd7, 0x22, 0xe0, 0x4, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfb26, 0x2, 0xd, "ea3e09f9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x80, 0x7, 'LG', "9f"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x1, 0xa7, "dc"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0xfffb, 0x6}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x5, 0x5, 0xec}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x7, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x37, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x1, 0x7, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x5, 0x7, 0x7f, [@generic={0x7, 0xe, "194ec41af0"}, @generic={0xaf, 0x8, "8bc30b80022e1a88d9e9fdc5bbb664b94d61eaf5a8a3340fff1aa343882ecca65f145f7e967dfb9356427d07c70d97c51c4d6b45fd3fadf2074d6e6dffca3c69caf07ce20b5a222b16084345876c259f817a74f93c4c016e12768af28b4243ecca2402a01fc6b510b7d42079fd96717bc40874dbb3f9a382368bf1fe43810e9d2a315015794c21f2af06e7df0dcd7bd4750a43a93d7e14a8d7d6c8de8c7dcb16368598b4a26e01df957075fd4c"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x7, 0x6, 0x8, [@generic={0x3b, 0x23, "7b456d852a444fde013ea729661580de9cd723b45c1ea92ec78ab25eea4c11c2cba075a9bf09f0bb4c748808adc1dd9a6ddde0f47034b1cbdb"}, @generic={0x2b, 0x30, "ce0eeb5bbc4c52bbd7bee2405405b1be1755b74af8ceb2987cfa84c9520dd8e9282922ac777f93eb16"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0xbc, 0x56, [@generic={0x60, 0x9, "c14d05fae469e11f21fbd33f580e8eea38600a04bf09608320a4b1687b540e42922e8a32dd486911c8ccdf9b5869983b84ec62ea6d3a01d4d87efc53361f64d1948be01e0832d901e0d8fbf879f396edd0ccf4d1c475628ecb6892720e5c"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x3, 0xf2, 0x4, [@generic={0x7a, 0x24, "3648cd0ac102b78d4d61596be46dbb2baad06696d35c67873ecae6b0ba89076a09d2988dd1b0dfd219c28c91e133f19979a72b0f87d1776d9ad201abd812a8f507bf2179dd7f9ff5c47e695c062914ec338efa30cfd737e88f1909dd746933b6ed06d8628e5674ba7b34872b45573c1e7334411793de6c7b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x1, 0x0, 0x6, [@generic={0x45, 0xb, "6c6d0d80b65b9d5a0187684b2e3c7784c9c05340d2dc7d392ab7d6119209496649e67a46de0e8e01767d475c44a49cd5b0945e0ee18d4e317fbccc8c221be7c29df536"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7de, 0x1, 0x5, 0x9, [@generic={0xa2, 0x3, "1fa4d39f8f35596397df03990f2a2c8a65d60cd0a98352de0902c099fa51959ccc7c1587052b8cc439936d1782941c2237866c6790b866ba4d47195d3dec44e5c1602006e5b575a31a4180ba853295625684e32ec284fa52e4aa521e283ca7a9534deb9604359815a1640c39c870cf3f0f85a24297487c43da86e1b9406f751a3d2dd3aaa3e0c31358ad2423f26d3334ad76f992eefa5da063c69590baf836ef"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x2, 0x5, 0xd}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x7, 0x8, 0x4}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xe, 0x3, 0x40, [@generic={0xa6, 0x23, "a521af0bce0901b3ea61ab7f00c8aa2311f9a5b3778a2dd3562dcdd46503fcf1ffc865d8393bf6613a690eac0d301bde6b8c77d6a605341cdfcae68d94fa04f06ea8864d69863e356219f22763743412f08263d8943316cf0effae3ce53002fbf929e14ab6004ee0039f335989320e3f3624fdca691df824a78398fed24118fb4e97571aaf321a7eeeb29989ae472f97931aad729f685f2c705ed6380f26fc2d647c4e30"}]}}, {{0x9, 0x5, 0xa, 0x20, 0x0, 0x10, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0x6, 0x2, 0x1, 0x8, 0x9}, 0xaf, &(0x7f0000000a80)={0x5, 0xf, 0xaf, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0xc, 0x4, 0xff, 0xb9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x5, 0x6, 0x681}, @generic={0x77, 0x10, 0xb, "b3fa326623cba0f793fce6523b0f4d8ddab47e5354b6c422f20eed96adae1198bd6612ba68d205fa8ace08df58e3c3382eab1ecedbbc4bac03f5f5e131b7149b1a92ef634f81baffe7d216ec68c50810d675f32df0f7b4209327150b7a6ef0195b6aa58852b248ab10b575d1f811d0f65906ee51"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "3ab0fde25ce6cb1941326c1df797d524"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x83, 0x8ca}]}, 0x5, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0xa20f52c583c5229a}}]}) 2.937956632s ago: executing program 5 (id=2777): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000e], 0x80a0000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.883710479s ago: executing program 5 (id=2778): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d8010203010902240001050940190904"], 0x0) 2.29587752s ago: executing program 5 (id=2779): r0 = userfaultfd(0x80001) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UI_SET_EVBIT(r2, 0x80811501, 0x3) close(0x3) r5 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f00000000c0)={0x412, 0x20363159, 0x2, @discrete={0x8, 0x8}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, &(0x7f0000000040)={'wlan0\x00'}) 2.274746256s ago: executing program 5 (id=2780): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendto$ax25(r4, &(0x7f0000000200)="61e3d32763202b2de180de0cdcabce65606440c2706457d66f052a8899790adad182680e4a0669c9e3b3dc42b8f9f87d44f62380360c91ac8898b31dcb6a9d720093ee568dfd6d92efef0c3752524ce0394861e671ff32de5d3d1bd119cb02d3a49b01a1e4c8fdbd76e522d8bf511ac2a607a5d5071e6bde12ae548ff486c3faafbce954b88a44ac5185697a51fced5ccb8457fac269c2a20d0890f93a7ebfb0f6fcc3", 0xa3, 0x4048000, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]}, 0x48) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r2, &(0x7f0000000800)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xff}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x4000040) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r3, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendto$ax25(r4, &(0x7f0000000200)="61e3d32763202b2de180de0cdcabce65606440c2706457d66f052a8899790adad182680e4a0669c9e3b3dc42b8f9f87d44f62380360c91ac8898b31dcb6a9d720093ee568dfd6d92efef0c3752524ce0394861e671ff32de5d3d1bd119cb02d3a49b01a1e4c8fdbd76e522d8bf511ac2a607a5d5071e6bde12ae548ff486c3faafbce954b88a44ac5185697a51fced5ccb8457fac269c2a20d0890f93a7ebfb0f6fcc3", 0xa3, 0x4048000, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null]}, 0x48) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) sendmsg$can_j1939(r2, &(0x7f0000000800)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0xff}}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x4000040) (async) 1.675466337s ago: executing program 6 (id=2781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000055) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="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", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0585611, &(0x7f0000000200)={0x2, 0xe, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="143ac47250000001000000000000000007000000"], 0x14}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12c972cef4758226ddda24ca0100005938d7401097307733960000009268c8c56b08cf861e000904"], 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000680)={{}, {0xc}}) fanotify_init(0x4000, 0x1) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="12d474b3bf692e46a1203127549dd30057bee30ebaa1a08ef6f199ae5b9e539d9ca02c21c74fc94a7a7b8456aaf12af582e2dc890b8d7ece1efa880ee5be327fb9e2401f6c75e7c394e77a43cc17dd327c3871ae78c61d63fcdcc8dca7977d2bdad12ea476fdfb9ccb339a7caf2364bc975023095545d8dde50000000000"], 0x0, 0x0}) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000680)="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", 0xfa) syz_usb_connect$cdc_ecm(0x2, 0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000ff2505a1a4400001020301090285000101c0300b0904000617020600f90b24060000f7cff029043405240002000d24060f018100001c070009c18f05240101080c241b020000000801ff7f021524120200a317a88b045e4f01a607c0ffcb7e392a10190704018002000900ff7ffcff080009058202400001fe09090503021000d98603"], &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xb, 0x2, 0xa, 0x40}, 0xf, &(0x7f0000000140)=ANY=[], 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="0303332af0683b4a218f5d5e44e5e14d777b9ae64bfd993a0221171a4aa04b8914cbbf994018d58550f1a8ee9a27da9276ce7cbb383d10a400"/67]}, {0xde, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"]}]}) 1.674125741s ago: executing program 4 (id=2782): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb601020301090212000100000000090406d3f47a892df34d4e4111d5859aae51000000f2ba1f3ec823a7cc00"], 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x19, &(0x7f00000001c0)="a2", 0x1) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='+\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f00000003c0)={0x0, 0x1, 0x41, {0x41, 0x24, "2a91e391588f59a3ca2a1c1112365752d28cb09adc243e9756de3fbdac9dca4b7b330c0ad8a40c0c75e17a4c310efb9ecfda8ec6dad760a974cadbd8c1c5a7"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000440)={0x40, 0x10, 0x2f, "4d135f5e5060f2a2c5eced48283b3f908e2410698c0bb6c1ae18091c0072325f41f8eedbfae2adc5fd5342aa3fa0cf"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x19}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x1, 0x7, 0x800, 0xb, 0xae, 0x800, 0x0, 0x5, 0x5, 0x5, 0x8, 0xe5}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0xfffffffb}, &(0x7f0000000600)={0x20, 0x83, 0x2}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x4a}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) 1.405653959s ago: executing program 1 (id=2784): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, 0x0, 0x2000000, 0x0, 0x0, 0x2}) (async) acct(&(0x7f0000000080)='./file1\x00') acct(&(0x7f0000000000)='./file1\x00') 1.335954297s ago: executing program 1 (id=2785): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x1e, 0x805, 0x0) listen(r2, 0xffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0x80000002}) 1.227172941s ago: executing program 1 (id=2786): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000e], 0x80a0000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 935.570558ms ago: executing program 1 (id=2787): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00014006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000880) 904.178298ms ago: executing program 1 (id=2788): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) futex(0x0, 0x85, 0x2, 0x0, 0x0, 0xc5fffffd) chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x7c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40ef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2c011}, 0x404c000) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x7c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40ef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2c011}, 0x404c000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) fchown(r1, 0xee01, 0x0) 779.817504ms ago: executing program 1 (id=2789): syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000814) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) sync_file_range(r0, 0x2, 0x4aae, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$clear(0x5, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000380)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r5], 0x0) 187.42248ms ago: executing program 5 (id=2790): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x3, 0x20, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0x0, 0xbb}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x2, 0x3, 0x5}}]}}}]}}]}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x8000) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000001c0)=0xffffff37) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "54e7de17"}]}}, 0x0}, 0x0) 101.929235ms ago: executing program 4 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100f5000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 0s ago: executing program 4 (id=2792): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000045c0)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xc0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000500)={0x50, 0x4, 0x6, {0x12, 0xcac}, {0x8000, 0x7}, @const={0x7f, {0x400, 0x7fff, 0x7, 0x7}}}) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x10, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/198, 0xc6, 0x1, 0x0}, &(0x7f00000003c0)=0x40) kernel console output (not intermixed with test programs): 6] ? inet_sendmsg+0x2f4/0x370 [ 376.994922][T12336] __sock_sendmsg+0x19c/0x270 [ 376.994947][T12336] __sys_sendto+0x3bd/0x520 [ 376.994974][T12336] ? __pfx___sys_sendto+0x10/0x10 [ 376.994996][T12336] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 376.995030][T12336] ? __fget_files+0x3a0/0x420 [ 376.995063][T12336] ? ksys_write+0x22a/0x250 [ 376.995084][T12336] ? __pfx_ksys_write+0x10/0x10 [ 376.995108][T12336] __x64_sys_sendto+0xde/0x100 [ 376.995136][T12336] do_syscall_64+0xfa/0xfa0 [ 376.995154][T12336] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.995176][T12336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.995194][T12336] ? clear_bhb_loop+0x60/0xb0 [ 376.995215][T12336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.995232][T12336] RIP: 0033:0x7fd06c18eec9 [ 376.995249][T12336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.995264][T12336] RSP: 002b:00007fd06cf80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 376.995285][T12336] RAX: ffffffffffffffda RBX: 00007fd06c3e5fa0 RCX: 00007fd06c18eec9 [ 376.995298][T12336] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 376.995309][T12336] RBP: 00007fd06cf80090 R08: 0000200000000080 R09: 000000000000001c [ 376.995393][T12336] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 376.995403][T12336] R13: 00007fd06c3e6038 R14: 00007fd06c3e5fa0 R15: 00007fff63785a48 [ 376.995440][T12336] [ 377.073063][ T5863] dvb-usb: DViCO FusionHDTV DVB-T USB (TH7579) successfully deinitialized and disconnected. [ 377.792520][T12363] netlink: 'syz.1.2055': attribute type 10 has an invalid length. [ 377.984428][T12370] FAULT_INJECTION: forcing a failure. [ 377.984428][T12370] name failslab, interval 1, probability 0, space 0, times 0 [ 378.006082][T12370] CPU: 1 UID: 0 PID: 12370 Comm: syz.1.2059 Not tainted syzkaller #0 PREEMPT(full) [ 378.006109][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.006120][T12370] Call Trace: [ 378.006128][T12370] [ 378.006136][T12370] dump_stack_lvl+0x189/0x250 [ 378.006161][T12370] ? __pfx____ratelimit+0x10/0x10 [ 378.006182][T12370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.006200][T12370] ? __pfx__printk+0x10/0x10 [ 378.006222][T12370] ? __pfx___might_resched+0x10/0x10 [ 378.006244][T12370] ? fs_reclaim_acquire+0x7d/0x100 [ 378.006270][T12370] should_fail_ex+0x414/0x560 [ 378.006298][T12370] should_failslab+0xa8/0x100 [ 378.006322][T12370] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 378.006343][T12370] ? ovl_set_redirect+0x527/0x770 [ 378.006374][T12370] kstrdup+0x42/0x100 [ 378.006404][T12370] ovl_set_redirect+0x527/0x770 [ 378.006436][T12370] ovl_link+0x141/0x270 [ 378.006461][T12370] ? __pfx_ovl_link+0x10/0x10 [ 378.006484][T12370] ? down_write+0x162/0x1f0 [ 378.006513][T12370] ? __pfx_down_write+0x10/0x10 [ 378.006537][T12370] ? inode_permission+0x149/0x470 [ 378.006559][T12370] ? try_break_deleg+0x79/0x130 [ 378.006582][T12370] vfs_link+0x4ed/0x6e0 [ 378.006611][T12370] do_linkat+0x272/0x560 [ 378.006641][T12370] ? __pfx_do_linkat+0x10/0x10 [ 378.006666][T12370] ? getname_flags+0x1e5/0x540 [ 378.006693][T12370] __x64_sys_link+0x82/0x90 [ 378.006715][T12370] do_syscall_64+0xfa/0xfa0 [ 378.006733][T12370] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.006753][T12370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.006770][T12370] ? clear_bhb_loop+0x60/0xb0 [ 378.006791][T12370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.006809][T12370] RIP: 0033:0x7fcd5df8eec9 [ 378.006827][T12370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.006842][T12370] RSP: 002b:00007fcd5eef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 378.006862][T12370] RAX: ffffffffffffffda RBX: 00007fcd5e1e5fa0 RCX: 00007fcd5df8eec9 [ 378.006875][T12370] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000940 [ 378.006887][T12370] RBP: 00007fcd5eef7090 R08: 0000000000000000 R09: 0000000000000000 [ 378.006899][T12370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.006910][T12370] R13: 00007fcd5e1e6038 R14: 00007fcd5e1e5fa0 R15: 00007fffb9776728 [ 378.006942][T12370] [ 378.573503][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.670432][T12383] binder: 12380:12383 unknown command 0 [ 378.676172][T12383] binder: 12380:12383 ioctl c0306201 200000004a40 returned -22 [ 378.752802][ T5863] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 378.812235][T12388] FAULT_INJECTION: forcing a failure. [ 378.812235][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 378.827898][T12388] CPU: 0 UID: 0 PID: 12388 Comm: syz.6.2067 Not tainted syzkaller #0 PREEMPT(full) [ 378.827924][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.827935][T12388] Call Trace: [ 378.827943][T12388] [ 378.827951][T12388] dump_stack_lvl+0x189/0x250 [ 378.827975][T12388] ? __pfx____ratelimit+0x10/0x10 [ 378.827995][T12388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.828013][T12388] ? __pfx__printk+0x10/0x10 [ 378.828044][T12388] should_fail_ex+0x414/0x560 [ 378.828071][T12388] should_failslab+0xa8/0x100 [ 378.828096][T12388] __kmalloc_cache_noprof+0x84/0x700 [ 378.828114][T12388] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 378.828134][T12388] ? sctp_add_bind_addr+0x8c/0x370 [ 378.828159][T12388] sctp_add_bind_addr+0x8c/0x370 [ 378.828184][T12388] sctp_copy_local_addr_list+0x30b/0x4e0 [ 378.828215][T12388] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 378.828235][T12388] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 378.828258][T12388] ? sctp_v6_is_any+0x64/0x80 [ 378.828280][T12388] ? sctp_copy_one_addr+0x93/0x360 [ 378.828303][T12388] sctp_bind_addr_copy+0xb3/0x3c0 [ 378.828325][T12388] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 378.828355][T12388] sctp_connect_new_asoc+0x2e0/0x690 [ 378.828382][T12388] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 378.828403][T12388] ? __local_bh_enable_ip+0x12d/0x1c0 [ 378.828434][T12388] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 378.828456][T12388] ? security_sctp_bind_connect+0x7e/0x2e0 [ 378.828485][T12388] sctp_sendmsg+0x155c/0x2810 [ 378.828520][T12388] ? __pfx_sctp_sendmsg+0x10/0x10 [ 378.828546][T12388] ? aa_sk_perm+0x81e/0x950 [ 378.828571][T12388] ? __pfx_aa_sk_perm+0x10/0x10 [ 378.828594][T12388] ? sock_rps_record_flow+0x19/0x410 [ 378.828621][T12388] ? inet_sendmsg+0x2f4/0x370 [ 378.828648][T12388] __sock_sendmsg+0x19c/0x270 [ 378.828674][T12388] __sys_sendto+0x3bd/0x520 [ 378.828701][T12388] ? __pfx___sys_sendto+0x10/0x10 [ 378.828723][T12388] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 378.828757][T12388] ? __fget_files+0x3a0/0x420 [ 378.828790][T12388] ? ksys_write+0x22a/0x250 [ 378.828813][T12388] ? __pfx_ksys_write+0x10/0x10 [ 378.828836][T12388] __x64_sys_sendto+0xde/0x100 [ 378.828864][T12388] do_syscall_64+0xfa/0xfa0 [ 378.828882][T12388] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.828901][T12388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.828919][T12388] ? clear_bhb_loop+0x60/0xb0 [ 378.828938][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.828953][T12388] RIP: 0033:0x7fc4abd8eec9 [ 378.828969][T12388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.828983][T12388] RSP: 002b:00007fc4acb40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 378.829003][T12388] RAX: ffffffffffffffda RBX: 00007fc4abfe5fa0 RCX: 00007fc4abd8eec9 [ 378.829016][T12388] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 378.829028][T12388] RBP: 00007fc4acb40090 R08: 0000200000000080 R09: 000000000000001c [ 378.829040][T12388] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 378.829050][T12388] R13: 00007fc4abfe6038 R14: 00007fc4abfe5fa0 R15: 00007ffce26af998 [ 378.829081][T12388] [ 379.173333][ T5863] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 379.182441][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.191308][ T5863] usb 2-1: Product: syz [ 379.195560][ T5863] usb 2-1: Manufacturer: syz [ 379.200166][ T5863] usb 2-1: SerialNumber: syz [ 379.206071][T12393] comedi comedi0: comedi_config --init_data is deprecated [ 379.207968][ T5863] usb 2-1: config 0 descriptor?? [ 379.353814][T12390] FAULT_INJECTION: forcing a failure. [ 379.353814][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 379.380295][T12390] CPU: 1 UID: 0 PID: 12390 Comm: syz.4.2068 Not tainted syzkaller #0 PREEMPT(full) [ 379.380321][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.380331][T12390] Call Trace: [ 379.380339][T12390] [ 379.380347][T12390] dump_stack_lvl+0x189/0x250 [ 379.380377][T12390] ? __pfx____ratelimit+0x10/0x10 [ 379.380398][T12390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.380416][T12390] ? __pfx__printk+0x10/0x10 [ 379.380439][T12390] ? __pfx___might_resched+0x10/0x10 [ 379.380460][T12390] ? fs_reclaim_acquire+0x7d/0x100 [ 379.380486][T12390] should_fail_ex+0x414/0x560 [ 379.380512][T12390] should_failslab+0xa8/0x100 [ 379.380536][T12390] __kmalloc_noprof+0xdf/0x800 [ 379.380555][T12390] ? tomoyo_encode+0x28b/0x550 [ 379.380581][T12390] tomoyo_encode+0x28b/0x550 [ 379.380606][T12390] tomoyo_realpath_from_path+0x58d/0x5d0 [ 379.380630][T12390] ? tomoyo_domain+0xd9/0x130 [ 379.380656][T12390] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 379.380674][T12390] tomoyo_path_number_perm+0x1e8/0x5a0 [ 379.380695][T12390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 379.380718][T12390] ? file_init_path+0x3b/0x590 [ 379.380766][T12390] ? __fget_files+0x2a/0x420 [ 379.380792][T12390] ? __fget_files+0x3a0/0x420 [ 379.380813][T12390] ? __fget_files+0x2a/0x420 [ 379.380837][T12390] security_file_ioctl+0xcb/0x2d0 [ 379.380866][T12390] __se_sys_ioctl+0x47/0x170 [ 379.380887][T12390] do_syscall_64+0xfa/0xfa0 [ 379.380905][T12390] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.380923][T12390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.380939][T12390] ? clear_bhb_loop+0x60/0xb0 [ 379.380959][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.380976][T12390] RIP: 0033:0x7fd06c18eacb [ 379.380992][T12390] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 379.381007][T12390] RSP: 002b:00007fd06cf7ee10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.381025][T12390] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fd06c18eacb [ 379.381037][T12390] RDX: 00007fd06cf7ee70 RSI: 0000000000008933 RDI: 0000000000000006 [ 379.381049][T12390] RBP: 00007fd06cf7ee70 R08: 000000000000000a R09: 0000000000000000 [ 379.381060][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 379.381071][T12390] R13: 00007fd06cf7efa0 R14: 00007fd06cf7efa0 R15: 0000200000000200 [ 379.381099][T12390] [ 379.381117][T12390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 379.403895][ T984] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 379.709874][ T5863] airspy 2-1:0.0: Board ID: 00 [ 379.715946][ T5863] airspy 2-1:0.0: Firmware version: [ 379.924876][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.941164][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.273772][T12443] binder: 12442:12443 unknown command 0 [ 380.279372][T12443] binder: 12442:12443 ioctl c0306201 200000004a40 returned -22 [ 380.323791][T12445] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 380.365426][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.382834][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.503122][T12450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.803579][ T5863] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 380.820093][ T5863] airspy 2-1:0.0: Registered as swradio24 [ 380.829379][ T5863] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 380.853325][ T5863] usb 2-1: USB disconnect, device number 121 [ 380.988032][T12464] FAULT_INJECTION: forcing a failure. [ 380.988032][T12464] name failslab, interval 1, probability 0, space 0, times 0 [ 381.001293][T12464] CPU: 1 UID: 0 PID: 12464 Comm: syz.4.2096 Not tainted syzkaller #0 PREEMPT(full) [ 381.001309][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.001316][T12464] Call Trace: [ 381.001320][T12464] [ 381.001325][T12464] dump_stack_lvl+0x189/0x250 [ 381.001342][T12464] ? __pfx____ratelimit+0x10/0x10 [ 381.001356][T12464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.001365][T12464] ? __pfx__printk+0x10/0x10 [ 381.001378][T12464] ? __pfx___might_resched+0x10/0x10 [ 381.001391][T12464] ? fs_reclaim_acquire+0x7d/0x100 [ 381.001406][T12464] should_fail_ex+0x414/0x560 [ 381.001420][T12464] should_failslab+0xa8/0x100 [ 381.001433][T12464] __kmalloc_noprof+0xdf/0x800 [ 381.001444][T12464] ? __vb2_queue_alloc+0x29d/0x15a0 [ 381.001458][T12464] __vb2_queue_alloc+0x29d/0x15a0 [ 381.001481][T12464] vb2_core_create_bufs+0x765/0xde0 [ 381.001491][T12464] ? __lock_acquire+0xab9/0xd20 [ 381.001509][T12464] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 381.001523][T12464] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 381.001537][T12464] vb2_create_bufs+0x5b9/0xae0 [ 381.001550][T12464] ? __pfx_vb2_create_bufs+0x10/0x10 [ 381.001562][T12464] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 381.001576][T12464] vb2_ioctl_create_bufs+0x285/0x3f0 [ 381.001589][T12464] v4l_create_bufs+0x18c/0x290 [ 381.001601][T12464] __video_do_ioctl+0xa59/0xc10 [ 381.001618][T12464] ? __pfx___video_do_ioctl+0x10/0x10 [ 381.001636][T12464] video_usercopy+0x82d/0x1450 [ 381.001652][T12464] ? __pfx___video_do_ioctl+0x10/0x10 [ 381.001663][T12464] ? __pfx_video_usercopy+0x10/0x10 [ 381.001683][T12464] ? __fget_files+0x3a0/0x420 [ 381.001697][T12464] v4l2_ioctl+0x18d/0x1e0 [ 381.001708][T12464] ? __pfx_v4l2_ioctl+0x10/0x10 [ 381.001718][T12464] __se_sys_ioctl+0xfc/0x170 [ 381.001730][T12464] do_syscall_64+0xfa/0xfa0 [ 381.001740][T12464] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.001751][T12464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.001760][T12464] ? clear_bhb_loop+0x60/0xb0 [ 381.001772][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.001781][T12464] RIP: 0033:0x7fd06c18eec9 [ 381.001791][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.001799][T12464] RSP: 002b:00007fd06cf80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.001810][T12464] RAX: ffffffffffffffda RBX: 00007fd06c3e5fa0 RCX: 00007fd06c18eec9 [ 381.001817][T12464] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 381.001824][T12464] RBP: 00007fd06cf80090 R08: 0000000000000000 R09: 0000000000000000 [ 381.001830][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.001836][T12464] R13: 00007fd06c3e6038 R14: 00007fd06c3e5fa0 R15: 00007fff63785a48 [ 381.001852][T12464] [ 381.311155][T12466] FAULT_INJECTION: forcing a failure. [ 381.311155][T12466] name failslab, interval 1, probability 0, space 0, times 0 [ 381.324071][T12466] CPU: 0 UID: 0 PID: 12466 Comm: syz.4.2097 Not tainted syzkaller #0 PREEMPT(full) [ 381.324093][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.324100][T12466] Call Trace: [ 381.324104][T12466] [ 381.324109][T12466] dump_stack_lvl+0x189/0x250 [ 381.324125][T12466] ? __pfx____ratelimit+0x10/0x10 [ 381.324136][T12466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.324146][T12466] ? __pfx__printk+0x10/0x10 [ 381.324163][T12466] should_fail_ex+0x414/0x560 [ 381.324178][T12466] should_failslab+0xa8/0x100 [ 381.324192][T12466] __kmalloc_cache_noprof+0x84/0x700 [ 381.324203][T12466] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 381.324215][T12466] ? sctp_add_bind_addr+0x8c/0x370 [ 381.324229][T12466] sctp_add_bind_addr+0x8c/0x370 [ 381.324242][T12466] sctp_copy_local_addr_list+0x30b/0x4e0 [ 381.324255][T12466] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 381.324266][T12466] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 381.324278][T12466] ? sctp_v6_is_any+0x64/0x80 [ 381.324291][T12466] ? sctp_copy_one_addr+0x93/0x360 [ 381.324305][T12466] sctp_bind_addr_copy+0xb3/0x3c0 [ 381.324316][T12466] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 381.324333][T12466] sctp_connect_new_asoc+0x2e0/0x690 [ 381.324348][T12466] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 381.324360][T12466] ? __local_bh_enable_ip+0x12d/0x1c0 [ 381.324377][T12466] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 381.324390][T12466] ? security_sctp_bind_connect+0x7e/0x2e0 [ 381.324406][T12466] sctp_sendmsg+0x155c/0x2810 [ 381.324424][T12466] ? __pfx_sctp_sendmsg+0x10/0x10 [ 381.324439][T12466] ? aa_sk_perm+0x81e/0x950 [ 381.324452][T12466] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.324465][T12466] ? sock_rps_record_flow+0x19/0x410 [ 381.324481][T12466] ? inet_sendmsg+0x2f4/0x370 [ 381.324496][T12466] __sock_sendmsg+0x19c/0x270 [ 381.324510][T12466] __sys_sendto+0x3bd/0x520 [ 381.324525][T12466] ? __pfx___sys_sendto+0x10/0x10 [ 381.324538][T12466] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 381.324556][T12466] ? __fget_files+0x3a0/0x420 [ 381.324574][T12466] ? ksys_write+0x22a/0x250 [ 381.324586][T12466] ? __pfx_ksys_write+0x10/0x10 [ 381.324599][T12466] __x64_sys_sendto+0xde/0x100 [ 381.324614][T12466] do_syscall_64+0xfa/0xfa0 [ 381.324625][T12466] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.324635][T12466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.324645][T12466] ? clear_bhb_loop+0x60/0xb0 [ 381.324657][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.324666][T12466] RIP: 0033:0x7fd06c18eec9 [ 381.324676][T12466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.324684][T12466] RSP: 002b:00007fd06cf80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 381.324696][T12466] RAX: ffffffffffffffda RBX: 00007fd06c3e5fa0 RCX: 00007fd06c18eec9 [ 381.324703][T12466] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 381.324709][T12466] RBP: 00007fd06cf80090 R08: 0000200000000080 R09: 000000000000001c [ 381.324715][T12466] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 381.324721][T12466] R13: 00007fd06c3e6038 R14: 00007fd06c3e5fa0 R15: 00007fff63785a48 [ 381.324738][T12466] [ 381.922807][ T5871] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 382.072769][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 382.079168][ T5871] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 382.091390][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.101801][ T5871] usb 5-1: config 0 has no interface number 0 [ 382.108022][ T5871] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 382.119792][ T5871] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 382.131207][ T5871] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 382.142145][ T5871] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 382.152057][ T5871] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 382.161975][ T5871] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 382.175256][ T5871] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 382.184506][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.197000][ T5871] usb 5-1: config 0 descriptor?? [ 382.203185][T12468] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 382.213703][ T5871] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 382.270036][ T7213] udevd[7213]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.291859][ T5871] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 382.417023][ T5863] usb 5-1: USB disconnect, device number 99 [ 382.592253][T12494] netlink: 'syz.1.2108': attribute type 10 has an invalid length. [ 382.704599][T12504] netlink: 'syz.5.2112': attribute type 10 has an invalid length. [ 382.882798][ T5871] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 382.953626][T12508] FAULT_INJECTION: forcing a failure. [ 382.953626][T12508] name failslab, interval 1, probability 0, space 0, times 0 [ 382.968884][T12508] CPU: 1 UID: 0 PID: 12508 Comm: syz.4.2114 Not tainted syzkaller #0 PREEMPT(full) [ 382.968900][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 382.968906][T12508] Call Trace: [ 382.968911][T12508] [ 382.968916][T12508] dump_stack_lvl+0x189/0x250 [ 382.968940][T12508] ? __pfx____ratelimit+0x10/0x10 [ 382.968952][T12508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.968962][T12508] ? __pfx__printk+0x10/0x10 [ 382.968975][T12508] ? __pfx___might_resched+0x10/0x10 [ 382.968988][T12508] ? fs_reclaim_acquire+0x7d/0x100 [ 382.969003][T12508] should_fail_ex+0x414/0x560 [ 382.969019][T12508] should_failslab+0xa8/0x100 [ 382.969033][T12508] __kmalloc_node_track_caller_noprof+0xe2/0x810 [ 382.969045][T12508] ? trace_kmalloc+0x1f/0xd0 [ 382.969053][T12508] ? simple_xattr_set+0xda/0x380 [ 382.969062][T12508] ? do_raw_spin_lock+0x121/0x290 [ 382.969076][T12508] kstrdup+0x42/0x100 [ 382.969090][T12508] simple_xattr_set+0xda/0x380 [ 382.969102][T12508] shmem_xattr_handler_set+0x1a0/0x2d0 [ 382.969117][T12508] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 382.969129][T12508] __vfs_setxattr+0x43c/0x480 [ 382.969148][T12508] __vfs_setxattr_noperm+0x12d/0x660 [ 382.969165][T12508] vfs_setxattr+0x16b/0x2f0 [ 382.969183][T12508] ? __pfx_vfs_setxattr+0x10/0x10 [ 382.969196][T12508] ? kasan_quarantine_put+0xdd/0x220 [ 382.969206][T12508] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.969221][T12508] ovl_check_setxattr+0x15a/0x310 [ 382.969236][T12508] ovl_set_redirect+0x598/0x770 [ 382.969254][T12508] ovl_link+0x141/0x270 [ 382.969269][T12508] ? __pfx_ovl_link+0x10/0x10 [ 382.969282][T12508] ? down_write+0x162/0x1f0 [ 382.969294][T12508] ? __pfx_down_write+0x10/0x10 [ 382.969307][T12508] ? inode_permission+0x149/0x470 [ 382.969320][T12508] ? try_break_deleg+0x79/0x130 [ 382.969333][T12508] vfs_link+0x4ed/0x6e0 [ 382.969349][T12508] do_linkat+0x272/0x560 [ 382.969366][T12508] ? __pfx_do_linkat+0x10/0x10 [ 382.969379][T12508] ? getname_flags+0x1e5/0x540 [ 382.969394][T12508] __x64_sys_link+0x82/0x90 [ 382.969406][T12508] do_syscall_64+0xfa/0xfa0 [ 382.969416][T12508] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.969426][T12508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.969436][T12508] ? clear_bhb_loop+0x60/0xb0 [ 382.969448][T12508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.969458][T12508] RIP: 0033:0x7fd06c18eec9 [ 382.969468][T12508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.969476][T12508] RSP: 002b:00007fd06cf80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 382.969487][T12508] RAX: ffffffffffffffda RBX: 00007fd06c3e5fa0 RCX: 00007fd06c18eec9 [ 382.969494][T12508] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000940 [ 382.969501][T12508] RBP: 00007fd06cf80090 R08: 0000000000000000 R09: 0000000000000000 [ 382.969507][T12508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.969513][T12508] R13: 00007fd06c3e6038 R14: 00007fd06c3e5fa0 R15: 00007fff63785a48 [ 382.969531][T12508] [ 382.969706][T12508] overlayfs: failed to set redirect (-12) [ 383.296845][ T5871] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 383.306111][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.314354][ T5871] usb 2-1: Product: syz [ 383.318624][ T5871] usb 2-1: Manufacturer: syz [ 383.323446][ T5871] usb 2-1: SerialNumber: syz [ 383.332463][ T5871] usb 2-1: config 0 descriptor?? [ 383.356714][T12514] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 383.515039][T12522] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2121'. [ 383.538692][T12518] IPVS: ip_vs_add_dest(): server weight less than zero [ 383.547061][T12518] afs: Unknown parameter 'dyn¼Ã9§•ÙF' [ 383.570429][ T5871] usb-storage 2-1:0.0: USB Mass Storage device detected [ 383.581526][T12525] FAULT_INJECTION: forcing a failure. [ 383.581526][T12525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.603602][T12525] CPU: 0 UID: 0 PID: 12525 Comm: syz.6.2122 Not tainted syzkaller #0 PREEMPT(full) [ 383.603628][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.603639][T12525] Call Trace: [ 383.603647][T12525] [ 383.603655][T12525] dump_stack_lvl+0x189/0x250 [ 383.603678][T12525] ? __pfx____ratelimit+0x10/0x10 [ 383.603698][T12525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.603716][T12525] ? __pfx__printk+0x10/0x10 [ 383.603745][T12525] should_fail_ex+0x414/0x560 [ 383.603771][T12525] _copy_to_user+0x31/0xb0 [ 383.603791][T12525] simple_read_from_buffer+0xe1/0x170 [ 383.603817][T12525] proc_fail_nth_read+0x1b3/0x220 [ 383.603857][T12525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.603878][T12525] ? rw_verify_area+0x2a6/0x4d0 [ 383.603896][T12525] ? __lock_acquire+0xab9/0xd20 [ 383.603916][T12525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 383.603941][T12525] vfs_read+0x200/0xa30 [ 383.603959][T12525] ? fdget_pos+0x247/0x320 [ 383.603984][T12525] ? __pfx___mutex_lock+0x10/0x10 [ 383.604005][T12525] ? __pfx_vfs_read+0x10/0x10 [ 383.604025][T12525] ? __fget_files+0x2a/0x420 [ 383.604051][T12525] ? __fget_files+0x3a0/0x420 [ 383.604070][T12525] ? __fget_files+0x2a/0x420 [ 383.604100][T12525] ksys_read+0x145/0x250 [ 383.604121][T12525] ? __pfx_ksys_read+0x10/0x10 [ 383.604144][T12525] ? do_syscall_64+0xbe/0xfa0 [ 383.604166][T12525] do_syscall_64+0xfa/0xfa0 [ 383.604183][T12525] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.604203][T12525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.604219][T12525] ? clear_bhb_loop+0x60/0xb0 [ 383.604241][T12525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.604258][T12525] RIP: 0033:0x7fc4abd8d8dc [ 383.604275][T12525] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 383.604290][T12525] RSP: 002b:00007fc4acb40030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.604309][T12525] RAX: ffffffffffffffda RBX: 00007fc4abfe5fa0 RCX: 00007fc4abd8d8dc [ 383.604323][T12525] RDX: 000000000000000f RSI: 00007fc4acb400a0 RDI: 0000000000000004 [ 383.604334][T12525] RBP: 00007fc4acb40090 R08: 0000000000000000 R09: 0000000000000000 [ 383.604346][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.604357][T12525] R13: 00007fc4abfe6038 R14: 00007fc4abfe5fa0 R15: 00007ffce26af998 [ 383.604388][T12525] [ 383.979200][ T5871] usb 2-1: USB disconnect, device number 122 [ 383.989592][T12534] netlink: 'syz.5.2125': attribute type 10 has an invalid length. [ 384.401559][T12552] FAULT_INJECTION: forcing a failure. [ 384.401559][T12552] name failslab, interval 1, probability 0, space 0, times 0 [ 384.416361][T12552] CPU: 1 UID: 0 PID: 12552 Comm: syz.1.2132 Not tainted syzkaller #0 PREEMPT(full) [ 384.416379][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.416387][T12552] Call Trace: [ 384.416391][T12552] [ 384.416401][T12552] dump_stack_lvl+0x189/0x250 [ 384.416417][T12552] ? __pfx____ratelimit+0x10/0x10 [ 384.416428][T12552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.416439][T12552] ? __pfx__printk+0x10/0x10 [ 384.416452][T12552] ? __pfx___might_resched+0x10/0x10 [ 384.416468][T12552] should_fail_ex+0x414/0x560 [ 384.416484][T12552] should_failslab+0xa8/0x100 [ 384.416505][T12552] __kvmalloc_node_noprof+0x175/0x910 [ 384.416524][T12552] ? do_raw_spin_lock+0x121/0x290 [ 384.416542][T12552] ? simple_xattr_set+0x80/0x380 [ 384.416565][T12552] simple_xattr_set+0x80/0x380 [ 384.416579][T12552] ? do_raw_spin_unlock+0x122/0x240 [ 384.416593][T12552] shmem_xattr_handler_set+0x1a0/0x2d0 [ 384.416609][T12552] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 384.416621][T12552] __vfs_setxattr+0x43c/0x480 [ 384.416641][T12552] __vfs_setxattr_noperm+0x12d/0x660 [ 384.416658][T12552] vfs_setxattr+0x16b/0x2f0 [ 384.416674][T12552] ? __pfx_vfs_setxattr+0x10/0x10 [ 384.416687][T12552] ? kasan_quarantine_put+0xdd/0x220 [ 384.416697][T12552] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.416712][T12552] ovl_check_setxattr+0x15a/0x310 [ 384.416727][T12552] ovl_set_redirect+0x598/0x770 [ 384.416746][T12552] ovl_link+0x141/0x270 [ 384.416761][T12552] ? __pfx_ovl_link+0x10/0x10 [ 384.416774][T12552] ? down_write+0x162/0x1f0 [ 384.416786][T12552] ? __pfx_down_write+0x10/0x10 [ 384.416800][T12552] ? inode_permission+0x149/0x470 [ 384.416812][T12552] ? try_break_deleg+0x79/0x130 [ 384.416830][T12552] vfs_link+0x4ed/0x6e0 [ 384.416847][T12552] do_linkat+0x272/0x560 [ 384.416863][T12552] ? __pfx_do_linkat+0x10/0x10 [ 384.416878][T12552] ? getname_flags+0x1e5/0x540 [ 384.416894][T12552] __x64_sys_link+0x82/0x90 [ 384.416905][T12552] do_syscall_64+0xfa/0xfa0 [ 384.416916][T12552] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.416926][T12552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.416937][T12552] ? clear_bhb_loop+0x60/0xb0 [ 384.416949][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.416958][T12552] RIP: 0033:0x7fcd5df8eec9 [ 384.416969][T12552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.416977][T12552] RSP: 002b:00007fcd5eef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 384.416988][T12552] RAX: ffffffffffffffda RBX: 00007fcd5e1e5fa0 RCX: 00007fcd5df8eec9 [ 384.416996][T12552] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000940 [ 384.417002][T12552] RBP: 00007fcd5eef7090 R08: 0000000000000000 R09: 0000000000000000 [ 384.417008][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.417014][T12552] R13: 00007fcd5e1e6038 R14: 00007fcd5e1e5fa0 R15: 00007fffb9776728 [ 384.417032][T12552] [ 384.417330][T12552] overlayfs: failed to set redirect (-12) [ 384.772529][T12556] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 384.802412][T12536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 384.810380][T12536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 384.848125][T12536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 384.865767][T12536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 384.880472][T12536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.886894][T12536] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 384.895024][T12536] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 384.905011][T12536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.911478][T12536] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 384.921490][T12536] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 384.991987][T12566] fuse: Unknown parameter 'gpqup_id' [ 385.109402][T12566] dvmrp0: entered allmulticast mode [ 385.116686][T12574] binder: 12573:12574 unknown command 0 [ 385.122417][T12574] binder: 12573:12574 ioctl c0306201 200000004a40 returned -22 [ 385.184113][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 385.184881][T12576] netlink: 'syz.4.2142': attribute type 10 has an invalid length. [ 385.220399][T12576] wlan1: mtu less than device minimum [ 385.226041][T12576] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 385.303422][T12575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.352796][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 385.359615][ T9] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 385.367948][ T9] usb 2-1: config 0 has no interface number 0 [ 385.374141][ T9] usb 2-1: config 0 interface 196 has no altsetting 0 [ 385.383878][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 385.393120][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.401171][ T9] usb 2-1: Product: syz [ 385.405404][ T9] usb 2-1: Manufacturer: syz [ 385.410015][ T9] usb 2-1: SerialNumber: syz [ 385.417754][ T9] usb 2-1: config 0 descriptor?? [ 385.627660][T12564] CUSE: info not properly terminated [ 385.639548][ T9] ipheth 2-1:0.196: Unable to find endpoints [ 385.653068][ T9] usb 2-1: USB disconnect, device number 123 [ 385.865497][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 386.072895][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 386.212819][T12601] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 386.550625][T12617] netlink: 'syz.5.2158': attribute type 10 has an invalid length. [ 386.707842][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2160'. [ 386.953068][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.953325][ T5148] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.272957][ T5863] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 387.402933][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 387.411124][ T5863] usb 5-1: device descriptor read/64, error -71 [ 387.564342][ T9] usb 2-1: config 2 has an invalid interface number: 194 but max is 0 [ 387.572720][ T9] usb 2-1: config 2 has no interface number 0 [ 387.578824][ T9] usb 2-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 387.590183][ T9] usb 2-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.600280][ T9] usb 2-1: config 2 interface 194 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.613846][ T9] usb 2-1: config 2 interface 194 has no altsetting 0 [ 387.622752][ T9] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 387.631897][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.640086][ T9] usb 2-1: Product: syz [ 387.644551][ T9] usb 2-1: Manufacturer: syz [ 387.649159][ T9] usb 2-1: SerialNumber: syz [ 387.682847][ T5863] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 387.822762][ T5863] usb 5-1: device descriptor read/64, error -71 [ 387.867485][ T9] cypress_m8 2-1:2.194: HID->COM RS232 Adapter converter detected [ 387.876423][ T9] cyphidcom ttyUSB0: required endpoint is missing [ 387.886462][ T9] usb 2-1: USB disconnect, device number 124 [ 387.895453][ T9] cypress_m8 2-1:2.194: device disconnected [ 387.934773][ T5863] usb usb5-port1: attempt power cycle [ 388.153441][ T5148] Bluetooth: hci4: command 0x0406 tx timeout [ 388.283318][ T5863] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 388.314160][ T5863] usb 5-1: device descriptor read/8, error -71 [ 388.554889][ T5863] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 388.593406][ T5863] usb 5-1: device descriptor read/8, error -71 [ 388.619088][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2173'. [ 388.714095][ T5863] usb usb5-port1: unable to enumerate USB device [ 389.035231][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 389.035685][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 389.782587][T12683] netlink: 'syz.6.2182': attribute type 10 has an invalid length. [ 389.997382][T12691] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 390.068876][T12695] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2187'. [ 390.221535][T12701] netlink: 'syz.5.2190': attribute type 29 has an invalid length. [ 390.232836][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 390.274712][T12703] binder: 12702:12703 unknown command 0 [ 390.287176][T12705] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.294809][T12705] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2192'. [ 390.305509][T12703] binder: 12702:12703 ioctl c0306201 200000004a40 returned -22 [ 390.316711][T12705] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.455685][T12711] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 390.622816][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 390.752810][ T43] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 390.774928][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 390.783407][ T9] usb 2-1: config 0 has no interface number 0 [ 390.789750][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.804797][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 390.818573][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.826715][ T9] usb 2-1: Product: syz [ 390.830909][ T9] usb 2-1: Manufacturer: syz [ 390.835570][ T9] usb 2-1: SerialNumber: syz [ 390.842081][ T9] usb 2-1: config 0 descriptor?? [ 390.852016][ T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 390.903325][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 390.912563][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 390.922353][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.931711][ T43] usb 5-1: Product: syz [ 390.937310][ T43] usb 5-1: Manufacturer: syz [ 390.941932][ T43] usb 5-1: SerialNumber: syz [ 390.954514][ T43] usb 5-1: config 0 descriptor?? [ 390.964015][ T43] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 391.113022][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 391.122880][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 391.365085][ T43] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 391.378668][ T43] usb 5-1: USB disconnect, device number 104 [ 391.759266][T12723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.769300][T12723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.990545][T12727] netlink: 'syz.4.2201': attribute type 10 has an invalid length. [ 392.001158][T12727] wlan1: mtu less than device minimum [ 392.007123][T12727] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 392.149223][T12731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.164300][T12731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.312841][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 393.305182][ T43] usb 2-1: USB disconnect, device number 125 [ 393.319799][ T43] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 393.353326][ T5871] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 393.380689][T12748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2210'. [ 393.492858][ T5871] usb 5-1: device descriptor read/64, error -71 [ 393.732661][ T5871] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 393.862511][ T5871] usb 5-1: device descriptor read/64, error -71 [ 393.972697][ T5871] usb usb5-port1: attempt power cycle [ 394.320027][ T5871] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 394.344200][ T5871] usb 5-1: device descriptor read/8, error -71 [ 394.398711][T12766] sctp: [Deprecated]: syz.5.2218 (pid 12766) Use of int in maxseg socket option. [ 394.398711][T12766] Use struct sctp_assoc_value instead [ 394.582210][ T5871] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 394.602276][ T5872] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 394.610730][ T5871] usb 5-1: device descriptor read/8, error -71 [ 394.722426][ T5871] usb usb5-port1: unable to enumerate USB device [ 394.763796][ T5872] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.773784][ T5872] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 394.786763][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 394.793666][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 394.803468][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.814315][ T5872] usb 2-1: config 0 descriptor?? [ 395.013584][T12772] 9pnet_rdma: rdma_create_trans (12772): problem binding to privport: 13 [ 395.023550][ T5872] usb 2-1: string descriptor 0 read error: -71 [ 395.043194][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 395.049357][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 395.063806][ T5872] usb 2-1: USB disconnect, device number 126 [ 396.177007][T12804] netlink: 'syz.4.2234': attribute type 2 has an invalid length. [ 396.185944][T12804] netlink: 'syz.4.2234': attribute type 4 has an invalid length. [ 396.195222][T12804] netlink: 'syz.4.2234': attribute type 8 has an invalid length. [ 396.206074][T12804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2234'. [ 396.206944][T12799] overlayfs: overlapping lowerdir path [ 396.328734][T12813] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 396.387655][T12816] FAULT_INJECTION: forcing a failure. [ 396.387655][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 396.400474][T12816] CPU: 1 UID: 0 PID: 12816 Comm: syz.4.2239 Not tainted syzkaller #0 PREEMPT(full) [ 396.400497][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.400504][T12816] Call Trace: [ 396.400509][T12816] [ 396.400514][T12816] dump_stack_lvl+0x189/0x250 [ 396.400528][T12816] ? __pfx____ratelimit+0x10/0x10 [ 396.400540][T12816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.400550][T12816] ? __pfx__printk+0x10/0x10 [ 396.400567][T12816] should_fail_ex+0x414/0x560 [ 396.400582][T12816] should_failslab+0xa8/0x100 [ 396.400595][T12816] __kmalloc_cache_noprof+0x84/0x700 [ 396.400606][T12816] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 396.400619][T12816] ? sctp_add_bind_addr+0x8c/0x370 [ 396.400634][T12816] sctp_add_bind_addr+0x8c/0x370 [ 396.400646][T12816] sctp_copy_local_addr_list+0x30b/0x4e0 [ 396.400659][T12816] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 396.400670][T12816] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 396.400682][T12816] ? sctp_v6_is_any+0x64/0x80 [ 396.400694][T12816] ? sctp_copy_one_addr+0x93/0x360 [ 396.400706][T12816] sctp_bind_addr_copy+0xb3/0x3c0 [ 396.400718][T12816] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 396.400735][T12816] sctp_connect_new_asoc+0x2e0/0x690 [ 396.400749][T12816] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 396.400761][T12816] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.400778][T12816] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 396.400791][T12816] ? security_sctp_bind_connect+0x7e/0x2e0 [ 396.400807][T12816] sctp_sendmsg+0x155c/0x2810 [ 396.400825][T12816] ? __pfx_sctp_sendmsg+0x10/0x10 [ 396.400840][T12816] ? aa_sk_perm+0x81e/0x950 [ 396.400853][T12816] ? __pfx_aa_sk_perm+0x10/0x10 [ 396.400872][T12816] ? sock_rps_record_flow+0x19/0x410 [ 396.400899][T12816] ? inet_sendmsg+0x2f4/0x370 [ 396.400925][T12816] __sock_sendmsg+0x19c/0x270 [ 396.400951][T12816] __sys_sendto+0x3bd/0x520 [ 396.400971][T12816] ? __pfx___sys_sendto+0x10/0x10 [ 396.400983][T12816] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 396.401001][T12816] ? __fget_files+0x3a0/0x420 [ 396.401019][T12816] ? ksys_write+0x22a/0x250 [ 396.401032][T12816] ? __pfx_ksys_write+0x10/0x10 [ 396.401044][T12816] __x64_sys_sendto+0xde/0x100 [ 396.401060][T12816] do_syscall_64+0xfa/0xfa0 [ 396.401070][T12816] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.401080][T12816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.401090][T12816] ? clear_bhb_loop+0x60/0xb0 [ 396.401102][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.401116][T12816] RIP: 0033:0x7fd06c18eec9 [ 396.401132][T12816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.401147][T12816] RSP: 002b:00007fd06cf80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 396.401174][T12816] RAX: ffffffffffffffda RBX: 00007fd06c3e5fa0 RCX: 00007fd06c18eec9 [ 396.401186][T12816] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 396.401198][T12816] RBP: 00007fd06cf80090 R08: 0000200000000080 R09: 000000000000001c [ 396.401210][T12816] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 396.401220][T12816] R13: 00007fd06c3e6038 R14: 00007fd06c3e5fa0 R15: 00007fff63785a48 [ 396.401250][T12816] [ 396.780858][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2241'. [ 396.950274][T12799] overlayfs: statfs failed on './file0' [ 397.070944][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 397.225077][ T9] usb 5-1: config 2 has an invalid interface number: 194 but max is 0 [ 397.238885][ T9] usb 5-1: config 2 has no interface number 0 [ 397.241552][ T5871] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 397.245905][ T9] usb 5-1: config 2 interface 194 altsetting 6 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 397.264423][ T9] usb 5-1: config 2 interface 194 altsetting 6 endpoint 0x1 has invalid wMaxPacketSize 0 [ 397.274783][ T9] usb 5-1: config 2 interface 194 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.289252][ T9] usb 5-1: config 2 interface 194 has no altsetting 0 [ 397.323618][ T9] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=ad.a7 [ 397.343272][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.353395][ T9] usb 5-1: Product: syz [ 397.363471][ T9] usb 5-1: Manufacturer: syz [ 397.368426][ T9] usb 5-1: SerialNumber: syz [ 397.395058][T12843] binder: 12842:12843 unknown command 0 [ 397.401778][T12843] binder: 12842:12843 ioctl c0306201 200000004a40 returned -22 [ 397.422353][ T5871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 397.434191][ T5871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 397.446435][ T5871] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 397.462553][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 397.472038][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 397.480049][ T5871] usb 2-1: SerialNumber: syz [ 397.587404][T12825] netlink: 'syz.4.2242': attribute type 10 has an invalid length. [ 397.619168][T12825] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 397.641515][ T9] cypress_m8 5-1:2.194: HID->COM RS232 Adapter converter detected [ 397.653055][ T9] cyphidcom ttyUSB0: required endpoint is missing [ 397.667765][ T9] usb 5-1: USB disconnect, device number 109 [ 397.677050][ T9] cypress_m8 5-1:2.194: device disconnected [ 397.700933][ T5871] usbtest 2-1:1.0: Linux user mode ISO test driver [ 397.719554][ T5871] usbtest 2-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 397.745017][ T5871] usb 2-1: USB disconnect, device number 127 [ 398.244885][T12861] FAULT_INJECTION: forcing a failure. [ 398.244885][T12861] name failslab, interval 1, probability 0, space 0, times 0 [ 398.257719][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.4.2254 Not tainted syzkaller #0 PREEMPT(full) [ 398.257743][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.257753][T12861] Call Trace: [ 398.257760][T12861] [ 398.257764][T12861] dump_stack_lvl+0x189/0x250 [ 398.257780][T12861] ? __pfx____ratelimit+0x10/0x10 [ 398.257791][T12861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.257801][T12861] ? __pfx__printk+0x10/0x10 [ 398.257818][T12861] should_fail_ex+0x414/0x560 [ 398.257833][T12861] should_failslab+0xa8/0x100 [ 398.257847][T12861] __kmalloc_cache_noprof+0x84/0x700 [ 398.257858][T12861] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 398.257871][T12861] ? sctp_add_bind_addr+0x8c/0x370 [ 398.257884][T12861] sctp_add_bind_addr+0x8c/0x370 [ 398.257897][T12861] sctp_copy_local_addr_list+0x30b/0x4e0 [ 398.257911][T12861] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 398.257922][T12861] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 398.257934][T12861] ? sctp_v6_is_any+0x64/0x80 [ 398.257946][T12861] ? sctp_copy_one_addr+0x93/0x360 [ 398.257958][T12861] sctp_bind_addr_copy+0xb3/0x3c0 [ 398.257970][T12861] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 398.257987][T12861] sctp_connect_new_asoc+0x2e0/0x690 [ 398.258002][T12861] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 398.258019][T12861] ? __local_bh_enable_ip+0x12d/0x1c0 [ 398.258040][T12861] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 398.258053][T12861] ? security_sctp_bind_connect+0x7e/0x2e0 [ 398.258070][T12861] sctp_sendmsg+0x155c/0x2810 [ 398.258089][T12861] ? __pfx_sctp_sendmsg+0x10/0x10 [ 398.258103][T12861] ? aa_sk_perm+0x81e/0x950 [ 398.258117][T12861] ? __pfx_aa_sk_perm+0x10/0x10 [ 398.258141][T12861] ? sock_rps_record_flow+0x19/0x410 [ 398.258157][T12861] ? inet_sendmsg+0x2f4/0x370 [ 398.258180][T12861] __sock_sendmsg+0x19c/0x270 [ 398.258204][T12861] __sys_sendto+0x3bd/0x520 [ 398.258230][T12861] ? __pfx___sys_sendto+0x10/0x10 [ 398.258251][T12861] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 398.258276][T12861] ? __fget_files+0x3a0/0x420 [ 398.258295][T12861] ? ksys_write+0x22a/0x250 [ 398.258307][T12861] ? __pfx_ksys_write+0x10/0x10 [ 398.258320][T12861] __x64_sys_sendto+0xde/0x100 [ 398.258335][T12861] do_syscall_64+0xfa/0xfa0 [ 398.258346][T12861] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.258356][T12861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.258366][T12861] ? clear_bhb_loop+0x60/0xb0 [ 398.258377][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.258387][T12861] RIP: 0033:0x7fd06c18eec9 [ 398.258398][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.258407][T12861] RSP: 002b:00007fd06cf80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 398.258418][T12861] RAX: ffffffffffffffda RBX: 00007fd06c3e5fa0 RCX: 00007fd06c18eec9 [ 398.258425][T12861] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 398.258432][T12861] RBP: 00007fd06cf80090 R08: 0000200000000080 R09: 000000000000001c [ 398.258438][T12861] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 398.258444][T12861] R13: 00007fd06c3e6038 R14: 00007fd06c3e5fa0 R15: 00007fff63785a48 [ 398.258461][T12861] [ 398.684582][T12880] FAULT_INJECTION: forcing a failure. [ 398.684582][T12880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.698024][T12880] CPU: 0 UID: 0 PID: 12880 Comm: syz.6.2261 Not tainted syzkaller #0 PREEMPT(full) [ 398.698074][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.698082][T12880] Call Trace: [ 398.698087][T12880] [ 398.698092][T12880] dump_stack_lvl+0x189/0x250 [ 398.698107][T12880] ? __pfx____ratelimit+0x10/0x10 [ 398.698123][T12880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.698133][T12880] ? __pfx__printk+0x10/0x10 [ 398.698144][T12880] ? __might_fault+0xb0/0x130 [ 398.698160][T12880] should_fail_ex+0x414/0x560 [ 398.698175][T12880] _copy_from_user+0x2d/0xb0 [ 398.698185][T12880] ip6_tnl_siocdevprivate+0x1b6/0xad0 [ 398.698199][T12880] ? rcu_is_watching+0x15/0xb0 [ 398.698213][T12880] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 398.698222][T12880] ? trace_contention_end+0x39/0x120 [ 398.698246][T12880] ? full_name_hash+0x92/0xe0 [ 398.698262][T12880] ? netdev_name_node_lookup+0xdf/0x120 [ 398.698276][T12880] dev_ifsioc+0xb57/0xf00 [ 398.698296][T12880] dev_ioctl+0x84c/0x1150 [ 398.698311][T12880] sock_ioctl+0x719/0x790 [ 398.698324][T12880] ? __pfx_sock_ioctl+0x10/0x10 [ 398.698337][T12880] ? __fget_files+0x3a0/0x420 [ 398.698349][T12880] ? __fget_files+0x2a/0x420 [ 398.698362][T12880] ? bpf_lsm_file_ioctl+0x9/0x20 [ 398.698376][T12880] ? __pfx_sock_ioctl+0x10/0x10 [ 398.698387][T12880] __se_sys_ioctl+0xfc/0x170 [ 398.698399][T12880] do_syscall_64+0xfa/0xfa0 [ 398.698409][T12880] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.698420][T12880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.698430][T12880] ? clear_bhb_loop+0x60/0xb0 [ 398.698441][T12880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.698451][T12880] RIP: 0033:0x7fc4abd8eec9 [ 398.698462][T12880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.698470][T12880] RSP: 002b:00007fc4acb40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.698482][T12880] RAX: ffffffffffffffda RBX: 00007fc4abfe5fa0 RCX: 00007fc4abd8eec9 [ 398.698489][T12880] RDX: 0000200000000280 RSI: 00000000000089f3 RDI: 0000000000000003 [ 398.698496][T12880] RBP: 00007fc4acb40090 R08: 0000000000000000 R09: 0000000000000000 [ 398.698502][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.698508][T12880] R13: 00007fc4abfe6038 R14: 00007fc4abfe5fa0 R15: 00007ffce26af998 [ 398.698524][T12880] [ 399.069992][ T5863] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 399.157815][T12890] sctp: [Deprecated]: syz.6.2265 (pid 12890) Use of int in max_burst socket option. [ 399.157815][T12890] Use struct sctp_assoc_value instead [ 399.239799][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 399.246407][ T5863] usb 5-1: config 2 has an invalid interface number: 194 but max is 0 [ 399.254633][ T5863] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 399.263574][ T5863] usb 5-1: config 2 has an invalid descriptor of length 102, skipping remainder of the config [ 399.274120][ T5863] usb 5-1: config 2 has no interface number 0 [ 399.280330][ T5863] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0x82 has an invalid bInterval 120, changing to 10 [ 399.291768][ T5863] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0x82 has invalid maxpacket 8447, setting to 1024 [ 399.303026][ T5863] usb 5-1: config 2 interface 194 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 399.316127][ T5863] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 399.325206][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.540271][ T5863] usb 5-1: string descriptor 0 read error: -71 [ 399.551066][ T5863] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.593132][ T5863] usb 5-1: USB disconnect, device number 110 [ 400.125128][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2267'. [ 400.308297][T12900] netlink: 'syz.4.2270': attribute type 10 has an invalid length. [ 400.579268][ T43] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 400.729101][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 400.736629][ T43] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 400.745100][ T43] usb 5-1: config 0 has no interface number 0 [ 400.753271][ T43] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 400.762404][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.770661][ T43] usb 5-1: Product: syz [ 400.774818][ T43] usb 5-1: Manufacturer: syz [ 400.779475][ T43] usb 5-1: SerialNumber: syz [ 400.785897][ T43] usb 5-1: config 0 descriptor?? [ 400.793475][ T43] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 400.801369][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 400.810301][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.820413][ T43] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 400.828446][ T43] usb 5-1: media controller created [ 400.847289][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.863868][ T43] cxusb: set interface failed [ 400.868583][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 400.894048][ T43] DVB: Unable to find symbol lgdt330x_attach() [ 400.900322][ T43] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 400.958952][ T43] rc_core: IR keymap rc-dvico-portable not found [ 400.965406][ T43] Registered IR keymap rc-empty [ 400.971556][ T43] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 400.987623][ T43] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input35 [ 401.003812][ T43] dvb-usb: schedule remote query interval to 100 msecs. [ 401.010933][ T43] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 401.022763][ T43] usb 5-1: USB disconnect, device number 111 [ 401.085205][ T43] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 401.143992][T12907] overlayfs: failed to clone upperpath [ 401.305397][T12912] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2274'. [ 401.424594][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2277'. [ 401.488800][T12923] binder: 12921:12923 unknown command 0 [ 401.494510][T12923] binder: 12921:12923 ioctl c0306201 200000004a40 returned -22 [ 401.557440][T12926] new mount options do not match the existing superblock, will be ignored [ 401.783977][T12926] new mount options do not match the existing superblock, will be ignored [ 401.819085][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 401.876024][T12943] wg0 speed is unknown, defaulting to 1000 [ 401.883656][T12943] virt_wifi0 speed is unknown, defaulting to 1000 [ 401.993374][ T5872] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.007264][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.015747][ T5872] usb 2-1: Product: syz [ 402.020089][ T5872] usb 2-1: Manufacturer: syz [ 402.024791][ T5872] usb 2-1: SerialNumber: syz [ 402.186611][T12958] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 402.318808][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 402.468266][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 402.476131][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 402.485193][ T9] usb 5-1: config 1 has no interface number 1 [ 402.491421][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 402.506270][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.515471][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.523816][ T9] usb 5-1: Product: syz [ 402.528498][ T9] usb 5-1: Manufacturer: ÑŠ [ 402.533047][ T9] usb 5-1: SerialNumber: syz [ 403.119321][ T30] audit: type=1326 audit(1760545350.799:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.141934][ T30] audit: type=1326 audit(1760545350.799:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.165690][ T30] audit: type=1326 audit(1760545350.799:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.190886][ T30] audit: type=1326 audit(1760545350.799:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.199278][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2307'. [ 403.222231][ T30] audit: type=1326 audit(1760545350.799:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.222297][ T30] audit: type=1326 audit(1760545350.799:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.222335][ T30] audit: type=1326 audit(1760545350.799:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.222372][ T30] audit: type=1326 audit(1760545350.799:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.222430][ T30] audit: type=1326 audit(1760545350.799:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 403.222468][ T30] audit: type=1326 audit(1760545350.799:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5618f8eec9 code=0x7ffc0000 [ 404.151944][T13003] openvswitch: netlink: IP tunnel dst address not specified [ 405.077123][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 405.092635][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 405.103432][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 405.115016][ T5872] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 405.126688][ T9] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 405.135163][ T9] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 405.147560][ T9] usb 5-1: 2:1 : invalid channels 0 [ 405.151937][ T5872] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 405.171340][ T5872] usb 2-1: USB disconnect, device number 2 [ 405.183055][ T9] usb 5-1: USB disconnect, device number 112 [ 405.221966][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.414917][T13017] tmpfs: Unknown parameter 'h ' [ 405.423967][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 405.520419][T13025] syzkaller1: entered promiscuous mode [ 405.525945][T13025] syzkaller1: entered allmulticast mode [ 405.776601][ T5872] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 405.812734][T13037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.927919][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 405.939086][ T5872] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 405.948625][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.958666][ T5872] usb 5-1: config 0 descriptor?? [ 405.964330][T13021] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 406.376024][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.386838][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.414366][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 406.428153][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 406.444168][ T5872] usb 5-1: USB disconnect, device number 113 [ 406.527417][T13053] binder: 13052:13053 unknown command 0 [ 406.533130][T13053] binder: 13052:13053 ioctl c0306201 200000004a40 returned -22 [ 406.574654][T13055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.707678][T13060] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2337'. [ 406.717357][T13060] hsr_slave_0: left promiscuous mode [ 406.723621][T13060] hsr_slave_1: left promiscuous mode [ 406.828897][T13067] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 407.071704][T13079] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 407.317922][ T799] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 407.485901][ T799] usb 5-1: Using ep0 maxpacket: 32 [ 407.500763][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.512147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 407.520915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 407.530797][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.540986][ T799] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 407.551355][ T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.566561][ T799] usb 5-1: config 0 descriptor?? [ 407.786571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 407.795110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 408.519613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 408.632767][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2351'. [ 408.645861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 408.865094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 409.003989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 409.095365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 409.386639][T13154] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 409.512928][T13157] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 409.513731][T13159] binder: 13158:13159 unknown command 0 [ 409.528030][T13159] binder: 13158:13159 ioctl c0306201 200000004a40 returned -22 [ 409.763921][T13166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.787210][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 409.787303][ T30] audit: type=1326 audit(1760545357.472:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.1.2367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5df8eec9 code=0x0 [ 409.788153][T13166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.857977][ T799] usbhid 5-1:0.0: can't add hid device: -71 [ 409.865832][ T799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 409.882658][ T799] usb 5-1: USB disconnect, device number 114 [ 410.060224][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2370'. [ 410.244558][ T984] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 410.259906][T13184] binder: 13181:13184 unknown command 0 [ 410.265885][T13184] binder: 13181:13184 ioctl c0306201 200000004a40 returned -22 [ 410.396567][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 410.403563][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.416979][ T984] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.430930][ T984] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 410.440657][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 410.450249][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.475125][ T984] usb 2-1: config 0 descriptor?? [ 410.852086][T13212] binder: 13211:13212 unknown command 0 [ 410.857925][T13212] binder: 13211:13212 ioctl c0306201 200000004a40 returned -22 [ 411.077599][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2389'. [ 411.196020][T13228] netlink: 'syz.4.2392': attribute type 1 has an invalid length. [ 411.204117][T13228] netlink: 'syz.4.2392': attribute type 1 has an invalid length. [ 411.533742][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2398'. [ 411.659422][T13252] befs: (nbd4): No write support. Marking filesystem read-only [ 411.677264][T13252] netlink: 'syz.4.2401': attribute type 2 has an invalid length. [ 411.806224][T13259] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2404'. [ 412.019630][T13268] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 412.094450][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 412.473664][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 412.613212][ T9] usb 5-1: device descriptor read/64, error -71 [ 412.792076][ T984] usbhid 2-1:0.0: can't add hid device: -71 [ 412.802212][ T984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 412.813869][ T984] usb 2-1: USB disconnect, device number 3 [ 412.845342][T13285] netlink: 'syz.1.2414': attribute type 27 has an invalid length. [ 412.864231][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 412.939976][T13291] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 413.013774][ T9] usb 5-1: device descriptor read/64, error -71 [ 413.030959][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 413.123577][ T9] usb usb5-port1: attempt power cycle [ 413.462957][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 413.493201][ T9] usb 5-1: device descriptor read/8, error -71 [ 413.592729][ T5915] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 413.732682][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 413.742667][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 413.749259][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.759536][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.769250][ T9] usb 5-1: device descriptor read/8, error -71 [ 413.777357][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.786559][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.794614][ T5915] usb 2-1: Product: syz [ 413.798803][ T5915] usb 2-1: Manufacturer: syz [ 413.803505][ T5915] usb 2-1: SerialNumber: syz [ 413.892813][ T9] usb usb5-port1: unable to enumerate USB device [ 414.014059][T13312] veth1_macvtap: left promiscuous mode [ 414.019846][T13312] veth1_macvtap: entered allmulticast mode [ 414.033268][ T5915] usb 2-1: 0:2 : does not exist [ 414.050098][ T5915] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 414.091778][ T5915] usb 2-1: USB disconnect, device number 4 [ 414.136480][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.764990][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2428'. [ 415.375672][ T52] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 415.379229][ T52] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 415.404023][T13350] atomic_op ffff88805e5ee998 conn xmit_atomic 0000000000000000 [ 415.671594][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 415.833480][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 415.841077][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.850335][T13365] syzkaller1: entered allmulticast mode [ 415.852754][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.864518][T13365] fuse: Bad value for 'user_id' [ 415.868250][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.885234][T13365] fuse: Bad value for 'user_id' [ 415.886456][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 415.910784][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.922278][ T9] usb 5-1: config 0 descriptor?? [ 415.991491][ T5872] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 416.163619][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 416.172163][ T5872] usb 2-1: not running at top speed; connect to a high speed hub [ 416.181140][ T5872] usb 2-1: config 4 has an invalid descriptor of length 217, skipping remainder of the config [ 416.191614][ T5872] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 416.202775][ T5872] usb 2-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=10.57 [ 416.211949][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.219953][ T5872] usb 2-1: Product: syz [ 416.225779][ T5872] usb 2-1: Manufacturer: syz [ 416.230547][ T5872] usb 2-1: SerialNumber: syz [ 416.336007][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.347824][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.356821][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.366198][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.377088][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.387042][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.396004][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.404785][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.413752][T13344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.423502][T13344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.457355][ T9] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 416.459330][ T5872] usb 2-1: USB disconnect, device number 5 [ 416.475836][ T9] microsoft 0003:045E:07DA.0034: unsupported Resolution Multiplier 0 [ 416.503498][ T9] microsoft 0003:045E:07DA.0034: implement() called with n (152) > 32! (kworker/0:0) [ 416.523469][ T9] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 416.543831][ T9] microsoft 0003:045E:07DA.0034: no inputs found [ 416.554919][ T9] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 416.586346][ T9] usb 5-1: USB disconnect, device number 119 [ 416.597446][T13376] fido_id[13376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 416.841184][T13382] trusted_key: encrypted_key: insufficient parameters specified [ 416.884751][T13384] binder: 13383:13384 unknown command 0 [ 416.890344][T13384] binder: 13383:13384 ioctl c0306201 200000004a40 returned -22 [ 417.160867][ T9] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 417.280834][ T5915] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 417.313148][ T9] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.323148][ T9] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 417.336172][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 417.343059][ T9] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 417.352385][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.362827][ T9] usb 5-1: config 0 descriptor?? [ 417.452690][ T5915] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 417.461128][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.471546][ T5915] usb 2-1: config 0 has no interface number 0 [ 417.477697][ T5915] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 417.488962][ T5915] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 417.499229][ T5915] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.512658][ T5915] usb 2-1: config 0 interface 52 has no altsetting 0 [ 417.520373][ T5915] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 417.529601][ T5915] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 417.537888][ T5915] usb 2-1: Manufacturer: syz [ 417.545249][ T5915] usb 2-1: config 0 descriptor?? [ 417.553953][ T5915] hub 2-1:0.52: bad descriptor, ignoring hub [ 417.559992][ T5915] hub 2-1:0.52: probe with driver hub failed with error -5 [ 417.574000][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.583246][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.792984][T13390] sctp: [Deprecated]: syz.1.2450 (pid 13390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.792984][T13390] Use struct sctp_sack_info instead [ 417.809041][ T9] hid-led 0003:0FC5:B080.0035: unknown main item tag 0x0 [ 417.818240][ T9] hid-led 0003:0FC5:B080.0035: unknown main item tag 0x0 [ 417.818626][T13390] netlink: 'syz.1.2450': attribute type 1 has an invalid length. [ 417.826498][ T9] hid-led 0003:0FC5:B080.0035: unknown main item tag 0x0 [ 417.826533][ T9] hid-led 0003:0FC5:B080.0035: unknown main item tag 0x0 [ 417.826581][ T9] hid-led 0003:0FC5:B080.0035: unknown main item tag 0x0 [ 417.857945][T13390] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2450'. [ 417.873384][ T5915] usb 2-1: Can not set alternate setting to 1, error: -71 [ 417.881109][ T5915] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 417.912011][ T5915] usb 2-1: USB disconnect, device number 6 [ 418.004875][ T9] hid-led 0003:0FC5:B080.0035: probe with driver hid-led failed with error -71 [ 418.018606][ T9] usb 5-1: USB disconnect, device number 120 [ 418.616158][T13414] netlink: 'syz.4.2454': attribute type 40 has an invalid length. [ 418.907356][T13395] cgroup: fork rejected by pids controller in /syz1 [ 418.949963][ T5872] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 419.124126][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 419.152512][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 419.166993][T13439] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2458'. [ 419.175209][ T5872] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 419.194027][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.210257][ T5872] usb 5-1: Product: syz [ 419.216153][ T5872] usb 5-1: Manufacturer: syz [ 419.225044][ T5872] usb 5-1: SerialNumber: syz [ 419.242556][ T5872] usb 5-1: config 0 descriptor?? [ 419.248241][T13420] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 419.258005][T13420] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 419.477367][T13420] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 419.485572][T13420] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 419.491537][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2465'. [ 419.564356][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2465'. [ 419.615672][T13463] overlayfs: failed to clone upperpath [ 419.897345][ T5872] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 419.922667][T13466] wg0 speed is unknown, defaulting to 1000 [ 419.930188][T13466] virt_wifi0 speed is unknown, defaulting to 1000 [ 420.016809][T13466] IPVS: You probably need to specify IP address on multicast interface. [ 420.026954][T13466] IPVS: Error connecting to the multicast addr [ 420.034577][T13466] cgroup: name respecified [ 420.129104][ T799] libceph: connect (1)[c::]:6789 error -101 [ 420.135658][ T799] libceph: mon0 (1)[c::]:6789 connect error [ 420.164821][ T799] libceph: connect (1)[c::]:6789 error -101 [ 420.171015][ T799] libceph: mon0 (1)[c::]:6789 connect error [ 420.211049][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.223140][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.236732][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2468'. [ 420.246874][T13476] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2468'. [ 420.257059][T13476] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2468'. [ 420.401936][ T799] libceph: connect (1)[c::]:6789 error -101 [ 420.408138][ T799] libceph: mon0 (1)[c::]:6789 connect error [ 420.440750][ T799] libceph: connect (1)[c::]:6789 error -101 [ 420.447511][ T799] libceph: mon0 (1)[c::]:6789 connect error [ 420.821785][T13498] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 420.929441][ T43] libceph: connect (1)[c::]:6789 error -101 [ 420.940098][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 420.960281][ T43] libceph: connect (1)[c::]:6789 error -101 [ 420.968701][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 421.108611][T13512] netlink: 'syz.5.2481': attribute type 10 has an invalid length. [ 421.720152][T13420] ceph: No mds server is up or the cluster is laggy [ 421.720491][T13471] ceph: No mds server is up or the cluster is laggy [ 421.820407][ T5872] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 421.841738][ T5872] usb 5-1: USB disconnect, device number 121 [ 422.183164][T13540] syzkaller1: entered promiscuous mode [ 422.188768][T13540] syzkaller1: entered allmulticast mode [ 422.257775][T13542] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2494'. [ 422.268480][ T799] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 422.311007][T13544] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 422.319666][T13545] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 422.422939][ T799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.440344][ T799] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 422.452706][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 422.465976][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 422.477788][ T799] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 422.498276][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 422.518632][ T799] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.540291][ T799] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 422.549798][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 422.557974][ T799] usb 2-1: Product: syz [ 422.562396][ T799] usb 2-1: Manufacturer: syz [ 422.567156][ T799] usb 2-1: SerialNumber: syz [ 422.578360][ T9] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 422.592865][ T799] usb 2-1: config 0 descriptor?? [ 422.599813][T13534] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 422.609848][ T799] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 422.718103][ T9] usb 5-1: device descriptor read/64, error -71 [ 422.814129][ T5915] usb 2-1: USB disconnect, device number 7 [ 422.958019][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 423.107938][ T9] usb 5-1: device descriptor read/64, error -71 [ 423.219407][ T9] usb usb5-port1: attempt power cycle [ 423.237454][ T5863] IPVS: starting estimator thread 0... [ 423.305597][T13577] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.319892][T13577] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.327802][T13575] IPVS: using max 33 ests per chain, 79200 per kthread [ 423.597813][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 423.619790][ T43] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 423.628376][ T9] usb 5-1: device descriptor read/8, error -71 [ 423.716354][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2511'. [ 423.757854][ T43] usb 2-1: device descriptor read/64, error -71 [ 423.877619][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 423.908095][ T9] usb 5-1: device descriptor read/8, error -71 [ 423.998547][ T43] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 424.038443][ T9] usb usb5-port1: unable to enumerate USB device [ 424.137392][ T43] usb 2-1: device descriptor read/64, error -71 [ 424.247906][ T43] usb usb2-port1: attempt power cycle [ 424.587673][ T43] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 424.608193][ T43] usb 2-1: device descriptor read/8, error -71 [ 424.847003][ T43] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 424.868584][ T43] usb 2-1: device descriptor read/8, error -71 [ 424.977726][ T43] usb usb2-port1: unable to enumerate USB device [ 425.906473][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 426.089535][ T9] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 426.098048][ T9] usb 5-1: config 0 has no interface number 0 [ 426.104163][ T9] usb 5-1: too many endpoints for config 0 interface 6 altsetting 211: 244, using maximum allowed: 30 [ 426.115406][ T9] usb 5-1: config 0 interface 6 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 426.128710][ T9] usb 5-1: config 0 interface 6 has no altsetting 0 [ 426.138341][ T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 426.149254][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.158497][ T9] usb 5-1: Product: syz [ 426.162692][ T9] usb 5-1: Manufacturer: syz [ 426.168515][ T9] usb 5-1: SerialNumber: syz [ 426.180326][ T9] usb 5-1: config 0 descriptor?? [ 426.396458][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 426.833967][ T9] gspca_sunplus: reg_r err -71 [ 426.839105][ T9] sunplus 5-1:0.6: probe with driver sunplus failed with error -71 [ 426.859979][ T9] usb 5-1: USB disconnect, device number 126 [ 427.256140][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.273410][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.284758][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.294601][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.305312][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.492040][T13661] wg0 speed is unknown, defaulting to 1000 [ 427.555916][T13661] virt_wifi0 speed is unknown, defaulting to 1000 [ 427.591867][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2547'. [ 427.914982][ T36] batadv0: left allmulticast mode [ 427.922525][ T36] batadv0: left promiscuous mode [ 427.929622][ T36] bridge0: port 3(batadv0) entered disabled state [ 427.940590][ T36] bridge_slave_1: left allmulticast mode [ 427.946605][ T36] bridge_slave_1: left promiscuous mode [ 427.952350][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.961241][ T36] bridge_slave_0: left allmulticast mode [ 427.967013][ T36] bridge_slave_0: left promiscuous mode [ 427.972796][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.995587][ T799] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 428.158399][ T799] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 428.167709][ T799] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 428.179789][ T799] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 428.191445][ T799] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 428.203560][ T799] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 428.216981][ T799] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 428.226531][ T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.409911][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.424176][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.437240][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 428.449831][ T36] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 428.460389][ T36] bond0 (unregistering): Released all slaves [ 428.544345][ T36] tipc: Left network mode [ 428.554191][T13682] wg0 speed is unknown, defaulting to 1000 [ 428.568394][T13682] virt_wifi0 speed is unknown, defaulting to 1000 [ 428.661862][T13661] chnl_net:caif_netlink_parms(): no params data found [ 428.945280][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.334850][ T52] Bluetooth: hci2: command tx timeout [ 429.338327][ T799] ath6kl: Failed to submit usb control message: -110 [ 429.362158][ T799] ath6kl: unable to send the bmi data to the device: -110 [ 429.383268][ T799] ath6kl: Unable to send get target info: -110 [ 429.403493][ T799] ath6kl: Failed to init ath6kl core: -110 [ 429.416429][ T799] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 429.681992][ T36] team0 (unregistering): Port device team_slave_1 removed [ 429.730378][ T36] team0 (unregistering): Port device team_slave_0 removed [ 429.757568][ T10] usb 7-1: Failed to load image "edgeport/down.fw" err -110 [ 429.766522][ T10] usb 7-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 429.775803][ T10] usb 7-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 430.233189][ T36] vcan0 (unregistering): left allmulticast mode [ 430.255064][T13661] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.262365][T13661] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.272737][T13661] bridge_slave_0: entered allmulticast mode [ 430.280979][T13661] bridge_slave_0: entered promiscuous mode [ 430.291325][T13661] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.301931][T13661] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.311124][T13661] bridge_slave_1: entered allmulticast mode [ 430.321039][T13661] bridge_slave_1: entered promiscuous mode [ 430.419316][T13720] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2554'. [ 430.473572][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.500762][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.569868][T13661] team0: Port device team_slave_0 added [ 430.578610][T13661] team0: Port device team_slave_1 added [ 430.615356][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.622445][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.649211][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.662625][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.670160][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.691053][ T799] usb 5-1: USB disconnect, device number 127 [ 430.710044][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.795886][ T36] IPVS: stop unused estimator thread 0... [ 430.833854][T13661] hsr_slave_0: entered promiscuous mode [ 430.845890][T13661] hsr_slave_1: entered promiscuous mode [ 430.903486][T13732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'. [ 431.413775][ T52] Bluetooth: hci2: command tx timeout [ 431.453715][ T799] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 431.506911][ T30] audit: type=1400 audit(1760545379.203:136): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=13760 comm="syz.6.2565" [ 431.562155][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2566'. [ 431.604611][ T799] usb 5-1: device descriptor read/64, error -71 [ 431.855464][ T799] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 431.890090][T13661] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.928484][T13661] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.950144][T13661] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.969491][T13661] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.993607][ T799] usb 5-1: device descriptor read/64, error -71 [ 432.113728][ T799] usb usb5-port1: attempt power cycle [ 432.166395][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.249692][T13661] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.269234][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.276495][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.295367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.302537][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.493209][ T799] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 432.513919][ T799] usb 5-1: device descriptor read/8, error -71 [ 432.607249][T13661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.672832][T13661] veth0_vlan: entered promiscuous mode [ 432.698395][T13661] veth1_vlan: entered promiscuous mode [ 432.738513][T13661] veth0_macvtap: entered promiscuous mode [ 432.751685][T13661] veth1_macvtap: entered promiscuous mode [ 432.758517][ T799] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 432.785946][ T799] usb 5-1: device descriptor read/8, error -71 [ 432.798967][T13661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.820007][T13661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.837662][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.855376][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.882841][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.904175][ T799] usb usb5-port1: unable to enumerate USB device [ 432.917399][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.999260][ T3498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.019875][ T3498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.051531][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.060182][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.066557][T13829] overlayfs: failed to clone lowerpath [ 433.074681][T13829] overlayfs: failed to clone lowerpath [ 433.177327][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'. [ 433.264642][T13841] genirq: Flags mismatch irq 7. 00200000 (das16m1) vs. 00200080 (ttyS3) [ 433.502756][ T52] Bluetooth: hci2: command tx timeout [ 433.562704][ T5872] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 433.714341][ T5872] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.723145][ T5872] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 433.733950][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.743041][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 433.754116][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 433.766947][ T5872] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 433.776114][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 433.784242][ T5872] usb 2-1: Product: syz [ 433.788424][ T5872] usb 2-1: Manufacturer: syz [ 433.799337][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 433.804658][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 433.811115][ T5872] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 433.818072][ T5872] cdc_wdm 2-1:1.0: Unknown control protocol [ 434.355069][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 434.555099][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.564581][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.576186][ T799] usb 2-1: USB disconnect, device number 12 [ 434.599880][ T5872] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 434.765373][ T5872] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 434.775533][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.784994][ T5872] usb 5-1: Product: syz [ 434.789170][ T5872] usb 5-1: Manufacturer: syz [ 434.793888][ T5872] usb 5-1: SerialNumber: syz [ 434.804609][ T5872] usb 5-1: config 0 descriptor?? [ 434.818207][ T5872] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 434.994497][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2597'. [ 435.015601][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2597'. [ 435.065140][T13887] netlink: 'syz.5.2598': attribute type 9 has an invalid length. [ 435.142044][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2600'. [ 435.390944][ T799] usb 5-1: USB disconnect, device number 6 [ 435.471850][ T5872] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 435.571699][ T52] Bluetooth: hci2: command tx timeout [ 435.621614][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 435.628427][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 435.637205][ T5872] usb 2-1: config 8 has an invalid interface number: 103 but max is 1 [ 435.645476][ T5872] usb 2-1: config 8 has an invalid interface number: 179 but max is 1 [ 435.653719][ T5872] usb 2-1: config 8 has no interface number 0 [ 435.659798][ T5872] usb 2-1: config 8 has no interface number 1 [ 435.666092][ T5872] usb 2-1: config 8 interface 103 has no altsetting 0 [ 435.672912][ T5872] usb 2-1: config 8 interface 179 has no altsetting 0 [ 435.682618][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=31.12 [ 435.692389][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.700390][ T5872] usb 2-1: Product: syz [ 435.705364][ T5872] usb 2-1: Manufacturer: syz [ 435.709955][ T5872] usb 2-1: SerialNumber: syz [ 435.945345][T13901] /dev/sg0: Can't lookup blockdev [ 436.050929][ T5872] msi2500 2-1:8.103: Registered as swradio24 [ 436.057301][ T5872] msi2500 2-1:8.103: SDR API is still slightly experimental and functionality changes may follow [ 436.099822][ T5872] videodev: could not get a free minor [ 436.105370][ T5872] msi2500 2-1:8.179: Failed to register as video device (-23) [ 436.117486][ T5872] msi2500 2-1:8.179: probe with driver msi2500 failed with error -23 [ 436.127883][ T5872] usb 2-1: USB disconnect, device number 13 [ 439.230708][ T5198] udevd[5198]: worker [5821] /devices/platform/dummy_hcd.6/usb7/7-1 is taking a long time [ 439.974351][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.328946][T13929] sctp: [Deprecated]: syz.1.2613 (pid 13929) Use of int in maxseg socket option. [ 464.328946][T13929] Use struct sctp_assoc_value instead [ 464.343858][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'. [ 464.439394][T13936] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2617'. [ 464.705614][T13947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.714216][ T5915] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 464.714585][T13947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.847188][ T5915] usb 2-1: device descriptor read/64, error -71 [ 464.936970][ T5871] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 465.086924][ T5915] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 465.106962][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 465.115921][ T5871] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 465.124453][ T5871] usb 5-1: config 0 has no interface number 1 [ 465.133089][ T5871] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 465.143788][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 465.151978][ T5871] usb 5-1: Product: syz [ 465.156152][ T5871] usb 5-1: Manufacturer: syz [ 465.160867][ T5871] usb 5-1: SerialNumber: syz [ 465.167621][ T5871] usb 5-1: config 0 descriptor?? [ 465.217821][ T5915] usb 2-1: device descriptor read/64, error -71 [ 465.327183][ T5915] usb usb2-port1: attempt power cycle [ 465.374033][ T5871] qcserial 5-1:0.37: Qualcomm USB modem converter detected [ 465.577685][ T799] usb 5-1: USB disconnect, device number 7 [ 465.585931][ T799] qcserial 5-1:0.37: device disconnected [ 465.666644][ T5915] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 465.687140][ T5915] usb 2-1: device descriptor read/8, error -71 [ 465.926451][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 465.947057][ T5915] usb 2-1: device descriptor read/8, error -71 [ 465.998659][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2623'. [ 466.038958][ T30] audit: type=1800 audit(1760545413.750:137): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2624" name="bus" dev="tmpfs" ino=1646 res=0 errno=0 [ 466.059916][ T5915] usb usb2-port1: unable to enumerate USB device [ 466.157988][T13959] C: renamed from team_slave_0 (while UP) [ 466.168578][T13959] netlink: 'syz.4.2626': attribute type 1 has an invalid length. [ 466.176446][T13959] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2626'. [ 466.195098][T13959] netlink: 550 bytes leftover after parsing attributes in process `syz.4.2626'. [ 466.478426][T13976] overlayfs: failed to clone upperpath [ 466.656201][ T5915] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 466.806090][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 466.813127][ T5915] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 466.821462][ T5915] usb 5-1: config 4 has no interface number 0 [ 466.827757][ T5915] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.841422][ T5915] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.851462][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 466.860769][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.877370][ T5915] hub 5-1:4.128: USB hub found [ 467.076164][T13972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.091762][T13972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.102770][ T5915] hub 5-1:4.128: 2 ports detected [ 467.109407][ T5915] hub 5-1:4.128: Using single TT (err -22) [ 467.311626][ T5915] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 467.324553][ T5915] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 467.358508][ T5915] usb 5-1: USB disconnect, device number 8 [ 468.302324][T14019] Invalid ELF header magic: != ELF [ 468.307706][ T799] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 468.308395][T14019] netlink: 'syz.5.2653': attribute type 12 has an invalid length. [ 468.385292][ T5915] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 468.442022][T14026] netlink: 'syz.5.2655': attribute type 10 has an invalid length. [ 468.450935][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.458440][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.465983][ T799] usb 5-1: Using ep0 maxpacket: 16 [ 468.474344][ T799] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 468.479684][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.486821][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.493223][T14026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.509199][ T799] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.511512][T14026] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.523890][ T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.527546][T14026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.536072][ T799] usb 5-1: Product: syz [ 468.547459][ T799] usb 5-1: Manufacturer: syz [ 468.552100][ T799] usb 5-1: SerialNumber: syz [ 468.552585][ T5915] usb 2-1: device descriptor read/64, error -71 [ 468.562727][T14026] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 468.573369][ T799] usb 5-1: config 0 descriptor?? [ 468.582695][ T799] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 468.592962][ T799] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 468.795098][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 468.935054][ T5915] usb 2-1: device descriptor read/64, error -71 [ 469.045246][ T5915] usb usb2-port1: attempt power cycle [ 469.182725][ T799] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 469.190381][ T799] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 469.384762][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 469.406112][ T5915] usb 2-1: device descriptor read/8, error -71 [ 469.644737][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 469.665222][ T5915] usb 2-1: device descriptor read/8, error -71 [ 469.775519][ T5915] usb usb2-port1: unable to enumerate USB device [ 469.801329][ T799] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 470.024618][ T799] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 470.036165][ T799] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 470.056021][ T799] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 470.062989][ T799] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 470.073736][ T799] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 470.079200][T14041] netlink: 'syz.5.2660': attribute type 17 has an invalid length. [ 470.098073][ T799] usb 5-1: USB disconnect, device number 9 [ 470.693176][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 470.875413][T14068] overlayfs: failed to resolve './file0': -2 [ 471.125990][ T5863] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 471.284723][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 471.293894][ T5863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 471.302944][ T5863] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 471.319026][ T5863] usb 5-1: config 1 interface 0 has no altsetting 1 [ 471.329558][ T5863] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 471.340214][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.349055][ T5863] usb 5-1: Product: syz [ 471.353225][ T5863] usb 5-1: Manufacturer: syz [ 471.358168][ T5863] usb 5-1: SerialNumber: syz [ 471.368642][ T5863] smsusb:smsusb_probe: board id=8, interface number 0 [ 471.544353][ T5871] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 471.567329][ T5863] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 471.574829][ T5863] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 471.584608][ T5863] usb 5-1: USB disconnect, device number 10 [ 471.697226][ T5871] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 471.706396][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.714573][ T5871] usb 2-1: Product: syz [ 471.718745][ T5871] usb 2-1: Manufacturer: syz [ 471.723371][ T5871] usb 2-1: SerialNumber: syz [ 471.733050][ T5871] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 471.750489][ T799] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 471.953951][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.964952][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.974006][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.982849][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.992107][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.000968][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.010394][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.019353][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.029109][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.041159][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.154179][T14080] delete_channel: no stack [ 472.158896][T14080] delete_channel: no stack [ 472.373209][ T5915] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 472.535321][ T5915] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.544476][ T5915] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 472.553690][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.565721][ T5915] usb 5-1: config 0 descriptor?? [ 472.753759][T14086] netlink: 'syz.5.2680': attribute type 21 has an invalid length. [ 472.761762][T14086] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2680'. [ 472.833084][ T799] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 472.841037][ T799] ath9k_htc: Failed to initialize the device [ 472.878029][ T799] usb 2-1: ath9k_htc: USB layer deinitialized [ 474.201626][ T5863] usb 2-1: USB disconnect, device number 22 [ 474.238664][T14106] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2689'. [ 474.277530][ T30] audit: type=1326 audit(1760545421.994:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.1.2690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff57258eec9 code=0x0 [ 474.382497][T14109] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 474.449922][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 475.151104][ T799] usb 5-1: USB disconnect, device number 11 [ 475.448151][T14143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2703'. [ 475.515723][T14147] 9pnet_fd: Insufficient options for proto=fd [ 475.528244][T14149] C: renamed from team_slave_0 (while UP) [ 475.539004][T14149] netlink: 'syz.5.2706': attribute type 1 has an invalid length. [ 475.549348][T14149] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2706'. [ 475.564313][T14149] netlink: 558 bytes leftover after parsing attributes in process `syz.5.2706'. [ 475.611920][ T799] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 475.771601][ T799] usb 5-1: Using ep0 maxpacket: 16 [ 475.779318][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.791131][ T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.803918][ T799] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 475.819735][ T799] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 475.829339][ T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.842927][ T799] usb 5-1: config 0 descriptor?? [ 475.942843][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2714'. [ 475.951980][ T5863] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 476.081415][ T5863] usb 2-1: device descriptor read/64, error -71 [ 476.118025][T14179] netlink: 'syz.5.2718': attribute type 1 has an invalid length. [ 476.126272][T14179] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2718'. [ 476.142226][T14179] netlink: 558 bytes leftover after parsing attributes in process `syz.5.2718'. [ 476.260921][ T799] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 476.268215][ T799] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 476.275501][ T799] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 476.282566][ T799] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 476.289541][ T799] shield 0003:0955:7214.0036: unknown main item tag 0x0 [ 476.299151][ T799] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 476.332460][ T5863] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 476.339580][ T799] shield 0003:0955:7214.0036: Registered Thunderstrike controller [ 476.348877][ T799] shield 0003:0955:7214.0036: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 476.461846][ T5863] usb 2-1: device descriptor read/64, error -71 [ 476.471260][ T24] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 476.484965][ T9] usb 5-1: USB disconnect, device number 12 [ 476.493203][ T24] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 476.518758][ T24] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 476.531362][ T24] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 476.593489][ T5863] usb usb2-port1: attempt power cycle [ 476.729934][T14186] devtmpfs: Unknown parameter 'noswan' [ 476.738202][T14186] binder: 14185:14186 ioctl c018620c 200000000140 returned -22 [ 476.940942][ T5863] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 476.983497][ T5863] usb 2-1: device descriptor read/8, error -71 [ 477.240807][ T5863] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 477.292836][ T5863] usb 2-1: device descriptor read/8, error -71 [ 477.321712][T14207] comedi comedi3: comedi_config --init_data is deprecated [ 477.402853][ T5863] usb usb2-port1: unable to enumerate USB device [ 477.822588][ T5863] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 478.006483][ T5863] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 478.020413][ T5863] usb 5-1: config 0 has no interface number 0 [ 478.036785][ T5863] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.058170][ T5863] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.080674][ T5863] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.094911][ T5863] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 478.104444][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.125543][ T5863] usb 5-1: config 0 descriptor?? [ 478.541920][T14219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.555706][T14219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.776052][ T5863] uclogic 0003:28BD:0042.0037: failed retrieving string descriptor #100: -71 [ 478.795640][ T5863] uclogic 0003:28BD:0042.0037: failed retrieving pen parameters: -71 [ 478.814048][ T5863] uclogic 0003:28BD:0042.0037: pen probing failed: -71 [ 478.832348][ T5863] uclogic 0003:28BD:0042.0037: failed probing parameters: -71 [ 478.850087][ T5863] uclogic 0003:28BD:0042.0037: probe with driver uclogic failed with error -71 [ 478.873498][ T5863] usb 5-1: USB disconnect, device number 13 [ 479.536221][T14244] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2743'. [ 479.610893][ T5863] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 479.780522][ T5863] usb 5-1: no configurations [ 479.785253][ T5863] usb 5-1: can't read configurations, error -22 [ 479.919516][ T5863] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 480.070179][ T5863] usb 5-1: no configurations [ 480.075045][ T5863] usb 5-1: can't read configurations, error -22 [ 480.082165][ T5863] usb usb5-port1: attempt power cycle [ 480.430204][ T5863] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 480.460345][ T5863] usb 5-1: no configurations [ 480.465008][ T5863] usb 5-1: can't read configurations, error -22 [ 480.609092][ T5863] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 480.631196][ T5863] usb 5-1: no configurations [ 480.635826][ T5863] usb 5-1: can't read configurations, error -22 [ 480.649457][ T5863] usb usb5-port1: unable to enumerate USB device [ 480.871889][T14263] netlink: 'syz.5.2751': attribute type 4 has an invalid length. [ 480.946801][T14265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2752'. [ 480.979345][T14265] wg0 speed is unknown, defaulting to 1000 [ 480.988247][T14265] virt_wifi0 speed is unknown, defaulting to 1000 [ 481.728519][ T5863] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 481.776983][T14296] openvswitch: netlink: Message has 167 unknown bytes. [ 481.793110][T14296] pimreg3: entered allmulticast mode [ 481.869784][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2766'. [ 481.882897][ T5863] usb 2-1: device descriptor read/64, error -71 [ 482.128459][ T5863] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 482.258425][ T5863] usb 2-1: device descriptor read/64, error -71 [ 482.378473][ T5863] usb usb2-port1: attempt power cycle [ 482.529497][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2774'. [ 482.543484][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2774'. [ 482.581172][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2775'. [ 482.728616][ T5863] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 482.762242][ T5863] usb 2-1: device descriptor read/8, error -71 [ 482.858029][ T5915] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 483.018033][ T5863] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 483.027508][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.038914][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 483.050514][ T5915] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 483.060415][ T5863] usb 2-1: device descriptor read/8, error -71 [ 483.066626][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.080803][ T5915] usb 5-1: config 0 descriptor?? [ 483.094403][T14321] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 483.168274][ T5863] usb usb2-port1: unable to enumerate USB device [ 483.522601][ T5915] lenovo 0003:17EF:60FE.0038: unknown main item tag 0x0 [ 483.529864][ T5915] lenovo 0003:17EF:60FE.0038: unknown main item tag 0x0 [ 483.539755][ T5915] lenovo 0003:17EF:60FE.0038: hidraw0: USB HID v0.00 Device [HID 17ef:60fe] on usb-dummy_hcd.4-1/input0 [ 483.723945][T14321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.736369][T14321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.747230][ T24] usb 5-1: USB disconnect, device number 18 [ 484.595534][ T5871] Process accounting resumed [ 484.604637][ T799] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 484.641597][T14341] Process accounting resumed [ 484.769594][ T799] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 484.781198][ T799] usb 5-1: config 0 has no interface number 0 [ 484.787775][ T799] usb 5-1: too many endpoints for config 0 interface 6 altsetting 211: 244, using maximum allowed: 30 [ 484.799634][ T799] usb 5-1: config 0 interface 6 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 484.819571][ T799] usb 5-1: config 0 interface 6 has no altsetting 0 [ 484.830284][ T799] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 484.845292][ T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.855909][ T799] usb 5-1: Product: syz [ 484.861354][ T799] usb 5-1: Manufacturer: syz [ 484.866225][ T799] usb 5-1: SerialNumber: syz [ 484.877068][ T799] usb 5-1: config 0 descriptor?? [ 485.105565][ T799] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 485.106093][T14353] futex_wake_op: syz.1.2788 tries to shift op by -1; fix this program [ 485.200647][ T30] audit: type=1326 audit(1760545432.920:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.223504][ T30] audit: type=1326 audit(1760545432.920:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.247196][ T30] audit: type=1326 audit(1760545432.920:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.270395][ T30] audit: type=1326 audit(1760545432.920:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.293094][ T30] audit: type=1326 audit(1760545432.920:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.315715][ T30] audit: type=1326 audit(1760545432.920:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.338618][ T30] audit: type=1326 audit(1760545432.920:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.340909][ T799] gspca_sunplus: reg_r err -71 [ 485.362172][ T30] audit: type=1326 audit(1760545432.920:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57258eec9 code=0x7ffc0000 [ 485.370554][ T799] sunplus 5-1:0.6: probe with driver sunplus failed with error -71 [ 485.393932][ T30] audit: type=1326 audit(1760545432.920:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff57258d710 code=0x7ffc0000 [ 485.405465][ T799] usb 5-1: USB disconnect, device number 19 [ 485.423665][ T30] audit: type=1326 audit(1760545432.920:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.1.2789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff57258eacb code=0x7ffc0000 [ 485.448010][ T5863] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 485.609294][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.619467][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.629827][ T5863] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.639126][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 485.647204][ T5863] usb 2-1: SerialNumber: syz [ 485.740035][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060214800: rx timeout, send abort [ 485.748602][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ed71c00: rx timeout, send abort [ 485.756949][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060214800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 485.771726][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ed71c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 485.864434][ T5863] usb 2-1: 0:2 : does not exist [ 485.890346][ T5863] usb 2-1: USB disconnect, device number 31 [ 485.970986][T14363] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 485.989437][T14363] sp0: Synchronizing with TNC [ 485.996408][ C0] [ 485.998797][ C0] ================================ [ 485.999015][T14363] input: syz1 as /devices/virtual/input/input37 [ 486.003900][ C0] WARNING: inconsistent lock state [ 486.003925][ C0] syzkaller #0 Not tainted [ 486.003935][ C0] -------------------------------- [ 486.024722][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 486.031548][ C0] udevd/5198 [HC1[1]:SC1[1]:HE0:SE0] takes: [ 486.037424][ C0] ffff88814c56d068 (&dev->spinlock){?.-.}-{3:3}, at: das16m1_interrupt+0x5e/0x180 [ 486.046634][ C0] {HARDIRQ-ON-W} state was registered at: [ 486.052328][ C0] lock_acquire+0x120/0x360 [ 486.056904][ C0] _raw_spin_lock_bh+0x36/0x50 [ 486.061739][ C0] waveform_ai_cmd+0x2fc/0x5c0 [ 486.066570][ C0] do_cmd_ioctl+0x435/0x7c0 [ 486.071147][ C0] comedi_unlocked_ioctl+0x997/0x1020 [ 486.076585][ C0] __se_sys_ioctl+0xfc/0x170 [ 486.081247][ C0] do_syscall_64+0xfa/0xfa0 [ 486.085818][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.091777][ C0] irq event stamp: 6938277 [ 486.096169][ C0] hardirqs last enabled at (6938276): [] _raw_spin_unlock_irqrestore+0x85/0x110 [ 486.106823][ C0] hardirqs last disabled at (6938277): [] common_interrupt+0x13/0xe0 [ 486.116452][ C0] softirqs last enabled at (6937806): [] __irq_exit_rcu+0xca/0x1f0 [ 486.126075][ C0] softirqs last disabled at (6938241): [] __irq_exit_rcu+0xca/0x1f0 [ 486.135602][ C0] [ 486.135602][ C0] other info that might help us debug this: [ 486.143639][ C0] Possible unsafe locking scenario: [ 486.143639][ C0] [ 486.151068][ C0] CPU0 [ 486.154325][ C0] ---- [ 486.157671][ C0] lock(&dev->spinlock); [ 486.161982][ C0] [ 486.165416][ C0] lock(&dev->spinlock); [ 486.169898][ C0] [ 486.169898][ C0] *** DEADLOCK *** [ 486.169898][ C0] [ 486.178026][ C0] 1 lock held by udevd/5198: [ 486.182592][ C0] #0: ffffffff8e7e51f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x16a/0x3b0 [ 486.192842][ C0] [ 486.192842][ C0] stack backtrace: [ 486.198724][ C0] CPU: 0 UID: 0 PID: 5198 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 486.198740][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.198752][ C0] Call Trace: [ 486.198761][ C0] [ 486.198767][ C0] dump_stack_lvl+0x189/0x250 [ 486.198784][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.198795][ C0] ? __pfx__printk+0x10/0x10 [ 486.198808][ C0] ? print_lock_name+0xde/0x100 [ 486.198826][ C0] print_usage_bug+0x297/0x2e0 [ 486.198844][ C0] valid_state+0xc3/0xf0 [ 486.198859][ C0] mark_lock_irq+0x36/0x390 [ 486.198875][ C0] ? kasan_save_track+0x4f/0x80 [ 486.198888][ C0] ? kasan_save_track+0x3e/0x80 [ 486.198908][ C0] mark_lock+0x11b/0x190 [ 486.198924][ C0] __lock_acquire+0x65a/0xd20 [ 486.198940][ C0] ? das16m1_interrupt+0x5e/0x180 [ 486.198957][ C0] lock_acquire+0x120/0x360 [ 486.198972][ C0] ? das16m1_interrupt+0x5e/0x180 [ 486.198989][ C0] ? __lock_acquire+0xab9/0xd20 [ 486.199005][ C0] _raw_spin_lock+0x2e/0x40 [ 486.199017][ C0] ? das16m1_interrupt+0x5e/0x180 [ 486.199033][ C0] das16m1_interrupt+0x5e/0x180 [ 486.199050][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 486.199067][ C0] __handle_irq_event_percpu+0x295/0xab0 [ 486.199082][ C0] ? __lock_acquire+0xab9/0xd20 [ 486.199097][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 486.199112][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 486.199125][ C0] handle_irq_event+0x8b/0x1e0 [ 486.199137][ C0] ? handle_edge_irq+0x229/0xa10 [ 486.199155][ C0] handle_edge_irq+0x23b/0xa10 [ 486.199175][ C0] __common_interrupt+0x141/0x1f0 [ 486.199190][ C0] common_interrupt+0x5e/0xe0 [ 486.199206][ C0] asm_common_interrupt+0x26/0x40 [ 486.199219][ C0] RIP: 0010:lock_acquire+0x58/0x360 [ 486.199234][ C0] Code: 8b 05 7c 36 f2 10 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 7f 36 f2 10 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 a8 2b 00 0e <73> 16 e8 a1 fc 08 00 84 c0 75 0d f6 05 14 39 ea 0d 01 0f 84 d7 01 [ 486.199246][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000293 [ 486.199257][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 486.199266][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13d400 [ 486.199274][ C0] RBP: ffffffff81a84117 R08: 0000000000000000 R09: 0000000000000000 [ 486.199282][ C0] R10: dffffc0000000000 R11: fffffbfff1f3baaf R12: 0000000000000002 [ 486.199291][ C0] R13: ffffffff8e13d400 R14: 0000000000000000 R15: 0000000000000000 [ 486.199300][ C0] ? rcu_core+0xc37/0x1770 [ 486.199320][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 486.199332][ C0] ? debug_object_deactivate+0x9a/0x250 [ 486.199348][ C0] ? rcu_core+0xc37/0x1770 [ 486.199362][ C0] rcu_core+0xc54/0x1770 [ 486.199376][ C0] ? rcu_core+0xc37/0x1770 [ 486.199395][ C0] ? __pfx_rcu_core+0x10/0x10 [ 486.199411][ C0] ? sched_balance_domains+0x121/0x9e0 [ 486.199427][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 486.199443][ C0] ? sched_balance_domains+0x121/0x9e0 [ 486.199458][ C0] handle_softirqs+0x286/0x870 [ 486.199475][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 486.199492][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 486.199508][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 486.199522][ C0] __irq_exit_rcu+0xca/0x1f0 [ 486.199536][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 486.199554][ C0] irq_exit_rcu+0x9/0x30 [ 486.199568][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.199581][ C0] [ 486.199586][ C0] [ 486.199591][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.199603][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 486.199617][ C0] Code: 74 05 e8 2b a3 7e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b3 d1 46 f6 65 8b 05 5c 68 46 07 85 c0 74 40 48 c7 04 24 0e 36 [ 486.199627][ C0] RSP: 0018:ffffc900030f72e0 EFLAGS: 00000206 [ 486.199638][ C0] RAX: 1ddb45c6372f1900 RBX: 0000000000000a06 RCX: 1ddb45c6372f1900 [ 486.199647][ C0] RDX: 0000000000000007 RSI: ffffffff8d7f7db3 RDI: 0000000000000001 [ 486.199656][ C0] RBP: ffffc900030f7378 R08: ffffffff8f9dd577 R09: 1ffffffff1f3baae [ 486.199665][ C0] R10: dffffc0000000000 R11: fffffbfff1f3baaf R12: dffffc0000000000 [ 486.199674][ C0] R13: 0000000000000002 R14: ffff88813fe259c0 R15: 1ffff9200061ee5c [ 486.199689][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 486.199704][ C0] get_partial_node+0x41f/0x4a0 [ 486.199723][ C0] ? ___slab_alloc+0x258/0x18a0 [ 486.199739][ C0] ___slab_alloc+0xdea/0x18a0 [ 486.199756][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 486.199773][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 486.199788][ C0] __slab_alloc+0x65/0x100 [ 486.199805][ C0] __kmalloc_noprof+0x47d/0x800 [ 486.199817][ C0] ? kfree+0x4d/0x6d0 [ 486.199828][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 486.199844][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 486.199862][ C0] tomoyo_check_open_permission+0x1c1/0x3b0 [ 486.199875][ C0] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 486.199887][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 486.199905][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 486.199932][ C0] ? mnt_get_write_access+0x66/0x280 [ 486.199949][ C0] ? tomoyo_file_open+0x165/0x220 [ 486.199965][ C0] security_file_open+0xb1/0x270 [ 486.199978][ C0] do_dentry_open+0x384/0x13f0 [ 486.199997][ C0] ? vfs_open+0x31/0x340 [ 486.200014][ C0] vfs_open+0x3b/0x340 [ 486.200029][ C0] ? path_openat+0x2ecd/0x3830 [ 486.200042][ C0] path_openat+0x2ee5/0x3830 [ 486.200062][ C0] ? __pfx_path_openat+0x10/0x10 [ 486.200079][ C0] do_filp_open+0x1fa/0x410 [ 486.200090][ C0] ? __lock_acquire+0xab9/0xd20 [ 486.200105][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 486.200122][ C0] ? _raw_spin_unlock+0x28/0x50 [ 486.200133][ C0] ? alloc_fd+0x64c/0x6c0 [ 486.200150][ C0] do_sys_openat2+0x121/0x1c0 [ 486.200169][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 486.200187][ C0] ? rcu_is_watching+0x15/0xb0 [ 486.200204][ C0] __x64_sys_openat+0x138/0x170 [ 486.200222][ C0] do_syscall_64+0xfa/0xfa0 [ 486.200235][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.200247][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.200259][ C0] ? clear_bhb_loop+0x60/0xb0 [ 486.200273][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.200285][ C0] RIP: 0033:0x7f68eb3c8407 [ 486.200296][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 486.200307][ C0] RSP: 002b:00007ffc74d44ce0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 486.200319][ C0] RAX: ffffffffffffffda RBX: 00007f68ead9b880 RCX: 00007f68eb3c8407 [ 486.200328][ C0] RDX: 0000000000080141 RSI: 000055df5798302e RDI: ffffffffffffff9c [ 486.200338][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.200345][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 486.200354][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 486.200367][ C0] [ 486.200439][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 486.884761][ C0] CPU: 0 UID: 0 PID: 5198 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 486.893603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.903646][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 486.909715][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 486.929309][ C0] RSP: 0018:ffffc90000007658 EFLAGS: 00010046 [ 486.935370][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff8880336f0080 [ 486.943324][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888064504000 [ 486.951277][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 486.959231][ C0] R10: dffffc0000000000 R11: ffffffff88bee380 R12: dffffc0000000000 [ 486.967202][ C0] R13: ffff8880336f0038 R14: 0000000000000000 R15: ffff8880336f0000 [ 486.975157][ C0] FS: 00007f68ead9b880(0000) GS:ffff888125d22000(0000) knlGS:0000000000000000 [ 486.984068][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.990633][ C0] CR2: 000000110c462e7f CR3: 000000007d28a000 CR4: 00000000003526f0 [ 486.998597][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 487.006551][ C0] DR3: 0000000000006c42 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 487.014504][ C0] Call Trace: [ 487.017778][ C0] [ 487.020620][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 487.025984][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 487.031534][ C0] das16m1_handler+0x213/0x4b0 [ 487.036299][ C0] das16m1_interrupt+0xaf/0x180 [ 487.041172][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 487.046618][ C0] __handle_irq_event_percpu+0x295/0xab0 [ 487.052249][ C0] ? __lock_acquire+0xab9/0xd20 [ 487.057102][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 487.063254][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 487.068437][ C0] handle_irq_event+0x8b/0x1e0 [ 487.073185][ C0] ? handle_edge_irq+0x229/0xa10 [ 487.078132][ C0] handle_edge_irq+0x23b/0xa10 [ 487.082896][ C0] __common_interrupt+0x141/0x1f0 [ 487.087908][ C0] common_interrupt+0x5e/0xe0 [ 487.092590][ C0] asm_common_interrupt+0x26/0x40 [ 487.097619][ C0] RIP: 0010:lock_acquire+0x58/0x360 [ 487.102835][ C0] Code: 8b 05 7c 36 f2 10 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 7f 36 f2 10 83 f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 a8 2b 00 0e <73> 16 e8 a1 fc 08 00 84 c0 75 0d f6 05 14 39 ea 0d 01 0f 84 d7 01 [ 487.122438][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000293 [ 487.128497][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 487.136451][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13d400 [ 487.144400][ C0] RBP: ffffffff81a84117 R08: 0000000000000000 R09: 0000000000000000 [ 487.152352][ C0] R10: dffffc0000000000 R11: fffffbfff1f3baaf R12: 0000000000000002 [ 487.160304][ C0] R13: ffffffff8e13d400 R14: 0000000000000000 R15: 0000000000000000 [ 487.168278][ C0] ? rcu_core+0xc37/0x1770 [ 487.172682][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.178986][ C0] ? debug_object_deactivate+0x9a/0x250 [ 487.184542][ C0] ? rcu_core+0xc37/0x1770 [ 487.188950][ C0] rcu_core+0xc54/0x1770 [ 487.193176][ C0] ? rcu_core+0xc37/0x1770 [ 487.197581][ C0] ? __pfx_rcu_core+0x10/0x10 [ 487.202245][ C0] ? sched_balance_domains+0x121/0x9e0 [ 487.207691][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 487.213219][ C0] ? sched_balance_domains+0x121/0x9e0 [ 487.218667][ C0] handle_softirqs+0x286/0x870 [ 487.223421][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 487.228169][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 487.233440][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 487.238628][ C0] __irq_exit_rcu+0xca/0x1f0 [ 487.243202][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 487.248388][ C0] irq_exit_rcu+0x9/0x30 [ 487.252703][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 487.258321][ C0] [ 487.261259][ C0] [ 487.264173][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.270137][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 487.276619][ C0] Code: 74 05 e8 2b a3 7e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b3 d1 46 f6 65 8b 05 5c 68 46 07 85 c0 74 40 48 c7 04 24 0e 36 [ 487.296206][ C0] RSP: 0018:ffffc900030f72e0 EFLAGS: 00000206 [ 487.302260][ C0] RAX: 1ddb45c6372f1900 RBX: 0000000000000a06 RCX: 1ddb45c6372f1900 [ 487.310223][ C0] RDX: 0000000000000007 RSI: ffffffff8d7f7db3 RDI: 0000000000000001 [ 487.318179][ C0] RBP: ffffc900030f7378 R08: ffffffff8f9dd577 R09: 1ffffffff1f3baae [ 487.326142][ C0] R10: dffffc0000000000 R11: fffffbfff1f3baaf R12: dffffc0000000000 [ 487.334095][ C0] R13: 0000000000000002 R14: ffff88813fe259c0 R15: 1ffff9200061ee5c [ 487.342056][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.348376][ C0] get_partial_node+0x41f/0x4a0 [ 487.353226][ C0] ? ___slab_alloc+0x258/0x18a0 [ 487.358063][ C0] ___slab_alloc+0xdea/0x18a0 [ 487.362728][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 487.368435][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 487.374135][ C0] __slab_alloc+0x65/0x100 [ 487.378536][ C0] __kmalloc_noprof+0x47d/0x800 [ 487.383367][ C0] ? kfree+0x4d/0x6d0 [ 487.387327][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 487.393029][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 487.398559][ C0] tomoyo_check_open_permission+0x1c1/0x3b0 [ 487.404435][ C0] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 487.410485][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 487.416893][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 487.423150][ C0] ? mnt_get_write_access+0x66/0x280 [ 487.428431][ C0] ? tomoyo_file_open+0x165/0x220 [ 487.433576][ C0] security_file_open+0xb1/0x270 [ 487.438493][ C0] do_dentry_open+0x384/0x13f0 [ 487.443252][ C0] ? vfs_open+0x31/0x340 [ 487.447529][ C0] vfs_open+0x3b/0x340 [ 487.451597][ C0] ? path_openat+0x2ecd/0x3830 [ 487.456346][ C0] path_openat+0x2ee5/0x3830 [ 487.460932][ C0] ? __pfx_path_openat+0x10/0x10 [ 487.465938][ C0] do_filp_open+0x1fa/0x410 [ 487.470421][ C0] ? __lock_acquire+0xab9/0xd20 [ 487.475362][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 487.480405][ C0] ? _raw_spin_unlock+0x28/0x50 [ 487.485250][ C0] ? alloc_fd+0x64c/0x6c0 [ 487.489568][ C0] do_sys_openat2+0x121/0x1c0 [ 487.494242][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.499431][ C0] ? rcu_is_watching+0x15/0xb0 [ 487.504180][ C0] __x64_sys_openat+0x138/0x170 [ 487.509020][ C0] do_syscall_64+0xfa/0xfa0 [ 487.513504][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.519551][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.525781][ C0] ? clear_bhb_loop+0x60/0xb0 [ 487.530440][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.536314][ C0] RIP: 0033:0x7f68eb3c8407 [ 487.540799][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 487.560398][ C0] RSP: 002b:00007ffc74d44ce0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 487.568807][ C0] RAX: ffffffffffffffda RBX: 00007f68ead9b880 RCX: 00007f68eb3c8407 [ 487.576767][ C0] RDX: 0000000000080141 RSI: 000055df5798302e RDI: ffffffffffffff9c [ 487.584720][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.592674][ C0] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 487.600628][ C0] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 487.608589][ C0] [ 487.611597][ C0] Modules linked in: [ 487.615480][ C0] ---[ end trace 0000000000000000 ]--- [ 487.620930][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 487.626991][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 487.646581][ C0] RSP: 0018:ffffc90000007658 EFLAGS: 00010046 [ 487.652632][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff8880336f0080 [ 487.660589][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888064504000 [ 487.668580][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 487.676541][ C0] R10: dffffc0000000000 R11: ffffffff88bee380 R12: dffffc0000000000 [ 487.684508][ C0] R13: ffff8880336f0038 R14: 0000000000000000 R15: ffff8880336f0000 [ 487.692483][ C0] FS: 00007f68ead9b880(0000) GS:ffff888125d22000(0000) knlGS:0000000000000000 [ 487.701418][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.708000][ C0] CR2: 000000110c462e7f CR3: 000000007d28a000 CR4: 00000000003526f0 [ 487.715968][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 487.723930][ C0] DR3: 0000000000006c42 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 487.731974][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 487.739431][ C0] Kernel Offset: disabled [ 487.743758][ C0] Rebooting in 86400 seconds..