last executing test programs: 22m9.630800596s ago: executing program 3 (id=4): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000180)={[{}, {@subsystem='cpuacct'}]}) sendfile(r2, r0, &(0x7f0000000000)=0x4, 0xff) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) write$binfmt_aout(r3, 0x0, 0xffffffdb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 22m7.360301889s ago: executing program 3 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 12) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x4020744f, 0x0) fsmount(r1, 0x0, 0x70) 22m6.754855879s ago: executing program 3 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)={0xad}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="c6"}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000300)=[0x0], 0x0, 0xfffffffffffffffe, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f0000000240), 0x4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 22m3.675095244s ago: executing program 3 (id=34): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') preadv(r2, &(0x7f0000002240)=[{&(0x7f0000000080)=""/262, 0x106}], 0x1, 0x7, 0xfff) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)={0x7, 0x8, 0x0, 0x6, 0x1, 0x0, [{0x3, 0x1, 0x435}]}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = accept4$netrom(r2, &(0x7f0000000240)={{}, [@null, @null, @netrom, @remote, @rose, @rose, @default, @netrom]}, &(0x7f00000003c0)=0x48, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 22m3.311017317s ago: executing program 3 (id=40): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000023c0)=ANY=[@ANYBLOB="120110010000004058041b500000000000010902240001000000640904030001810000df0921000010012207000b058103200000edd719a0602d2483b2de086d00ff37fadbdfd24f83b40de886fd26f014828f396e50c37a16dcca1f43433fc6b14df3bffad14963123cf6811329807d6595c32935af33c1c392512f82fb9c19463999d17267fc5d763e22191b26c83ebb9de71a8f7d2cbf521318955450518b0633c1a8823aaaff779ce7a0b25faeb8fb7010b56e849d1d77de1e729a19f277777fc141ab77ef8f51342db4efbb15057c01c7e4cc135a89eb3bac4d7d281811af14609d9226907204ae", @ANYRESOCT, @ANYRES8, @ANYRES32=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28) ioctl$LOOP_SET_FD(r2, 0xc0045003, 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x40, 0x22, 0x7, {0x7, 0xd, "be811a4954"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 22m2.977927538s ago: executing program 32 (id=40): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000023c0)=ANY=[@ANYBLOB="120110010000004058041b500000000000010902240001000000640904030001810000df0921000010012207000b058103200000edd719a0602d2483b2de086d00ff37fadbdfd24f83b40de886fd26f014828f396e50c37a16dcca1f43433fc6b14df3bffad14963123cf6811329807d6595c32935af33c1c392512f82fb9c19463999d17267fc5d763e22191b26c83ebb9de71a8f7d2cbf521318955450518b0633c1a8823aaaff779ce7a0b25faeb8fb7010b56e849d1d77de1e729a19f277777fc141ab77ef8f51342db4efbb15057c01c7e4cc135a89eb3bac4d7d281811af14609d9226907204ae", @ANYRESOCT, @ANYRES8, @ANYRES32=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28) ioctl$LOOP_SET_FD(r2, 0xc0045003, 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x40, 0x22, 0x7, {0x7, 0xd, "be811a4954"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m43.867536069s ago: executing program 4 (id=6588): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000005100000000000000660f388239f3430fc7350200000064440f22033e81080000000066b8e2000f00d8efcf"], 0x51}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=ANY=[], 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1d9}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000104000022000040"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m43.644648308s ago: executing program 4 (id=6590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r1, 0xf}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000000000000000000018000000000000000400000000000000000000000000000018000000000000000400000000000000010000000000000050000000000000000f01cbb8010000000f01c9ee"], 0x98}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m43.04954108s ago: executing program 4 (id=6592): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000009afb56203c43750000004f0000000000000036400f3067640f21"], 0x4f}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m42.836743977s ago: executing program 4 (id=6594): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010100}, 0xc, 0x0}, 0x24000000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 6m42.681942128s ago: executing program 4 (id=6596): syz_kvm_add_vcpu$x86(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m42.292620811s ago: executing program 4 (id=6598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00#\x00\x00@']) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0x1ff, 0x0, 0x44, 0x0, 0x2, 0x2, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x3, 0x1, 0x1, 0x2a, 0xe1, 0xf6, 0x5, 0x2, 0xb4, 0x2, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3ff}], 0x400}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m41.750893202s ago: executing program 33 (id=6598): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00#\x00\x00@']) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x8a0, 0x1ff, 0x0, 0x44, 0x0, 0x2, 0x2, 0x1, 0x6, 0x5, 0x0, 0x6, 0x6}, {0x3, 0x1, 0x1, 0x2a, 0xe1, 0xf6, 0x5, 0x2, 0xb4, 0x2, 0x1, 0x2, 0x2}, {0x0, 0x4, 0x9, 0x6, 0x80, 0x9, 0x1, 0x8, 0x9, 0xff, 0x4, 0x28, 0x3ff}], 0x400}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m12.76803751s ago: executing program 0 (id=7190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r1, 0xf}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000008010040000000000600000000000000f035dee80d92182f07dcbba8152992a2f406649edb7b7455bb28a753a5359cc49d"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000000500000000000000000000000000000018000000000000000400000000000000000000000000000018000000000000000400000000000000010000000000000050000000000000000f01cbb80100"], 0x98}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m11.019906885s ago: executing program 0 (id=7196): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000f40)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640d63a455bc243e90bffba18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918311d97878f06cefabc24567c86bbbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d370000000000000000892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aae", 0xcb}], 0x1}}], 0x1, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 5m10.872092015s ago: executing program 0 (id=7197): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 5m9.964728093s ago: executing program 0 (id=7202): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 5m9.834866208s ago: executing program 0 (id=7203): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1005, 0xc, 0x6, 0x3, 0x40, 0x2, 0x2, 0x9, 0x1, 0x4, 0x2, 0x9, 0x800000000000004}, {0x1, 0x80, 0x7, 0x0, 0x8, 0x6, 0xfb, 0xff, 0x2, 0x1, 0x9, 0xf, 0x9}, {0x2, 0x9, 0x5, 0x80, 0x8, 0xb, 0x0, 0x87, 0x5, 0x5, 0x2, 0xe, 0xfffffffffffffffe}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m9.074804383s ago: executing program 0 (id=7209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x2003, 0x0, 0x2, 0x20, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x1, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xfffffffffffffffd}, {0x10000}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x8}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x2000, 0x70bd2a, 0x70bd25, 0x70bd28, 0x70bd29, 0x4}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 5m7.760004254s ago: executing program 34 (id=7209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x2003, 0x0, 0x2, 0x20, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x1, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x0, 0xfffffffffffffffd}, {0x10000}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x8}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x2000, 0x70bd2a, 0x70bd25, 0x70bd28, 0x70bd29, 0x4}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 50.140483129s ago: executing program 5 (id=8995): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file1\x00', 0x2000757) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x2, 0x9, "ea4a82438563608974"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@getsadinfo={0x374, 0x23, 0x8, 0x70bd27, 0x25dfdbfe, 0x0, [@algo_auth={0x134, 0x1, {{'sha512-ce\x00'}, 0x760, "06a4f9bc7bf7abdbde0197b9d8fb97b2e9bd2410166b523703141399f95f51b2221c260fa5484e38194703f4dc5d7bf8291a814f3f48804f71874081344190af8dcfe86878a8d5087c76056c5f04fc61df0ead0699245cb0bd026d264fc0cdf6337f0b6f4bf226e5e87dedf95fa26c516b993a19dac6ee7215931c558bf51d0d0616b32205b8565f5b38b23bf4a6422eff913f8c073fe1cc874bb0d931fec8b7b7ccb3adfe9202454aa7d9cc320d633b6ea31b1ff9bf885e50ae89acf3cb8dc562910ff96eef1d8704f3acb2704789c1fdf8cb4567a8c88f79e03c70e0fbe6d48609db8b4e2a207e07bb9d47"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x79, 0x3, {{'lzjh\x00'}, 0x188, "68f4852ca261d32d1f4424377349689a6f0417b3399f269d0e0a082efb5243bbd0a4f14179c35fe654d6a9d153875bebb1"}}, @algo_comp={0x108, 0x3, {{'lzjh\x00'}, 0x600, "9f0dedaef9062f00e7b2a7d2c7da903a252af1a00a898cede29c5ced6a57f0e8b18b8bf96461f42d70b99fc23ce0774a5338d725890f26d8e10bd5737ee5a48813f99a1b64b3cb664cad780eb0e260f94c565b5e406a614b73be521f1eefa1532898f26b31ca2e3c885e3d09aa9b766a0c0c4b90ec1330f7320dbe946f6983acfc79968c8c68993627fa0672ae33c67032913f0c8aa97d2f748f84debb493469655992c340f61d826a150bc44ae9bf30685a8108c411b18efc99ab635af2d98a"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x401}, @algo_aead={0x98, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x260, 0xc0, "da7bab899df209c8210041b4976c98317e993be0e1960793796870162d536726f2099dca2aaa8556b66c267895657800095bb1a868657ba13e7831234ed0890e473437ee4d5d0c7693f93d82"}}]}, 0x374}, 0x1, 0x0, 0x0, 0x810}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000280)={0x0, [[0x5], [0x0, 0x200], [0x2]], '\x00', [], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xf80) read(r3, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000040), 0x4) 50.136297105s ago: executing program 5 (id=8996): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = socket$inet6(0xa, 0x3, 0x37) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x633a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x215, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40000020, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) syz_usb_control_io(r1, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="3b0002060000000014114cd54e806fc73cdb823e668b11bc78241b8c7f2b14f1c6b5ffc4eac798b1ddec3ed4f7c6fc353c4d6c4e565aeff21d3d3e503af5d2c6bedefc04eb1c3106fc7df20c53ade013dbce6cdfc9017120ffdc25e2889035"], 0x8) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 48.262517845s ago: executing program 5 (id=9001): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000600010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x34}}, 0x0) 48.187388152s ago: executing program 5 (id=9002): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003ac0), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x800) (async) read(r1, &(0x7f0000004c80)=""/160, 0xa0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x404, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000) (async) syz_usb_connect(0x3, 0x36, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x21214e9c5a23b191, 0x11, r2, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10) (async) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce6", 0x4}], 0x1}}], 0x1, 0xc0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e746572000400028008000340000001"], 0xcc}}, 0x20050800) (async) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "a8496856"}]}}, 0x0}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000e14030329bd7000fedbdf25080001"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 48.151883272s ago: executing program 5 (id=9003): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) close(r0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x9c1fcb7cd9261ff6, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000053000000000000000000440f22c0410f", @ANYRESOCT], 0x53}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000f1"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 47.772776803s ago: executing program 5 (id=9005): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x1eac40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x500000000000000) 47.635616417s ago: executing program 35 (id=9005): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x1eac40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x500000000000000) 9.148665966s ago: executing program 7 (id=9176): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x5, 0x22, {0x22, 0xc, "325e6115e2af9da3c4f7b6b43e8a9f48a950b605d5b75b59cb889f4ce985b393"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0xb, 0x69, "f7c94e445d0ec8867a7647f7bf2c61e2f8e594f9353eac4b2cc6a229db52373dab66565175bc73ebf3a306f1aee43fca966a72f0548058723adc17a8b3ac2b60865b82b7fa0c0c6f42b6ecd37729f97fa3ea86212826876618683eabdab1103020a75d18662ff7d5ee"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x200, 0xd00, 0x1, 0x78c, 0xfff9, 0x0, 0x3ff, 0x8d, 0x9, 0x2, 0x9, 0x7d07}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x190}, &(0x7f0000000300)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="401b00010000"], 0x0, 0x0, 0x0, 0x0}) 8.505625098s ago: executing program 7 (id=9178): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, 0x0, 0x4050) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r3, 0x400, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x6e00) 7.541789405s ago: executing program 7 (id=9181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="5c00000014006b03000000d86e6c1d002f847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.076524089s ago: executing program 7 (id=9182): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x20, 0x1, 0xc2, {0xc2, 0xe, "17535ac68816aafa64506794935d498eddf3e629d4be24e6a0280d624fe46784ea76774bfdfb8f4aed21242fc85571aa9e0d7474c126b7b01f71f1ee623276e68da866dc33deac951d91c12863c5593c43258d0209cd7f20b40703306b67f7afd2bc6250aaa4d6e40c15ac8ba16e1a76b0a2e6a81fd7eb436de01fb301df3f0444b8b55e38de763a4d546a8436fd2645fe1dfebf4ae24d0d17382fbd1c3b258d061af972606872fe6e7c37c85199bcd78dc642f770deea16a06f13a4109a89f0"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x0, 0xe, 0xa5, "ea435c9400c12d499d594eaca79204861b528a8c255b3bda5df520aa57cd0c119a8b95bc4893f0f87643a5a495a99b9a42161ac4d0d409a8d403ad26a0f24846c14a245e8b32dab3f6fbd0c0bad725e2d3f131398fb4cb58a6422ea86084dfa3f0aba36b4680bd56707ab3834dafbbda2c21fe1fb59115ba073dff94169d1727bd819615c0f4181ff9a2144edbaa8f23bc5c9f023c95c2d26c4774d8ea927a263cab7c5e3a"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0x53}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}}) 5.444616554s ago: executing program 2 (id=9191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0500c00108005400fc0060ec9700019888b0"], 0xfdef) 5.300296711s ago: executing program 2 (id=9194): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000140)=0xb1e0, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r1, 0x6b, 0x7f, 0x0, 0x0) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1201e400000000402609333300004000000109025e907c40467487cbf7e6cda708f8c22d00010000000009040000050300020009210000330122050009058103", @ANYBLOB="a942fa22f8442040933833e2b8166264bcc3e174166c9ee3213b50ac67e9732cde420829b01f27132e289c783bfb630ec846be535578b55f87a52d10510507e89b57bb3c02c6796103e045708158bb5fe9a31174aba44794f2025bbf6699c7197b4247c2ef352f32254e7ddc4279a66e067f4146fe2c96710e26c0f5663cb44c14be12cd26c6f281bb25442a39ee081d2a83bd215ccdf35e18cbb98081bdd0d905ff28b4c3e5a9506f840a34a38d20b1767dca44efbbff06c4eea9f7ca5e3869058a5d3ccaaf46d659bd70668b797e981396"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400e3b0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/95) 3.824381033s ago: executing program 7 (id=9195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ustat(0x11, &(0x7f0000000600)) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="eb200700000007003d7da32915"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, &(0x7f0000000240)=0x10, 0x800) r1 = syz_usb_connect$cdc_ncm(0x5, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x9, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ','}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x2, 0x80, 0x2}, {0x6, 0x24, 0x1a, 0x72, 0x26}, [@country_functional={0x8, 0x24, 0x7, 0x45, 0xffff, [0x0]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x0, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x0, 0x2}, @obex={0x5, 0x24, 0x15, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xf9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x8, 0xd4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x4, 0x80}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0xff, 0x81, 0x40, 0x8, 0x4}, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x9, 0x4}]}, 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x443}}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61c7b2986eb5e52829e7cb839300"}}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="5c00000014006b05c84ebe349d4b6d6e238675f802020000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf93670600000001000000f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000700)={0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2023400000004004db7b7e1c915b01f558e4f0e63968f9acb5ce0548293b01f72bde82a5b5ffc7491cc12a7aa9b692b8399098d684262dd930a5b336c61e5e743e281985ea8d46b7"], &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="0014b30000009559f212e10d8b5df0cf4de18990516e1ca7aa196414eb81a95978a2719bef5b3392ed0d1b6872c4e8bb66fbe392849d5dad87f3410b6c3bd5441c1f1a9d1d7153c4fe7f5d630af06917c2c4b1c4fb8543215e1012c228f7d1f12d9c89f42373aae9885c9bf3fcf3ef38ad3f9be4eb1573e86e914e80226b61b5fd3d6b1899af3a2ec3cd4390b609a3facdae973ea7dc7deb8f4fbeef8c4d1557de8cead4c02716ef1e4c0b97cf267709e4ebc6d9aebfc04d00"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x81, 0xb, 0x6, 0x7, 0x2, 0x0, 0x1, 0xffffffff, 0x745e, 0x1, 0xdba, 0x4}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0xe217}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000140)) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) connect$qrtr(r5, &(0x7f0000000180)={0x2a, 0x4, 0x3fff}, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r7 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$SNDCTL_MIDI_INFO(r6, 0x4004510f, &(0x7f00000000c0)={"d8582add2d5203746d2542b7ec1f15d2f38d95493569079e090c57b09bd9", 0x0, 0x0, 0x1, [0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) syz_usb_control_io(r0, 0x0, 0x0) 2.761309187s ago: executing program 6 (id=9197): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000002200)=@assoc_value, &(0x7f0000000080)=0x8) socket$inet(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa002a008}) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, &(0x7f0000000080)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, 0x0, 0x0) sendmsg$can_j1939(r0, &(0x7f0000002340)={&(0x7f00000021c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f0000002300)={&(0x7f0000002240)="13dea037e2a55b6685408513057fde93d30834d687e8c2a9bd3390ddb49dda61492e9fbfc00b4e1d3f45e9cd1f49bd860b78d34ddcff57e1b9e9c763e9161c5a61d1eb3711c058e6aa05a89496008a0bb007b37b437bff0257314071ac5c4d0cd9c3218d53e4920d6705d80a10f7cf6305a5ad984bd69e5d6af5a2452e5a16e5a2d226dfb431012976081d6b02c100d5aad6a108a69b2c8b2e542c0d3c9b8a73ce25cc5d81e6824fdf0d8e93e531068f0921e49d398c482f", 0xb8}, 0x1, 0x0, 0x0, 0x240480d4}, 0x20004000) r8 = gettid() r9 = socket$netlink(0x10, 0x3, 0x8) fcntl$lock(r9, 0x24, &(0x7f0000000200)={0x1, 0x1, 0x4, 0x0, r8}) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x800}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb0805"], 0x1015) lseek(r1, 0x7ae, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="300000000e14080229bd7000fedbdf2508003c000100000008003c000200000008003c000400000008003c653f5c9a797f8078330bc86db9b50001000008"], 0x30}, 0x1, 0x0, 0x0, 0x20044881}, 0x20000000) connect$inet(r1, &(0x7f0000002380)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 2.542888824s ago: executing program 6 (id=9198): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f00000002c0)=[{0xc000003, 0x25d1, &(0x7f0000006300)=[0x0, 0x5, 0x80000001, 0x400, 0x9, 0x0, 0x9ce9, 0x7fff, 0x133c958a, 0xc7, 0x401, 0x7, 0x6, 0x9, 0x2, 0x1, 0x8, 0x8, 0x614c, 0x200, 0x7, 0x0, 0x8, 0x4, 0x2, 0x800, 0x9, 0x1, 0x2, 0x9, 0x1, 0x6, 0x8cfd, 0x29b, 0x5cc, 0x66, 0x1d1, 0x0, 0x2, 0xba69, 0x8, 0x80000001, 0x10000, 0x3, 0x10000, 0x0, 0x8, 0x0, 0x9, 0x0, 0x7, 0x6, 0xc88, 0x2, 0x81c1, 0x7, 0x9, 0xb3f, 0xc48c, 0x1, 0xa, 0x7, 0x6, 0xed6, 0x4, 0x3, 0x8, 0x9, 0x7fff, 0xe832, 0x6, 0xe, 0xfffff801, 0x3, 0x2, 0x9, 0x66b6, 0x6, 0xffff, 0x5, 0x7, 0x31, 0x1, 0x5, 0x2, 0x6, 0x2, 0x0, 0x0, 0x6, 0x3b, 0x9, 0x10, 0x8, 0x80000001, 0x2, 0x9, 0x7, 0x2, 0x2, 0x5, 0x5, 0x9, 0xf72, 0x80000000, 0xbc73, 0xaed, 0x8, 0xd5fb, 0x1ff, 0x9, 0x1, 0x3, 0x6, 0xffffff74, 0x4, 0x6, 0x9, 0x401, 0x0, 0xf, 0x4, 0x6, 0x800, 0x9687, 0x0, 0x9, 0x20000000, 0x7ff, 0x80000001, 0x3, 0x6, 0x400, 0xffffff80, 0xffffffff, 0x6, 0x7, 0x8, 0x63, 0x5, 0x3, 0x5, 0x101, 0x10001, 0x9, 0x5, 0x0, 0xfb6, 0xdaff, 0x8, 0x1, 0x4, 0x30ef, 0x40, 0xfff, 0x5, 0x7ff, 0x2, 0x3, 0x6, 0x6, 0x7, 0x101, 0x3, 0x2, 0x4, 0x1, 0x9, 0x1, 0x4, 0x1, 0x362, 0x2, 0x6f1a31a5, 0x8, 0xa9, 0x4, 0x40, 0x3, 0x0, 0x5, 0x3, 0xb, 0x8, 0x23, 0x5, 0x80, 0x6, 0xbe3, 0x4, 0x7, 0x9, 0x101, 0xa344, 0xffffffff, 0x4, 0x80, 0x3, 0x1, 0xd, 0xc54, 0x7, 0x9, 0x7, 0x8, 0x8, 0x50000, 0x9, 0x10001, 0x895a, 0xb, 0x2, 0x9, 0x1, 0xf, 0xffff5556, 0x6, 0x1000, 0xcdfc, 0x4, 0xfff, 0x6, 0x8, 0xc81, 0xe4, 0x1, 0x1, 0x2, 0x9, 0x8, 0xc, 0x5, 0x1, 0xa, 0xfffffffa, 0xe, 0x0, 0x8, 0xe, 0x3, 0x1, 0x9, 0x9, 0x6, 0x1000, 0x46, 0x9, 0x8, 0x2, 0xa, 0x200, 0xfffffffd, 0x2, 0x4, 0x2, 0xb, 0xd, 0x6, 0x0, 0x3da, 0x7, 0x9, 0xeb, 0xffff, 0x7fffffff, 0x24ba, 0x3, 0xa8e, 0x401, 0x9, 0x8, 0x7fff, 0x1ff, 0x5, 0x2, 0xe, 0x3, 0x6328, 0xa, 0xfff, 0x0, 0x9, 0x5800, 0x4040000, 0xfffffffe, 0x79c, 0xfff, 0xe, 0x8, 0xe8c, 0x9, 0x3800, 0x2, 0x9, 0x81, 0x0, 0x0, 0x6, 0x9, 0x8, 0x81, 0x1, 0x401, 0x7, 0x4, 0x0, 0x0, 0x80, 0x0, 0x1, 0x9, 0x3, 0x8, 0x8, 0x7, 0xb, 0x9, 0x200, 0xfffffbff, 0x9, 0x8001, 0x9, 0x4e, 0x1000, 0x6, 0x9, 0x10001, 0x560, 0x8, 0x0, 0xac82, 0x7, 0x5, 0x93c1, 0x7fff, 0x8, 0x1000, 0x5, 0x5b53, 0x9, 0x0, 0x0, 0x120, 0x8, 0x2, 0xffffffff, 0x2, 0x1, 0x912, 0xfffffffd, 0x3ff, 0xe8, 0x6, 0x6, 0x1, 0xa, 0x2, 0x80000001, 0x4, 0x9, 0x6, 0x3, 0x101, 0x401, 0xb33, 0xf246be86, 0x0, 0xd9ad, 0x4, 0x5, 0x6, 0x2, 0x0, 0x7, 0x76c, 0x10, 0x6, 0x5, 0xa3, 0x7, 0x2, 0x3, 0x7ff, 0x80000000, 0xf, 0x5, 0x80, 0x1, 0x1, 0x7477, 0x9, 0x7, 0x9, 0x7, 0x0, 0x9, 0x9, 0x3, 0x0, 0x1, 0x3, 0x9, 0x0, 0x9, 0x9, 0x6, 0x6, 0x7, 0x7fff, 0x8, 0x81, 0xfffffff8, 0x9, 0x4, 0x7, 0x401, 0x6, 0x7fffffff, 0x8, 0x7, 0x4, 0x10, 0xffff673e, 0x2, 0xfffffff9, 0x10000, 0x10, 0x6, 0x401, 0x7fffffff, 0x80, 0x81, 0x5, 0xffff, 0xd8e1, 0x1b8, 0xa, 0x4, 0x4, 0x4, 0x4f, 0x100, 0x800, 0x2, 0x6, 0x4, 0x100, 0xe6a7, 0x80000001, 0x22, 0x2, 0x4934, 0x7, 0xed91, 0x4, 0x10, 0x1, 0x7ff, 0x9, 0xf, 0x5, 0x3, 0x2, 0x3e, 0x9, 0x8, 0x2, 0x6, 0x7, 0x8001, 0x5, 0x9, 0x2, 0x4, 0x8000, 0x6, 0x0, 0x6, 0xc5bf, 0x2, 0x9, 0xffff, 0x6, 0x9, 0x2, 0x8, 0xfff, 0x4, 0x7, 0x0, 0x1, 0xe40, 0x7, 0xd9, 0xfff, 0x2, 0x100, 0x8, 0x6, 0x9, 0x8001, 0x15d, 0x7fff, 0x3d, 0x1, 0x10000, 0x9, 0x1ff, 0x8001, 0x2, 0x521f, 0xfffffc00, 0xfffffbff, 0x41, 0x6, 0x88, 0x10, 0x0, 0xf0c4, 0x474, 0x1, 0x2, 0x7, 0x2, 0x3, 0xc4, 0xc, 0xa, 0xf, 0xffffffff, 0x1, 0x9, 0x610, 0x5bdc, 0x5, 0x2b, 0x8, 0x0, 0x0, 0x1, 0x8001, 0x8, 0x6, 0x200, 0x2, 0x1, 0x7ff, 0x8, 0x3, 0x5, 0xd, 0x5071, 0x7, 0x9, 0xfffffe00, 0x401, 0x4, 0x400, 0x0, 0xa550, 0xffffff01, 0x44d, 0xfffffffe, 0x8, 0x7, 0x1, 0x3, 0x0, 0x3, 0x352, 0x4, 0x8, 0x4, 0xfffffffc, 0x0, 0x81, 0x1ff, 0x1, 0xfffffffd, 0xc, 0x2, 0x4, 0x7, 0x5, 0x7, 0x9, 0x9, 0xff, 0x1, 0x10, 0x8001, 0x1, 0x5, 0x5, 0x1, 0x4, 0x5, 0xfffffff9, 0x400, 0x400000, 0x1, 0x80000000, 0x0, 0x7, 0x5, 0x2, 0x7, 0x2, 0x0, 0x4, 0xd3d, 0x8, 0xd1f7, 0x6, 0x7fffffff, 0xffffffff, 0x10, 0x9, 0x4, 0xa30, 0x8001, 0x80000001, 0xfffffffe, 0xb, 0x377, 0x8, 0xbd, 0x6, 0x474, 0x4, 0x2, 0x80, 0x80, 0x2, 0x1, 0x3, 0x0, 0x7, 0x921, 0xd, 0x1, 0xef6, 0x1, 0xe, 0x4, 0x5d, 0x5154bd5e, 0x7, 0x4a59, 0x1, 0x4, 0x8, 0x4, 0x8001, 0xfffeffff, 0xfc, 0x9, 0x2, 0x6b, 0x3, 0x8, 0xfffffff9, 0x5, 0x4, 0x1, 0x3, 0x10, 0x8001, 0x8, 0x8, 0x9, 0x1, 0x2, 0x1, 0x80, 0x4, 0x3, 0xffffff36, 0x5, 0x3, 0x9, 0x7fff, 0x76, 0x7e1, 0x79, 0x100, 0x2, 0x7, 0x5, 0x6, 0x9, 0x3, 0x6, 0x5, 0x1, 0x994, 0xfffffff9, 0x7, 0x2, 0x5, 0x0, 0xffffffff, 0x1000, 0x6, 0x5, 0x40000, 0x9, 0xffffffff, 0x6, 0x8000, 0x25, 0xe31, 0x3, 0xfffffffe, 0xfffff000, 0x7, 0xd4bb, 0x1, 0x6a, 0x9, 0x7, 0xf2fc, 0x4, 0x7, 0x14e, 0x0, 0x2, 0xc, 0x9, 0x0, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0x5000, 0x8001, 0x8, 0x9, 0xfffffffb, 0xb, 0x8, 0x3, 0x2, 0xe, 0x70, 0x9, 0x1, 0x8bdc5eb8, 0x6, 0x343e, 0x8, 0xd, 0x4, 0x0, 0x7, 0x2, 0x6, 0x3, 0x2, 0x4, 0xd, 0x2, 0x9, 0x4, 0x200, 0xe97, 0x7, 0x8, 0x101, 0x38a3, 0x25f, 0xfffffff9, 0xfffff000, 0x80, 0x3, 0x4, 0x5, 0xffff0000, 0x7, 0x64, 0x0, 0x880b, 0x21, 0x4, 0x40, 0x0, 0x28fb, 0x0, 0x6, 0x1, 0x0, 0xff, 0xbb, 0x1, 0xfa, 0x5, 0x3, 0x80, 0x4, 0x1, 0x2, 0x5, 0x3, 0x6, 0x2, 0x2, 0x4, 0x10001, 0xffff8000, 0x4, 0x80, 0x2, 0x44, 0x2, 0x7f, 0x5, 0xb, 0x6, 0x1, 0x63d76777, 0x9, 0xfff, 0x9, 0x6, 0xf0, 0x9, 0x3a1, 0x101, 0x5, 0xa, 0x2, 0x1, 0x4, 0x9, 0x2dd9, 0x80000001, 0x4, 0x7, 0x0, 0xfffffff9, 0x7fff, 0xffffffff, 0x0, 0x2, 0x3, 0x0, 0xf8, 0x8, 0x3, 0xffffffff, 0x80000000, 0x4, 0x4, 0x8, 0x9, 0x8, 0xf, 0x6, 0x6a4, 0xfff, 0x6, 0x7ff, 0x7, 0x5, 0x91, 0x1, 0x3, 0xcc0, 0xfffffff7, 0x65, 0x1, 0x71, 0x0, 0x3, 0x4, 0x2, 0x0, 0x2, 0x1ff, 0x68c71e4b, 0x7, 0xfffffffc, 0x12d8, 0x10, 0x101, 0x0, 0x1ff, 0x1, 0x5, 0x80000001, 0x4, 0x80000001, 0x7f, 0x1ff, 0x8000, 0xc0000000, 0x6, 0x9, 0x800, 0x25, 0xa58b, 0x26f8f506, 0x2, 0x80000000, 0x7fff, 0x4, 0x5, 0xec7, 0x1, 0x80000001, 0x4438, 0x5, 0x9, 0x80000000, 0xae4a, 0x7, 0x8, 0x51, 0x5, 0x1, 0xc4f, 0xffff8000, 0xf26, 0x1, 0x3, 0x3, 0x200, 0x2, 0x57, 0x4, 0x856, 0x9148, 0x9, 0x257c, 0xa, 0x80000001, 0x5, 0x7fffffff, 0x4, 0x0, 0x6, 0x1ff, 0x1000, 0x0, 0x5, 0x7, 0x7ff, 0x1, 0xc1, 0x10000, 0x7fffffff, 0xf, 0x4, 0x5, 0x6, 0x0, 0x401, 0x6, 0x2, 0xb16, 0x80000000, 0x4, 0x2, 0x8, 0x6, 0x100, 0x401, 0x2bd, 0x1ff, 0x1, 0x5, 0x0, 0xfff, 0xa9e2, 0x4, 0x100, 0x3, 0x0, 0x0, 0x45b9, 0xd783, 0x2, 0x384c, 0x2, 0xd9, 0x19, 0x2, 0x80000000, 0x8, 0x3, 0x80, 0xf2ad, 0x7, 0xffff0001, 0xe, 0x80, 0xf9, 0x6, 0x81, 0x2f, 0x5, 0x9, 0x4, 0x5, 0x0, 0x4, 0x4, 0xffff, 0x7, 0x4, 0xa9c5, 0x87e2, 0x80000001, 0x257c, 0x10000, 0x243, 0x5, 0x8, 0xe01f, 0x401, 0x4, 0x8d, 0x6, 0x400, 0x5, 0x8, 0x4, 0x3, 0x8, 0x8, 0x1, 0x0, 0x7, 0x7, 0x9, 0x2, 0xfffffe00, 0x1, 0x8001, 0x917, 0xfffffff7, 0x401, 0x8, 0x2, 0x1, 0x1, 0xf, 0xa, 0x2, 0xe2b, 0x3, 0x10001, 0x7, 0x1, 0x6, 0xffff0a51, 0xd, 0x8000, 0xa25, 0x0, 0x4, 0x3, 0xfff, 0xe, 0x4ec, 0x8, 0x3b268000, 0x2, 0x1000000, 0x0, 0x9, 0x1, 0x7, 0x150bfb88, 0x10001, 0x5, 0x3, 0x793f, 0x80000001, 0x7fffffff, 0xc41, 0x5, 0x1, 0x8, 0x7fff, 0x8, 0x5595, 0xfffffff7, 0x9, 0x9, 0x10, 0x0, 0x7, 0x6, 0x42d6, 0x0, 0xf, 0x80000001, 0x1cbf, 0x5, 0x7, 0x7, 0x7, 0x9f0, 0x6, 0x387c, 0x3, 0x10, 0xfffffffe, 0x6, 0x2, 0x8, 0xc, 0x8, 0xc822, 0x7000, 0x8000, 0x80000000, 0x5, 0x8, 0x9, 0xffffff8e, 0x0, 0x5, 0x34, 0x8, 0x1, 0x0, 0x5, 0x40, 0x52cd, 0xffffff41, 0x9, 0x401, 0x8001, 0x3, 0xffffffff, 0x9, 0x4, 0x0, 0x8001, 0x5, 0x2, 0x0, 0x1, 0x0, 0x3, 0x0, 0x6, 0x6, 0x12000000, 0xff00000, 0x1ff, 0x39, 0x9, 0x37f0, 0x0, 0x10, 0x80000001, 0x3, 0x8, 0x8, 0x6, 0x5, 0x8, 0x3, 0x2, 0x6, 0x9, 0x7, 0x9, 0x2, 0x0, 0x5, 0x3, 0x3, 0x1, 0x0, 0x1, 0x4, 0x9, 0x900000, 0xe, 0x3, 0x6, 0x401, 0x3, 0x7, 0x5, 0x1, 0x3, 0x7fffffff, 0x5, 0x7, 0x3, 0x1, 0x2, 0x5, 0x7, 0x7, 0x712, 0xfffffff2, 0x7, 0x8, 0x3, 0xdf52, 0x200, 0x400, 0x7, 0xfffff974, 0x4, 0x0, 0x101, 0xfffffff8, 0x1, 0x1, 0xfff, 0x7f, 0x3, 0x8, 0x5, 0x9, 0x9ff, 0x535fdf11, 0x9, 0xc, 0x65c, 0x8001, 0xff, 0xf, 0x0, 0x13, 0x2, 0x40, 0x5, 0x3, 0xca, 0x8, 0x3, 0x63c7, 0x4, 0x6, 0x9, 0x7, 0x1, 0x4333, 0x9, 0x8, 0x8, 0x4, 0x7, 0x5, 0x28d8, 0x1ff, 0xb5, 0x9, 0x8, 0x9, 0x40, 0xc, 0x2, 0x2, 0x3, 0x83, 0x7fff, 0x4, 0x1, 0x6, 0xffffff85, 0x8000, 0x7, 0x1, 0xffffffff, 0x401, 0x5, 0x3, 0x2, 0x7f, 0x1538, 0x4, 0x8, 0x5, 0xff, 0x8000, 0x6, 0x100000, 0x800, 0x6, 0x10000, 0x5, 0x2, 0x21, 0x4, 0x81, 0x5, 0x1, 0x477, 0x8, 0x6, 0x8, 0x10000, 0x1, 0x1, 0x9, 0x3, 0x7, 0x80000001, 0x7f, 0x2, 0x0, 0x1ff, 0x1, 0xfffffff7, 0x0, 0xff, 0x8, 0xffffffff, 0x8001, 0xa, 0x1, 0xf2, 0xfffffff1, 0x40, 0xbca, 0x10000, 0x9, 0x3c, 0x81, 0xfffff829, 0xf1, 0xc2d, 0x1, 0xffffffff, 0x3, 0xb, 0x7, 0x3, 0x3, 0x7, 0x1000, 0x7d, 0x200, 0x10000, 0x22, 0x0, 0x7165, 0x346, 0xfffffff2, 0x9c, 0x2, 0x40bafe9a, 0xae51, 0x9, 0x4, 0x1, 0x3, 0x7, 0x7, 0x0, 0x4, 0x7, 0x1b9, 0x9, 0x80000001, 0xffffff6b, 0x7, 0x3c000000, 0x5, 0x7, 0x1, 0x20000000, 0x7, 0x8, 0x80, 0xc4000000, 0xfffffe00, 0x9, 0x1, 0xff, 0x6, 0xf, 0x3, 0x1, 0xffffffd1, 0xe1da, 0xc4, 0x2, 0xd787, 0x8, 0x6, 0x18, 0x9, 0x10001, 0x2, 0x9, 0xce, 0x9, 0x61c, 0x0, 0x8, 0x2, 0x2, 0x4, 0x7, 0x320, 0x0, 0xce, 0x1, 0x2, 0x4, 0x4, 0x401, 0x52, 0xed, 0xfff8, 0x4, 0x7, 0x19, 0x86fb, 0x7fff, 0x1, 0x0, 0x316, 0x1, 0x68, 0xf, 0x81c0f8fd, 0x5, 0x1, 0x2, 0x4b72, 0x3, 0x8, 0x8, 0x0, 0x0, 0x1, 0x5, 0x3, 0xea9, 0x8, 0x8855, 0x4ffd, 0x1, 0x7, 0x8, 0x5d7, 0x0, 0x5, 0x68c, 0x8, 0x4, 0x1, 0x0, 0x2, 0x6, 0x9, 0xb, 0x3, 0x60f1, 0x6, 0x3, 0x7fff, 0x4, 0x7ff, 0x3, 0x2, 0x81, 0x3, 0x6e6a, 0x7ff, 0x0, 0x2, 0x80000001, 0x3, 0x843, 0x5, 0x10000, 0x0, 0x7, 0x2, 0x9, 0x5578, 0x8ad, 0xd, 0x5d07b152, 0x93, 0x7, 0x4, 0xc, 0x7, 0x1, 0x401, 0x8, 0x80000001, 0x2eb, 0xb, 0x92, 0x10001, 0xa, 0x8, 0x6, 0x9f00, 0x7ab9a231, 0x0, 0x0, 0x7, 0x0, 0x2, 0x800, 0xdba6, 0x4800, 0xffff, 0x1152e995, 0x1, 0x1, 0x100, 0x1, 0x5, 0xd, 0x9, 0x2, 0x3, 0x0, 0x1, 0x7, 0xfffffff9, 0x5, 0x8, 0x55e, 0x4, 0xfffffffb, 0x800, 0x7, 0x7, 0x8000, 0x4, 0x40, 0x3, 0x7, 0x1939350d, 0x1, 0xe6, 0x10000, 0x8, 0x9, 0x6, 0x0, 0xe, 0x1, 0x8, 0x4, 0x2, 0x5, 0x4, 0x6, 0xe, 0x10000, 0xa4, 0x5, 0x100, 0x8, 0x4, 0x5, 0x6, 0xea90, 0x3, 0x100e6a07, 0x5, 0x8, 0x0, 0xf0d20, 0xb87, 0x7, 0x7fffffff, 0x3, 0xd, 0x4, 0x2, 0x10000, 0xc, 0x5, 0x5, 0x6, 0x6, 0xc, 0x80000001, 0x0, 0x5, 0x40, 0x149, 0xfffffff8, 0x1, 0x1, 0xfffffffe, 0x3, 0x8, 0x6, 0x7fff, 0x0, 0x8, 0xfe000000, 0x0, 0xfffffff7, 0x94, 0x0, 0xa, 0x7f, 0x5, 0x5, 0x9, 0x9, 0x7, 0x4, 0x9b6, 0x0, 0x3, 0x9, 0x6d, 0x4, 0x960, 0x8, 0xc, 0x7, 0x5, 0x9, 0x7, 0x90f, 0x3, 0x9, 0x5, 0x5c3, 0x4, 0x10000, 0x8, 0x5, 0x7, 0x9, 0x0, 0x4, 0xffff, 0x337, 0x0, 0x8, 0x7ff, 0x2, 0x1, 0x0, 0x9, 0xffffffff, 0x0, 0x399, 0x10001, 0x1000, 0x1000, 0x2, 0xf256, 0x11, 0x7, 0x8, 0x401, 0x10, 0x200, 0x2, 0x6, 0xc, 0x7, 0x8001, 0xd, 0xa, 0x96dd, 0xff, 0x8, 0x91b, 0xf4a, 0xd, 0xf, 0x0, 0x5, 0x1, 0x100, 0x2, 0xffffffff, 0xc, 0xfffffffd, 0x3, 0x4, 0xffffff80, 0x0, 0x1, 0x100, 0x2e7e, 0x7, 0x4, 0x7ff, 0x6, 0xff, 0x203b2bed, 0x8, 0x1, 0x58, 0x80, 0x1, 0xfa, 0x101, 0x2, 0x3, 0x4, 0x4, 0x3, 0x80000000, 0xa2, 0x8, 0x6, 0x1, 0x9, 0x5, 0x401, 0x6405, 0x7, 0x52000000, 0x5, 0xab, 0x400, 0x7fff, 0x370, 0x0, 0x8, 0x3, 0x3ff, 0x7, 0x6, 0x7fff, 0x101, 0x8, 0xfffffffc, 0xf86, 0x5, 0x0, 0x7ff, 0x8, 0xb2bb, 0xf17, 0x3, 0xfffffffe, 0xc9fc, 0xc83f, 0xff, 0xb, 0x40, 0x3, 0x5, 0x6, 0x6, 0xfffffd42, 0x1, 0x7, 0x0, 0x6, 0x6, 0x66, 0x1000, 0x5, 0x8, 0x4, 0x2, 0xffffcd9d, 0x2, 0x4, 0x400, 0xa, 0x30, 0xe16c, 0x9, 0x1, 0x4, 0xff8e, 0x1, 0x7fff, 0x3, 0x80000000, 0x4, 0x9, 0xfffffff9, 0x386, 0x7, 0x6, 0x1, 0xb0, 0x8, 0x8a1, 0xfff, 0xb560, 0x7, 0x81, 0x101, 0x4, 0x7, 0x5, 0x401, 0x1, 0x5, 0x0, 0x7f, 0x7, 0x4, 0x0, 0xb53, 0x0, 0x4, 0x24, 0x1, 0x7dcb, 0x2, 0x9, 0x9, 0x6, 0x33, 0x7, 0x1000000, 0x328, 0xfffffffb, 0x7, 0x5, 0x3, 0x60c3, 0x0, 0x6, 0x8, 0x1, 0x1, 0x8, 0x80, 0x1, 0xa8, 0x8, 0x3, 0x1, 0x0, 0x7ff, 0x80000001, 0x9, 0x8, 0x6, 0x2, 0x4d, 0x6, 0xc31a, 0x5, 0xb5c5, 0x7, 0x6, 0x0, 0x3ff, 0x6, 0x4, 0x6, 0x7fffffff, 0xc7d, 0x8, 0x7, 0x800, 0x7fff, 0xffff, 0x7, 0xffff, 0xb1, 0x2, 0x9, 0x9, 0x0, 0x10000, 0x3, 0x8, 0x2ac, 0x2, 0x8, 0x1, 0x1000, 0x10001, 0xa, 0x8, 0x58, 0x7, 0x4, 0x6, 0x4d80, 0x4, 0x2, 0x80000000, 0xf, 0x8, 0x7, 0x474, 0x1, 0x7fff, 0x1, 0xbc6, 0x40, 0x10000, 0x3, 0x10001, 0x64, 0x1, 0x40, 0xffffffff, 0xffff, 0x2, 0x1, 0x401, 0x1dd, 0x5, 0x7ff, 0x8, 0xffff7fff, 0x3, 0x7ff, 0x2, 0x4, 0x7, 0x10001, 0x5, 0x7, 0x101, 0x2, 0x8, 0x3, 0xc6d, 0x10001, 0x4, 0x401, 0x100, 0x7, 0x1, 0x40, 0x5, 0x0, 0x1, 0x7ff, 0x9, 0xf, 0xd, 0xffffffff, 0x5, 0x5, 0x8, 0x5, 0x1, 0x4, 0x10000, 0x80000000, 0x7f349683, 0x1d5e, 0x2, 0x4, 0xfffffff9, 0xa16, 0x4, 0x0, 0x3, 0x5, 0xc, 0x9, 0x2, 0xb, 0x8000, 0x184, 0x6, 0xfe49491a, 0x1, 0x2e5, 0x1, 0x9, 0xc3d, 0x5, 0x100, 0xd652, 0x7, 0x5, 0x3, 0xfdb3, 0x7fffffff, 0x4, 0x2f0, 0x5, 0xc, 0x3, 0x7, 0x80000000, 0x2, 0xff, 0xf6f4, 0x3, 0x1000, 0x10000, 0x9, 0x2, 0x3, 0x5, 0x7, 0x3, 0x10000, 0x1000, 0x79, 0x2, 0x2, 0x8, 0x0, 0x5, 0x2, 0x9, 0x100, 0x7, 0xac, 0x6, 0xfffffffc, 0xb8190b7, 0x3, 0x453, 0x0, 0x7, 0x940, 0x401, 0x0, 0x9, 0xc9, 0xa, 0xa, 0xa8, 0xd5000, 0x8001, 0x7, 0x5, 0x3d, 0x7, 0x9, 0x5, 0x3, 0x3, 0x8, 0x6, 0x9, 0x4, 0x9, 0xffffffff, 0x0, 0x10, 0x5, 0x9, 0x8000, 0x8, 0x1, 0xa, 0x33d, 0xe, 0x0, 0x4, 0xd231, 0x3, 0x6, 0xfffffc00, 0x1, 0x2400000, 0xcb48, 0x4, 0x6, 0x8, 0x5, 0x101, 0x2a9d, 0x3, 0xd, 0xffffff85, 0xf6f, 0xe820, 0x7, 0x8924, 0x9, 0x9, 0x4, 0xfffff68a, 0xb, 0xffffffff, 0x7, 0x1, 0x2, 0x6, 0x7, 0x7fff, 0x48, 0x3ff, 0x8, 0x0, 0x5, 0x4, 0x77, 0x5, 0xc, 0x7, 0x5, 0x0, 0xfb0, 0x8, 0x81, 0xffff, 0x0, 0x3, 0x5, 0x9, 0x9, 0x5, 0x322b, 0xe714, 0x0, 0x10001, 0x2, 0x9, 0x2, 0x2, 0x2, 0x3, 0x25, 0x9b, 0x3, 0xcae, 0x1, 0x9, 0x7, 0x3, 0x1, 0x100, 0x401, 0x1, 0x8, 0x5, 0xc, 0xffffff7f, 0x10000, 0x3, 0xf8f, 0x1, 0x3, 0xf, 0xb8, 0xf, 0xa0000, 0x8, 0x3, 0x4, 0xa, 0xffffffff, 0x5, 0xfffffff8, 0x5, 0x80, 0x7898, 0x3, 0xb5a5, 0x69, 0xf3da, 0x1bc, 0x6, 0x16eb, 0x6, 0x4, 0xfff, 0x3, 0x3, 0xfffffffc, 0x7ff, 0x9, 0x1b34190c, 0x1, 0x2, 0x7, 0x3, 0x1, 0x8d9a, 0x800, 0x9, 0x3, 0x8000, 0x4, 0x2, 0x5, 0x8, 0x6, 0x6, 0x1ff, 0x791, 0x8, 0x5, 0x1, 0x2, 0x5, 0xd08, 0x36200, 0x0, 0x7, 0x7dc, 0x2991dccf, 0x3, 0x200, 0x5, 0x8, 0xc70, 0x1, 0xc, 0x3, 0xfffffff7, 0x5, 0x6, 0x7, 0x44, 0x9, 0x6, 0x7fffffff, 0x1f86c0ca, 0x9, 0x7, 0xcc, 0x4, 0x7f, 0xffffffff, 0x0, 0xe0, 0x81, 0xffffff7f, 0x3, 0x10000, 0x1, 0x5, 0x6, 0x3, 0x8, 0x9, 0xf567, 0x4, 0x4bbbe92c, 0x159, 0x6, 0xffffff8b, 0xd25, 0x431, 0xe, 0x0, 0x7, 0x1, 0x5, 0x5, 0x10, 0x2, 0x8, 0x8, 0x3, 0x299, 0xa6, 0xc04, 0x9, 0xfffff800, 0x7a8, 0x5, 0x1, 0x7fff, 0x3, 0xf, 0x2a561209, 0xd, 0x5, 0x8, 0x6, 0x4, 0xd, 0x80000001, 0x4b, 0x6, 0x6, 0x9c, 0x3, 0x5, 0xffff, 0x8, 0x4, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0xfff, 0x0, 0xbc38, 0x80000000, 0x6, 0x5, 0x7, 0x4, 0xfffffff8, 0xe3b, 0x1, 0x9, 0x9, 0x9, 0x6, 0x2, 0x8, 0x1331a618, 0x2, 0x0, 0x1, 0xfffffe00, 0x6, 0x9, 0x5, 0x1000, 0x7f, 0x4, 0x8, 0x0, 0x40, 0x4, 0xa91, 0x598de190, 0x4, 0x1, 0x0, 0x24, 0x4, 0x7fff, 0xd6, 0x6, 0x100, 0x1, 0x5, 0x1, 0xa, 0x3, 0x2, 0x0, 0x6, 0x4, 0x5, 0x9, 0x4, 0x2, 0x1, 0x8, 0x401, 0x0, 0x10, 0x372445c5, 0xa, 0x4, 0x581, 0x400, 0x8000, 0x5, 0xfffffff6, 0x5, 0x8, 0x4, 0x2, 0x0, 0x200, 0x7ff, 0x3, 0x6, 0x8, 0x4, 0xfffffff8, 0x1, 0x4, 0x7, 0x4ef7, 0x1, 0x3, 0xc9, 0x6, 0xb3, 0x8, 0x0, 0x5, 0x10, 0x1171800c, 0x8000, 0xfffffffd, 0x6, 0x7, 0x9, 0x10, 0xff, 0x0, 0x9, 0xffffffff, 0xd23, 0x2, 0x7f, 0x2, 0x9, 0xa748, 0xfffffeff, 0xb2e, 0x2, 0x2, 0x7, 0xfffffff6, 0x7fffffff, 0x6, 0x0, 0xff, 0x10, 0x0, 0x5, 0xa5, 0x100, 0xbaf, 0x10000, 0x7, 0xb36, 0x0, 0x8, 0xffffffff, 0x895, 0x3ff, 0x81, 0x5, 0x9, 0x7fff, 0x8, 0x7, 0x9, 0x2, 0x4, 0x100, 0x6, 0x400, 0x7, 0x4, 0x9, 0x8, 0xc, 0x30, 0xd5f, 0x99e0, 0x8, 0x8, 0x7, 0x8, 0xc, 0xfffffffe, 0x64, 0x7, 0xa, 0x4, 0x3ff, 0x7, 0x2, 0x8000, 0x2, 0x3, 0x6, 0x340000, 0x1, 0x9, 0xa6b, 0xcbf, 0x60, 0x8, 0x6, 0x2, 0xffff74ac, 0x1, 0x9, 0x7fff, 0xe6, 0x9, 0x10001, 0xff, 0x3, 0x8, 0x0, 0x1, 0x100, 0x3, 0xa, 0x3, 0x40, 0x2, 0x1, 0x26c, 0x7, 0x9, 0x3, 0x2, 0x7, 0x91, 0x97, 0x7, 0x3ff, 0x7, 0x6, 0x1, 0x2, 0x4, 0x7, 0x7ff, 0xca, 0xc4, 0x800, 0xb0c, 0x8, 0x0, 0x1, 0xfffffc00, 0x0, 0x0, 0xfffff6b0, 0x9f1, 0x200, 0xeab, 0x3, 0xfff, 0x1, 0x4, 0x9, 0x1, 0x5, 0x7ff, 0x4, 0xe53, 0x7c, 0x101, 0x2, 0x6, 0x11bc0000, 0xa7f, 0x1, 0x7, 0x6, 0x1, 0xab, 0x342, 0x80000000, 0x9, 0xff, 0x5, 0x560, 0x400, 0xee2a, 0x6, 0x8, 0x10001, 0x4, 0x7, 0x9e, 0xfffffffb, 0x1, 0x1740, 0x3, 0x1, 0x401, 0x4, 0x5, 0x9e3e, 0x4, 0x8, 0x74, 0x5, 0x8, 0x40, 0x7, 0x6, 0x1, 0x80000000, 0x6, 0x7fff, 0x3, 0x3, 0x8, 0x4, 0xffffffff, 0x7, 0x9911, 0x8001, 0x7085, 0x1, 0x9, 0x14000, 0x6a12, 0x7f, 0x3, 0xfff, 0xff, 0x9, 0xffffffff, 0x4, 0x8, 0x7, 0x400000, 0x7fff, 0xffff8000, 0x1000, 0xd0, 0x92e6, 0x1, 0x8001, 0x460, 0x6, 0xc, 0x3, 0x3, 0x2, 0x10000, 0x627, 0x0, 0x7, 0x2cd, 0x4, 0x3000, 0xa6b, 0x2, 0x6, 0x4, 0x5, 0x8, 0x100, 0x4, 0x8, 0x67f07f19, 0xa9e6, 0xe, 0x7, 0x0, 0xfcd6, 0x10000, 0xd1, 0x7, 0x7ff, 0x67, 0x7, 0x1, 0x0, 0x21, 0x830, 0x3, 0x0, 0x7, 0x368, 0x5, 0x7, 0x5, 0x5, 0x0, 0x93, 0x7fffffff, 0x5, 0x8, 0x36bd, 0xffffffff, 0x200, 0x7ffd, 0x40, 0x66b, 0x7f, 0x8, 0x3, 0x7fff, 0x5, 0x400, 0x6, 0x800, 0x4, 0x9, 0xff, 0x6, 0xfffffff8, 0x7f, 0x9, 0x400, 0x4, 0x7, 0x7, 0x8, 0x23, 0x7, 0x1, 0x3, 0x7f, 0x4, 0x7fff, 0x9, 0x10000, 0x8, 0x3ff, 0x3aef, 0xbb32, 0x8e, 0x8, 0x8, 0x3, 0x10001, 0x2, 0x4, 0x55, 0xfffffff9, 0x800, 0xa4b, 0xc0000, 0x7, 0x3, 0x8, 0x8001, 0x9, 0x3762, 0x3, 0xfffffff7, 0xfffffffa, 0xe1a, 0x8000, 0x7, 0x90, 0x2, 0xfb6, 0x6e5, 0xffff136e, 0x9, 0x8, 0x100, 0xd19d, 0x8, 0xe, 0x80000, 0x0, 0x1, 0x0, 0x9, 0x81, 0x9, 0x5, 0x4, 0x8, 0x5, 0x3ff, 0x8, 0x7fffffff, 0xffff5e1f, 0x400, 0x2, 0x8, 0x9, 0x8, 0x7fff, 0x8, 0x6, 0x7, 0x9, 0x18424444, 0x6c, 0xc, 0x6, 0x8000, 0x69fa9cea, 0x1, 0x4b1, 0x6, 0x8, 0x99e6, 0x5, 0xc, 0x1, 0x8f6a, 0x3, 0x6, 0x100, 0x101, 0x6, 0x400, 0x0, 0x7, 0x8, 0xc7b, 0x5, 0x2, 0x6dc, 0x0, 0x3, 0xfffffe01, 0xe, 0x5, 0xfffffffc, 0x1, 0xbeb9, 0x8, 0x10, 0xff, 0x0, 0x7, 0x51fb, 0x1, 0x5, 0xcc, 0x4, 0x80000001, 0x2d, 0x7fffffff, 0x7, 0xa, 0x8, 0x4, 0xc, 0x482, 0x3, 0x3, 0x80000001, 0xca15, 0x4, 0x10001, 0x7, 0xff, 0x3, 0x424d, 0x82, 0xca, 0x0, 0x2, 0xb, 0x5, 0x5, 0x8, 0x617b, 0x9, 0x13, 0x7, 0x74, 0xa357, 0x0, 0x1781, 0x1, 0x0, 0x0, 0x5, 0x144c, 0xe, 0x7, 0x0, 0x8001, 0x6, 0x1, 0x8001, 0xf, 0xb0, 0xd61, 0x5, 0xca51, 0x80000001, 0x5, 0x5, 0x3, 0x7, 0x8, 0x7, 0x279, 0xf, 0x8, 0x5, 0x1, 0xfffff100, 0x0, 0x4c9c, 0x10000, 0xa5b3, 0x468, 0x16bc, 0x10, 0x5, 0xfffffff9, 0x1000, 0xbd8, 0x10001, 0x9, 0x26, 0x3, 0xffff, 0x1, 0x8, 0x662, 0x2, 0x3, 0x100, 0xc6, 0x3909, 0x8, 0x7, 0x2, 0x8, 0x6, 0xfff, 0x2f, 0x0, 0x11, 0x7, 0x9, 0x6, 0x1, 0x0, 0x1, 0xffffffb2, 0xf1ad, 0x0, 0xb, 0x2, 0x88, 0x29d2, 0x9, 0x10000, 0x7ff, 0x2, 0xe, 0x0, 0x2, 0xf190, 0x7ff, 0x709, 0xffffff18, 0xffff7f93, 0xfff, 0x6, 0x2, 0x643, 0x0, 0x1, 0xe40, 0xfffffff8, 0x3ff, 0x2, 0x8, 0x1, 0x7, 0x2, 0x6, 0x2caa9042, 0xffffffff, 0x9, 0x0, 0x2, 0x7fffffff, 0x2, 0x8, 0x4, 0x4, 0x1, 0x8, 0x7f, 0xb, 0x8000, 0x200, 0x7f, 0x1, 0x9, 0x6, 0xe5, 0x2, 0x8, 0x4, 0x4, 0x10000, 0x3bf6, 0x4, 0x1, 0x1, 0x8f, 0x4, 0x0, 0x9, 0x1, 0xfffffffd, 0x200, 0xff, 0x2, 0x7, 0x8000, 0x80, 0x7, 0x3, 0x1, 0x8, 0x9, 0xa8, 0xd420, 0xffff, 0x0, 0x5657, 0x7, 0x3, 0x40, 0x3, 0xffff7fff, 0x1ff, 0x8, 0x1b, 0x5, 0x10, 0x4, 0xd, 0x5, 0x7, 0xf8, 0xffffff01, 0x6, 0x748c683, 0xfffffffc, 0x3, 0x80000001, 0x3, 0xfffffff8, 0x800, 0xffff, 0x4, 0x82, 0x8, 0x0, 0x2, 0x4, 0x9, 0x8, 0x4, 0x0, 0x5, 0x89, 0x4, 0x4, 0x9, 0x5, 0xed, 0x800, 0x7, 0x7fff, 0xcf, 0x233, 0x83, 0x9, 0x2, 0x4, 0x6, 0x3, 0xccd7, 0xfffff800, 0x1, 0x8, 0x93b2, 0x4, 0x6, 0x79, 0x5, 0x0, 0x0, 0x9, 0x8, 0x3f0d800, 0x691, 0xffffffff, 0x69, 0x1, 0x148, 0xb, 0xffffff81, 0x6, 0x7, 0x9, 0x8, 0x100, 0x5, 0x8, 0xe07c, 0x8, 0x2, 0x8, 0x3, 0x8001, 0x1, 0x3, 0x7f, 0x7, 0x4, 0xc6e3, 0x2, 0x8, 0x10001, 0xfffffffc, 0x9, 0x1, 0x5, 0x65c, 0x9, 0x1, 0x10001, 0x57bf, 0x0, 0x7, 0x4, 0x3, 0x6, 0x9, 0x71, 0x86b, 0x5, 0x1, 0x6, 0x3, 0x7, 0x1, 0x8, 0x7, 0x6, 0x7, 0x6, 0x7fff, 0x8, 0x7, 0x7fffffff, 0x7fffffff, 0xb925, 0x3, 0x1, 0xe4e, 0x1ff, 0x2, 0x8, 0x8, 0x1a, 0x9, 0x890a, 0xe676, 0xfffffffd, 0xa2cc, 0xf7b8, 0x4, 0x6f, 0x3769f255, 0x2e08, 0x7, 0x9, 0x7, 0x7ff, 0x10, 0xecdd, 0xfd8, 0x80, 0x70229ba, 0x7, 0x0, 0x787, 0x7fff, 0x1, 0x5, 0x1, 0x7aff, 0x1, 0x4, 0x10001, 0x2, 0xf, 0xa, 0x6, 0xc32, 0x7fff, 0xe4b7, 0x6, 0xffffd7c4, 0xb4, 0xd, 0x3, 0x8, 0x2, 0x80, 0x0, 0x81, 0x6, 0x5, 0x6, 0x8, 0xfffffff8, 0x6, 0x7f, 0x4, 0x1000, 0x2, 0x10000000, 0x80000000, 0x2, 0x9, 0x8e72, 0x7, 0x2, 0xffff8001, 0x2749dcf, 0x3, 0x6, 0x6, 0x5, 0xfffffddb, 0x86c4, 0x43, 0x9, 0x81, 0x7ff, 0x8e, 0x9, 0xae4, 0x4, 0x6, 0xbba, 0x9, 0x2, 0x44b16764, 0x7fffffff, 0x400, 0xfffffff7, 0x7, 0xc, 0x5, 0x5, 0x200, 0x6, 0x18, 0xffffffff, 0x10001, 0xf, 0xaf1, 0xfd4, 0x40, 0x0, 0xbb70, 0x1, 0x40, 0x4, 0x4, 0x1000, 0x81, 0x7, 0x46, 0x3, 0x2, 0x7, 0x7, 0x401, 0x8, 0xfffffffc, 0xff, 0x1, 0x100, 0x8, 0x10000, 0xfffffffe, 0x4e09, 0x7, 0x52d8, 0x7f, 0x0, 0xfffffffc, 0x9, 0x1, 0x8, 0xff, 0x7, 0x0, 0x5, 0x3, 0x80000001, 0x8, 0x1ff, 0x200, 0x5, 0x7, 0xfff, 0x7, 0x200, 0x4, 0xbb17, 0x5, 0x6, 0x7, 0x8, 0x3, 0x3, 0x5, 0xd, 0x0, 0x8, 0x3, 0x8, 0x4, 0x6, 0x7ff, 0x7, 0x9, 0x9, 0x7, 0x10000, 0x80000001, 0x8, 0x3d66d7fe, 0x5, 0x9, 0x2, 0x1000, 0xd5c, 0x95a, 0x6, 0xc27c, 0x1, 0x80000000, 0x6, 0x7, 0x1c, 0xfd0f, 0x9, 0x2, 0x6, 0x4, 0x320e, 0x4, 0x7, 0x60, 0xfffffffb, 0x5c6, 0xa, 0x3, 0x8, 0x6, 0x1000, 0x0, 0x9, 0x101, 0x4, 0x0, 0x5, 0x6, 0x2, 0x1, 0x2, 0x4, 0x80, 0xff, 0x2, 0xfffffffe, 0x5, 0x10001, 0x7, 0xe9ef, 0xffffff3b, 0xfffffffc, 0xfffffffc, 0x0, 0x6, 0x1, 0x9, 0x4, 0x880, 0x3, 0xde17, 0x101, 0x0, 0xe, 0x1, 0x0, 0x0, 0x6, 0x0, 0xffffff80, 0xd, 0x0, 0xb4bc, 0x0, 0x9a90, 0xa, 0x9, 0x4f4, 0x8, 0x1, 0x6, 0x110c, 0x6, 0x9, 0x101, 0xed42, 0x2, 0x10001, 0x5, 0x87, 0xfffffff8, 0x7, 0x89a, 0xa1e, 0x0, 0x9, 0x7, 0x0, 0xd, 0x34, 0x8, 0x5c2, 0x7, 0xd309, 0x80000001, 0xfff, 0x1, 0xfffffffe, 0xef2e, 0x6, 0xfff, 0x1, 0x3, 0x0, 0x7, 0x99, 0x7, 0x0, 0x80000001, 0x5, 0xa6, 0xff, 0x0, 0x9, 0x14ac00, 0xff, 0x400, 0x8, 0xf0, 0x3, 0x0, 0x4, 0x0, 0x1, 0xc4d, 0x10000, 0x80000000, 0xb2, 0x80000001, 0x2, 0x8, 0x9, 0x4, 0x5e, 0xfe4, 0x147c, 0xc, 0x7, 0x80000000, 0x3b8, 0x7fff, 0x560f, 0x80000000, 0x10001, 0xf7, 0xd2d0, 0x200, 0x3, 0x1234, 0x0, 0x1, 0x80, 0x471, 0x1, 0x0, 0x3, 0x5, 0x0, 0x4, 0x7, 0x8, 0xfffff413, 0x1ff, 0x5, 0x7, 0x9, 0x0, 0xe4d5ed4, 0x15, 0x9, 0x6, 0x552, 0x4, 0x2, 0x6, 0x800, 0x4c, 0x3ff, 0x10, 0x7, 0x3, 0x2, 0xd37, 0x8, 0xffff, 0x4, 0x2, 0x8, 0x8, 0x2, 0x1, 0xc, 0x3fa1, 0x3, 0x9, 0x4, 0x9, 0x0, 0x80, 0x80000001, 0x1, 0xac4, 0x18f1, 0x6, 0x5, 0x9, 0x9046, 0x4, 0xc, 0x2, 0xfffff67f, 0xffffffff, 0x0, 0x2, 0x1, 0x4, 0x8, 0x1ff, 0x2, 0xfffffffb, 0xffffffff, 0x7, 0x100, 0x4, 0xd, 0x1, 0x5, 0x2143bb5e, 0x5, 0x0, 0xd7, 0xfffffffd, 0x8cbf, 0x7, 0x3ff, 0x0, 0x5, 0x0, 0x6, 0x6111, 0x1, 0x2, 0x8, 0x53e, 0x100000, 0x7, 0x2, 0x8, 0x34, 0x7ff800, 0x8cd1cefe, 0x6, 0x2, 0xa170, 0x4, 0x4, 0x5, 0xf, 0x0, 0x7160, 0xd, 0x0, 0x10000, 0x0, 0x81, 0x0, 0x7, 0x4, 0x2, 0x6, 0x68, 0x3, 0x6, 0x3, 0x6, 0x2, 0x9, 0x4, 0xfffffff7, 0x6, 0x7, 0x3b20, 0x4, 0xb7, 0x4, 0x2, 0x40, 0xa, 0x1, 0x3ff, 0x6, 0xce, 0x1, 0x8, 0x4, 0xb, 0x8, 0x8, 0x6, 0x7, 0x1ff, 0xc, 0xfffffff4, 0x9, 0xd, 0x1, 0x8, 0x9, 0xffffffff, 0x7, 0x8, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0x2, 0x80, 0x4ec, 0x4, 0x59a5fb7c, 0x7, 0xc, 0x3, 0xfffffff7, 0x3ff, 0x3, 0xf47e, 0x1, 0x2, 0xba2, 0x91, 0xd0, 0x4, 0x9, 0x4, 0x449, 0x7, 0x81, 0x4, 0x6, 0x9, 0x4, 0x7fff, 0x9, 0x2, 0x9, 0x7b, 0x7, 0x2, 0xcb, 0xd36a, 0x1478, 0x0, 0x80000001, 0x2, 0x7, 0x0, 0x6, 0x2, 0x55ca, 0xffffbf3a, 0x8, 0xabe, 0xb9, 0x2, 0x401, 0x2, 0x2, 0x3, 0x101, 0x6, 0x7, 0x4, 0x8, 0xe78f, 0x1, 0x8001, 0x818, 0x6, 0xbee, 0x3, 0x2, 0x4, 0x3000, 0x5, 0xb75, 0x4, 0x8959, 0x20000000, 0x10, 0x7, 0x3, 0x3, 0x5, 0x6, 0xff, 0x0, 0x6, 0x1000, 0x7, 0x0, 0x2d, 0xf2, 0x56d7, 0x3, 0x7, 0x2, 0x6, 0xfffffffc, 0x1, 0x200, 0x1, 0xffffffff, 0x10, 0x800, 0x7, 0xbe, 0x0, 0x8, 0xd3, 0x21, 0x9, 0x497, 0x1, 0x1, 0x9, 0x8, 0x7fffffff, 0x0, 0x0, 0x6, 0xfffffff2, 0x1, 0x2, 0x72e, 0x7fff, 0x4, 0xc31, 0xfffffffc, 0x2, 0x5, 0x4, 0x1c7a, 0x2ccf6d26, 0xd, 0x10000, 0x35, 0x3, 0x5, 0xfffffffc, 0x5, 0x7fb, 0x80000000, 0x4, 0x3, 0x1, 0xb6d, 0x9, 0xf272, 0x155, 0x5, 0xf0d, 0x80000001, 0x67, 0x4, 0x0, 0x80000000, 0x800, 0x1, 0x8, 0x400, 0x7, 0x5, 0x7, 0xfff, 0x200, 0x1, 0x5, 0x8, 0x47, 0x2, 0xf, 0x2, 0x6, 0x4, 0x1, 0xd2b, 0x3, 0x4, 0x1, 0xfffffff9, 0x5, 0x2, 0x8, 0x3, 0xcab, 0x9, 0x1, 0x9b5d, 0x5, 0x35c8, 0x3, 0x88a, 0x1, 0x8, 0xfffffffd, 0x9, 0x90d, 0x40, 0x0, 0x4, 0xb, 0x10, 0x5, 0x5, 0x3, 0x9, 0x2c66, 0xb, 0x6, 0xd08, 0x7, 0x5f4, 0x5, 0x7ff, 0xed, 0xfffffffa, 0x1, 0xb7, 0x4, 0x2, 0xb04, 0x7, 0x6, 0xfffffffe, 0x9, 0x0, 0x0, 0x7f, 0x7f, 0xfffffffc, 0x80000000, 0xfffffffd, 0x0, 0x7f, 0x1, 0x7, 0xfffffffb, 0xdc1, 0xff, 0x6, 0x4, 0x4, 0x5, 0x3, 0x5, 0x7f, 0xfffffffe, 0x7, 0x515, 0xc, 0x80000000, 0x8be, 0x7237168d, 0x1, 0x4, 0x7fffffff, 0x2, 0x4, 0x5, 0x200, 0x100, 0xdb, 0x9, 0x6, 0x1ff, 0x8, 0x0, 0x4, 0x5, 0x8b38, 0xfffffffc, 0xfe1, 0x9, 0x2, 0x401, 0x9cb, 0x7, 0x48a59501, 0x80000001, 0xe09, 0x4, 0x0, 0x1e5, 0x4, 0x90, 0x1000, 0x6651, 0x9, 0xfffffffc, 0x7fffffff, 0x4, 0x10, 0x2, 0x7, 0x4, 0xffffffff, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfffffff9, 0x9, 0x3, 0xffff8001, 0x3ff, 0xbf, 0x200, 0x5, 0x7, 0xfff, 0xe3c, 0x1, 0x4, 0x3, 0x0, 0x2, 0x400, 0x4, 0xfb, 0x5, 0x400, 0x4, 0x0, 0x136, 0x10, 0x1, 0x6734, 0x2606b51b, 0x1, 0x1411, 0x0, 0x6, 0x8, 0x9, 0x8, 0x8, 0xfe0, 0x2, 0x9, 0x3, 0x8001, 0x5b, 0x2, 0x4, 0x1, 0x4, 0x9fc, 0x7fff, 0x3, 0xf, 0x6, 0x2, 0xfffff0a0, 0x1ff, 0x80000001, 0x9, 0x7, 0x7, 0x9, 0x8001, 0x2, 0xfff, 0x2, 0x3, 0x23, 0x8, 0x40, 0x1, 0x2f000, 0x6, 0x383d, 0xc6b0, 0x3, 0x1, 0x3ff, 0x0, 0x30c24aab, 0x86, 0x8000, 0x10000, 0xe, 0x3, 0x4, 0xd39, 0xa63, 0x4, 0x26, 0x10, 0x0, 0x10001, 0x80000001, 0x3, 0x9, 0x9, 0x80000000, 0x40, 0xd394, 0x4, 0x3, 0x5a, 0x4, 0x0, 0xde62, 0x8efd, 0x1, 0x0, 0x1, 0x3, 0x6b5e1576, 0x7, 0x7, 0xed, 0x3, 0x2, 0x53, 0x2, 0x10001, 0xf, 0x6f, 0x6, 0x8, 0x2, 0x3, 0x8, 0x1ff, 0x8c, 0x1, 0x8, 0x48d, 0x6, 0x4, 0x8, 0xe, 0xff, 0xfffffff8, 0xf44, 0x7, 0x4, 0x0, 0x5, 0x4, 0x1, 0x9, 0x7fffffff, 0x51a3, 0x2, 0xd613, 0x4, 0xfffffffe, 0x5, 0x2, 0x1, 0x54d, 0x400, 0x400, 0x80000000, 0xffff, 0x3, 0x800, 0x7fffffff, 0xd2c, 0x7fff, 0x4, 0x7ff, 0x7, 0x401, 0x3, 0xe, 0xfffffff8, 0x8, 0xd, 0x6, 0x78, 0x82, 0x0, 0x6, 0x7e, 0xffff8000, 0x0, 0x8, 0x80000001, 0x2, 0xfff, 0x7fff, 0x3, 0x2, 0x7f87, 0x2000000, 0x8, 0xc8, 0x1, 0x9, 0xdc9, 0x9, 0x3ff, 0x7, 0x9, 0xfffffff8, 0x4, 0x7ff, 0x3800000, 0x69, 0x4, 0x100c, 0x7, 0xfffffffe, 0x400, 0x7fff, 0x4, 0x5a5, 0x5, 0x5, 0x7, 0x1, 0xffff3aab, 0x8, 0x34f, 0x8, 0x3, 0x0, 0x3, 0x4b17, 0x1, 0x0, 0x17d3, 0x3, 0x1ff, 0x10000, 0xffffffff, 0x1, 0x24, 0x6, 0x9, 0x1, 0xf3d, 0x1ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x80000001, 0x6, 0x5, 0x7, 0x5, 0x5, 0x6, 0x8d, 0x6, 0x4, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8001, 0xff, 0x40, 0x7, 0xfffffffc, 0x8001, 0x5, 0x6, 0x9, 0x10, 0x2c, 0x2, 0x8, 0xb09, 0x0, 0x9, 0x6, 0x40, 0xfffffffd, 0x3, 0x6, 0xf3, 0x7, 0x17, 0x3, 0xf, 0x7, 0x50000000, 0x3ff, 0x10001, 0x5, 0x8000, 0x5, 0x4, 0xd, 0x5, 0x200, 0x574, 0x1, 0x6, 0x5, 0x9, 0x5, 0x33, 0x5, 0x5, 0xffffffff, 0xfffffff9, 0x1, 0x9, 0x200, 0x2, 0x0, 0x2cc, 0x4, 0x6, 0x7, 0x5, 0x6, 0x6, 0x4, 0x8, 0x6, 0x73c980ad, 0xfff, 0x2, 0x2, 0x0, 0x4, 0x2, 0x5868, 0x6, 0x6, 0x80000001, 0x0, 0xfffffff8, 0x7, 0x7, 0xb, 0xffffffff, 0x3, 0xffffffff, 0x9, 0x3e8, 0x797, 0x1, 0x6, 0x80000001, 0xc169, 0x5, 0x5, 0x94b7, 0x388f, 0x0, 0x6, 0x0, 0x6, 0x2, 0xa4, 0x80000001, 0x5, 0x7, 0xac, 0x2, 0x3ff, 0x6, 0x7, 0x0, 0x7, 0x0, 0xff, 0x1, 0x521e, 0x0, 0x10001, 0x7fffffff, 0x0, 0x1, 0x6, 0x10001, 0xf6, 0xd4, 0x1000, 0xc9, 0x0, 0x80000000, 0x6, 0x4, 0x3, 0x3, 0x2, 0x4, 0x0, 0xd278, 0x9, 0x0, 0x5, 0x3, 0x3, 0x5, 0x7f, 0x1, 0xc794, 0x5, 0x2, 0x0, 0x766d, 0x4, 0x7, 0x7, 0x2, 0xe5, 0x8, 0x7, 0x7fff, 0x3e, 0x5, 0x1, 0x1, 0x40, 0x9, 0x2, 0x7fffffff, 0x5, 0x9, 0x2, 0x6, 0x71f, 0x10001, 0x400, 0x8, 0x7ff, 0x8, 0x4, 0x19, 0x400, 0x7, 0x4, 0x6, 0x9, 0xf0, 0x4, 0x3, 0x8001, 0x1000, 0xb, 0x9, 0x8, 0x5, 0x9, 0x1, 0x200, 0x1, 0xab17, 0x0, 0x2, 0x3, 0x2, 0x8, 0x844, 0x2, 0x5, 0x70000, 0x5, 0x3ff, 0x3, 0x2, 0x20004, 0x1ff, 0x10001, 0x0, 0x1, 0xd, 0x9, 0xf225, 0xfffffc00, 0x6, 0x1c1beef3, 0x6, 0x3, 0xa, 0x4, 0x5, 0xb, 0x2, 0x2, 0x79, 0x9, 0x2, 0x10, 0x400, 0xfffffffd, 0x5, 0x795, 0x7, 0x80000001, 0x6, 0xf, 0x7, 0x7, 0x7fff, 0x7, 0x6, 0xfa, 0xb1e, 0x4, 0x90b, 0x8, 0x4, 0x3, 0x10, 0x4800, 0x6991, 0x0, 0x7f, 0xc82, 0xc, 0x2e, 0xefa, 0x7, 0x7, 0x5322529e, 0x9, 0xffffb150, 0xffff, 0x8, 0x0, 0x6, 0x58000000, 0xfd2f, 0x7fff, 0x80000001, 0x9, 0x4, 0xd, 0x80000001, 0x2, 0xdb, 0x2, 0x5, 0x1e, 0xe52, 0x7f, 0xa8, 0x5, 0x6, 0x6, 0x80000000, 0x7, 0x1, 0x7fffffff, 0x3, 0xf, 0x38f, 0x4, 0x1, 0x3, 0x3, 0x401, 0x4, 0x3, 0x7fffffff, 0x0, 0x8000, 0x66, 0x6, 0x38, 0x5f, 0x5, 0x4, 0xc7, 0xffffff10, 0xfffffffd, 0x4, 0x80, 0x2976, 0x10001, 0x2, 0x8000, 0xfffffffc, 0xa568, 0x5, 0x3, 0x100, 0x80, 0x8, 0x7fff, 0x9, 0x2, 0x1969, 0x3, 0x2, 0xff, 0x7, 0x7c, 0x8, 0xffffff00, 0x5, 0xe, 0x7fff, 0x40, 0x8, 0x4, 0x7, 0xb, 0x2, 0xffff, 0x75, 0x2, 0xd17, 0x81, 0x0, 0x9, 0x3, 0x4dc6d5fa, 0x5, 0xc63, 0x5, 0x1ff, 0xada, 0xe0c, 0x7, 0xfff, 0x3, 0x3, 0x3, 0x6, 0x4, 0x0, 0xf, 0x1000, 0x3, 0x5, 0x1, 0x4, 0x9, 0x3, 0x37d, 0x8, 0x1, 0xff, 0x7ff, 0x6, 0x7, 0x2b08, 0x1ca, 0xac1, 0x4, 0x3ff, 0xfffffee5, 0x3, 0x8, 0x3, 0xfffffe43, 0xc5, 0x0, 0x5, 0xf405, 0xe5, 0x7, 0x6, 0x8, 0x9, 0x100, 0x200, 0x4, 0x1, 0x528af1cb, 0xffff, 0x9, 0x1, 0x6, 0xc, 0x3, 0x5560, 0x5, 0x4, 0x5f7, 0x5, 0x10, 0x8, 0x2, 0xc, 0xaea75c6, 0x8001, 0x20, 0xfb45, 0x0, 0xfffffffd, 0xfffffffe, 0x9, 0x7ff, 0x40, 0x7fff, 0xcf, 0x3, 0x3627, 0x4, 0xffffffad, 0x57, 0x720d, 0x1, 0x4, 0x0, 0x7f, 0x296, 0x6, 0xc, 0x2c77aaf, 0x5, 0x3, 0x3, 0x9, 0x4, 0x0, 0x8001, 0x0, 0x80, 0x7, 0x4, 0x2, 0x0, 0x8, 0x1ff, 0x4, 0x1, 0x401, 0x7, 0xffffff80, 0x2, 0xffffffff, 0xfea, 0x5, 0x1, 0x9, 0x10000, 0x80000000, 0x4, 0x33eb, 0x810, 0x7f, 0x3, 0x200000, 0xffff, 0xf, 0x3, 0xd, 0x9, 0x5, 0x7, 0xa, 0xff6, 0xfffffffe, 0x0, 0x7, 0x9, 0xb2, 0x4, 0x4, 0x9, 0x5, 0xe7c, 0x6, 0x1, 0x6, 0x8e, 0x587, 0x400, 0xffffff00, 0x2, 0x40000000, 0xc3, 0x1, 0x2, 0x2, 0x3ff, 0x4, 0xfffffffa, 0x5, 0x0, 0x4, 0x4, 0x10000, 0x9, 0x8, 0x6, 0x400, 0x4953, 0xb78c, 0x2, 0x3, 0x9, 0x9, 0x5, 0xb, 0x7fffffff, 0x1, 0xd845, 0x336, 0x6, 0x5, 0x7, 0xfffffff7, 0x6, 0x8, 0x4, 0x6, 0x9, 0xc098, 0xd2, 0x80, 0x3, 0x200, 0xffffd4f6, 0x4, 0x7, 0x5, 0xffffff80, 0x7, 0x5, 0x1, 0x860, 0x9, 0xffff, 0xb30e, 0x50, 0x6, 0xdf42, 0x8d27, 0x4, 0x40, 0x1, 0x3, 0x5, 0x8, 0x80000000, 0x4, 0x3, 0xfa, 0x4, 0x101, 0x6, 0x2f26b711, 0x4, 0x3, 0xffffb185, 0x9, 0xf647, 0x4, 0x0, 0x9e, 0xa, 0x5, 0x80000000, 0x7fffffff, 0xd9f, 0x2, 0x3, 0xb, 0x3, 0x5, 0x77d, 0xa9, 0x6, 0x74d9316f, 0x0, 0x3, 0x0, 0x7, 0x8, 0x705, 0x8c, 0x9, 0x5, 0x2, 0x8, 0x1, 0x31d4e78a, 0x3, 0x0, 0x800, 0x0, 0x7, 0x3ff00000, 0x0, 0x6, 0x7, 0x6, 0x5, 0x5207, 0x0, 0x7, 0x80000000, 0x0, 0x7, 0x1194, 0xfab, 0xeba3, 0x14000000, 0x3, 0x9, 0x5, 0x101, 0x3, 0x7, 0x5, 0x0, 0xaa6c, 0xfc, 0x401, 0x1ff, 0xc, 0xfffffff7, 0xffff659b, 0xd, 0x0, 0xa90, 0x0, 0x1, 0x0, 0x9, 0x3, 0x1, 0x3, 0x7fff, 0x10000000, 0xffff, 0x1, 0x5, 0x5, 0xfffffffa, 0x3, 0x5, 0x0, 0x4, 0x0, 0xa3, 0x702, 0x8, 0x400, 0x5, 0x7f, 0x2, 0x4, 0x9262, 0x4, 0x6, 0x6, 0x80000000, 0xe8, 0x0, 0x6, 0x82, 0xffff, 0xbe2, 0x10, 0x85, 0x4, 0xe, 0x7, 0xffff, 0x1, 0x5, 0xffffff81, 0xfffffffc, 0x1, 0x4, 0xffffffff, 0x5, 0x9, 0x9, 0xa375, 0x5, 0xfffff000, 0x3ff, 0x8, 0x2, 0x10001, 0x40, 0x9e0, 0x100, 0x2, 0x5, 0x7, 0x4, 0x6, 0x8, 0x8, 0x8000, 0x8, 0x8, 0x5, 0x3f6, 0x5, 0x9, 0x7, 0x7, 0x6, 0x8000, 0x80, 0x9, 0x7f, 0x4, 0x9, 0x6, 0x8, 0x400, 0x4263, 0x401, 0x8, 0xff, 0x7, 0x8, 0x3, 0x1, 0x9, 0x5, 0x2, 0x9, 0x4, 0x7, 0x0, 0xafa1, 0x1, 0x0, 0x8, 0x1, 0x845, 0x5229, 0x1, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x0, 0x6e, 0x101, 0x0, 0x8, 0x0, 0x40, 0x9, 0x6, 0x7, 0x3, 0xfff, 0x2, 0x7, 0x9, 0xf02, 0x3, 0x6, 0x1, 0x8afd, 0xf0, 0x900, 0x8, 0x800, 0xc, 0xfffffffe, 0x8001, 0xfffffff9, 0x5c12a561, 0x6, 0xe8, 0x4, 0x0, 0xea2d, 0x0, 0xffff, 0x0, 0xcf, 0x8, 0xffffffff, 0x8683, 0xffffffff, 0x1, 0x4, 0xff0, 0xa, 0xb, 0x1, 0xffffff54, 0x1, 0x6, 0x100, 0x1000, 0x2, 0x8d96, 0x7ff, 0x3ff, 0x5, 0x200, 0x10001, 0x400, 0x0, 0x9, 0x5, 0x3, 0x8001, 0x4, 0xffff9b83, 0x800, 0x9, 0x0, 0x5, 0x886, 0x1, 0x1, 0x0, 0x5, 0x4, 0x5, 0x2, 0xf, 0x7e, 0x4, 0x0, 0x2, 0x3, 0x8, 0x5, 0x10, 0x4, 0x400, 0x1, 0x1, 0x4, 0xf1f7, 0xfffffff9, 0x5, 0x4, 0x0, 0xa, 0x3, 0x4, 0x5, 0x3c, 0x258, 0xa, 0x0, 0x8122, 0x0, 0x1, 0x8d12, 0xeeb, 0x1, 0x6, 0x9, 0x1, 0x81, 0x80000001, 0x748b38ad, 0x1, 0x5, 0x1ff, 0x10000, 0x0, 0xb, 0x2, 0x34a9, 0x7f, 0x8a, 0x50a2f579, 0xff, 0x9, 0x6, 0x20, 0x3, 0x7, 0x8, 0x5, 0xe0, 0x7, 0x1, 0xfffffff7, 0xfffffff2, 0x6, 0x5, 0x1, 0x6, 0x80000000, 0xffff, 0x6, 0x9, 0x6f, 0x8, 0xffffffff, 0x5, 0xffffff81, 0x726, 0x9, 0xa1c, 0xfffffff9, 0xc044b91, 0xc00000, 0x4, 0x1, 0x3, 0x2, 0x9, 0x7, 0x2, 0x6, 0xd5be, 0x8, 0x5, 0x9, 0xd3d, 0x81, 0x8, 0xc, 0x9, 0x7e66, 0x2, 0x7, 0xffff, 0x0, 0x101, 0x6, 0x6, 0x3, 0x10ea, 0x1, 0x9, 0x4, 0x5, 0x7, 0x9, 0xf, 0xb, 0x2, 0x8, 0x6, 0x6, 0x8, 0x4, 0x5, 0x1948, 0x4, 0x9, 0x9, 0x7, 0x6, 0x5, 0x7, 0x1, 0x3, 0x2, 0x69b, 0x7, 0x8, 0xffff, 0x0, 0x5, 0x3, 0x5, 0xd, 0xd, 0x3, 0x77, 0xfffffff7, 0x0, 0x8, 0x80, 0x7, 0x81, 0x72, 0x2, 0x10, 0xd9b, 0x2058, 0x8888, 0x4, 0x10001, 0x2, 0x1, 0x1ff, 0x7fffffff, 0x0, 0x8, 0xa, 0x916b, 0x9, 0x1ff, 0x7, 0x1, 0x2, 0x5, 0xfffffffc, 0x80, 0x0, 0x50, 0x1, 0x9, 0x5, 0xc8b, 0x2ed, 0x101, 0x2, 0x7, 0x9, 0x800, 0x588b, 0x3ff, 0x2, 0x8, 0x8, 0x80000001, 0x7, 0x1, 0x7e37, 0xa12, 0x9, 0xe41, 0x9, 0x9, 0x0, 0x9b, 0x3, 0x10000, 0x8, 0x2, 0x2, 0x1ba8, 0x100, 0x6, 0x3, 0x9, 0x5, 0x3, 0x4, 0x81, 0xf2e, 0x10001, 0x3, 0x6000, 0x3, 0x3, 0xc7, 0x0, 0xffffffff, 0xf06, 0x4, 0x80000001, 0xffffff58, 0xf0f8, 0xdb33, 0x9, 0x8, 0x6, 0x9, 0x9, 0x7, 0x1, 0x353, 0x8, 0x10000, 0x2, 0x6, 0x2, 0x9, 0x0, 0x3, 0x7, 0x3, 0x0, 0x1, 0x0, 0xe38a, 0x80000000, 0x1, 0x81, 0x8ba00ce, 0x5, 0x1, 0x7, 0xb, 0x8, 0xffffff8b, 0x5, 0x8, 0xfffff8c8, 0x0, 0x80, 0x0, 0x4b, 0x28a, 0x80000000, 0xb816, 0xed29, 0x9, 0x1, 0x100, 0x3, 0x7, 0x10, 0x2, 0xa8, 0x6, 0x1, 0x7, 0xffff, 0x3, 0x8, 0x0, 0x0, 0xffff, 0x5, 0x10, 0x0, 0x3, 0x400, 0x9, 0xf, 0x0, 0xfff, 0x8, 0x2a43, 0x200, 0x7, 0x1, 0x8, 0x8, 0x0, 0xd2d, 0xd, 0x0, 0x3, 0x34b, 0xfffffffc, 0x1, 0x4d69, 0x0, 0x800, 0x20, 0x3, 0xfe3c, 0x1, 0x1, 0x7, 0xaf, 0x10001, 0x0, 0xfffffff7, 0x1, 0xa8d, 0x5, 0x5, 0x0, 0x6, 0xfc4, 0x40b1, 0x5, 0x9, 0x2, 0xfffffffe, 0x6, 0x4, 0x3061, 0x5, 0x101, 0x3, 0x6, 0xfffffffc, 0x100, 0x9a, 0x2, 0x2d0d8d80, 0x8, 0x40000000, 0x10001, 0x5, 0x3, 0x101, 0x49a38, 0x6, 0x4, 0x3ff, 0x0, 0x2, 0x8, 0x8, 0x4, 0x5, 0x1ff, 0xffffffff, 0x8, 0x9, 0x4, 0x8, 0xc4b, 0x7, 0x7, 0x0, 0x3, 0x9e, 0x7, 0x7f, 0x6, 0x7, 0x3, 0xfff, 0x387, 0xce0f, 0x5, 0x1, 0x9, 0x4, 0x5, 0x2, 0x10001, 0x1, 0x3, 0xa, 0x1, 0x2, 0x0, 0x0, 0x6f3, 0x1, 0x1, 0x100, 0x7, 0x6, 0x10000, 0x8c38, 0x1, 0x1, 0x6, 0x7411, 0x5, 0x3, 0xf, 0x0, 0x4, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7, 0x8, 0x9, 0x601, 0x0, 0x0, 0x8, 0x10001, 0xc13a, 0x3, 0x3, 0x6, 0x1608d607, 0x9, 0x1e, 0x7, 0x241, 0xfffffff9, 0x8001, 0xf9a5, 0x5a8f, 0x10000, 0xf, 0x9, 0x10001, 0x8, 0x9, 0x2, 0x3, 0xe1, 0xb65, 0x1, 0xff, 0x8, 0x5ec4, 0xff, 0x1, 0x0, 0x2, 0x1ff, 0x9, 0x6c, 0x2, 0x2832, 0x10001, 0x0, 0xfffffff6, 0x2, 0x9, 0x4, 0x6, 0x2, 0xa6, 0x0, 0x7fff, 0x1000, 0x1, 0xbcfc, 0x1, 0x1, 0x1, 0x83, 0x4, 0x7f, 0x10, 0x4, 0x3, 0x51, 0x10001, 0x9, 0x9, 0x7f, 0xa8ee, 0x10, 0x0, 0x3, 0x6, 0x5, 0x3, 0xfffffffb, 0x3268, 0xb441, 0x6, 0xb, 0xe, 0x4, 0x401, 0xc, 0xc, 0x1, 0x4, 0x5, 0xf1, 0x9, 0x1, 0x0, 0x6, 0x2, 0x7f, 0x80, 0x2, 0x0, 0x5, 0x4, 0x5, 0x7fffffff, 0x4958, 0x7, 0x7f, 0x800, 0x4, 0x1, 0x265, 0x4, 0x800, 0x400, 0x3, 0xfffffffc, 0x100, 0x6, 0x9, 0x2, 0x5, 0x1000, 0x1, 0x8000, 0x4, 0xfffffffc, 0x6, 0x1ff, 0x7, 0x9, 0x7d, 0x3782, 0x2, 0x7ff, 0xffff, 0x9e58, 0x4, 0x2, 0x7, 0x9, 0x5, 0xa88, 0x6265, 0x1, 0x800, 0x4, 0xb, 0x4, 0x81, 0x6, 0x4, 0x7, 0x3, 0x40, 0x2, 0x5, 0xe1ac, 0x2, 0x0, 0x1, 0x5, 0x7, 0x3, 0x0, 0x7, 0x7, 0xa, 0x3, 0x67, 0x4, 0x7, 0xfffff000, 0x7, 0xe1, 0x4, 0x2, 0x4, 0xd, 0xfffffff8, 0x3, 0xf342, 0x81, 0x5, 0x0, 0x4, 0x6, 0x1, 0x46e0, 0x8, 0x6, 0x8, 0x0, 0x4, 0x0, 0x8, 0x8df, 0x2, 0xffff, 0xfffff800, 0x5, 0x0, 0xf, 0x1, 0x1ff, 0x9, 0x9, 0xfffffffe, 0xc323, 0xa1f2, 0x2, 0x8, 0x4, 0x8, 0x0, 0x8, 0x7, 0x0, 0x4, 0xa, 0x166, 0x8000, 0x4, 0x6, 0xd, 0x7, 0xf, 0x80, 0x8000, 0x8, 0x1ff, 0x5, 0x1, 0x80000000, 0x0, 0x8, 0x6, 0x7fff, 0x1ff, 0x40, 0x80, 0x7, 0x33, 0xffff, 0x3, 0x1, 0x5, 0xffffff81, 0x0, 0x0, 0x4da4, 0x8, 0xfffffff7, 0x7, 0x800, 0x5, 0x80000000, 0x5, 0x9, 0x2, 0xfffffffb, 0xb1, 0x80000000, 0x101, 0x6, 0xe6, 0x2, 0xffff, 0xb, 0x9, 0x7, 0x0, 0x1, 0x8, 0x7, 0x2, 0x0, 0x6, 0x9, 0x1, 0x3, 0x3, 0x8, 0xffff, 0x8, 0x5, 0x40, 0x81, 0x8001, 0x4518, 0x6, 0x1000, 0x46, 0x5, 0x400, 0x2, 0x0, 0x739, 0xfffffffd, 0xf, 0xbb3e, 0x5, 0x372b, 0x8, 0xc68, 0xfff, 0x0, 0x57, 0x1, 0x7, 0xfffffffd, 0xa, 0x4, 0x400000, 0x1, 0x81, 0xa, 0x1, 0x0, 0x2, 0x1, 0x1ff, 0xdcc, 0x4, 0x7, 0xffff0000, 0x0, 0xfffffbff, 0x6a29, 0x73, 0x85, 0x3, 0x0, 0x9, 0x8, 0x7, 0x2, 0xfffffcc1, 0x7, 0x8e7d, 0x9, 0x4a2, 0x9, 0x91, 0x7fff, 0x1, 0x3, 0x8, 0x40, 0x6, 0x3, 0x80000001, 0x80000001, 0x3, 0x9, 0x101, 0x5, 0x74b, 0x5, 0xffffff7f, 0xfffffff9, 0x6, 0x1ed9a683, 0x35, 0x3, 0x7f, 0x4, 0x81, 0x9, 0x741, 0x6, 0x3, 0x8, 0x3, 0x5, 0x5, 0x6, 0xe, 0x4, 0x1000, 0x4, 0x57, 0x548d, 0xad8, 0xfffffffc, 0x3ff, 0x1, 0x5, 0x4, 0x1, 0x3630df6c, 0x2f6, 0x0, 0x0, 0x6, 0x4, 0xd1, 0x0, 0x0, 0xf, 0x10000, 0x1, 0x80000000, 0x8, 0x9, 0x6, 0x0, 0x1, 0x400, 0x1000, 0x1, 0x1, 0xffffffff, 0xffff, 0xe, 0x8, 0x1, 0xc7c, 0x5, 0x2, 0x3, 0xfbfd, 0x8edc, 0x6, 0xb, 0x58, 0x10, 0x9, 0x2, 0x1, 0x1, 0xf1, 0x8000, 0xfffffff2, 0xffff, 0x1ff, 0x3, 0x5, 0x7fe000, 0x5, 0x2, 0x392b, 0x0, 0x1, 0x5, 0x8, 0x9, 0x7, 0x9, 0x9, 0x0, 0xfffffff7, 0x4, 0x1000, 0x7, 0xa, 0x0, 0x3, 0x5f, 0x3, 0x203, 0x2, 0x9, 0x5, 0x7, 0x3, 0xa, 0x2, 0xb26c, 0x5, 0x7, 0x3, 0x800, 0x7fff, 0x8001, 0x1, 0xf2, 0xe8a40e2f, 0x6, 0x6, 0x80000001, 0x3, 0x101, 0x6, 0x6, 0x4, 0x1, 0xfff, 0x8, 0xbb6c, 0xdc9f44aa, 0x2, 0x9, 0x6, 0xfd46, 0x200, 0x5, 0x1, 0x10000, 0x0, 0x68b, 0x7, 0x1, 0x9, 0xffffffff, 0x9, 0x47, 0x1, 0xfffffffa, 0x3ff, 0x4, 0x7, 0xffffffff, 0x4, 0x5, 0x4, 0x9, 0x1, 0x6, 0x9, 0x905, 0x5, 0x3, 0x4, 0xd, 0x4, 0x4f1f1488, 0xe, 0x8f8f, 0x80000000, 0x8, 0x4, 0x2, 0x401, 0x2, 0x0, 0x81, 0x0, 0x7, 0x800, 0x80, 0x8, 0x956, 0x175e, 0xd6, 0x7, 0x0, 0x6, 0x9, 0xf, 0x0, 0xf, 0x9, 0xfff, 0x8, 0xe0000000, 0xc0, 0x7ff, 0x7, 0x6b1a, 0xd13bf202, 0x0, 0x3, 0x80000001, 0x4, 0xb, 0xa, 0x8, 0x200, 0x9, 0x2, 0x2, 0x8001, 0x4, 0x5, 0xd, 0x6, 0xc88, 0x2, 0x10000, 0xb0, 0x2, 0x6, 0x5, 0x8, 0x4, 0x0, 0x6, 0x4, 0x7fffffff, 0x9, 0xd, 0x3, 0x2, 0x10000, 0x6, 0xffffff48, 0x8, 0x40, 0x4, 0x2, 0xb3, 0x5, 0x1, 0x4, 0x0, 0x81, 0x994, 0xfffffffa, 0x9, 0x5, 0x5, 0x4, 0x8, 0x9, 0x8, 0x40, 0x8001, 0x46, 0x81, 0x401, 0x2, 0x34, 0x5, 0x0, 0x7ff, 0x4, 0xe2, 0x3, 0xafc5, 0x0, 0x2, 0x1, 0x6, 0x10000, 0x80000001, 0x10000, 0x80000001, 0x37f0, 0x2000, 0x1, 0x52e, 0x5, 0x3, 0xec7, 0x3, 0x7fff, 0x6, 0x5, 0x6, 0x41, 0x6, 0x3ff, 0x4, 0x56ab, 0x8001, 0x5, 0x5, 0x4, 0x8, 0x8, 0x9, 0x8, 0x8, 0x8, 0x9, 0x81, 0x2, 0x8, 0x200, 0x5, 0x5, 0x7, 0x9, 0x401, 0x0, 0x0, 0x1, 0xf82, 0x3, 0x6, 0x82d5, 0x639, 0x1, 0x5, 0x8, 0x5, 0x6, 0x8, 0x5, 0x9, 0xe516713, 0x22f, 0x2, 0x6, 0x6, 0x2, 0x2, 0x5, 0x8916, 0x2, 0x96dc, 0xffffff7f, 0x3, 0x5, 0x7ff, 0x7fff, 0x0, 0xc, 0x1, 0x1d, 0xfa, 0xf, 0xfc0, 0x5, 0x3, 0x4, 0x80000000, 0x5, 0x3, 0x400, 0x4bf, 0x3, 0x6, 0x6, 0x5, 0xf39, 0x8, 0x6, 0xffffff81, 0x9, 0x80, 0xe, 0x4, 0x7, 0x80000000, 0x4, 0x2, 0x6, 0x1, 0x9, 0x3, 0x3ff, 0x7, 0x89, 0xa, 0x531, 0x5, 0x41, 0x2, 0x0, 0xff, 0x2, 0x2, 0x2, 0x6, 0x1, 0x101, 0xeeb, 0xfffffffe, 0xcf44, 0x2, 0x1, 0x5, 0x5, 0x5, 0x0, 0x10, 0x3, 0x223, 0x1, 0x7f, 0xf, 0x9, 0xffff, 0x80, 0x400, 0xc, 0x8000, 0x7, 0x3, 0x9, 0x2, 0x0, 0xfffffffa, 0x6, 0x7fffffff, 0x3, 0xb2c, 0xfffffff7, 0x0, 0xf, 0x6, 0x4, 0x9, 0x7fffffff, 0x7, 0x1, 0x0, 0x8555, 0x47b, 0x63, 0x4, 0x0, 0x32f2b9e8, 0x4, 0x9, 0x101, 0x5aad0edd, 0x6, 0x4, 0x40, 0x8000, 0x0, 0x8, 0xffffff7b, 0x40, 0x101, 0x9, 0x378, 0x80, 0x5c4e81fc, 0x8, 0x0, 0x9, 0x9, 0x9, 0x8, 0x3, 0x2, 0x3, 0x0, 0x4259, 0xc08, 0xffff, 0xfafb, 0x2, 0x9, 0x1000, 0x7ff, 0x7, 0x3, 0x2, 0x8001, 0x0, 0x7, 0x1, 0x7, 0x56, 0x2, 0x401, 0x8, 0x7ff, 0x4, 0x5, 0x1, 0x4, 0x8, 0xfc2, 0x10, 0x5, 0xa, 0x2ebe, 0x1, 0x1, 0x1, 0x5, 0x3, 0x3ff, 0x1f800, 0x0, 0x4, 0x1ff, 0xf8, 0x8, 0x8, 0xfffffe01, 0xffffffa1, 0x7, 0x4, 0x1, 0x0, 0x6, 0x80000000, 0x0, 0x1, 0x0, 0x4, 0x5, 0x2, 0xa, 0x9, 0x21, 0x3ff, 0x6, 0x6, 0x6, 0x1, 0x9, 0x3, 0x4, 0x4, 0x0, 0x7fffffff, 0x7c37, 0xba2, 0x4, 0x2a8d7897, 0x7, 0x7, 0x4040, 0x1, 0x6, 0x2000000, 0xffff8001, 0x5046, 0x3, 0x9, 0x1, 0x5, 0x7, 0xa2, 0x2, 0x1, 0x5, 0x7, 0xb, 0x4c, 0x63a, 0x3, 0x7, 0x6, 0x80, 0x0, 0x9, 0xd, 0x0, 0x7, 0x3, 0x5, 0x7, 0x7fffffff, 0x1, 0x0, 0x866, 0x9, 0x5, 0x3, 0x7, 0xe, 0xfffffffd, 0x4f7, 0x400, 0x1000, 0x6, 0x5, 0x1, 0x10, 0x1, 0x10, 0x600, 0x6, 0x9, 0x5, 0x0, 0x6, 0x2, 0x6, 0xdcfe, 0x1, 0x3, 0xfffffffd, 0x10001, 0x1, 0x8, 0x7, 0x6, 0x3b75, 0x9, 0x7fffffff, 0x58, 0x4, 0x0, 0x10, 0x5, 0x6, 0x40c, 0x8, 0x2, 0xfffffffe, 0x6, 0x3ff, 0x6, 0x3ff, 0x0, 0x2, 0x310, 0x5, 0x7, 0x541, 0x80, 0xa69, 0x0, 0xc, 0x8, 0x7fff, 0x4, 0xfffffff7, 0x1686, 0x6, 0x13, 0xa182, 0xbff, 0x6, 0x3, 0x800, 0x5, 0x98, 0x2, 0x40, 0x100, 0x9, 0x4, 0x1, 0x6, 0xe, 0x2, 0x214, 0xfff, 0x3, 0x7, 0x20, 0x6, 0x8001, 0x3, 0x70c, 0x1, 0x0, 0x8, 0x5, 0x8db7, 0x4, 0x81, 0xa, 0xf3b, 0x6, 0x9, 0x1, 0x80000000, 0x400, 0x2d9, 0x3, 0x3ff, 0x8000, 0xd, 0x40, 0x60000, 0x8, 0x74, 0x3, 0x3, 0x845, 0xffffff7f, 0x0, 0x0, 0x9, 0x6, 0x19, 0x3, 0x7, 0x80000001, 0x8, 0x7, 0xfff, 0x7, 0xa, 0x6, 0xc1, 0x8, 0x2, 0x7, 0x200, 0x8, 0x4, 0x573, 0x1, 0xbadd, 0x6, 0x4, 0x9, 0x2, 0x80000000, 0x6, 0x4, 0x5, 0x3, 0x0, 0x7305, 0x8, 0x8, 0x6, 0x6, 0x19, 0x9, 0xffffe5a0, 0x1ab, 0x6, 0x18, 0x3541, 0x5, 0x1, 0x4c79, 0xffff, 0x9, 0xfffffff8, 0x1, 0xfffffbff, 0x25c14cc4, 0x5, 0xf, 0x9, 0x2, 0x2, 0x33, 0x8001, 0x0, 0x8, 0x9, 0x9, 0x10000, 0x6, 0x3, 0x80000000, 0x7, 0x9, 0x2, 0x7, 0x1, 0x80, 0x3, 0x7f, 0x1ff, 0xd, 0x4, 0xe, 0x4, 0xbcd, 0x8, 0x100, 0x0, 0x1, 0xa, 0x800, 0x3, 0x4, 0x6, 0x4, 0x100, 0x3, 0x4, 0x2, 0xd38, 0x7, 0xe, 0x80, 0x2, 0x7, 0x6, 0xff, 0xc, 0x7fff, 0xa, 0xe, 0x4, 0xa107, 0x9, 0x4, 0xa, 0xe7d1, 0x61, 0x7, 0x10000, 0xba4d, 0x6, 0x9, 0x5, 0x1000, 0xc, 0x0, 0xa8d, 0x5, 0x9, 0x100, 0x4, 0x1ff, 0x6, 0x9, 0x5, 0x8cc, 0x80000000, 0xbd9, 0x3, 0x8, 0x8000, 0x8, 0x2, 0x1, 0x1, 0x7, 0x5, 0x3, 0x1, 0x3, 0xb, 0x1ff, 0xfff, 0x5, 0x6, 0x81, 0x4, 0x3, 0x101, 0x6, 0x2, 0x0, 0xfffffff8, 0x6, 0x5d, 0x80000001, 0xafe, 0x0, 0x4, 0x73, 0x0, 0xfffffff8, 0xcc000000, 0x7, 0xe, 0x8, 0x7ff, 0x3, 0x3, 0x80, 0x3, 0x1, 0x7fff, 0x2, 0x6, 0x5, 0x7, 0x10000, 0x10, 0xf, 0x2, 0x2, 0x8, 0x81, 0x9, 0xd, 0x592c, 0x0, 0x75fb, 0x8, 0x7fffffff, 0x12, 0x5, 0x6, 0x6, 0xdc87, 0x401, 0x4, 0x5, 0x8000, 0x8001, 0xf, 0x1, 0x0, 0x3, 0x9, 0x5, 0x40, 0x8, 0x7, 0x2, 0x4, 0x9, 0x8001, 0x56c, 0x80000001, 0x23, 0x94, 0x81, 0x6fe, 0x6, 0x8, 0xbc800000, 0x3ff, 0xfffffffa, 0x6, 0x5, 0x200, 0xfff, 0xffffff1b, 0x5, 0x7fffffff, 0x8, 0xfffffff8, 0x7fffffff, 0x1, 0x8, 0x6, 0xe, 0xd, 0x10001, 0x10001, 0x1, 0x4, 0xf, 0x689b1dcf, 0xd, 0x9, 0x29, 0x80, 0x0, 0x3, 0x1f1, 0xff, 0x2, 0x7, 0x1, 0x8, 0x7fb, 0x1, 0x401, 0x8, 0xbf, 0xe, 0x2, 0xfffffdba, 0x4, 0x3ff, 0x600000, 0xb73, 0x6, 0x6, 0xa4, 0x4, 0x2, 0x7, 0x0, 0xff, 0x4, 0x1, 0xff, 0x1000, 0xff, 0xffffffa4, 0xc3e6, 0x1, 0xf0c2, 0x10000, 0x9, 0x80000001, 0x8, 0x800, 0x4, 0x500000, 0xffff, 0x1e, 0x9b85, 0x8, 0xffff0000, 0x200, 0x3, 0x7, 0x7, 0xfff, 0x7fffffff, 0x7ef, 0x4, 0x80000000, 0x8, 0x7, 0x6, 0xffff, 0x8, 0xfffff5e9, 0x8, 0x1, 0x7, 0x9, 0x5, 0x2, 0x5, 0x10001, 0xd, 0x6, 0x7, 0x3, 0xfffffe00, 0x2, 0x3, 0xae96, 0x8000, 0x7ff, 0x2, 0x8, 0x4, 0x5, 0x7, 0xf, 0x6, 0x3, 0x5, 0xb93, 0x401, 0xff, 0x2, 0x4, 0x4, 0x8, 0x0, 0x7, 0x9, 0x8, 0x1, 0x800, 0xffffffff, 0xec7, 0x40, 0x3ff, 0x8, 0x4, 0x3, 0x7fff, 0x10001, 0x2, 0x4, 0x8, 0x5, 0x0, 0x1, 0x7, 0x50, 0x9, 0xfff, 0xfffffff4, 0x400, 0xfffffffb, 0x6, 0x0, 0xfffffffc, 0x1, 0x4, 0x2, 0x20, 0x3, 0x17e1, 0x7c, 0x7f, 0x7, 0x0, 0x82f9, 0x7, 0x4, 0x2a, 0x5, 0x7fff, 0x3, 0x8, 0x4, 0x3, 0x80, 0x7, 0x2, 0xfffffc01, 0x1, 0x9, 0xd3b, 0x100, 0x3ff, 0x1, 0x400, 0xa3c, 0x7, 0x0, 0x0, 0xeebe, 0x6, 0x8, 0x3, 0x1000, 0x6558, 0x7, 0x40, 0x9, 0x401, 0x401, 0x331a, 0xa01e, 0x8, 0xe603, 0x86ce, 0x4, 0x2, 0x7, 0x88, 0x9, 0xffff03af, 0x2, 0x4, 0xffffff80, 0x2, 0xfff, 0x1, 0x0, 0x1, 0x9, 0x1, 0x10001, 0xfffffffa, 0xfffffbff, 0x0, 0xd, 0x8, 0x400, 0x6, 0x9, 0x7, 0x2, 0xd, 0x6, 0x8001, 0x9, 0xfdc, 0x4, 0x5f03946a, 0x7, 0x8001, 0x8e, 0x8, 0x2, 0x1000, 0xb2, 0x1, 0x100, 0x7fff, 0x1, 0xea1, 0x7, 0x8, 0xb7, 0x81, 0x1ff, 0x80, 0xf09, 0x25, 0x54, 0x4, 0x7, 0x7ff, 0x1, 0x9a05, 0xfffffffc, 0xff, 0x534e, 0x4, 0x18f, 0x9, 0xffffffa3, 0x4, 0x7, 0x4, 0x84, 0x5, 0x6, 0xc, 0x3, 0x6, 0xfff, 0x6, 0x6, 0x1ad8, 0x40000000, 0x7, 0x1, 0x1, 0x5, 0x6, 0x6, 0x8, 0x7, 0x8000, 0x9, 0xaf, 0x9, 0xfffffe01, 0x2, 0x480000, 0xbf, 0x1e6, 0x7, 0x6, 0x80000001, 0x1ff, 0x8, 0x1, 0x6, 0x9, 0x8, 0x6, 0x5, 0x5, 0xfffffc00, 0x6b5, 0xfffffffc, 0x3, 0xf3c8, 0x6, 0x6, 0x6, 0x1, 0x6, 0x8001, 0x1, 0x55bb, 0x80000001, 0x101, 0x2, 0x6, 0x3, 0x9e3, 0x603, 0x6, 0x9, 0xe, 0x9, 0x6, 0x561d, 0xe, 0x9, 0x7, 0xf0, 0x100, 0x6, 0x4, 0x1, 0x80000000, 0x4, 0x0, 0x2, 0x3, 0x4, 0xfffffff9, 0x5, 0x5, 0x200, 0x2, 0x7, 0x800, 0x80000001, 0x5, 0x0, 0x7, 0xd8, 0x1, 0xde, 0x0, 0x7, 0x4, 0x9, 0x1ff, 0x6, 0x1, 0x9, 0x3, 0x1, 0x5, 0x0, 0x6, 0x0, 0xc5e, 0x7, 0xff, 0x1, 0x2, 0x0, 0x8, 0x200, 0x736, 0x7ff, 0x43a, 0x0, 0x6, 0xd0, 0xfe8e, 0x0, 0xff, 0x18000000, 0x7, 0x906, 0x3a, 0x3, 0xc3b0, 0x4, 0x8, 0x2, 0x5, 0x4, 0x0, 0x7bf, 0x1, 0xffffffff, 0x80, 0x2, 0x6, 0xd4ee, 0x7f, 0x0, 0x5, 0x6, 0x3, 0x5f9, 0x8, 0x0, 0x9, 0x6, 0x0, 0x5, 0x1, 0x8, 0xb8, 0x0, 0x80000001, 0x9, 0x8, 0x5, 0x5, 0x1, 0x9, 0x0, 0xc, 0x2, 0x800, 0x1e, 0x9, 0x7, 0x8, 0x2, 0x7, 0x80000, 0x5, 0x8, 0x7fffffff, 0xfffff800, 0x2, 0x5, 0x5605, 0x0, 0x7, 0xfffffffa, 0x0, 0x33d1, 0x6, 0x4d, 0x9, 0x1, 0x4, 0x3, 0x8, 0x7d, 0x7a, 0xfff, 0x8, 0xffffffff, 0x7, 0x1, 0x6, 0x7, 0x2, 0x4, 0xa, 0xfffffffe, 0x3, 0x7c2, 0xfff, 0xa950, 0x40, 0x66ec, 0xd, 0x6, 0x2, 0x2, 0x5e, 0x4ec, 0xfff, 0x8, 0xe5b7, 0x9, 0xab0, 0x5e8, 0x7, 0x400, 0xb, 0x3, 0x1, 0x6, 0xffffff21, 0x9, 0x9, 0x14b3, 0x5, 0xf, 0x6, 0x1, 0xe1f, 0x6, 0x3b4, 0x3, 0x4, 0x1, 0x3, 0x1, 0x1000, 0x800, 0x6, 0x4, 0x6, 0x10001, 0x3, 0x9, 0x5, 0x1, 0x4, 0x7, 0x1, 0x3, 0x255d3ecd, 0x7, 0x1, 0x89e, 0xf8, 0xfffffff8, 0x5, 0xee85, 0x400, 0x8, 0x4, 0x5, 0x9, 0x6, 0x1, 0x6, 0xffff, 0x4, 0x5, 0x5, 0x6, 0x54d, 0x4, 0x767, 0x9, 0x8, 0x1690, 0x1, 0xfffffffc, 0x2, 0x1, 0xf6f, 0x5, 0x2, 0x2bb40000, 0x3, 0x9, 0x2, 0x9, 0x1, 0x7, 0x0, 0x7f, 0x6, 0x4, 0x4, 0x1000, 0x1, 0x4, 0x98d, 0x9, 0xffff39da, 0x8001, 0x2, 0xfff, 0xffffff24, 0x2, 0x8001, 0x5, 0xd, 0xcdec, 0xfffe0000, 0x2, 0x6, 0x7f, 0xfffffff7, 0x1, 0x6, 0x8, 0x6, 0x5853, 0x9, 0x3, 0xfffff9b8, 0x80000001, 0x2, 0x8, 0x9, 0x3, 0x1, 0x8, 0x8, 0xb, 0x3, 0x78d, 0x2, 0x3ff, 0xc1, 0x101, 0xae, 0x8001, 0x7, 0xc, 0x7, 0x81, 0xa38c9de5, 0xe9b, 0xad0, 0x10, 0x8000, 0x4, 0x12, 0x100, 0x9, 0x8, 0x0, 0x6, 0x5, 0x9, 0x5, 0x8, 0x4, 0x15, 0x4, 0x2, 0x10000, 0x2, 0xa66, 0x0, 0x7, 0x1, 0x7, 0xb2c, 0x2, 0x4, 0x5, 0x0, 0x4, 0x305, 0x4, 0x3, 0xffffffff, 0x0, 0x10000, 0x4, 0x4, 0x7, 0xfffffff8, 0x378103d8, 0x8000, 0x5e, 0x7, 0x2, 0x4, 0x3, 0x8b0, 0x0, 0xc8f, 0x80, 0x9, 0x90000, 0x9, 0x1, 0xf95, 0x0, 0x40, 0x7, 0x5, 0xba59, 0x2, 0xa66, 0x1, 0x1, 0x21ef, 0x80, 0xd8b, 0x7, 0x5, 0x8, 0xfff, 0x3, 0xb, 0x9, 0x3, 0x9, 0x200, 0x5, 0x9, 0x1, 0x8, 0x3ff, 0x7, 0x431, 0x9, 0x6fd, 0xc, 0x800, 0x4000, 0xffff0001, 0x2, 0x1ff, 0x1, 0x6, 0x4, 0x2, 0x6, 0x7f, 0xfffffff7, 0x852, 0x9, 0x7, 0x4, 0xfff, 0x7, 0x1, 0xc30d, 0x2, 0x0, 0x6, 0x800, 0xa, 0x0, 0x100, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x7, 0x7, 0xffff, 0x2, 0x1, 0xe, 0x8000, 0x7f, 0x4, 0x2, 0x8001, 0xd1d, 0x2, 0x5, 0x3, 0x5, 0xfff, 0x1ff, 0x80000001, 0xfffffff9, 0x3, 0x83, 0x7, 0x3, 0x10, 0x90, 0x7, 0x4, 0x0, 0x0, 0x6, 0x401, 0xff, 0x8, 0x10000, 0x4, 0x280000, 0xec3, 0x9, 0x9, 0x9, 0x6, 0x9, 0x0, 0x5, 0x7, 0x7, 0x1, 0x9, 0x48, 0x9, 0xfffffff7, 0x3, 0x7ff, 0x6, 0x7, 0x2, 0x1, 0x7, 0x8000, 0x200, 0x65a, 0x2, 0x3a9f44, 0x101, 0x80, 0x6, 0x8, 0x40000000, 0x0, 0x5, 0x6, 0x200, 0x2, 0x20, 0x3c2, 0x1ff, 0x80000001, 0x0, 0x2, 0x1, 0x7fff00, 0x4, 0x4, 0x95e, 0x272, 0x8, 0x1ff, 0x0, 0xfca0, 0xf, 0x7fff, 0xfffffff8, 0x51d8, 0x1, 0x98, 0x5, 0x9, 0x9, 0x8, 0x1ff, 0x7f, 0x8, 0x101, 0x5, 0xb, 0x8001, 0x1, 0x6, 0x89, 0xc11, 0x5, 0x6, 0xe60, 0x3, 0x6, 0x2, 0x4, 0x5, 0x400, 0x101, 0x9, 0xe4, 0x8, 0xa, 0x6, 0x5, 0x0, 0x4, 0xc6, 0x4, 0x9e, 0x0, 0x9, 0x8ae8, 0x0, 0x1, 0x81, 0x3ff, 0x3, 0x2, 0x3, 0x3, 0x3, 0x7, 0x2, 0x2, 0x1, 0x8, 0x80000000, 0x3, 0x8, 0x6e032448, 0x8, 0x3ff, 0xffff, 0x4, 0x5, 0x6, 0x0, 0x3, 0x400, 0x0, 0x8, 0x6, 0x925, 0x1, 0x7, 0xfff, 0x5, 0xfffff0cb, 0x0, 0x5, 0x6, 0xfff, 0xffffffcb, 0x3, 0x0, 0x9, 0x1, 0xff, 0x0, 0x1, 0x0, 0x3, 0x9, 0x5, 0x31, 0xb, 0x8, 0x1ff, 0x4, 0x0, 0x5, 0x8, 0x1d, 0x6, 0x14783658, 0xff, 0xf2, 0xffff, 0x2, 0xff, 0x7, 0x8, 0x4, 0xc114, 0xc, 0x5, 0xc494, 0x5, 0x0, 0x5, 0xbd, 0x30000, 0x1ff, 0x2, 0x6, 0x1, 0x0, 0x80000001, 0x8c05, 0xae, 0x6, 0x0, 0x0, 0x10000, 0x63, 0xa, 0x80000001, 0xff, 0x2, 0x3, 0x9, 0x3, 0x6c, 0x4, 0x100, 0x1, 0x2, 0x6, 0x10000, 0x1, 0x8, 0x6, 0x40, 0xffff34c2, 0x5, 0x4, 0x9, 0x5f, 0x4, 0xfffffff8, 0x7fff, 0x27b0000, 0x101, 0x7fff, 0x6, 0x5c, 0x8000, 0xd38, 0x0, 0x1000, 0x100, 0xa0a, 0x4, 0x80000001, 0x7, 0xffff5b5c, 0x7, 0x6, 0x1, 0xaa, 0x0, 0x40, 0xd, 0x0, 0x4, 0x5, 0xf, 0x8, 0x80000001, 0x2, 0x5, 0xa, 0x9, 0x7fffffff, 0x268, 0xe8, 0xaab0, 0x0, 0xfffffffc, 0x62, 0x80, 0x8, 0x7, 0x80000001, 0x4, 0x101, 0x7fffffff, 0x8, 0xd, 0x3, 0x9, 0xfffffffe, 0x8, 0x2d3, 0x9, 0x101, 0x6, 0x55, 0x9, 0x2, 0x10001, 0x2, 0xa, 0xfffffff9, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0xfffffffe, 0x9, 0x40, 0x9, 0x489, 0xfffffff0, 0x7, 0x4, 0x3, 0x5, 0x7fff, 0x3ff, 0x756, 0x9, 0x100, 0x1, 0x4, 0x9, 0x0, 0xe, 0x18b8, 0x6, 0x2, 0x2497, 0x9, 0x3, 0x800, 0x2, 0x1ff, 0x6, 0x9, 0x8, 0x2, 0x800, 0x4, 0x4, 0x8, 0x7, 0x9, 0x8, 0x0, 0x502480e5, 0x4, 0x0, 0x400, 0x1, 0x2, 0xfffffffc, 0x5, 0x6, 0x5, 0x7ff, 0x1, 0x119cf039, 0xd36, 0x17, 0x8, 0x5, 0x7, 0x3, 0xf, 0x4, 0x6, 0xe2, 0x6, 0xe74, 0x400, 0xe, 0x3, 0x400, 0x4, 0x70, 0x3, 0x4625, 0x3, 0x7, 0x9, 0x100, 0xffffff65, 0x1, 0xfffffff7, 0x6, 0x4, 0x6, 0x5, 0x8001, 0x7fffffff, 0x9, 0x9, 0x780000, 0x6, 0xc, 0xd97, 0xffff, 0x81, 0x100, 0x8, 0xfff, 0x28, 0xffff, 0x0, 0xffffff81, 0x7fff, 0x4, 0x0, 0xfffffff9, 0x100, 0x2, 0x1, 0x7, 0x5, 0x0, 0x1, 0x2, 0x2, 0x7fba, 0x4, 0x10000, 0x7, 0x5, 0x2, 0x9, 0x8515, 0x9a, 0xfffffffd, 0x5, 0x4, 0x4, 0x200, 0x8, 0x1, 0x1, 0xf629, 0x25b, 0x0, 0x8, 0x7ff, 0x277, 0x4, 0x5, 0x80000000, 0x8, 0x5, 0x3, 0x9, 0x9, 0x2, 0x0, 0xf5, 0x2, 0x5, 0x400, 0x2, 0x8, 0x8, 0x9, 0x1, 0x8, 0x3ff, 0x5, 0x7, 0x5, 0x1000, 0x4, 0x14, 0xfffffff7, 0x5, 0x0, 0xaab, 0x1, 0x3, 0x0, 0x101, 0x0, 0x6faa, 0x400, 0x3, 0x4, 0x1, 0x6, 0x4, 0x9, 0x0, 0x2, 0x1d3, 0x4, 0xff, 0x1, 0x240000, 0x46, 0x5b0, 0x80000000, 0x1, 0x8001, 0x2, 0x5, 0x8000, 0xfff, 0x273, 0xfff, 0x8, 0x8, 0x4, 0x60, 0x2, 0xa6, 0x9, 0xa4c, 0xba58, 0x3, 0x87, 0x9ffc, 0x7, 0x9, 0x1, 0x3, 0xd7, 0x0, 0xfffffff7, 0x1, 0x2, 0x9, 0x7, 0x800, 0x8000, 0xd, 0x7a, 0x7c, 0x5a1, 0x5, 0x4, 0x0, 0x7, 0xf90, 0xa, 0x6, 0x1000, 0x6, 0x2, 0x0, 0x81, 0x5, 0x3, 0x1, 0x7, 0x0, 0x3, 0xa7, 0xfffffffe, 0x3, 0x6, 0x1, 0x4, 0xb37, 0x30, 0x1, 0xd, 0xa, 0x68e, 0xd55, 0xf2a6, 0x7ff, 0x0, 0xff, 0x5, 0x2179, 0x6, 0x0, 0x0, 0x8, 0x1, 0x3, 0x24183fd2, 0x8, 0xffff, 0x7, 0x5, 0xe46, 0x3, 0x3, 0x10000, 0xa8df, 0x7, 0xe, 0xfffffff0, 0x3, 0x0, 0x1, 0x5, 0xff, 0x9, 0x6, 0x5, 0x7, 0x1000, 0x3ff, 0x681f, 0xec5, 0x7ff, 0x200, 0x2, 0x3ff, 0x8, 0x7f, 0xa553, 0x555a68c0, 0x0, 0x800, 0x0, 0x1ff, 0x8c70, 0x7, 0x7d, 0x2, 0x0, 0xa, 0x6, 0x7, 0x8000, 0x1, 0x3, 0x4, 0xfffffffb, 0x4, 0xf, 0x3b47, 0x8, 0xfffffff8, 0x6ff, 0xfffffffc, 0x8, 0x2, 0x2, 0x5, 0x4, 0x1, 0xffff, 0x4, 0x9, 0x80000001, 0xdac, 0x4, 0x4, 0xf, 0x9, 0x42, 0x3ff, 0x4, 0x1, 0x5, 0x1, 0x401, 0x2, 0x0, 0x3, 0x2, 0x6, 0x9, 0x0, 0x200, 0x7ff, 0x3ce, 0x100, 0x10000, 0x7fffffff, 0xa, 0x7, 0x2, 0x0, 0x46, 0x0, 0x9, 0xffffff00, 0x7, 0x10001, 0x422, 0x2, 0x10001, 0x7fffffff, 0x8, 0x4, 0x9, 0x7, 0xfffffdf2, 0x1, 0x8, 0x7, 0x6, 0x10001, 0x4, 0x80000001, 0x2, 0x101, 0xfffff349, 0x8, 0x4, 0x8, 0x8000, 0x4, 0x8, 0xfffffff8, 0x60000, 0x6, 0xfff, 0x9, 0xe80, 0x3, 0x2, 0x3, 0x1, 0xe, 0x577, 0x400, 0x101, 0x7ff, 0x2, 0x5, 0x4, 0x0, 0x6, 0x3, 0xa, 0x7, 0x2, 0x80000, 0x6, 0x81, 0x8001, 0x9, 0x5, 0x6, 0x9, 0xbeeb, 0x7, 0x4, 0x1, 0x9, 0x8, 0x1400000, 0xff, 0xa2f, 0x7fffffff, 0x4, 0xf, 0x1, 0x5, 0x7, 0x10000, 0x8, 0x2, 0x80000001, 0x9c, 0x2, 0x13, 0x1000, 0xe, 0x5, 0xbc, 0x3, 0xe462, 0x10, 0x9, 0x3, 0x1, 0x1, 0x0, 0xfff, 0xfff, 0xda24, 0x1, 0x2, 0x7, 0x4, 0x7, 0x9, 0x5f, 0x1, 0x100, 0xfffffffb, 0x1, 0xbac, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x4, 0xf, 0x4, 0x6, 0x81, 0x40, 0x2, 0x9, 0x1, 0x8, 0x2, 0x5, 0xff, 0x0, 0xece, 0x4, 0xbac, 0x10000, 0x9, 0x3, 0x0, 0x7, 0x429, 0x2c57, 0x0, 0xfffffffb, 0x43, 0x800, 0x6, 0x4000, 0x4, 0x2, 0x2, 0x0, 0xdf, 0x7, 0x7, 0x5, 0x9, 0x3627, 0xfffffffd, 0x7, 0x1, 0xe, 0x80000001, 0x7f, 0xfffffff8, 0x0, 0xdadb, 0xfffffffd, 0x6, 0x100, 0xfffffffb, 0xb1, 0x9, 0x70000000, 0x8, 0x80, 0xe, 0x0, 0x4, 0x10001, 0x80, 0x6, 0x75, 0x6, 0xe, 0x401, 0x1ff, 0x0, 0x1eaf, 0x5, 0x7, 0x7, 0x8, 0x1, 0x1, 0x6, 0xf9b, 0x2, 0x4, 0x4, 0x200, 0x200, 0x1, 0x0, 0x5, 0xb, 0x0, 0x5, 0x68, 0x8, 0x1, 0x1, 0x7c, 0xc, 0x8, 0x6, 0x80000001, 0x1, 0x6, 0x0, 0x100, 0x7, 0x0, 0xe, 0x6, 0x4, 0xd, 0x6aa0000, 0x6, 0x9, 0x1, 0x3, 0x1, 0x8, 0x9, 0x0, 0x9, 0xc, 0x0, 0x1, 0x80, 0x6, 0x526e, 0x6fc, 0x1, 0x6, 0x8, 0x2, 0x4, 0x5, 0x5, 0x2, 0xffffff3e, 0x1, 0x800, 0x5, 0x6, 0x9, 0x7, 0x1000, 0x8, 0x6d, 0xfffff801, 0x1, 0x6, 0x26a, 0x1, 0x0, 0x0, 0x1000, 0x2e, 0x7b5c, 0x7, 0x7, 0x1, 0x6, 0x7, 0x80, 0x7fffffff, 0x4, 0x5, 0x3ff, 0x6, 0x6, 0x9, 0x6, 0x5, 0x1ff, 0x1, 0x5, 0xfffffffa, 0x0, 0x5, 0x3, 0x8, 0x5, 0x10, 0x4, 0x7, 0x0, 0x5, 0x5, 0x9e, 0xff, 0x8, 0x5, 0x4, 0x4, 0x9, 0x1, 0x0, 0x7fff, 0x0, 0x4, 0x5aba, 0x4, 0x3ff, 0x8, 0x9, 0x0, 0x5, 0xf, 0x100, 0x0, 0x0, 0x9, 0x200, 0x8, 0xff000000, 0x4, 0x1, 0x3, 0x8, 0x7df, 0x2, 0x3, 0x4, 0x81, 0x3, 0x9, 0x9, 0x8, 0x5af4, 0xf89, 0x7, 0x1003, 0x4, 0xff, 0x1ff, 0x8, 0x200, 0x8, 0x1, 0x5, 0x0, 0x2, 0x8, 0x20000, 0xffff, 0x6, 0xb, 0x10000000, 0x2, 0x1, 0x212, 0x9, 0x7f, 0x9, 0xe, 0xb63, 0x6, 0x400, 0xa, 0x3, 0x0, 0x8, 0xf, 0x3, 0xb, 0x0, 0x7e62, 0x6, 0x2, 0x31d, 0xfff, 0x7, 0x3ff, 0x0, 0x1, 0x76ee, 0x1c, 0x7, 0x5, 0x10001, 0x7, 0x0, 0x2, 0x15c, 0x1ff, 0x8000, 0xffffffff, 0x1ff, 0x8000, 0x2, 0x2, 0x4, 0x8, 0x400, 0x3, 0xffffffff, 0x8000, 0x2, 0x80000001, 0x6, 0x76cc, 0x8, 0x3, 0x0, 0x5, 0x3, 0x3d, 0x0, 0xcd5f, 0xb, 0x0, 0x6, 0xabd5, 0x8, 0x0, 0x9c6, 0x7, 0x3, 0x3, 0x6, 0x1, 0x80, 0x6, 0x5, 0x0, 0x0, 0x401, 0x0, 0xd7a, 0x2, 0x1, 0x52d, 0x8, 0x6, 0x80000000, 0x7, 0x7, 0xc0, 0x0, 0x8, 0x1, 0x9, 0x3, 0x4, 0x61, 0x2, 0x8, 0x65caf62e, 0x54bff1a9, 0x1, 0xfffffe01, 0x0, 0x7ff, 0x9, 0x10, 0x3, 0x3, 0x9e, 0x9, 0x1, 0x3, 0x95c, 0x8, 0x1000, 0x5, 0x1, 0x8, 0x8, 0x8, 0x2, 0x23430b37, 0x8, 0xf, 0x8001, 0xb, 0x0, 0x7ff, 0x8000000, 0xffffffff, 0xe, 0xfff, 0x3, 0x3, 0x7, 0x1, 0x8, 0x6239, 0x8, 0x8, 0xf, 0x6e0, 0x8, 0xfff, 0x7, 0x2, 0x2, 0x2, 0x0, 0x7, 0x4, 0x8, 0x28f8000, 0xfff, 0x9, 0x1, 0xc, 0x4, 0x40, 0x3, 0x0, 0x9, 0x7, 0x6, 0x8, 0x1, 0x1ff, 0x3, 0xc444, 0x2, 0x4, 0x8, 0x9, 0x5, 0x8, 0x3bfd846d, 0x5, 0x8001, 0x0, 0x7, 0x9, 0x40, 0x9, 0x81, 0x3, 0xf4, 0x3, 0x3, 0xfffffffb, 0x3, 0x3, 0x80000001, 0x7ff, 0x7, 0xfffffff4, 0x10, 0xe6, 0x62, 0x48000, 0x4, 0x9, 0xdec, 0x2, 0x7, 0x6, 0x80, 0x101, 0x8, 0x6, 0x9, 0xfffffffa, 0x2, 0x0, 0x98, 0x393, 0x1ff, 0x4b3, 0x5, 0x1, 0x7, 0xfffeffff, 0x8001, 0xdc3, 0x0, 0x80000000, 0x1ff, 0xffffffff, 0x6db, 0x4, 0x9f7, 0x7, 0x0, 0x5, 0x8, 0x401, 0x3, 0x5, 0xfffffff5, 0x948, 0x3, 0x7fffffff, 0x400, 0x61, 0x8, 0x7fffffff, 0x7fffffff, 0x8a0000, 0x2, 0x2, 0x1, 0x5, 0x6, 0xfffffff1, 0x6, 0x9b, 0x7, 0x6, 0x2, 0x700d, 0xd3a0, 0x8, 0xffff, 0x40, 0x7, 0xfffffff9, 0x6fad, 0x3, 0xc6, 0x6, 0x10000, 0x8, 0xfffffffd, 0x6, 0xffffff5b, 0x8000, 0x7, 0x1, 0x5, 0x3, 0x4, 0x7, 0x5, 0x4, 0x7fffffff, 0xffffffff, 0x1, 0x5, 0x5, 0x3, 0x81, 0x2, 0xf, 0x1, 0x7, 0x8, 0x401, 0x9, 0xcc, 0x8, 0x8, 0x8, 0xfffffff2, 0x7fff, 0x1cf7, 0x5, 0x7, 0x3, 0xa4b6, 0x2, 0x3, 0x7, 0x8, 0x6, 0x3, 0xffff, 0xc693, 0x2, 0x5, 0x0, 0x99, 0x0, 0x2, 0x6, 0x1, 0x4, 0x200, 0x0, 0x4, 0x183d, 0x1, 0x397e127, 0x7, 0x10, 0x8a, 0x0, 0x2, 0x0, 0x0, 0x2, 0x6, 0x8001, 0x390, 0x9, 0x1, 0x6235, 0x6, 0x4, 0xd, 0x3, 0x8, 0x4, 0x3, 0x920b, 0x3, 0x6, 0xc78, 0x1, 0x4, 0xd82d, 0x0, 0x6, 0xac, 0x33e, 0x6, 0x7, 0x1, 0x8000, 0x20, 0x8001, 0x3, 0x1, 0x2, 0x4, 0x7, 0x1, 0x9, 0x1ff, 0x1, 0x7f, 0x5, 0x5, 0x0, 0x5, 0x7, 0x800, 0xc41, 0x1, 0x7fff, 0x2, 0x6d, 0x7fff, 0x5fc, 0x6, 0x1ff, 0x9, 0x1, 0x220, 0xffffffff, 0x3, 0x522a, 0x3, 0x7, 0x3, 0x9, 0x5, 0x6, 0xa, 0x3b459b37, 0x1, 0x5, 0x3ff, 0xe00d, 0x80000000, 0x8, 0x1, 0x9, 0x80000000, 0x617886ca, 0x1, 0x2, 0x10001, 0x8, 0xffffffff, 0xa, 0x101, 0xff, 0x9, 0x9, 0xe, 0x9, 0x6, 0x3, 0x4, 0x7, 0x49, 0x7, 0x9, 0x4, 0x0, 0x10, 0x8, 0x9, 0xfffffffe, 0x7, 0x3, 0x2, 0x1000, 0x9, 0xfffffffa, 0x5, 0xffffffff, 0xfffffbff, 0x6, 0x0, 0x8, 0x7, 0x1, 0x2, 0xf, 0x7, 0x9, 0x1, 0xed, 0x0, 0x0, 0x5, 0x5, 0x8, 0x9, 0x2, 0x101, 0x2, 0x8, 0x7f, 0xf8e, 0x9, 0x8, 0x4, 0x2, 0x7, 0xb4, 0x3, 0x1, 0x0, 0x1, 0xa, 0xfffffffd, 0x2, 0x200, 0x3, 0x4, 0x7, 0x100, 0x8, 0x0, 0x400, 0x7a1a, 0x3ff, 0xc, 0x8, 0x2d, 0x2c0, 0xcbf9, 0x0, 0x9, 0x3, 0x3, 0x1ff, 0xffff, 0x40, 0x7, 0xdb, 0xb3fe, 0x7fff, 0x3, 0x3, 0x2, 0x6, 0x6, 0x90000, 0x40, 0x8, 0x81e, 0xff, 0x28fffc8, 0x0, 0x726, 0x9a, 0x2, 0x0, 0x217b, 0xc, 0x7ae, 0x10000, 0x9, 0x1, 0x8, 0x3ec35088, 0x6, 0x4, 0x8, 0xfffffffb, 0x7, 0x0, 0x5, 0x1, 0xffffff18, 0x0, 0x10000, 0x3, 0x6cc6d59d, 0xfffffff8, 0x6, 0x0, 0x0, 0x8, 0x0, 0x2, 0x9, 0x6, 0x80, 0xfff, 0x7f, 0x0, 0x0, 0xa000000, 0x37, 0x400, 0x1f, 0x8001, 0x5a, 0x860, 0x6b, 0x7, 0xffff, 0x10001, 0x3, 0xfff, 0x3, 0x4, 0x9, 0x7, 0x6, 0x2, 0x8, 0x6, 0xb86, 0x7, 0x5, 0x80000001, 0x3, 0x3, 0x6, 0x6, 0x1, 0x2, 0x2400, 0x543, 0x1ff, 0x5, 0x49, 0x7, 0x4, 0x4, 0x10, 0x2, 0x9, 0x7, 0x5, 0x0, 0x9, 0xfffffffd, 0x4, 0xe1, 0x2, 0x8, 0xffff, 0x0, 0x7, 0x9, 0x0, 0x0, 0xffffffff, 0x7, 0x1, 0x4, 0x0, 0xb6, 0x2, 0x8, 0x6, 0x5f, 0x57, 0x8, 0x9, 0x5, 0x80000001, 0xc2e, 0x2, 0x9, 0x80000000, 0x8, 0xc798861e, 0x2, 0x0, 0x1, 0x914, 0x1970b2c4, 0x8, 0x3, 0x2, 0x8, 0x6, 0x6, 0x1, 0x9, 0x7, 0xfffffffd, 0x81, 0x7, 0xcc0a, 0xe, 0x8, 0xd954, 0x7f, 0x79648050, 0x1000, 0xfffffffd, 0xfff, 0x9, 0x5, 0x3c68, 0x101, 0x6d18, 0x5, 0x7, 0x8, 0x2, 0x5, 0xf, 0x73b14536, 0xc, 0x9, 0x1000, 0x1d230ef8, 0x9, 0xa, 0x8000, 0x9d4, 0x3ff, 0x3, 0x2264, 0x0, 0x8, 0x33, 0x213afdd0, 0x8, 0x569, 0x0, 0x2, 0x7, 0x10001, 0x7f, 0xc4, 0x200, 0x7, 0x3, 0x6, 0xfffffff0, 0x7, 0x3ff, 0x5, 0x3, 0xb8, 0x9, 0x6, 0x200, 0x26ee, 0x6, 0x2, 0xc545, 0x1, 0x6, 0x4, 0x1, 0x2b, 0x6, 0xe, 0x81, 0x8ec7, 0x10001, 0x4, 0x2, 0x8000, 0x10001, 0xd2f, 0x10001, 0x4, 0x7, 0x5, 0x8b, 0x69, 0x9ab, 0x3, 0x1, 0x7, 0xc, 0x8, 0x6, 0x7, 0x0, 0x7fff, 0x4, 0x6, 0x1, 0x4, 0x6, 0x10, 0x1, 0x1ff, 0x100, 0x0, 0x3, 0x3, 0x200, 0x7dfc, 0xe2d8, 0x43c, 0x2, 0x81, 0x40, 0x80000000, 0x9, 0x4d0, 0x3, 0x2, 0xffff9d63, 0xe0000, 0x4, 0x10, 0xfffffffc, 0x5, 0x9, 0x0, 0x571b, 0x10001, 0x6, 0x7, 0x7, 0xce23, 0x0, 0xfffff84b, 0x80, 0x8, 0x23, 0x0, 0x0, 0xb6, 0x3, 0xa, 0x0, 0x4, 0x3, 0x3ff, 0x8, 0x6, 0x4, 0x800, 0x418a, 0x5, 0x3, 0x800000, 0x400, 0xe5, 0x9, 0x4, 0xa, 0x5, 0x6, 0x2f0a, 0x1000, 0x0, 0x1, 0x179, 0x62, 0x8, 0x4, 0xdd, 0x4, 0x10, 0x9, 0x6, 0x3, 0x4c3, 0x3, 0x780, 0x9, 0x0, 0x7fff, 0x8, 0x9, 0x3, 0x5, 0x2, 0x2790, 0x4, 0x7fffffff, 0x2, 0x1, 0x57, 0x6, 0x719, 0xcdfe, 0x9, 0x194, 0xfff, 0x5, 0x24000000, 0xffff8001, 0x7ff, 0xfffffff7, 0x3, 0x2, 0xffffffff, 0x9, 0x0, 0x7fffffff, 0x0, 0x6, 0x5, 0x0, 0x7, 0xf, 0x4, 0xa337, 0x1000, 0x388d572b, 0x7, 0x4, 0x0, 0x1, 0x46, 0xefec, 0xad8, 0x7f, 0x9, 0xf, 0xfffffffc, 0x88, 0x79a, 0x5, 0x5, 0x3, 0x2, 0xfffffffa, 0x68d, 0xa, 0x2, 0xfffffff9, 0xd0f, 0x1, 0x4, 0x9, 0x81, 0x8, 0x1, 0x2, 0x0, 0x2, 0xfffffc01, 0x3, 0x2, 0x2e3b, 0x700, 0xa, 0x9, 0xffff, 0x6, 0x6, 0x4, 0x1000, 0x80000001, 0x3ff, 0x5, 0x8, 0x5, 0x9, 0x8, 0xffffffb2, 0x8, 0x1, 0xffffffff, 0x7f, 0x4, 0x9bec, 0x0, 0xfffffc01, 0x0, 0x4, 0x60, 0xc, 0x20000000, 0x8, 0x200, 0x8, 0x8, 0x6, 0x9, 0x39e, 0x2, 0x6, 0x8, 0x445, 0x8, 0x0, 0x7ff, 0x80000001, 0x8e73, 0x4, 0x0, 0x0, 0x4, 0xf, 0x8, 0x5, 0x2adf, 0x5, 0x4, 0x6, 0x8, 0x6, 0x1, 0x7fffffff, 0xe, 0xb, 0x9, 0x3, 0x6, 0x3, 0x5, 0x4, 0x6, 0x61, 0x1000, 0x5, 0x193, 0x6, 0x1, 0x8, 0x58, 0x6, 0xffff4568, 0x80000000, 0x8, 0x6ec6, 0x5b21, 0x6, 0x9, 0x401, 0x9, 0xe836, 0x1, 0x7, 0xb, 0xe0, 0x8, 0x80000001, 0x7, 0x4, 0x8001, 0x3ec, 0x7, 0x9, 0x7, 0x6, 0x5, 0x94600000, 0x4, 0x80, 0x9, 0x0, 0x7d, 0x9, 0x0, 0x10001, 0x6, 0x6, 0x80000001, 0x200, 0x9, 0x3, 0x3, 0x2, 0x3, 0x5, 0xfff, 0x1, 0x3, 0xc, 0x1, 0x4, 0x3, 0x4, 0x2, 0x7, 0x5, 0x4, 0x4, 0x8, 0xb23, 0x8, 0x71, 0x8, 0xbd89, 0x5, 0x0, 0x4, 0x3, 0x1, 0x400, 0x8, 0x9, 0x81, 0x3, 0x2, 0x9, 0x0, 0x3, 0x9, 0x2, 0x7, 0x4, 0xfffffeaa, 0x8, 0x1, 0xc, 0xfffffffa, 0x1ff, 0x2, 0x3, 0x5, 0x8001, 0xe, 0x400, 0x4, 0x5, 0x7, 0x1, 0xce, 0x4, 0x0, 0x1, 0x7, 0x2c, 0x1, 0x9, 0x5, 0x6, 0x6, 0x11cb, 0x8ccf, 0x8, 0x7f], 0xffff, 0x3}]}) 2.532589311s ago: executing program 1 (id=9199): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x80, 0x0}, 0x14) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x80000001}}], [], 0x6b}}) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="eafedddf000300"/29, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) 2.50446377s ago: executing program 6 (id=9200): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="0430"], 0x4) prctl$PR_SCHED_CORE(0x37, 0x1, 0x0, 0x2, 0x0) 2.450274514s ago: executing program 1 (id=9201): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r3}) 2.404675149s ago: executing program 6 (id=9202): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400609000000080d3dd85dd462"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xed, 0xf5, 0x13, 0x20, 0xc45, 0x624f, 0x6437, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0x6, 0x28, 0x9, [{{0x9, 0x4, 0x68, 0x43, 0x0, 0x73, 0x60, 0x83, 0x2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x2ba900) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0xf, 0x19, {0x19, 0x11, "d91e84f9bdbbb0bf43839d6a546172155829687f505981"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x40, 0x5, 0xfb, "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"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x81, 0x2, "84e5"}, &(0x7f0000000340)={0x20, 0x82, 0x3, '%dS'}, &(0x7f0000000380)={0x20, 0x83, 0x2, "71b2"}, &(0x7f00000003c0)={0x20, 0x84, 0x4, "82b400f5"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "3ace08"}}) 2.370818608s ago: executing program 1 (id=9203): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x6040000}) 2.324889901s ago: executing program 1 (id=9204): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000e00)={'veth0_to_team\x00', &(0x7f0000000dc0)=@ethtool_ts_info}) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x181003) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x4) (async) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x61d}) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f080001"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x40}}, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r4, 0x89e1, 0x0) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0xfffffe40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xf7) (async) r7 = accept4(r0, 0x0, 0x0, 0x0) (async) r8 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x28, 0x5}, 0x8) (async) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delqdisc={0xec, 0x25, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xfff3}, {0xffe0, 0xffff}, {0x5, 0xe}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008800}, 0x880) (async) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80203, &(0x7f0000000140)=ANY=[@ANYBLOB="6c61be6574696d652c0037cc8fe6ad2f75162f8dbf900b82ab3dff"]) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100003a3705208107050005000102b9d400000000000000100009041942c701a4375c320502020002020000090582020002000000"], 0x0) 2.220589233s ago: executing program 1 (id=9205): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064d1, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x9, 0x0, 0x0, 0x17, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9]}}) (fail_nth: 6) 2.152457043s ago: executing program 1 (id=9206): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000040)) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109025f0003010110020904000000019f9aa90100000a240109000202010209040100000102000009040101010102000009050109ff0378010407250183100a0009040200000102ff0305071607250102090101"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "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", 0xd, 0x1, 0x8, 0x9, 0x6, 0x8, 0x4}, r5}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x9f6, @remote, 0x9}, {0xa, 0x4e20, 0x51, @loopback, 0x9}, r5, 0x2}}, 0x48) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000100)=""/221, 0xdd}, {&(0x7f00000002c0)=""/135, 0x87}, {&(0x7f00000003c0)=""/151, 0x97}], 0x3, 0x804, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) syz_usb_control_io$uac1(r1, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0003edff00000c037b17a4cb3b6d6700c92d"], 0x0, 0x0, 0x0}, 0x0) 1.555441562s ago: executing program 2 (id=9207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xd, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x7, 0x7f}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000600000000000000048b84b000000000000000f23c00f21f83503000789000f23f8b9a00d00000f320f79"], 0x60}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000005c0)={0xbc, 0x0, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x3, 0xbdb], 0x1, 0x3c4210}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x4, 0xeeef0000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x841) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r7]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085507, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 528.666722ms ago: executing program 2 (id=9208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) (fail_nth: 2) 171.488266ms ago: executing program 6 (id=9209): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) (async) sendto$packet(r0, &(0x7f00000014c0)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce47532e156c6c28df8dbbfd310a070710ea25d134faabc3c7a4a86e091165de1657696", 0x48, 0x200000d4, &(0x7f0000000140)={0xc9, 0x0, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 171.001808ms ago: executing program 7 (id=9210): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300004000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="40ff3b00002b4b9cc8188d0fab76d8024bd95eb3dcb2ef01030800f651a9a48111493e4fb0fa7914784c7b1de9bcf7ea136b56b015aef5f708f88101e157"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000009c0)=""/84) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x8c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @random="333f361bca9c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r4, 0x5411, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1}) syz_emit_vhci(&(0x7f00000022c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x5, 0x0, 0xa}}}, 0x8) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201100100000010700c03f040000102030109022d00010108a014090400080103010b09058103ff030702090905020340004d087300000000000000000000f4ef90d53fff3da42f016d36e0e0e5bd54e8b6efa374d84ac3d1d00a5909e5ae64fbd92ae72db9a93a2a016f2694920f515d7f309a35adc94e72208b9fb2ea15ba4f2cc68d55365694d09e0520d7b71864b7ea8bd37ffed494d797d0e90ed2736d4fe8fe0894f5b9e413a046665967715fa796a0671d374f1f720b14319ec46deeb8ac8d788603495f222016cee4b8bdfb074da1d2628dea1c5892470ecd7afea2d07f037fe606f82fdbb90d44fe9e6f4a8095d76774d6caacd5d44f691ff2648a9481e7c5ab609d9971748961510a4f8709", @ANYBLOB="ba85d3c234fa399406dbd36da2ef81a62e92b6e256a1372fd0bd413578be8b2407b0f4d9e9"], &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xa9, 0x5, 0x5, 0x8, 0x3}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x8, 0x1, 0xb586, 0x20}]}, 0x1, [{0xd4, &(0x7f0000000280)=@string={0xd4, 0x3, "00be7d374a847e7534ab1517492737b6316aacda4766af02556145dfbd9d02d630f5e667bd3a87f236cdf1f33d7fa370d9ad26f2b3adaccf64f6f1bca3dbd4f70812afd54f5a18a2e50ee61e769e57d50514e5c2e3235e302f0bdcad02c272ee968854cd3abda9738e745da685bb79e41ec711cf2aa66b2fd49b891edc071f0fcaf32a0bde53e5517caeea82389cff44904517def90526f58ea85083865433e35df7601632cc2174a8d55ae4361e8869967431062ab1b1108b06974e8450a5ac113fe87e0a540803d61b0f31a10285e80c2f"}}]}) 115.274165ms ago: executing program 2 (id=9211): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0xc00100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x8000008, 0xe1db, 0x1101, 0xdd}) 308.81µs ago: executing program 6 (id=9212): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xfa, @none, 0x0, 0x2}, 0xe) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000000)=0x27) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0xfa, @none, 0x0, 0x2}, 0xe) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) 0s ago: executing program 2 (id=9213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x210b80, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040010}, 0x4) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)=0x5) ioctl$TCSETA(r1, 0x8925, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = syz_io_uring_complete(0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f00000002c0)={'ip_vti0\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)={0x1, 0xa, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @remote, @broadcast, @random="4a31f5198c2b", @empty, @multicast, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}]}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000bbbbbb0fbb004515003400666000ff06"], 0x4e) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/67, 0x43}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): urned -16 [ 1332.507112][T32356] netlink: 'syz.5.8821': attribute type 11 has an invalid length. [ 1332.571176][T32358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.580898][T32358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.680024][T32361] dvmrp1: entered allmulticast mode [ 1333.038324][ T5868] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1333.117897][T32312] netlink: 'syz.1.8807': attribute type 39 has an invalid length. [ 1333.129539][T12612] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1333.146896][T12612] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1333.159403][T12612] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1333.171199][T12612] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1333.183453][T12612] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1333.203839][T12612] usb 2-1: USB disconnect, device number 39 [ 1333.217802][ T5868] usb 7-1: config 0 has an invalid interface number: 87 but max is 0 [ 1333.233337][ T5868] usb 7-1: config 0 has no interface number 0 [ 1333.246587][ T5868] usb 7-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice=b1.c5 [ 1333.257123][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.268727][ T5868] usb 7-1: Product: syz [ 1333.274282][ T5868] usb 7-1: Manufacturer: syz [ 1333.279111][ T5868] usb 7-1: SerialNumber: syz [ 1333.291458][ T5868] usb 7-1: config 0 descriptor?? [ 1333.311217][ T5868] snd-usb-caiaq 7-1:0.87: can't set alt interface. [ 1333.318280][ T5868] usb 7-1: unable to init card! (ret=-5) [ 1333.324409][ T5868] snd-usb-caiaq 7-1:0.87: probe with driver snd-usb-caiaq failed with error -5 [ 1333.348750][T32374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.361975][T32374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.518359][T12612] usb 7-1: USB disconnect, device number 69 [ 1333.776501][T32380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8831'. [ 1334.346415][T32402] sctp: [Deprecated]: syz.1.8837 (pid 32402) Use of int in max_burst socket option. [ 1334.346415][T32402] Use struct sctp_assoc_value instead [ 1334.434093][T32404] netlink: 'syz.5.8838': attribute type 10 has an invalid length. [ 1334.442513][T32404] lo: entered promiscuous mode [ 1334.453037][T32404] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1334.619613][ T5868] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1334.659457][T32406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.670603][T32406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.790627][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 1334.797429][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.807768][ T5868] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1334.817495][ T5868] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1334.830595][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1334.839267][ T5868] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1334.848744][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.856837][ T5868] usb 2-1: Product: syz [ 1334.861063][ T5868] usb 2-1: Manufacturer: syz [ 1334.866070][ T5868] usb 2-1: SerialNumber: syz [ 1334.872781][ T5868] usb 2-1: config 0 descriptor?? [ 1334.882743][ T5868] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1335.096404][ T5868] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 1335.105243][ T5868] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1335.116328][ T5868] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1335.156316][T32409] netlink: 'syz.6.8840': attribute type 2 has an invalid length. [ 1335.164341][T32409] netlink: 'syz.6.8840': attribute type 1 has an invalid length. [ 1335.173408][T32409] netlink: 'syz.6.8840': attribute type 8 has an invalid length. [ 1335.181649][T32409] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8840'. [ 1335.414138][T32417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.425816][T32417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.477596][T32419] netlink: 232 bytes leftover after parsing attributes in process `syz.6.8845'. [ 1335.762238][T32425] netlink: 'syz.2.8848': attribute type 3 has an invalid length. [ 1338.096268][ T5182] Bluetooth: hci1: command 0x0405 tx timeout [ 1338.102428][T32429] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1339.019008][T32429] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1339.032600][T32429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1339.038857][T32429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1339.045785][T32429] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1339.056546][T32401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1339.062906][T32429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1339.082650][ T5947] usb 2-1: USB disconnect, device number 40 [ 1339.102413][T32445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.141829][T32445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.507870][ T5947] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1339.692083][ T5947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.702444][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.713833][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.723914][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1339.741104][ T5947] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1339.750600][ T5947] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1339.759085][ T5947] usb 2-1: Manufacturer: syz [ 1339.767243][ T5947] usb 2-1: config 0 descriptor?? [ 1339.797905][T32462] netlink: 244 bytes leftover after parsing attributes in process `syz.5.8863'. [ 1339.922213][T32468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.931904][T32468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.118071][T12612] usb 7-1: new low-speed USB device number 70 using dummy_hcd [ 1340.280440][T32474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8867'. [ 1340.297909][T12612] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1340.306973][T12612] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1340.321267][T28114] Bluetooth: hci1: command 0x0405 tx timeout [ 1340.330283][T12612] usb 7-1: config 0 has no interface number 0 [ 1340.346197][T12612] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1340.357310][T12612] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1340.401123][T12612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.422813][T32447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.432205][T32447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.446464][ T5947] usbhid 2-1:0.0: can't add hid device: -71 [ 1340.465222][T12612] usb 7-1: config 0 descriptor?? [ 1340.478930][ T5947] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1340.513494][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8868'. [ 1340.537428][ T5947] usb 2-1: USB disconnect, device number 41 [ 1341.176630][T28114] Bluetooth: hci3: command 0x0c1a tx timeout [ 1341.283469][ T5928] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1341.454506][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 1341.461596][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.473044][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1341.489075][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1341.498571][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.506564][ T5928] usb 2-1: Product: syz [ 1341.511112][ T5928] usb 2-1: Manufacturer: syz [ 1341.515747][ T5928] usb 2-1: SerialNumber: syz [ 1341.524419][ T5928] usb 2-1: config 0 descriptor?? [ 1341.533973][ T5928] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1341.540663][ T5928] gspca_stv06xx: st6422 sensor detected [ 1341.804776][T32487] syzkaller1: entered promiscuous mode [ 1341.810481][T32487] syzkaller1: entered allmulticast mode [ 1341.970163][ T5928] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 1341.997554][ T5928] usb 2-1: USB disconnect, device number 42 [ 1342.377627][ T5928] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1342.548248][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.558741][ T5928] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1342.568647][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.582497][ T5928] usb 2-1: config 0 descriptor?? [ 1342.594942][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 1343.025881][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1343.033851][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 1343.041203][ T5928] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1343.051082][ T5928] pwc: recv_control_msg error -32 req 04 val 1000 [ 1343.060174][ T5928] pwc: recv_control_msg error -32 req 04 val 1300 [ 1343.075739][ T5928] pwc: recv_control_msg error -32 req 04 val 1400 [ 1343.085922][T31007] usb 7-1: USB disconnect, device number 70 [ 1343.096672][ T5928] pwc: recv_control_msg error -32 req 02 val 2000 [ 1343.110234][ T5928] pwc: recv_control_msg error -32 req 02 val 2100 [ 1343.336332][ T5928] pwc: recv_control_msg error -71 req 02 val 2500 [ 1343.351555][ T5928] pwc: recv_control_msg error -71 req 02 val 2400 [ 1343.360326][ T5928] pwc: recv_control_msg error -71 req 02 val 2600 [ 1343.367358][ T5928] pwc: recv_control_msg error -71 req 02 val 2900 [ 1343.378902][ T5928] pwc: recv_control_msg error -71 req 02 val 2800 [ 1343.387710][ T5928] pwc: recv_control_msg error -71 req 04 val 1100 [ 1343.395724][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 1343.403002][T28114] Bluetooth: hci3: command 0x0c1a tx timeout [ 1343.413221][ T5928] pwc: Registered as video103. [ 1343.422787][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input151 [ 1343.456691][ T5928] usb 2-1: USB disconnect, device number 43 [ 1343.770321][T32503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.781320][T32503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.944983][T32509] kvm_intel: kvm [32508]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xcd [ 1344.040558][T32516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8879'. [ 1344.129760][T32520] fuse: Unknown parameter '‹áÇ£¦NÔ' [ 1344.191907][T28114] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1344.230337][T32526] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8884'. [ 1344.295785][T32526] binder: Bad value for 'max' [ 1344.296779][ T6301] udevd[6301]: symlink '../../loop4' '/dev/disk/by-diskseq/182.tmp-b7:4' failed: Read-only file system [ 1344.331400][ T6301] udevd[6301]: symlink '../../loop4' '/dev/disk/by-diskseq/183.tmp-b7:4' failed: Read-only file system [ 1344.359192][ T6301] udevd[6301]: symlink '../../loop4' '/dev/disk/by-diskseq/183.tmp-b7:4' failed: Read-only file system [ 1344.384872][ T6301] udevd[6301]: symlink '../../loop4' '/dev/disk/by-diskseq/183.tmp-b7:4' failed: Read-only file system [ 1344.396156][T32528] netlink: 'syz.2.8885': attribute type 21 has an invalid length. [ 1344.396181][T32528] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8885'. [ 1344.597774][T32537] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8888'. [ 1344.792158][T32545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.074030][T31007] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1345.163340][T32561] overlayfs: missing 'workdir' [ 1345.251709][T31007] usb 7-1: Using ep0 maxpacket: 16 [ 1345.261335][T31007] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1345.272097][T31007] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1345.279802][T31007] usb 7-1: can't read configurations, error -61 [ 1345.427951][T28114] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1345.434628][T31007] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1345.615306][T31007] usb 7-1: Using ep0 maxpacket: 16 [ 1345.622236][T31007] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1345.630340][T28114] Bluetooth: hci3: command 0x0c1a tx timeout [ 1345.638390][T31007] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1345.646016][T31007] usb 7-1: can't read configurations, error -61 [ 1345.652850][T31007] usb usb7-port1: attempt power cycle [ 1345.999461][T32575] tipc: Started in network mode [ 1346.004745][T32575] tipc: Node identity 4, cluster identity 4711 [ 1346.010944][T32575] tipc: Node number set to 4 [ 1346.021853][T31007] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1346.054631][T31007] usb 7-1: Using ep0 maxpacket: 16 [ 1346.061830][T31007] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1346.072495][T31007] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1346.081304][T31007] usb 7-1: can't read configurations, error -61 [ 1346.084541][T32575] nbd: must specify a size in bytes for the device [ 1346.218497][T32584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8905'. [ 1346.235942][T31007] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1346.282125][T31007] usb 7-1: Using ep0 maxpacket: 16 [ 1346.290601][T31007] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1346.308701][T31007] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1346.319968][T31007] usb 7-1: can't read configurations, error -61 [ 1346.320953][T32589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8908'. [ 1346.345624][T31007] usb usb7-port1: unable to enumerate USB device [ 1346.453486][T28114] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1346.463258][T32596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.483235][T32596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.495139][T32597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.505438][T32597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.543067][T32601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8912'. [ 1347.358957][T31007] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1347.497891][T31007] usb 2-1: device descriptor read/64, error -71 [ 1347.572576][T32616] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1347.730915][T32624] nbd_handle_cmd: 2 callbacks suppressed [ 1347.730931][T32624] block nbd0: Attempted send on invalid socket [ 1347.742980][T32624] blk_print_req_error: 2 callbacks suppressed [ 1347.742993][T32624] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1347.761518][T31007] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1347.774990][T32624] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1347.869049][T32630] overlayfs: failed to resolve './file0': -2 [ 1347.904481][T31007] usb 2-1: device descriptor read/64, error -71 [ 1347.982564][T28114] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1348.032630][T31007] usb usb2-port1: attempt power cycle [ 1348.124879][T32638] openvswitch: netlink: Flow key attr not present in new flow. [ 1348.183995][T32643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1348.407134][T31007] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1348.442320][T31007] usb 2-1: device descriptor read/8, error -71 [ 1348.459461][T32659] netlink: 6955 bytes leftover after parsing attributes in process `syz.6.8933'. [ 1348.469552][T32659] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.8933'. [ 1348.645394][T32670] netlink: 'syz.5.8938': attribute type 4 has an invalid length. [ 1348.709090][T31007] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1348.750793][T31007] usb 2-1: device descriptor read/8, error -71 [ 1348.779279][T32681] netlink: 'syz.2.8941': attribute type 4 has an invalid length. [ 1348.860879][T32686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.871158][T32686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.878873][T31007] usb usb2-port1: unable to enumerate USB device [ 1349.411801][T32701] binder: 32700:32701 ioctl c0306201 200000000080 returned -14 [ 1350.310098][T32711] netlink: 'syz.1.8955': attribute type 33 has an invalid length. [ 1350.318927][T32711] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8955'. [ 1350.353830][ T11] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1350.540445][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.553947][ T11] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1350.563827][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.575870][ T11] usb 7-1: config 0 descriptor?? [ 1350.769141][T32723] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8960'. [ 1350.779617][T32723] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8960'. [ 1350.790226][T32723] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1351.026762][ T11] zydacron 0003:13EC:0006.003A: hidraw0: USB HID v0.01 Device [HID 13ec:0006] on usb-dummy_hcd.6-1/input0 [ 1351.059890][ T5928] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1351.086986][ T6301] udevd[6301]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system [ 1351.098669][ T6301] udevd[6301]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system [ 1351.230936][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 1351.241007][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.252138][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1351.264390][ T5928] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1351.273859][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=223, SerialNumber=3 [ 1351.282340][ T5928] usb 2-1: Product: syz [ 1351.286896][ T5928] usb 2-1: Manufacturer: syz [ 1351.292619][ T5928] usb 2-1: SerialNumber: syz [ 1352.052131][T32728] netlink: 264 bytes leftover after parsing attributes in process `syz.5.8961'. [ 1352.061968][T32728] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8961'. [ 1352.117193][T28114] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1352.340634][T32740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.359618][T32740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.724312][T32745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8968'. [ 1353.331779][T31007] usb 7-1: USB disconnect, device number 75 [ 1353.380173][T32758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8974'. [ 1354.056994][ T300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.065850][ T300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.080481][ T300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.089349][ T300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.511361][T31007] usb 2-1: USB disconnect, device number 48 [ 1354.664487][ T11] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1354.857431][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 1354.867044][ T11] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1354.882894][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1354.904100][ T11] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1354.915312][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.927744][ T11] usb 7-1: Product: syz [ 1354.933149][ T11] usb 7-1: Manufacturer: syz [ 1354.937825][ T11] usb 7-1: SerialNumber: syz [ 1354.941032][ T11] usb 7-1: config 0 descriptor?? [ 1354.952866][ T11] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1354.955364][ T318] fuse: Bad value for 'fd' [ 1354.966608][ T11] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1355.595617][ T11] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1355.603603][ T11] em28xx 7-1:0.0: Config register raw data: 0x56 [ 1355.677698][ T329] pimreg: entered allmulticast mode [ 1355.684598][ T328] pimreg: left allmulticast mode [ 1355.818105][ T11] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1355.825365][ T11] em28xx 7-1:0.0: No AC97 audio processor [ 1355.837967][ T11] usb 7-1: USB disconnect, device number 76 [ 1355.845564][ T11] em28xx 7-1:0.0: Disconnecting em28xx [ 1355.855706][ T11] em28xx 7-1:0.0: Freeing device [ 1356.001524][T31007] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1356.167921][T31007] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1356.177119][T31007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.185334][T31007] usb 2-1: Product: syz [ 1356.189512][T31007] usb 2-1: Manufacturer: syz [ 1356.194193][T31007] usb 2-1: SerialNumber: syz [ 1356.200705][T31007] usb 2-1: config 0 descriptor?? [ 1356.445994][T31007] usb 2-1: ignoring: probably an ADSL modem [ 1356.480897][T31007] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1356.503496][T31007] usb 2-1: USB disconnect, device number 49 [ 1356.524652][ T343] binder: 342:343 ioctl c0306201 200000000080 returned -14 [ 1356.541816][ T343] binder: 342:343 ioctl 89e1 200000000180 returned -22 [ 1356.718091][ T11] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1356.880246][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.890609][ T11] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1356.900058][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.910086][ T11] usb 7-1: config 0 descriptor?? [ 1356.918716][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 1357.353991][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1357.362987][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 1357.375331][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1357.383738][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 1357.396018][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 1357.410376][ T11] pwc: recv_control_msg error -32 req 04 val 1400 [ 1357.429427][ T11] pwc: recv_control_msg error -32 req 02 val 2000 [ 1357.449059][ T11] pwc: recv_control_msg error -32 req 02 val 2100 [ 1357.685818][ T11] pwc: recv_control_msg error -71 req 02 val 2500 [ 1357.694555][ T11] pwc: recv_control_msg error -71 req 02 val 2400 [ 1357.714543][ T11] pwc: recv_control_msg error -71 req 02 val 2600 [ 1357.721635][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 1357.731971][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 1357.739506][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 1357.747418][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 1357.758345][ T11] pwc: Registered as video103. [ 1357.776001][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input152 [ 1357.805548][ T11] usb 7-1: USB disconnect, device number 77 [ 1357.853406][T12612] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1357.930478][ T350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.939729][ T350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.030010][T12612] usb 2-1: string descriptor 0 read error: -22 [ 1358.036486][T12612] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1358.046529][T12612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.059043][T12612] usb 2-1: config 0 descriptor?? [ 1358.066686][T12612] usbtest 2-1:0.0: FX2 device [ 1358.071402][T12612] usbtest 2-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1358.288516][T31007] usb 2-1: USB disconnect, device number 50 [ 1358.330590][ T357] @ÿ: renamed from veth0_vlan (while UP) [ 1358.932547][ T11] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1359.100510][T12612] usb 6-1: USB disconnect, device number 65 [ 1359.112886][T31511] vhci_hcd: connection reset by peer [ 1359.120203][ T11] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.142906][ T36] vhci_hcd: stop threads [ 1359.150317][T27816] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1359.153171][ T36] vhci_hcd: release socket [ 1359.159435][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.170274][ T36] vhci_hcd: disconnect device [ 1359.175667][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.191611][ T11] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1359.206137][ T11] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1359.216645][ T11] usb 7-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1359.225258][ T11] usb 7-1: Manufacturer: syz [ 1359.235108][ T11] usb 7-1: config 0 descriptor?? [ 1359.244673][T12538] vhci_hcd: vhci_device speed not set [ 1359.351072][T27816] usb 2-1: Using ep0 maxpacket: 32 [ 1359.358815][T27816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.373585][T27816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.384796][T27816] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1359.398189][T27816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.411085][T27816] usb 2-1: config 0 descriptor?? [ 1359.829038][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1359.844947][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1359.855377][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1359.868058][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1359.873194][T27816] ft260 0003:0403:6030.003B: unknown main item tag 0x7 [ 1359.878429][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1359.903775][ T359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.921099][ T359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.935774][ T11] usbhid 7-1:0.0: can't add hid device: -71 [ 1359.947361][ T11] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1359.969618][ T11] usb 7-1: USB disconnect, device number 78 [ 1360.082278][T27816] ft260 0003:0403:6030.003B: chip code: 6424 8183 [ 1360.128481][ T372] chnl_net:caif_netlink_parms(): no params data found [ 1360.226986][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.234351][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.241736][ T372] bridge_slave_0: entered allmulticast mode [ 1360.250284][ T372] bridge_slave_0: entered promiscuous mode [ 1360.259174][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.266432][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.274244][ T372] bridge_slave_1: entered allmulticast mode [ 1360.282782][ T372] bridge_slave_1: entered promiscuous mode [ 1360.307045][T27816] ft260 0003:0403:6030.003B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1360.326594][ T372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.339234][ T372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.386635][ T372] team0: Port device team_slave_0 added [ 1360.395660][ T372] team0: Port device team_slave_1 added [ 1360.433942][ T372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.441431][ T372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.468174][ T372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.482067][ T372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.489251][ T372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.517116][ T372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.538575][ T361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.551876][ T361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.630445][ T384] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1360.637008][ T384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1360.651727][ T384] vhci_hcd vhci_hcd.0: Device attached [ 1360.659739][ T384] program syz.6.9008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1360.662633][ T372] hsr_slave_0: entered promiscuous mode [ 1360.677195][ T372] hsr_slave_1: entered promiscuous mode [ 1360.683440][ T384] netlink: 'syz.6.9008': attribute type 4 has an invalid length. [ 1360.683801][ T372] debugfs: 'hsr0' already exists in 'hsr' [ 1360.693692][ T385] vhci_hcd: connection closed [ 1360.699815][ T372] Cannot create hsr debugfs directory [ 1360.705427][T25618] vhci_hcd: stop threads [ 1360.717557][T25618] vhci_hcd: release socket [ 1360.725917][T25618] vhci_hcd: disconnect device [ 1360.919609][ T372] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1360.931541][ T372] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1360.942431][ T372] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1360.956488][ T372] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1361.049692][ T372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.077197][ T372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.095733][T25618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.102927][T25618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.120369][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.127594][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.235863][T27816] ft260 0003:0403:6030.003B: failed to retrieve status: -71, no wakeup [ 1361.269395][T27816] ft260 0003:0403:6030.003B: failed to retrieve status: -71 [ 1361.282027][T27816] ft260 0003:0403:6030.003B: failed to reset I2C controller: -71 [ 1361.340506][T27816] usb 2-1: USB disconnect, device number 51 [ 1361.520602][ T372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.763427][ T414] FAULT_INJECTION: forcing a failure. [ 1361.763427][ T414] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.776983][T27816] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1361.789036][ T414] CPU: 0 UID: 0 PID: 414 Comm: syz.6.9012 Not tainted syzkaller #0 PREEMPT(full) [ 1361.789066][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1361.789080][ T414] Call Trace: [ 1361.789088][ T414] [ 1361.789096][ T414] dump_stack_lvl+0x189/0x250 [ 1361.789119][ T414] ? __pfx____ratelimit+0x10/0x10 [ 1361.789146][ T414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1361.789164][ T414] ? __pfx__printk+0x10/0x10 [ 1361.789192][ T414] ? __pfx___might_resched+0x10/0x10 [ 1361.789214][ T414] ? fs_reclaim_acquire+0x7d/0x100 [ 1361.789243][ T414] should_fail_ex+0x414/0x560 [ 1361.789272][ T414] should_failslab+0xa8/0x100 [ 1361.789297][ T414] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1361.789326][ T414] ? trace_contention_end+0x39/0x120 [ 1361.789355][ T414] ? vhost_task_create+0xf6/0x290 [ 1361.789387][ T414] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1361.789416][ T414] vhost_task_create+0xf6/0x290 [ 1361.789441][ T414] ? arch_stack_walk+0xfc/0x150 [ 1361.789466][ T414] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1361.789500][ T414] ? __pfx_vhost_task_create+0x10/0x10 [ 1361.789538][ T414] ? __pfx_vhost_task_fn+0x10/0x10 [ 1361.789586][ T414] kvm_mmu_post_init_vm+0x14c/0x300 [ 1361.789609][ T414] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1361.789637][ T414] ? __mutex_trylock_common+0x153/0x260 [ 1361.789667][ T414] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1361.789694][ T414] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1361.789718][ T414] ? rcu_is_watching+0x15/0xb0 [ 1361.789742][ T414] ? trace_contention_end+0x39/0x120 [ 1361.789766][ T414] ? look_up_lock_class+0x74/0x170 [ 1361.789785][ T414] ? register_lock_class+0x51/0x320 [ 1361.789809][ T414] ? __lock_acquire+0xab9/0xd20 [ 1361.789858][ T414] kvm_vcpu_ioctl+0x95c/0xe90 [ 1361.789884][ T414] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1361.789922][ T414] ? __fget_files+0x2a/0x420 [ 1361.789952][ T414] ? __fget_files+0x3a0/0x420 [ 1361.789975][ T414] ? __fget_files+0x2a/0x420 [ 1361.790002][ T414] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1361.790028][ T414] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1361.790048][ T414] __se_sys_ioctl+0xf9/0x170 [ 1361.790073][ T414] do_syscall_64+0xfa/0xfa0 [ 1361.790091][ T414] ? lockdep_hardirqs_on+0x9c/0x150 [ 1361.790110][ T414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.790130][ T414] ? clear_bhb_loop+0x60/0xb0 [ 1361.790154][ T414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.790174][ T414] RIP: 0033:0x7fbcb678ebe9 [ 1361.790193][ T414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.790211][ T414] RSP: 002b:00007fbcb751e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.790233][ T414] RAX: ffffffffffffffda RBX: 00007fbcb69c5fa0 RCX: 00007fbcb678ebe9 [ 1361.790249][ T414] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1361.790262][ T414] RBP: 00007fbcb751e090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.790274][ T414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.790286][ T414] R13: 00007fbcb69c6038 R14: 00007fbcb69c5fa0 R15: 00007ffed83c79b8 [ 1361.790321][ T414] [ 1361.851735][ T372] veth0_vlan: entered promiscuous mode [ 1361.973426][T27816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.989242][ T372] veth1_vlan: entered promiscuous mode [ 1362.016032][T27816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1362.056511][ T5182] Bluetooth: hci1: command tx timeout [ 1362.072025][T27816] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1362.102126][ T372] veth0_macvtap: entered promiscuous mode [ 1362.135469][T27816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1362.167242][ T372] veth1_macvtap: entered promiscuous mode [ 1362.171563][T27816] usb 2-1: SerialNumber: syz [ 1362.229303][ T372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.268128][ T372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.313942][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.324721][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.345634][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.354585][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.436634][T27816] usb 2-1: 0:2 : does not exist [ 1362.442721][T27816] usb 2-1: unit 5: unexpected type 0x0e [ 1362.476519][T27816] usb 2-1: USB disconnect, device number 52 [ 1362.523497][ T6301] udevd[6301]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1362.663567][ T426] loop3: detected capacity change from 0 to 1 [ 1362.674466][ T426] Dev loop3: unable to read RDB block 1 [ 1362.681916][ T426] loop3: unable to read partition table [ 1362.689728][ T426] loop3: partition table beyond EOD, truncated [ 1362.702421][ T6301] udevd[6301]: symlink '../../loop3' '/dev/disk/by-diskseq/185.tmp-b7:3' failed: Read-only file system [ 1362.713755][ T426] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1362.768312][ T6301] udevd[6301]: symlink '../../loop3' '/dev/disk/by-diskseq/185.tmp-b7:3' failed: Read-only file system [ 1362.780448][T25618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.798546][T25618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.811885][ T6301] udevd[6301]: symlink '../../loop3' '/dev/disk/by-diskseq/185.tmp-b7:3' failed: Read-only file system [ 1362.874158][T11208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.883549][T11208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.891220][T12612] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1363.087113][T12612] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.099313][T12612] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1363.119529][T12612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.134577][T12612] usb 7-1: config 0 descriptor?? [ 1363.153001][T12612] pwc: Askey VC010 type 2 USB webcam detected. [ 1363.252571][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9020'. [ 1363.310543][ T5182] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1363.321900][ T442] block nbd2: Attempted send on invalid socket [ 1363.335570][ T442] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.348957][ T442] block nbd2: Attempted send on invalid socket [ 1363.355220][ T442] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.364612][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1363.374673][ T442] block nbd2: Attempted send on invalid socket [ 1363.380963][ T442] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.390688][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1363.401448][ T442] block nbd2: Attempted send on invalid socket [ 1363.407785][ T442] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.417344][ T442] block nbd2: Attempted send on invalid socket [ 1363.423572][ T442] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.433093][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1363.443007][ T442] block nbd2: Attempted send on invalid socket [ 1363.449294][ T442] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.459594][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1363.469824][ T442] block nbd2: Attempted send on invalid socket [ 1363.476028][ T442] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.485482][ T442] block nbd2: Attempted send on invalid socket [ 1363.491675][ T442] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.501172][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1363.511095][ T442] block nbd2: Attempted send on invalid socket [ 1363.517284][ T442] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.526738][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1363.536838][ T442] block nbd2: Attempted send on invalid socket [ 1363.543085][ T442] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1363.552544][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1363.563103][ T442] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1363.572629][ T442] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1363.657227][T12612] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1363.668255][T12612] pwc: recv_control_msg error -32 req 02 val 2700 [ 1363.696366][T12612] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1363.706471][T12612] pwc: recv_control_msg error -32 req 04 val 1000 [ 1363.714695][T12612] pwc: recv_control_msg error -32 req 04 val 1300 [ 1363.737616][T12612] pwc: recv_control_msg error -32 req 04 val 1400 [ 1363.747060][T12612] pwc: recv_control_msg error -32 req 02 val 2000 [ 1363.761736][T12612] pwc: recv_control_msg error -32 req 02 val 2100 [ 1363.836283][ T452] kvm: pic: non byte write [ 1363.989580][T12612] pwc: recv_control_msg error -71 req 02 val 2500 [ 1364.008327][T12612] pwc: recv_control_msg error -71 req 02 val 2400 [ 1364.040421][T12612] pwc: recv_control_msg error -71 req 02 val 2600 [ 1364.070489][T12612] pwc: recv_control_msg error -71 req 02 val 2900 [ 1364.079531][T12612] pwc: recv_control_msg error -71 req 02 val 2800 [ 1364.092252][T12612] pwc: recv_control_msg error -71 req 04 val 1100 [ 1364.098735][ T463] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.9032'. [ 1364.113172][T12612] pwc: recv_control_msg error -71 req 04 val 1200 [ 1364.121325][T12612] pwc: Registered as video103. [ 1364.130013][T12612] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input153 [ 1364.168110][T12612] usb 7-1: USB disconnect, device number 79 [ 1364.280698][ T5182] Bluetooth: hci1: command tx timeout [ 1364.355286][T13574] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1364.515787][T13574] usb 8-1: Using ep0 maxpacket: 8 [ 1364.523413][T13574] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1364.535796][T13574] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1364.546988][T13574] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1364.557039][T13574] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1364.570428][T13574] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1364.579493][T13574] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.813534][T13574] usb 8-1: GET_CAPABILITIES returned 0 [ 1364.819376][T13574] usbtmc 8-1:16.0: can't read capabilities [ 1364.869331][T12612] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1365.029627][T12612] usb 7-1: Using ep0 maxpacket: 32 [ 1365.036364][T12612] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1365.046153][T12612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.060532][T12612] usb 7-1: config 0 descriptor?? [ 1365.068744][T12612] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1365.189614][T27816] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1365.360773][T27816] usb 2-1: Using ep0 maxpacket: 16 [ 1365.368237][T27816] usb 2-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 1365.378578][T27816] usb 2-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1365.391515][T27816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1365.398211][T27816] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1365.407392][T27816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.424939][T27816] usb 2-1: config 0 descriptor?? [ 1365.434277][T27816] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1365.650276][T27816] usb 2-1: USB disconnect, device number 53 [ 1366.307399][ T474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9036'. [ 1366.397687][ T5182] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1366.505409][ T5182] Bluetooth: hci1: command tx timeout [ 1367.006168][T12612] gspca_vc032x: reg_r err -32 [ 1367.013868][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.019810][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.029433][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.038176][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.045210][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.057755][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.070262][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.075820][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.081539][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.087029][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.092326][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.100611][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.106360][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.111885][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.117522][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.122941][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.131531][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.143183][T12612] gspca_vc032x: I2c Bus Busy Wait 00 [ 1367.148673][T12612] gspca_vc032x: Unknown sensor... [ 1367.153785][T12612] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1367.167908][T12612] usb 7-1: USB disconnect, device number 80 [ 1367.298228][T31007] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1367.315313][ T5928] usb 8-1: USB disconnect, device number 2 [ 1367.467913][T31007] usb 2-1: Using ep0 maxpacket: 32 [ 1367.478025][T31007] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1367.487911][T31007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.504623][T31007] usb 2-1: config 0 descriptor?? [ 1367.520070][T31007] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1367.855516][ T5182] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1367.933734][ T1158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.103416][ T1158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.214737][ T1158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.330635][ T1158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.445051][T28114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1368.458321][T28114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1368.468286][T28114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1368.484440][T28114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1368.500025][T28114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1368.567848][ T1158] bridge_slave_1: left allmulticast mode [ 1368.581892][ T1158] bridge_slave_1: left promiscuous mode [ 1368.588682][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.615230][ T1158] bridge_slave_0: left allmulticast mode [ 1368.621079][ T1158] bridge_slave_0: left promiscuous mode [ 1368.628808][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.658828][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.672314][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.730333][ T5182] Bluetooth: hci1: command tx timeout [ 1368.921154][ T1158] dvmrp1 (unregistering): left allmulticast mode [ 1369.238857][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1369.252379][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1369.265830][ T1158] bond0 (unregistering): Released all slaves [ 1369.556898][T31007] gspca_sunplus: reg_w_riv err -71 [ 1369.562152][T31007] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1369.587949][T31007] usb 2-1: USB disconnect, device number 54 [ 1369.831085][ T1158] hsr_slave_0: left promiscuous mode [ 1369.870081][ T1158] hsr_slave_1: left promiscuous mode [ 1369.889308][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1369.909382][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.923303][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.934481][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.977288][ T1158] veth1_macvtap: left promiscuous mode [ 1369.996644][ T1158] veth0_macvtap: left promiscuous mode [ 1370.012646][ T1158] veth1_vlan: left promiscuous mode [ 1370.031440][ T1158] @ÿ: left promiscuous mode [ 1370.201581][T27199] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1370.260541][T27199] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1370.278129][T27199] usb 3-1: USB disconnect, device number 93 [ 1370.463744][T12538] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1370.549674][T12612] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1370.654624][ T5182] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1370.655725][T12538] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1370.674088][T12538] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.691458][T12538] usb 8-1: config 0 descriptor?? [ 1370.698433][ T5182] Bluetooth: hci2: command tx timeout [ 1370.757954][T12612] usb 2-1: Using ep0 maxpacket: 16 [ 1370.764734][T12612] usb 2-1: too many configurations: 54, using maximum allowed: 8 [ 1370.774933][T12612] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1370.782803][T12612] usb 2-1: can't read configurations, error -61 [ 1370.930643][T12538] kaweth 8-1:0.0: Firmware present in device. [ 1370.944273][T12612] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1371.044515][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 1371.103718][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 1371.126503][T12612] usb 2-1: Using ep0 maxpacket: 16 [ 1371.137763][T12612] usb 2-1: too many configurations: 54, using maximum allowed: 8 [ 1371.145710][T12538] kaweth 8-1:0.0: Statistics collection: 0 [ 1371.168179][T12538] kaweth 8-1:0.0: Multicast filter limit: 0 [ 1371.175139][T12612] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1371.183388][T12538] kaweth 8-1:0.0: MTU: 0 [ 1371.187893][T12612] usb 2-1: can't read configurations, error -61 [ 1371.194821][T12538] kaweth 8-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1371.202845][T12612] usb usb2-port1: attempt power cycle [ 1371.578445][T12612] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1371.647136][T12612] usb 2-1: Using ep0 maxpacket: 16 [ 1371.653802][T12612] usb 2-1: too many configurations: 54, using maximum allowed: 8 [ 1371.673459][T12612] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1371.681138][T12612] usb 2-1: can't read configurations, error -61 [ 1371.769411][T27199] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1371.824520][T12612] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1371.873168][T12612] usb 2-1: Using ep0 maxpacket: 16 [ 1371.879827][T12612] usb 2-1: too many configurations: 54, using maximum allowed: 8 [ 1371.913171][T12612] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1371.924186][T12612] usb 2-1: can't read configurations, error -61 [ 1371.935791][T12538] kaweth 8-1:0.0: kaweth interface created at eth17 [ 1371.952673][T12612] usb usb2-port1: unable to enumerate USB device [ 1371.967998][T27199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.011417][T27199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.025692][ T501] chnl_net:caif_netlink_parms(): no params data found [ 1372.033691][T27199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.043572][T27199] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1372.054253][T12612] usb 8-1: USB disconnect, device number 3 [ 1372.057959][T27199] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1372.072676][T27199] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1372.099427][T27199] usb 3-1: Manufacturer: syz [ 1372.125791][T27199] usb 3-1: config 0 descriptor?? [ 1372.411273][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.418728][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.434239][ T501] bridge_slave_0: entered allmulticast mode [ 1372.442420][ T501] bridge_slave_0: entered promiscuous mode [ 1372.472956][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.486532][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.493879][ T501] bridge_slave_1: entered allmulticast mode [ 1372.510080][ T501] bridge_slave_1: entered promiscuous mode [ 1372.588566][ T501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.605534][ T501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.735514][ T573] binder: 572:573 ioctl c0306201 200000000080 returned -14 [ 1372.749993][ T501] team0: Port device team_slave_0 added [ 1372.769210][ T501] team0: Port device team_slave_1 added [ 1372.803620][ T553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.815964][ T553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.833283][T27199] usbhid 3-1:0.0: can't add hid device: -71 [ 1372.842084][T27199] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1372.862701][T27199] usb 3-1: USB disconnect, device number 94 [ 1372.885259][ T501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.894445][ T501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.920827][ T501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.923836][ T5182] Bluetooth: hci2: command tx timeout [ 1372.944436][ T501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.951433][ T501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.982245][ T501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.184026][ T5182] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1373.192884][ T501] hsr_slave_0: entered promiscuous mode [ 1373.210937][ T501] hsr_slave_1: entered promiscuous mode [ 1373.217669][ T501] debugfs: 'hsr0' already exists in 'hsr' [ 1373.224584][ T501] Cannot create hsr debugfs directory [ 1373.861031][ T605] syzkaller1: entered promiscuous mode [ 1373.869315][ T605] syzkaller1: entered allmulticast mode [ 1373.928539][T27199] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1374.015029][T31007] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1374.101267][T27199] usb 2-1: Using ep0 maxpacket: 8 [ 1374.109573][T27199] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1374.127390][ T501] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1374.137063][T27199] usb 2-1: config 119 has an invalid interface number: 109 but max is 0 [ 1374.150812][T27199] usb 2-1: config 119 has no interface number 0 [ 1374.156462][ T501] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1374.167479][T27199] usb 2-1: config 119 interface 109 has no altsetting 0 [ 1374.180507][T27199] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=ed.67 [ 1374.194252][ T501] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1374.195960][T31007] usb 3-1: Using ep0 maxpacket: 16 [ 1374.211914][T27199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.218932][ T501] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1374.220353][T27199] usb 2-1: Product: syz [ 1374.231408][T27199] usb 2-1: Manufacturer: syz [ 1374.236384][T27199] usb 2-1: SerialNumber: syz [ 1374.241518][T31007] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1374.253799][T31007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1374.270015][T31007] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1374.286656][T31007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.301776][T31007] usb 3-1: Product: syz [ 1374.306566][T31007] usb 3-1: Manufacturer: syz [ 1374.311283][T31007] usb 3-1: SerialNumber: syz [ 1374.329726][T31007] usb 3-1: config 0 descriptor?? [ 1374.345972][T13574] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1374.360014][T31007] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1374.388135][T31007] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1374.472505][ T501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.528047][T13574] usb 8-1: Using ep0 maxpacket: 16 [ 1374.534898][ T597] sp0: Synchronizing with TNC [ 1374.543554][ T501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.561119][T13574] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1374.580589][T13574] usb 8-1: config 0 has no interface number 0 [ 1374.588746][T13574] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1374.598886][T13574] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1374.604112][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.613930][T13574] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.615139][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.634464][T13574] usb 8-1: Product: syz [ 1374.648500][T27199] kobil_sct 2-1:119.109: KOBIL USB smart card terminal converter detected [ 1374.654543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.663462][T13574] usb 8-1: Manufacturer: syz [ 1374.664186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.672338][T13574] usb 8-1: SerialNumber: syz [ 1374.686282][T27199] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1374.708410][T13574] usb 8-1: config 0 descriptor?? [ 1374.718789][T27199] usb 2-1: USB disconnect, device number 59 [ 1374.741020][T13574] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 1374.777937][T27199] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1374.809370][T27199] kobil_sct 2-1:119.109: device disconnected [ 1375.005583][T31007] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1375.022235][T31007] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1375.037858][ T609] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9072'. [ 1375.049996][T31007] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1375.068383][T31007] em28xx 3-1:0.0: No AC97 audio processor [ 1375.081417][ T609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.112026][ T609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.148425][ T5182] Bluetooth: hci2: command tx timeout [ 1375.258502][ T501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.482315][T31007] usb 3-1: USB disconnect, device number 95 [ 1375.495712][T31007] em28xx 3-1:0.0: Disconnecting em28xx [ 1375.521792][T31007] em28xx 3-1:0.0: Freeing device [ 1375.765690][T27199] usb 8-1: USB disconnect, device number 4 [ 1375.817766][ T501] veth0_vlan: entered promiscuous mode [ 1375.883657][ T501] veth1_vlan: entered promiscuous mode [ 1375.915615][ T5182] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1375.944212][ T501] veth0_macvtap: entered promiscuous mode [ 1375.966980][ T501] veth1_macvtap: entered promiscuous mode [ 1375.999961][ T501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.027478][ T501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.049559][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.059106][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.085145][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.096958][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.123647][T31007] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1376.142720][ T5928] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1376.223861][T25618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.239188][T25618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.281853][ T5928] usb 3-1: device descriptor read/64, error -71 [ 1376.298275][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.315777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.331113][T31007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.363132][T31007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.390873][T31007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.412013][T31007] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1376.443627][T31007] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1376.474874][T31007] usb 2-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1376.483084][T31007] usb 2-1: Manufacturer: syz [ 1376.509148][T31007] usb 2-1: config 0 descriptor?? [ 1376.538832][ T5928] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1376.699013][ T5928] usb 3-1: device descriptor read/64, error -71 [ 1376.699121][ T5947] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1376.827627][ T5928] usb usb3-port1: attempt power cycle [ 1376.895651][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.905991][ T5947] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1376.915319][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.927101][ T5947] usb 7-1: config 0 descriptor?? [ 1376.935751][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 1377.188759][ T663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.190975][ T5928] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1377.202029][ T663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.220989][T31007] usbhid 2-1:0.0: can't add hid device: -71 [ 1377.227683][T31007] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1377.243469][T31007] usb 2-1: USB disconnect, device number 60 [ 1377.250706][ T5928] usb 3-1: device descriptor read/8, error -71 [ 1377.367482][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1377.373958][ T5182] Bluetooth: hci2: command tx timeout [ 1377.381976][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 1377.389475][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1377.397009][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 1377.403965][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 1377.411298][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 1377.418423][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 1377.425511][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 1377.511797][ T5928] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1377.533873][ T5928] usb 3-1: device descriptor read/8, error -71 [ 1377.647390][ T5947] pwc: recv_control_msg error -71 req 02 val 2500 [ 1377.651131][ T5928] usb usb3-port1: unable to enumerate USB device [ 1377.658219][ T5947] pwc: recv_control_msg error -71 req 02 val 2400 [ 1377.667480][ T5947] pwc: recv_control_msg error -71 req 02 val 2600 [ 1377.674651][ T5947] pwc: recv_control_msg error -71 req 02 val 2900 [ 1377.681402][ T5947] pwc: recv_control_msg error -71 req 02 val 2800 [ 1377.690890][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 1377.698928][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 1377.707173][ T5947] pwc: Registered as video103. [ 1377.714514][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input154 [ 1377.742531][ T5947] usb 7-1: USB disconnect, device number 81 [ 1378.132183][T12612] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1378.308899][T12612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1378.328993][T12612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1378.350924][T12612] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1378.363299][T12612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.372067][T12612] usb 2-1: Product: syz [ 1378.376318][T12612] usb 2-1: Manufacturer: syz [ 1378.382956][T12612] usb 2-1: SerialNumber: syz [ 1378.390231][T12612] usb 2-1: config 0 descriptor?? [ 1378.398670][T12612] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1378.602866][ T5928] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1378.620428][ T693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.629815][ T693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.665411][T12612] usb 2-1: USB disconnect, device number 61 [ 1378.715803][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1378.768463][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1378.781165][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1378.793525][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39485, setting to 64 [ 1378.808054][ T5928] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1378.817228][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.825222][ T5928] usb 7-1: Product: syz [ 1378.829570][ T5928] usb 7-1: Manufacturer: syz [ 1378.834181][ T5928] usb 7-1: SerialNumber: syz [ 1378.841695][ T5928] usb 7-1: config 0 descriptor?? [ 1378.847432][ T701] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1378.857303][ T5928] radioshark2 7-1:0.0: Invalid radioSHARK2 device [ 1378.863852][ T5928] radioshark2 7-1:0.0: probe with driver radioshark2 failed with error -22 [ 1378.998598][ T689] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1379.077654][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.091682][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.122930][ T5928] usb 7-1: USB disconnect, device number 82 [ 1379.208950][ T705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1379.295603][ T707] kvm: kvm [706]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1201ba41f1f636b2 [ 1379.307169][ T707] netlink: 'syz.1.9090': attribute type 6 has an invalid length. [ 1379.316603][ T707] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9090'. [ 1379.481054][T12612] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1379.663879][T12612] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.674944][T12612] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1379.693838][T12612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.705548][T12612] usb 3-1: config 0 descriptor?? [ 1379.722522][T12612] pwc: Askey VC010 type 2 USB webcam detected. [ 1379.833264][ T5928] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1379.857917][ T725] pim6reg: entered allmulticast mode [ 1379.874302][T31007] IPVS: starting estimator thread 0... [ 1379.938911][ T729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9096'. [ 1379.993719][ T728] IPVS: using max 35 ests per chain, 84000 per kthread [ 1380.016783][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.027182][ T5928] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1380.036333][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.046601][ T5928] usb 2-1: config 0 descriptor?? [ 1380.055394][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 1380.121735][T27199] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1380.146832][T12612] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1380.154125][T12612] pwc: recv_control_msg error -32 req 02 val 2700 [ 1380.161294][T12612] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1380.171045][T12612] pwc: recv_control_msg error -32 req 04 val 1000 [ 1380.178624][T12612] pwc: recv_control_msg error -32 req 04 val 1300 [ 1380.189027][T12612] pwc: recv_control_msg error -32 req 04 val 1400 [ 1380.196149][T12612] pwc: recv_control_msg error -32 req 02 val 2000 [ 1380.204344][T12612] pwc: recv_control_msg error -32 req 02 val 2100 [ 1380.214092][T12612] pwc: recv_control_msg error -32 req 04 val 1500 [ 1380.222315][T12612] pwc: recv_control_msg error -32 req 02 val 2500 [ 1380.229721][T12612] pwc: recv_control_msg error -32 req 02 val 2400 [ 1380.257572][T12612] pwc: recv_control_msg error -32 req 02 val 2600 [ 1380.265117][T12612] pwc: recv_control_msg error -32 req 02 val 2900 [ 1380.285177][T27199] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.296324][T27199] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1380.305847][T27199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.327473][T27199] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1380.488374][T12612] pwc: recv_control_msg error -71 req 04 val 1100 [ 1380.497903][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1380.499673][T12612] pwc: recv_control_msg error -71 req 04 val 1200 [ 1380.505491][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 1380.518590][ T5928] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1380.519172][T12612] pwc: Registered as video103. [ 1380.526324][ T5928] pwc: recv_control_msg error -32 req 04 val 1000 [ 1380.541595][ T5928] pwc: recv_control_msg error -32 req 04 val 1300 [ 1380.544954][T12612] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input155 [ 1380.557759][ T5928] pwc: recv_control_msg error -32 req 04 val 1400 [ 1380.558606][ T5928] pwc: recv_control_msg error -32 req 02 val 2000 [ 1380.587040][ T5928] pwc: recv_control_msg error -32 req 02 val 2100 [ 1380.592949][T12612] usb 3-1: USB disconnect, device number 100 [ 1380.750572][ T732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1380.814102][ T5928] pwc: recv_control_msg error -71 req 02 val 2500 [ 1380.823383][ T5928] pwc: recv_control_msg error -71 req 02 val 2400 [ 1380.832275][ T5928] pwc: recv_control_msg error -71 req 02 val 2600 [ 1380.841468][ T5928] pwc: recv_control_msg error -71 req 02 val 2900 [ 1380.848197][ T5928] pwc: recv_control_msg error -71 req 02 val 2800 [ 1380.855781][ T5928] pwc: recv_control_msg error -71 req 04 val 1100 [ 1380.863291][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 1380.873834][ T5928] pwc: Registered as video103. [ 1380.881839][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input156 [ 1380.913713][ T5928] usb 2-1: USB disconnect, device number 62 [ 1381.087726][T27816] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1381.141291][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1381.147812][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1381.166984][ T738] netlink: 124 bytes leftover after parsing attributes in process `syz.2.9100'. [ 1381.287602][T27816] usb 7-1: Using ep0 maxpacket: 16 [ 1381.294384][T27816] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 1381.302999][T27816] usb 7-1: config 0 has no interface number 0 [ 1381.312456][T27816] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1381.322557][T27816] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1381.334947][T27816] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1381.344218][T27816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.352504][T27816] usb 7-1: Product: syz [ 1381.356756][T27816] usb 7-1: Manufacturer: syz [ 1381.361338][T27816] usb 7-1: SerialNumber: syz [ 1381.369173][T27816] usb 7-1: config 0 descriptor?? [ 1381.375120][ T734] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1381.382383][ T734] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1381.486302][T27199] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1381.605041][ T734] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1381.638487][T27816] asix 7-1:0.251: probe with driver asix failed with error -71 [ 1381.656874][T27816] usb 7-1: USB disconnect, device number 83 [ 1381.696730][ T5928] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1381.707662][T27199] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1381.717900][T27199] stv0680 8-1:4.0: last error: 132, command = 0x14 [ 1381.731361][T27199] usb 8-1: USB disconnect, device number 5 [ 1381.876051][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 1381.882928][ T5928] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1381.891990][ T5928] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1381.905515][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1381.920273][ T5928] usb 2-1: config 1 has no interface number 0 [ 1381.926561][ T5928] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1381.941824][ T5928] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1381.956891][ T5928] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1381.967054][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.985572][ T5928] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1382.040735][ T757] bridge0: port 3(batadv0) entered blocking state [ 1382.047544][ T757] bridge0: port 3(batadv0) entered disabled state [ 1382.054144][ T757] batadv0: entered allmulticast mode [ 1382.061730][ T757] batadv0: entered promiscuous mode [ 1382.067418][ T757] bridge0: port 3(batadv0) entered blocking state [ 1382.073962][ T757] bridge0: port 3(batadv0) entered forwarding state [ 1382.186752][ T761] XFS (nbd6): no-recovery mounts must be read-only. [ 1382.198707][ T5928] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1382.549763][ T5947] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1382.550225][ T1166] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1382.567099][ T1166] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1382.639663][ T743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.648635][ T743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.700267][T27816] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1382.710282][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 1382.717215][ T5947] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.728479][ T5947] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1382.740294][ T5947] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1382.749533][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.757588][ T5947] usb 7-1: Product: syz [ 1382.761766][ T5947] usb 7-1: Manufacturer: syz [ 1382.766502][ T5947] usb 7-1: SerialNumber: syz [ 1382.862040][T27816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1382.876778][T27816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.886660][T27816] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1382.899435][T27816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.910573][T27816] usb 8-1: config 0 descriptor?? [ 1382.994925][ T5947] usb 7-1: 0:2 : does not exist [ 1383.008087][ T5947] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1383.036362][ T5947] usb 7-1: USB disconnect, device number 84 [ 1383.099311][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1383.146594][ T777] input: syz0 as /devices/virtual/input/input157 [ 1383.236127][ T779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.277541][ T5928] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1383.349622][T27816] bigben 0003:146B:0902.003C: unexpected rdesc, please submit for review [ 1383.359440][T27816] bigben 0003:146B:0902.003C: unbalanced collection at end of report description [ 1383.371464][T27816] bigben 0003:146B:0902.003C: parse failed [ 1383.378037][T27816] bigben 0003:146B:0902.003C: probe with driver bigben failed with error -22 [ 1383.458655][ T779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1383.565426][ T5928] usb 8-1: USB disconnect, device number 6 [ 1383.811930][T27816] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1383.876608][ T5908] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1383.972523][T27816] usb 3-1: Using ep0 maxpacket: 32 [ 1383.979615][T27816] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1383.988016][T27816] usb 3-1: config 0 has no interface number 0 [ 1383.994187][T27816] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1384.005298][T27816] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1384.017112][T27816] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1384.029732][T27816] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1384.040146][T27816] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1384.051343][T27816] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1384.058544][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 1384.061248][T27816] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1384.075795][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1384.082143][T27816] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1384.093039][ T5908] usb 7-1: config 15 has an invalid interface number: 174 but max is 0 [ 1384.096592][T27816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.105757][ T5908] usb 7-1: config 15 has no interface number 0 [ 1384.117053][T27816] usb 3-1: Product: syz [ 1384.123603][T27816] usb 3-1: Manufacturer: syz [ 1384.128376][T27816] usb 3-1: SerialNumber: syz [ 1384.138791][ T5908] usb 7-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 1384.140334][T27816] usb 3-1: config 0 descriptor?? [ 1384.167200][ T5908] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1384.168184][ T786] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1384.180088][ T5908] usb 7-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1384.197733][ T5908] usb 7-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1384.214352][ T5908] usb 7-1: config 15 interface 174 has no altsetting 0 [ 1384.228599][ T5908] usb 7-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 1384.253085][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.263843][ T5908] usb 7-1: Product: syz [ 1384.268086][ T5908] usb 7-1: Manufacturer: syz [ 1384.275518][ T5908] usb 7-1: SerialNumber: syz [ 1384.290671][ T789] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1384.450927][T27816] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 1384.477110][T27816] etas_es58x 3-1:0.219: could not retrieve the product info string [ 1384.545011][T27816] usb 3-1: USB disconnect, device number 101 [ 1384.586154][T27816] etas_es58x 3-1:0.219: Disconnecting syz syz [ 1384.622349][ T5908] sierra 7-1:15.174: Sierra USB modem converter detected [ 1384.654235][ T5908] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1384.673458][ T5908] usb 7-1: Sierra USB modem converter now attached to ttyUSB1 [ 1384.712173][ T11] usb 2-1: USB disconnect, device number 63 [ 1384.741496][ T11] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1384.750544][ T5908] usb 7-1: USB disconnect, device number 85 [ 1384.805137][ T5908] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1384.847485][ T5908] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1384.891870][ T5908] sierra 7-1:15.174: device disconnected [ 1385.023810][T27816] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1385.205066][T27816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.220161][T27816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.235361][T27816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.257962][ T822] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9123'. [ 1385.268406][ T11] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1385.281671][T27816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1385.318081][T27816] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1385.330807][T12538] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1385.348892][T27816] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1385.369261][T27816] usb 3-1: Manufacturer: syz [ 1385.382769][T27816] usb 3-1: config 0 descriptor?? [ 1385.437936][ T11] usb 8-1: device descriptor read/64, error -71 [ 1385.494124][T12538] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1385.519169][T12538] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1385.541143][T12538] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1385.553457][ T830] kvm: pic: non byte write [ 1385.566153][T12538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.616243][ T815] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1385.659723][T12538] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1385.694571][ T11] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1385.836673][ T11] usb 8-1: device descriptor read/64, error -71 [ 1385.864662][T31007] usb 2-1: USB disconnect, device number 64 [ 1385.967314][ T11] usb usb8-port1: attempt power cycle [ 1386.035534][ T843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9126'. [ 1386.089642][ T801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.098921][ T801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.110046][T27816] usbhid 3-1:0.0: can't add hid device: -71 [ 1386.122157][T27816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1386.147528][T27816] usb 3-1: USB disconnect, device number 102 [ 1386.315125][ T5928] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1386.346989][ T11] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1386.368994][ T11] usb 8-1: device descriptor read/8, error -71 [ 1386.486008][ T5928] usb 7-1: Using ep0 maxpacket: 32 [ 1386.492673][ T5928] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1386.501873][ T5928] usb 7-1: config 0 has no interface number 0 [ 1386.508139][ T5928] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1386.519360][ T5928] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1386.528135][ T5928] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1386.537476][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.545593][ T5928] usb 7-1: Product: syz [ 1386.549839][ T5928] usb 7-1: Manufacturer: syz [ 1386.554729][ T5928] usb 7-1: SerialNumber: syz [ 1386.568725][ T5928] usb 7-1: config 0 descriptor?? [ 1386.625106][ T11] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1386.657911][ T11] usb 8-1: device descriptor read/8, error -71 [ 1386.787644][ T11] usb usb8-port1: unable to enumerate USB device [ 1386.978058][T12538] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1387.138527][T12538] usb 3-1: Using ep0 maxpacket: 16 [ 1387.145547][T12538] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1387.154898][T12538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.166101][T12538] usb 3-1: config 0 descriptor?? [ 1387.175777][T12538] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1387.226530][ T5928] appletouch 7-1:0.85: Geyser mode initialized. [ 1387.235311][ T5928] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input158 [ 1387.447589][ T11] usb 7-1: USB disconnect, device number 86 [ 1387.479577][ T11] appletouch 7-1:0.85: input: appletouch disconnected [ 1387.653190][ T862] kvm: pic: non byte write [ 1387.764978][ T865] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.9133'. [ 1388.049336][ T5947] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1388.209667][ T5947] usb 2-1: device descriptor read/64, error -71 [ 1388.428663][ T882] FAULT_INJECTION: forcing a failure. [ 1388.428663][ T882] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.441679][ T882] CPU: 1 UID: 0 PID: 882 Comm: syz.7.9139 Not tainted syzkaller #0 PREEMPT(full) [ 1388.441705][ T882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1388.441717][ T882] Call Trace: [ 1388.441725][ T882] [ 1388.441734][ T882] dump_stack_lvl+0x189/0x250 [ 1388.441758][ T882] ? __pfx____ratelimit+0x10/0x10 [ 1388.441785][ T882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1388.441803][ T882] ? __pfx__printk+0x10/0x10 [ 1388.441833][ T882] ? __pfx___might_resched+0x10/0x10 [ 1388.441852][ T882] ? fs_reclaim_acquire+0x7d/0x100 [ 1388.441879][ T882] should_fail_ex+0x414/0x560 [ 1388.441904][ T882] should_failslab+0xa8/0x100 [ 1388.441920][ T882] __kmalloc_noprof+0xcb/0x7f0 [ 1388.441931][ T882] ? tomoyo_encode+0x28b/0x550 [ 1388.441950][ T882] tomoyo_encode+0x28b/0x550 [ 1388.441972][ T882] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1388.441989][ T882] ? tomoyo_domain+0xd9/0x130 [ 1388.442002][ T882] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1388.442015][ T882] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1388.442030][ T882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1388.442065][ T882] ? __fget_files+0x2a/0x420 [ 1388.442082][ T882] ? __fget_files+0x3a0/0x420 [ 1388.442095][ T882] ? __fget_files+0x2a/0x420 [ 1388.442111][ T882] security_file_ioctl+0xcb/0x2d0 [ 1388.442125][ T882] __se_sys_ioctl+0x47/0x170 [ 1388.442138][ T882] do_syscall_64+0xfa/0xfa0 [ 1388.442147][ T882] ? lockdep_hardirqs_on+0x9c/0x150 [ 1388.442157][ T882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.442168][ T882] ? clear_bhb_loop+0x60/0xb0 [ 1388.442180][ T882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.442190][ T882] RIP: 0033:0x7fe5e878ebe9 [ 1388.442201][ T882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1388.442211][ T882] RSP: 002b:00007fe5e9554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.442223][ T882] RAX: ffffffffffffffda RBX: 00007fe5e89c5fa0 RCX: 00007fe5e878ebe9 [ 1388.442231][ T882] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1388.442238][ T882] RBP: 00007fe5e9554090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.442245][ T882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.442251][ T882] R13: 00007fe5e89c6038 R14: 00007fe5e89c5fa0 R15: 00007fffcc043268 [ 1388.442276][ T882] [ 1388.442297][ T882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1388.475498][ T5947] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1388.716340][ T885] syzkaller1: entered promiscuous mode [ 1388.721960][ T885] syzkaller1: entered allmulticast mode [ 1388.828644][ T5947] usb 2-1: device descriptor read/64, error -71 [ 1388.968593][ T5947] usb usb2-port1: attempt power cycle [ 1389.343821][ T5947] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1389.369755][ T5947] usb 2-1: device descriptor read/8, error -71 [ 1389.438179][ T11] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1389.609340][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 1389.616228][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.627238][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.637917][ T11] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1389.647088][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.656819][ T5947] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1389.665707][ T11] usb 7-1: config 0 descriptor?? [ 1389.697488][ T5947] usb 2-1: device descriptor read/8, error -71 [ 1389.818419][ T5947] usb usb2-port1: unable to enumerate USB device [ 1390.016278][ T5928] usb 3-1: USB disconnect, device number 103 [ 1390.113754][ T5947] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1390.118878][ T5861] udevd[5861]: setting mode of /dev/usb/hiddev0 to 020600 failed: Read-only file system [ 1390.125721][ T11] savu 0003:1E7D:2D5A.003D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1390.142908][ T5861] udevd[5861]: setting owner of /dev/usb/hiddev0 to uid=0, gid=0 failed: Read-only file system [ 1390.196225][ T6301] udevd[6301]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system [ 1390.207742][ T6301] udevd[6301]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system [ 1390.278189][ T5947] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 1390.288484][ T5947] usb 8-1: config 0 has no interface number 0 [ 1390.303003][ T5947] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1390.312195][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.320282][ T5947] usb 8-1: Product: syz [ 1390.324435][ T5947] usb 8-1: Manufacturer: syz [ 1390.329077][ T5947] usb 8-1: SerialNumber: syz [ 1390.337900][ T5947] usb 8-1: config 0 descriptor?? [ 1390.777957][ T5947] usb 8-1: Firmware: major: 109, minor: 210, hardware type: UNKNOWN (205) [ 1391.001644][ T5947] usb 8-1: no permanent extended address found, random address set [ 1391.009667][ T5947] usb 8-1: atusb_probe: initialization failed, error = -524 [ 1391.026354][ T5947] atusb 8-1:0.128: probe with driver atusb failed with error -524 [ 1391.236976][T31007] usb 8-1: USB disconnect, device number 11 [ 1391.363808][ T11] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1391.534793][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1391.541310][ T11] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1391.549562][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.559677][ T11] usb 3-1: config 0 has no interface number 0 [ 1391.568608][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1391.577884][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.585904][ T11] usb 3-1: Product: syz [ 1391.590409][ T11] usb 3-1: Manufacturer: syz [ 1391.595021][ T11] usb 3-1: SerialNumber: syz [ 1391.603207][ T11] usb 3-1: config 0 descriptor?? [ 1391.612971][ T11] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1391.619419][ T11] usb 3-1: No valid video chain found. [ 1391.830195][ T11] usb 3-1: USB disconnect, device number 104 [ 1392.358355][ T11] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1392.404826][T12538] usb 7-1: USB disconnect, device number 87 [ 1392.476931][ T5947] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1392.543848][ T11] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1392.553222][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.561993][ T11] usb 8-1: Product: syz [ 1392.566208][ T11] usb 8-1: Manufacturer: syz [ 1392.570813][ T11] usb 8-1: SerialNumber: syz [ 1392.582757][ T11] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1392.621397][T27816] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1392.668938][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 1392.678334][ T5947] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1392.687960][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.697398][ T5947] usb 3-1: Product: syz [ 1392.701937][ T5947] usb 3-1: Manufacturer: syz [ 1392.706631][ T5947] usb 3-1: SerialNumber: syz [ 1392.715253][ T5947] usb 3-1: config 0 descriptor?? [ 1392.865325][ T5928] usb 8-1: USB disconnect, device number 12 [ 1392.914901][T12538] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1392.941341][ T5947] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1393.085874][T12538] usb 2-1: Using ep0 maxpacket: 32 [ 1393.096118][T12538] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1393.105566][T12538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.116018][T12538] usb 2-1: config 0 descriptor?? [ 1393.126734][T12538] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1393.331745][T31007] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1393.491278][ T957] FAULT_INJECTION: forcing a failure. [ 1393.491278][ T957] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.496445][T31007] usb 7-1: Using ep0 maxpacket: 8 [ 1393.504649][ T957] CPU: 0 UID: 0 PID: 957 Comm: syz.7.9160 Not tainted syzkaller #0 PREEMPT(full) [ 1393.504679][ T957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1393.504691][ T957] Call Trace: [ 1393.504699][ T957] [ 1393.504708][ T957] dump_stack_lvl+0x189/0x250 [ 1393.504731][ T957] ? __pfx____ratelimit+0x10/0x10 [ 1393.504768][ T957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1393.504787][ T957] ? __pfx__printk+0x10/0x10 [ 1393.504820][ T957] ? __pfx___might_resched+0x10/0x10 [ 1393.504842][ T957] ? fs_reclaim_acquire+0x7d/0x100 [ 1393.504869][ T957] should_fail_ex+0x414/0x560 [ 1393.504898][ T957] should_failslab+0xa8/0x100 [ 1393.504923][ T957] __kmalloc_noprof+0xcb/0x7f0 [ 1393.504943][ T957] ? tomoyo_encode+0x28b/0x550 [ 1393.504977][ T957] tomoyo_encode+0x28b/0x550 [ 1393.505017][ T957] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1393.505048][ T957] ? tomoyo_domain+0xd9/0x130 [ 1393.505072][ T957] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1393.505098][ T957] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1393.505126][ T957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1393.505189][ T957] ? __fget_files+0x2a/0x420 [ 1393.505219][ T957] ? __fget_files+0x3a0/0x420 [ 1393.505242][ T957] ? __fget_files+0x2a/0x420 [ 1393.505271][ T957] security_file_ioctl+0xcb/0x2d0 [ 1393.505298][ T957] __se_sys_ioctl+0x47/0x170 [ 1393.505321][ T957] do_syscall_64+0xfa/0xfa0 [ 1393.505340][ T957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.505359][ T957] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1393.505378][ T957] ? clear_bhb_loop+0x60/0xb0 [ 1393.505401][ T957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.505420][ T957] RIP: 0033:0x7fe5e878ebe9 [ 1393.505438][ T957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1393.505455][ T957] RSP: 002b:00007fe5e9554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.505476][ T957] RAX: ffffffffffffffda RBX: 00007fe5e89c5fa0 RCX: 00007fe5e878ebe9 [ 1393.505491][ T957] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1393.505503][ T957] RBP: 00007fe5e9554090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.505515][ T957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.505527][ T957] R13: 00007fe5e89c6038 R14: 00007fe5e89c5fa0 R15: 00007fffcc043268 [ 1393.505560][ T957] [ 1393.505603][ T957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1393.510660][T31007] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1393.731852][T27816] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1393.734497][T31007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1393.747001][T27816] ath9k_htc: Failed to initialize the device [ 1393.781162][T31007] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1393.797693][T31007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.809538][T31007] usb 7-1: Product: syz [ 1393.814361][T31007] usb 7-1: Manufacturer: syz [ 1393.819054][T31007] usb 7-1: SerialNumber: syz [ 1393.824194][ T5928] usb 8-1: ath9k_htc: USB layer deinitialized [ 1393.833164][T31007] usb 7-1: config 0 descriptor?? [ 1393.844675][T31007] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1393.911647][ T960] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9161'. [ 1393.973941][ T943] nbd0: detected capacity change from 0 to 127 [ 1394.066103][T31007] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1394.083200][T31007] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1394.280961][T27816] usb 7-1: USB disconnect, device number 88 [ 1394.618562][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1394.618580][ T30] audit: type=1326 audit(1757078262.324:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=972 comm="syz.7.9167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5e878ebe9 code=0x0 [ 1394.947098][T27816] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1394.958384][ T5947] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1394.969255][ T5947] dvbdev: DVB: registering new adapter (Terratec H7) [ 1394.976005][ T5947] usb 3-1: media controller created [ 1395.107242][T31007] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1395.111511][T12538] gspca_vc032x: reg_r err -71 [ 1395.119705][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.125354][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.132583][T27816] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.142906][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.148247][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.154275][T27816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1395.165194][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.170537][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.170990][T28114] block nbd0: Receive control failed (result -104) [ 1395.176051][ T5182] block nbd0: Receive control failed (result -32) [ 1395.181566][T27816] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1395.203300][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.208653][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.214725][ T5947] usb read operation failed. (-71) [ 1395.220997][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.228443][ T5947] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1395.237551][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.242823][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.248210][T27816] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1395.260187][ T5947] usb 3-1: USB disconnect, device number 105 [ 1395.267677][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.276779][T27816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.280281][T31007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.289362][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.297735][T31007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.311389][T31007] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1395.318335][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.322242][T31007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.328271][T27816] usb 8-1: config 0 descriptor?? [ 1395.340295][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.352079][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.357109][T31007] usb 7-1: config 0 descriptor?? [ 1395.369888][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.375886][T12538] gspca_vc032x: I2c Bus Busy Wait 00 [ 1395.381513][T12538] gspca_vc032x: Unknown sensor... [ 1395.388927][T12538] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1395.409062][T12538] usb 2-1: USB disconnect, device number 69 [ 1395.721239][ T979] binder: 978:979 ioctl c0306201 200000000080 returned -14 [ 1395.808148][T31007] pyra 0003:1E7D:2CF6.003E: item fetching failed at offset 6/7 [ 1395.818733][T31007] pyra 0003:1E7D:2CF6.003E: parse failed [ 1395.824687][T31007] pyra 0003:1E7D:2CF6.003E: probe with driver pyra failed with error -22 [ 1396.080757][T12538] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1396.275184][T12538] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.285564][T12538] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1396.294736][T12538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.305401][T12538] usb 3-1: config 0 descriptor?? [ 1396.321735][T12538] pwc: Askey VC010 type 2 USB webcam detected. [ 1396.455927][T27816] ath6kl: Failed to submit usb control message: -110 [ 1396.465218][T27816] ath6kl: unable to send the bmi data to the device: -110 [ 1396.472924][T27816] ath6kl: Unable to send get target info: -110 [ 1396.491755][T27816] ath6kl: Failed to init ath6kl core: -110 [ 1396.499332][T27816] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1396.699216][ T30] audit: type=1326 audit(1757078264.259:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=980 comm="syz.1.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2031d8ebe9 code=0x7fc00000 [ 1396.732339][ T30] audit: type=1326 audit(1757078264.259:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=980 comm="syz.1.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2031d8ebe9 code=0x7fc00000 [ 1396.765389][ T30] audit: type=1326 audit(1757078264.259:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=980 comm="syz.1.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2031d8ebe9 code=0x7fc00000 [ 1396.789087][T12538] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1396.796647][T12538] pwc: recv_control_msg error -32 req 02 val 2700 [ 1396.806671][T12538] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1396.818152][T12538] pwc: recv_control_msg error -32 req 04 val 1000 [ 1396.828099][T12538] pwc: recv_control_msg error -32 req 04 val 1300 [ 1396.837129][T12538] pwc: recv_control_msg error -32 req 04 val 1400 [ 1396.850328][T12538] pwc: recv_control_msg error -32 req 02 val 2000 [ 1396.860374][T12538] pwc: recv_control_msg error -32 req 02 val 2100 [ 1397.085875][T12538] pwc: recv_control_msg error -71 req 02 val 2500 [ 1397.099833][T12538] pwc: recv_control_msg error -71 req 02 val 2400 [ 1397.110467][T12538] pwc: recv_control_msg error -71 req 02 val 2600 [ 1397.117530][T12538] pwc: recv_control_msg error -71 req 02 val 2900 [ 1397.127781][T12538] pwc: recv_control_msg error -71 req 02 val 2800 [ 1397.137476][T12538] pwc: recv_control_msg error -71 req 04 val 1100 [ 1397.149814][T12538] pwc: recv_control_msg error -71 req 04 val 1200 [ 1397.159395][T12538] pwc: Registered as video103. [ 1397.168932][T12538] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input159 [ 1397.190026][T12538] usb 3-1: USB disconnect, device number 106 [ 1397.396641][T31007] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1397.556890][T31007] usb 2-1: Using ep0 maxpacket: 32 [ 1397.564803][T31007] usb 2-1: config 16 has an invalid interface number: 101 but max is 0 [ 1397.575857][T31007] usb 2-1: config 16 has no interface number 0 [ 1397.588833][T31007] usb 2-1: config 16 interface 101 has no altsetting 0 [ 1397.608405][T31007] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=6a.c3 [ 1397.627448][T31007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.651741][T31007] usb 2-1: Product: syz [ 1397.656043][T31007] usb 2-1: Manufacturer: syz [ 1397.662234][T31007] usb 2-1: SerialNumber: syz [ 1397.800979][T27816] usb 8-1: USB disconnect, device number 13 [ 1397.969483][ T997] fuse: Unknown parameter 'uer_id' [ 1397.974942][T12538] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1398.094371][T31007] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.101/input/input160 [ 1398.149153][T12538] usb 3-1: Using ep0 maxpacket: 32 [ 1398.163621][T31007] usb 2-1: USB disconnect, device number 70 [ 1398.177986][ T5908] usb 7-1: USB disconnect, device number 89 [ 1398.184827][T12538] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1398.199148][T12538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.245784][T12538] usb 3-1: config 0 descriptor?? [ 1398.276142][T12538] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1398.658439][T12612] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1398.823186][T12612] usb 7-1: too many configurations: 90, using maximum allowed: 8 [ 1398.882144][T12612] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 1398.911086][T12612] usb 7-1: can't read configurations, error -22 [ 1399.021846][T12538] gspca_sunplus: reg_r err -32 [ 1399.031042][T12538] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1399.168319][T12612] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1399.377845][T12612] usb 7-1: too many configurations: 90, using maximum allowed: 8 [ 1399.400841][T12612] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 1399.418759][T12612] usb 7-1: can't read configurations, error -22 [ 1399.427210][T12612] usb usb7-port1: attempt power cycle [ 1399.632058][T12538] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1399.813616][T12612] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1399.825164][T12538] usb 2-1: Using ep0 maxpacket: 32 [ 1399.847975][T12538] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1399.859182][T12612] usb 7-1: too many configurations: 90, using maximum allowed: 8 [ 1399.870123][T12538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.884658][T12612] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 1399.900007][T12612] usb 7-1: can't read configurations, error -22 [ 1399.908513][T12538] usb 2-1: config 0 descriptor?? [ 1400.063456][T12612] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1400.114338][T12612] usb 7-1: too many configurations: 90, using maximum allowed: 8 [ 1400.145079][T12612] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 100 [ 1400.157013][T12612] usb 7-1: can't read configurations, error -22 [ 1400.163558][T12538] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1400.171054][T12612] usb usb7-port1: unable to enumerate USB device [ 1400.180251][T12538] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1400.193016][T12538] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1400.201397][T12538] usb 2-1: media controller created [ 1400.217980][T12538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1400.380056][ T1013] unsupported nlmsg_type 40 [ 1400.388751][T12538] az6027: usb out operation failed. (-71) [ 1400.392420][ T5908] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1400.403257][T12538] az6027: usb out operation failed. (-71) [ 1400.408995][T12538] stb0899_attach: Driver disabled by Kconfig [ 1400.416493][T12538] az6027: no front-end attached [ 1400.416493][T12538] [ 1400.426334][T12538] az6027: usb out operation failed. (-71) [ 1400.432092][T12538] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1400.440870][T12538] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input161 [ 1400.461406][T12538] dvb-usb: schedule remote query interval to 400 msecs. [ 1400.468734][T12538] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1400.481784][T12538] usb 2-1: USB disconnect, device number 71 [ 1400.521463][T12538] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1400.542423][ T5908] usb 8-1: device descriptor read/64, error -71 [ 1400.797779][ T5908] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1400.936732][ T5908] usb 8-1: device descriptor read/64, error -71 [ 1400.964366][T12538] usb 3-1: USB disconnect, device number 107 [ 1401.064842][ T5908] usb usb8-port1: attempt power cycle [ 1401.087390][ T1028] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9185'. [ 1401.428907][ T5908] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1401.453242][ T5908] usb 8-1: device descriptor read/8, error -71 [ 1401.621438][T12538] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1401.707076][ T5908] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1401.739684][ T5908] usb 8-1: device descriptor read/8, error -71 [ 1401.813932][T12538] usb 2-1: Using ep0 maxpacket: 8 [ 1401.824055][T12538] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1401.839098][T12538] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1401.860984][T12538] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1401.864684][ T5908] usb usb8-port1: unable to enumerate USB device [ 1401.872094][T12538] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1401.903286][T12538] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.916977][T12538] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1401.926648][T12538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.115626][T31007] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1402.162087][T12538] usb 2-1: usb_control_msg returned -32 [ 1402.168510][T12538] usbtmc 2-1:16.0: can't read capabilities [ 1402.201813][ T5947] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1402.284628][T31007] usb 7-1: Using ep0 maxpacket: 16 [ 1402.293957][T31007] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1402.303122][T31007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.315123][T31007] usb 7-1: config 0 descriptor?? [ 1402.324545][T31007] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1402.383030][ T5947] usb 3-1: config index 0 descriptor too short (expected 36958, got 45) [ 1402.391573][ T5947] usb 3-1: config 64 has too many interfaces: 124, using maximum allowed: 32 [ 1402.400443][ T5947] usb 3-1: config 64 has an invalid descriptor of length 203, skipping remainder of the config [ 1402.410967][ T5947] usb 3-1: config 64 has 0 interfaces, different from the descriptor's value: 124 [ 1402.422012][ T5947] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1402.431196][ T5947] usb 3-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1402.439347][ T5947] usb 3-1: Manufacturer: syz [ 1403.771368][ T5947] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1403.846114][T31007] gspca_sonixj: i2c_w8 err -71 [ 1403.868180][T31007] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1403.878997][T31007] usb 7-1: USB disconnect, device number 94 [ 1403.944426][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.955660][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.965490][ T5947] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1403.974785][ T5947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.987633][ T5947] usb 8-1: config 0 descriptor?? [ 1404.443433][ T5947] pyra 0003:1E7D:2CF6.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 1404.533446][ T5861] udevd[5861]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system [ 1404.543130][ T5861] udevd[5861]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system [ 1404.637468][T12538] usb 2-1: USB disconnect, device number 72 [ 1404.739512][T28114] Bluetooth: hci2: unexpected event 0x30 length: 1 < 3 [ 1404.813164][ T1087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1404.919354][ T1091] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9204'. [ 1404.978523][ T1096] FAULT_INJECTION: forcing a failure. [ 1404.978523][ T1096] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.991280][ T1096] CPU: 1 UID: 0 PID: 1096 Comm: syz.1.9205 Not tainted syzkaller #0 PREEMPT(full) [ 1404.991313][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1404.991326][ T1096] Call Trace: [ 1404.991337][ T1096] [ 1404.991347][ T1096] dump_stack_lvl+0x189/0x250 [ 1404.991371][ T1096] ? __pfx____ratelimit+0x10/0x10 [ 1404.991398][ T1096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1404.991408][ T1096] ? __pfx__printk+0x10/0x10 [ 1404.991425][ T1096] ? __pfx___might_resched+0x10/0x10 [ 1404.991438][ T1096] ? fs_reclaim_acquire+0x7d/0x100 [ 1404.991455][ T1096] should_fail_ex+0x414/0x560 [ 1404.991484][ T1096] should_failslab+0xa8/0x100 [ 1404.991510][ T1096] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1404.991538][ T1096] ? __kernfs_new_node+0xd7/0x7e0 [ 1404.991557][ T1096] __kernfs_new_node+0xd7/0x7e0 [ 1404.991567][ T1096] ? __lock_acquire+0xab9/0xd20 [ 1404.991582][ T1096] ? __pfx___kernfs_new_node+0x10/0x10 [ 1404.991594][ T1096] ? kernfs_root+0x1c/0x230 [ 1404.991608][ T1096] ? kernfs_root+0x1c/0x230 [ 1404.991625][ T1096] ? kernfs_root+0x1c/0x230 [ 1404.991640][ T1096] ? kernfs_root+0x1c/0x230 [ 1404.991664][ T1096] kernfs_new_node+0x102/0x210 [ 1404.991690][ T1096] kernfs_create_dir_ns+0x44/0x130 [ 1404.991708][ T1096] internal_create_group+0x419/0x1110 [ 1404.991729][ T1096] ? __pfx_internal_create_group+0x10/0x10 [ 1404.991741][ T1096] ? loop_update_dio+0x27f/0x3a0 [ 1404.991759][ T1096] loop_configure+0x99e/0xe50 [ 1404.991795][ T1096] ? __pfx_loop_configure+0x10/0x10 [ 1404.991851][ T1096] lo_ioctl+0x810/0x1c10 [ 1404.991886][ T1096] ? __pfx_lo_ioctl+0x10/0x10 [ 1404.991908][ T1096] ? ima_match_policy+0x10b/0x2150 [ 1404.991921][ T1096] ? look_up_lock_class+0x74/0x170 [ 1404.991938][ T1096] ? register_lock_class+0x51/0x320 [ 1404.991966][ T1096] ? __lock_acquire+0xab9/0xd20 [ 1404.991999][ T1096] ? process_measurement+0x3d8/0x1a40 [ 1404.992021][ T1096] ? ima_match_policy+0x10b/0x2150 [ 1404.992035][ T1096] ? __lock_acquire+0xab9/0xd20 [ 1404.992050][ T1096] ? __lock_acquire+0xab9/0xd20 [ 1404.992068][ T1096] ? __lock_acquire+0xab9/0xd20 [ 1404.992096][ T1096] ? __lock_acquire+0xab9/0xd20 [ 1404.992145][ T1096] ? is_bpf_text_address+0x26/0x2b0 [ 1404.992170][ T1096] ? is_bpf_text_address+0x292/0x2b0 [ 1404.992181][ T1096] ? is_bpf_text_address+0x26/0x2b0 [ 1404.992194][ T1096] ? kernel_text_address+0xa5/0xe0 [ 1404.992205][ T1096] ? __kernel_text_address+0xd/0x40 [ 1404.992215][ T1096] ? unwind_get_return_address+0x4d/0x90 [ 1404.992232][ T1096] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1404.992261][ T1096] ? arch_stack_walk+0xfc/0x150 [ 1404.992300][ T1096] ? stack_trace_save+0x9c/0xe0 [ 1404.992324][ T1096] ? stack_depot_save_flags+0x40/0x860 [ 1404.992341][ T1096] ? kasan_save_track+0x4f/0x80 [ 1404.992350][ T1096] ? kasan_save_track+0x3e/0x80 [ 1404.992359][ T1096] ? __kasan_save_free_info+0x46/0x50 [ 1404.992373][ T1096] ? __kasan_slab_free+0x5b/0x80 [ 1404.992390][ T1096] ? kfree+0x199/0x6d0 [ 1404.992406][ T1096] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1404.992429][ T1096] ? security_file_ioctl+0xcb/0x2d0 [ 1404.992451][ T1096] ? __se_sys_ioctl+0x47/0x170 [ 1404.992470][ T1096] ? do_syscall_64+0xfa/0xfa0 [ 1404.992479][ T1096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.992502][ T1096] ? __asan_memset+0x22/0x50 [ 1404.992518][ T1096] ? blk_get_meta_cap+0x140/0x710 [ 1404.992556][ T1096] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1404.992590][ T1096] ? lockdep_hardirqs_on+0x9c/0x150 [ 1404.992612][ T1096] ? blkdev_common_ioctl+0xff7/0x2550 [ 1404.992626][ T1096] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1404.992640][ T1096] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1404.992651][ T1096] ? do_vfs_ioctl+0xbe8/0x1430 [ 1404.992661][ T1096] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1404.992713][ T1096] ? __pfx_lo_ioctl+0x10/0x10 [ 1404.992740][ T1096] blkdev_ioctl+0x5ac/0x6d0 [ 1404.992762][ T1096] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1404.992773][ T1096] ? __fget_files+0x3a0/0x420 [ 1404.992789][ T1096] ? __fget_files+0x2a/0x420 [ 1404.992805][ T1096] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1404.992815][ T1096] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1404.992825][ T1096] __se_sys_ioctl+0xf9/0x170 [ 1404.992848][ T1096] do_syscall_64+0xfa/0xfa0 [ 1404.992866][ T1096] ? lockdep_hardirqs_on+0x9c/0x150 [ 1404.992885][ T1096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.992904][ T1096] ? clear_bhb_loop+0x60/0xb0 [ 1404.992920][ T1096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.992931][ T1096] RIP: 0033:0x7f2031d8ebe9 [ 1404.992942][ T1096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.992959][ T1096] RSP: 002b:00007f2032c4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1404.992979][ T1096] RAX: ffffffffffffffda RBX: 00007f2031fc5fa0 RCX: 00007f2031d8ebe9 [ 1404.992994][ T1096] RDX: 00002000000000c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 1404.993007][ T1096] RBP: 00007f2032c4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.993018][ T1096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.993031][ T1096] R13: 00007f2031fc6038 R14: 00007f2031fc5fa0 R15: 00007ffc22325148 [ 1404.993066][ T1096] [ 1404.998933][ T5861] udevd[5861]: symlink '../../loop4' '/dev/disk/by-diskseq/187.tmp-b7:4' failed: Read-only file system [ 1405.065576][T12612] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1405.079455][ T5861] udevd[5861]: symlink '../../loop4' '/dev/disk/by-diskseq/187.tmp-b7:4' failed: Read-only file system [ 1405.088636][ T1067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.089223][ T1067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.573319][ T5861] udevd[5861]: symlink '../../loop4' '/dev/disk/by-diskseq/187.tmp-b7:4' failed: Read-only file system [ 1405.615342][ T5947] pyra 0003:1E7D:2CF6.003F: couldn't init struct pyra_device [ 1405.625144][ T5947] pyra 0003:1E7D:2CF6.003F: couldn't install mouse [ 1405.626761][T27199] usb 3-1: USB disconnect, device number 108 [ 1405.637569][ T5947] pyra 0003:1E7D:2CF6.003F: probe with driver pyra failed with error -32 [ 1405.752752][T12612] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.763813][T12612] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1405.775161][T12612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.786616][T12612] usb 7-1: config 0 descriptor?? [ 1405.889310][ T5908] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1406.011054][ T1104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.034908][ T1104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.051968][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1406.065025][ T5908] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1406.075569][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1406.091024][ T5908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1406.100293][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.108376][ T5908] usb 2-1: Product: syz [ 1406.112552][ T5908] usb 2-1: Manufacturer: syz [ 1406.117320][ T5908] usb 2-1: SerialNumber: syz [ 1406.227532][T12612] usbhid 7-1:0.0: can't add hid device: -71 [ 1406.233828][T12612] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1406.244350][T12612] usb 7-1: USB disconnect, device number 95 [ 1406.667532][ T1106] FAULT_INJECTION: forcing a failure. [ 1406.667532][ T1106] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.680527][ T1106] CPU: 1 UID: 0 PID: 1106 Comm: syz.2.9208 Not tainted syzkaller #0 PREEMPT(full) [ 1406.680555][ T1106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1406.680567][ T1106] Call Trace: [ 1406.680575][ T1106] [ 1406.680583][ T1106] dump_stack_lvl+0x189/0x250 [ 1406.680605][ T1106] ? __pfx____ratelimit+0x10/0x10 [ 1406.680631][ T1106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.680649][ T1106] ? __pfx__printk+0x10/0x10 [ 1406.680683][ T1106] ? __pfx___might_resched+0x10/0x10 [ 1406.680714][ T1106] ? fs_reclaim_acquire+0x7d/0x100 [ 1406.680743][ T1106] should_fail_ex+0x414/0x560 [ 1406.680772][ T1106] should_failslab+0xa8/0x100 [ 1406.680797][ T1106] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1406.680818][ T1106] ? __alloc_skb+0x112/0x2d0 [ 1406.680844][ T1106] __alloc_skb+0x112/0x2d0 [ 1406.680868][ T1106] netlink_dump+0x1b7/0xe90 [ 1406.680909][ T1106] ? __pfx_netlink_dump+0x10/0x10 [ 1406.680961][ T1106] ? netlink_recvmsg+0x5b2/0xa30 [ 1406.680979][ T1106] ? kmem_cache_free+0x19a/0x690 [ 1406.681012][ T1106] netlink_recvmsg+0x676/0xa30 [ 1406.681042][ T1106] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1406.681067][ T1106] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1406.681098][ T1106] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1406.681123][ T1106] ? security_socket_recvmsg+0x7e/0x2e0 [ 1406.681144][ T1106] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1406.681164][ T1106] sock_recvmsg+0x229/0x270 [ 1406.681195][ T1106] ____sys_recvmsg+0x1c9/0x460 [ 1406.681227][ T1106] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1406.681267][ T1106] ? import_iovec+0x74/0xa0 [ 1406.681288][ T1106] ___sys_recvmsg+0x1b5/0x510 [ 1406.681316][ T1106] ? __pfx____sys_recvmsg+0x10/0x10 [ 1406.681365][ T1106] ? __fget_files+0x3a0/0x420 [ 1406.681403][ T1106] do_recvmmsg+0x307/0x770 [ 1406.681434][ T1106] ? __pfx_do_recvmmsg+0x10/0x10 [ 1406.681470][ T1106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1406.681510][ T1106] __x64_sys_recvmmsg+0x190/0x240 [ 1406.681536][ T1106] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1406.681564][ T1106] ? do_syscall_64+0xbe/0xfa0 [ 1406.681587][ T1106] do_syscall_64+0xfa/0xfa0 [ 1406.681604][ T1106] ? lockdep_hardirqs_on+0x9c/0x150 [ 1406.681623][ T1106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.681642][ T1106] ? clear_bhb_loop+0x60/0xb0 [ 1406.681667][ T1106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.681687][ T1106] RIP: 0033:0x7f0843b8ebe9 [ 1406.681711][ T1106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.681729][ T1106] RSP: 002b:00007f08449d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1406.681750][ T1106] RAX: ffffffffffffffda RBX: 00007f0843dc5fa0 RCX: 00007f0843b8ebe9 [ 1406.681766][ T1106] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 1406.681779][ T1106] RBP: 00007f08449d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.681792][ T1106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.681805][ T1106] R13: 00007f0843dc6038 R14: 00007f0843dc5fa0 R15: 00007ffde97d46b8 [ 1406.681839][ T1106] [ 1406.977848][ C1] vkms_vblank_simulate: vblank timer overrun [ 1407.075389][T27199] usb 8-1: USB disconnect, device number 18 [ 1407.247716][ T1116] [ 1407.250079][ T1116] ====================================================== [ 1407.257089][ T1116] WARNING: possible circular locking dependency detected [ 1407.264118][ T1116] syzkaller #0 Not tainted [ 1407.268515][ T1116] ------------------------------------------------------ [ 1407.275524][ T1116] syz.6.9212/1116 is trying to acquire lock: [ 1407.281487][ T1116] ffff88805ee281e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xb0/0x130 [ 1407.290356][ T1116] [ 1407.290356][ T1116] but task is already holding lock: [ 1407.297723][ T1116] ffff888046a6a8a0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: do_tcp_setsockopt+0x854/0x1f20 [ 1407.307372][ T1116] [ 1407.307372][ T1116] which lock already depends on the new lock. [ 1407.307372][ T1116] [ 1407.317756][ T1116] [ 1407.317756][ T1116] the existing dependency chain (in reverse order) is: [ 1407.326760][ T1116] [ 1407.326760][ T1116] -> #8 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 1407.334585][ T1116] lock_acquire+0x120/0x360 [ 1407.339622][ T1116] mptcp_setsockopt+0x2117/0x3560 [ 1407.345168][ T1116] do_sock_setsockopt+0x179/0x1b0 [ 1407.350719][ T1116] __x64_sys_setsockopt+0x13f/0x1b0 [ 1407.356432][ T1116] do_syscall_64+0xfa/0xfa0 [ 1407.361452][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.367857][ T1116] [ 1407.367857][ T1116] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1407.375494][ T1116] lock_acquire+0x120/0x360 [ 1407.380514][ T1116] lock_sock_nested+0x48/0x100 [ 1407.385808][ T1116] inet_shutdown+0x6a/0x390 [ 1407.390834][ T1116] nbd_mark_nsock_dead+0x2e9/0x560 [ 1407.396454][ T1116] sock_shutdown+0x15e/0x260 [ 1407.401555][ T1116] nbd_config_put+0x342/0x790 [ 1407.406735][ T1116] nbd_release+0xfe/0x140 [ 1407.411567][ T1116] bdev_release+0x536/0x650 [ 1407.416576][ T1116] blkdev_release+0x15/0x20 [ 1407.421585][ T1116] __fput+0x449/0xa70 [ 1407.426073][ T1116] task_work_run+0x1d1/0x260 [ 1407.431165][ T1116] do_exit+0x6b5/0x2300 [ 1407.435830][ T1116] do_group_exit+0x21c/0x2d0 [ 1407.440924][ T1116] get_signal+0x1286/0x1340 [ 1407.445938][ T1116] arch_do_signal_or_restart+0x9a/0x750 [ 1407.451987][ T1116] exit_to_user_mode_loop+0x75/0x130 [ 1407.457779][ T1116] do_syscall_64+0x2bd/0xfa0 [ 1407.462871][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.469269][ T1116] [ 1407.469269][ T1116] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1407.476903][ T1116] lock_acquire+0x120/0x360 [ 1407.481912][ T1116] __mutex_lock+0x187/0x1350 [ 1407.487011][ T1116] nbd_queue_rq+0x257/0xf10 [ 1407.492051][ T1116] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1407.498108][ T1116] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1407.504951][ T1116] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1407.511443][ T1116] blk_mq_run_hw_queue+0x348/0x4f0 [ 1407.517064][ T1116] blk_mq_dispatch_list+0xd0c/0xe00 [ 1407.522774][ T1116] blk_mq_flush_plug_list+0x469/0x550 [ 1407.528657][ T1116] __blk_flush_plug+0x3d3/0x4b0 [ 1407.534022][ T1116] __submit_bio+0x2d3/0x5a0 [ 1407.539029][ T1116] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 1407.545180][ T1116] block_read_full_folio+0x599/0x830 [ 1407.550971][ T1116] filemap_read_folio+0x114/0x380 [ 1407.556507][ T1116] do_read_cache_folio+0x350/0x590 [ 1407.562138][ T1116] read_part_sector+0xb6/0x2b0 [ 1407.567415][ T1116] adfspart_check_ICS+0xa4/0xa50 [ 1407.572864][ T1116] bdev_disk_changed+0x75c/0x14b0 [ 1407.578398][ T1116] blkdev_get_whole+0x380/0x510 [ 1407.583761][ T1116] bdev_open+0x31e/0xd30 [ 1407.588519][ T1116] blkdev_open+0x457/0x600 [ 1407.593441][ T1116] do_dentry_open+0x950/0x13f0 [ 1407.598728][ T1116] vfs_open+0x3b/0x340 [ 1407.603390][ T1116] path_openat+0x2ee5/0x3830 [ 1407.608524][ T1116] do_filp_open+0x1fa/0x410 [ 1407.613555][ T1116] do_sys_openat2+0x121/0x1c0 [ 1407.618759][ T1116] __x64_sys_openat+0x138/0x170 [ 1407.624128][ T1116] do_syscall_64+0xfa/0xfa0 [ 1407.629144][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.635551][ T1116] [ 1407.635551][ T1116] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1407.642758][ T1116] lock_acquire+0x120/0x360 [ 1407.647774][ T1116] __mutex_lock+0x187/0x1350 [ 1407.652874][ T1116] nbd_queue_rq+0xc8/0xf10 [ 1407.657797][ T1116] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1407.663879][ T1116] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1407.670722][ T1116] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1407.677218][ T1116] blk_mq_run_hw_queue+0x348/0x4f0 [ 1407.682853][ T1116] blk_mq_dispatch_list+0xd0c/0xe00 [ 1407.688565][ T1116] blk_mq_flush_plug_list+0x469/0x550 [ 1407.694451][ T1116] __blk_flush_plug+0x3d3/0x4b0 [ 1407.699818][ T1116] __submit_bio+0x2d3/0x5a0 [ 1407.704827][ T1116] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 1407.710976][ T1116] __bread_gfp+0x216/0x3c0 [ 1407.715911][ T1116] fat_fill_super+0x5e2/0x3570 [ 1407.721189][ T1116] get_tree_bdev_flags+0x40b/0x4d0 [ 1407.726813][ T1116] vfs_get_tree+0x8f/0x2b0 [ 1407.731739][ T1116] do_new_mount+0x302/0xa10 [ 1407.736754][ T1116] __se_sys_mount+0x313/0x410 [ 1407.741941][ T1116] do_syscall_64+0xfa/0xfa0 [ 1407.746950][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.753350][ T1116] [ 1407.753350][ T1116] -> #4 (set->srcu){.+.+}-{0:0}: [ 1407.760550][ T1116] lock_sync+0xba/0x160 [ 1407.765213][ T1116] __synchronize_srcu+0x96/0x3a0 [ 1407.770663][ T1116] elevator_switch+0x12b/0x640 [ 1407.775940][ T1116] elevator_change+0x2d4/0x450 [ 1407.781217][ T1116] elevator_set_default+0x186/0x260 [ 1407.786936][ T1116] blk_register_queue+0x34e/0x3f0 [ 1407.792464][ T1116] __add_disk+0x677/0xd50 [ 1407.797332][ T1116] add_disk_fwnode+0xfc/0x480 [ 1407.802524][ T1116] nbd_dev_add+0x717/0xae0 [ 1407.807473][ T1116] nbd_init+0x168/0x1f0 [ 1407.812142][ T1116] do_one_initcall+0x233/0x820 [ 1407.817497][ T1116] do_initcall_level+0x104/0x190 [ 1407.822954][ T1116] do_initcalls+0x59/0xa0 [ 1407.827804][ T1116] kernel_init_freeable+0x334/0x4b0 [ 1407.833514][ T1116] kernel_init+0x1d/0x1d0 [ 1407.838359][ T1116] ret_from_fork+0x47c/0x820 [ 1407.843461][ T1116] ret_from_fork_asm+0x1a/0x30 [ 1407.848733][ T1116] [ 1407.848733][ T1116] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1407.856547][ T1116] lock_acquire+0x120/0x360 [ 1407.861561][ T1116] __mutex_lock+0x187/0x1350 [ 1407.866660][ T1116] elevator_change+0x19b/0x450 [ 1407.871938][ T1116] elevator_set_none+0x42/0xb0 [ 1407.877225][ T1116] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 1407.883538][ T1116] nbd_start_device+0x17f/0xb10 [ 1407.888894][ T1116] nbd_genl_connect+0x135b/0x18f0 [ 1407.894433][ T1116] genl_family_rcv_msg_doit+0x212/0x300 [ 1407.900489][ T1116] genl_rcv_msg+0x60e/0x790 [ 1407.905591][ T1116] netlink_rcv_skb+0x208/0x470 [ 1407.910866][ T1116] genl_rcv+0x28/0x40 [ 1407.915356][ T1116] netlink_unicast+0x82c/0x9e0 [ 1407.920627][ T1116] netlink_sendmsg+0x805/0xb30 [ 1407.925905][ T1116] __sock_sendmsg+0x219/0x270 [ 1407.931096][ T1116] ____sys_sendmsg+0x505/0x830 [ 1407.936374][ T1116] ___sys_sendmsg+0x21f/0x2a0 [ 1407.941568][ T1116] __x64_sys_sendmsg+0x19b/0x260 [ 1407.947008][ T1116] do_syscall_64+0xfa/0xfa0 [ 1407.952015][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.958412][ T1116] [ 1407.958412][ T1116] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1407.967008][ T1116] lock_acquire+0x120/0x360 [ 1407.972027][ T1116] blk_alloc_queue+0x538/0x620 [ 1407.977305][ T1116] __blk_mq_alloc_disk+0x15c/0x340 [ 1407.982920][ T1116] nbd_dev_add+0x46c/0xae0 [ 1407.987852][ T1116] nbd_init+0x168/0x1f0 [ 1407.992516][ T1116] do_one_initcall+0x233/0x820 [ 1407.997784][ T1116] do_initcall_level+0x104/0x190 [ 1408.003232][ T1116] do_initcalls+0x59/0xa0 [ 1408.008076][ T1116] kernel_init_freeable+0x334/0x4b0 [ 1408.013786][ T1116] kernel_init+0x1d/0x1d0 [ 1408.018623][ T1116] ret_from_fork+0x47c/0x820 [ 1408.023718][ T1116] ret_from_fork_asm+0x1a/0x30 [ 1408.028986][ T1116] [ 1408.028986][ T1116] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1408.036193][ T1116] lock_acquire+0x120/0x360 [ 1408.041216][ T1116] fs_reclaim_acquire+0x72/0x100 [ 1408.046670][ T1116] kmem_cache_alloc_noprof+0x45/0x6e0 [ 1408.052544][ T1116] mas_alloc_nodes+0x291/0x350 [ 1408.057815][ T1116] mas_preallocate+0x2c5/0x550 [ 1408.063087][ T1116] vma_link+0xfd/0x440 [ 1408.067663][ T1116] insert_vm_struct+0x199/0x260 [ 1408.073024][ T1116] create_init_stack_vma+0x2de/0x680 [ 1408.078822][ T1116] alloc_bprm+0x496/0x5c0 [ 1408.083657][ T1116] kernel_execve+0x9b/0x9f0 [ 1408.088664][ T1116] try_to_run_init_process+0x13/0x60 [ 1408.094456][ T1116] kernel_init+0xad/0x1d0 [ 1408.099293][ T1116] ret_from_fork+0x47c/0x820 [ 1408.104392][ T1116] ret_from_fork_asm+0x1a/0x30 [ 1408.109661][ T1116] [ 1408.109661][ T1116] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 1408.117206][ T1116] validate_chain+0xb9b/0x2140 [ 1408.122482][ T1116] __lock_acquire+0xab9/0xd20 [ 1408.127662][ T1116] lock_acquire+0x120/0x360 [ 1408.132672][ T1116] __might_fault+0xcc/0x130 [ 1408.137689][ T1116] _copy_from_user+0x28/0xb0 [ 1408.142784][ T1116] tcp_v4_parse_md5_keys+0xec/0x600 [ 1408.148494][ T1116] do_tcp_setsockopt+0x11dc/0x1f20 [ 1408.154112][ T1116] smc_setsockopt+0x22f/0xab0 [ 1408.159304][ T1116] do_sock_setsockopt+0x179/0x1b0 [ 1408.164836][ T1116] __x64_sys_setsockopt+0x13f/0x1b0 [ 1408.170537][ T1116] do_syscall_64+0xfa/0xfa0 [ 1408.175542][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.181940][ T1116] [ 1408.181940][ T1116] other info that might help us debug this: [ 1408.181940][ T1116] [ 1408.192148][ T1116] Chain exists of: [ 1408.192148][ T1116] &mm->mmap_lock --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 1408.192148][ T1116] [ 1408.205260][ T1116] Possible unsafe locking scenario: [ 1408.205260][ T1116] [ 1408.212690][ T1116] CPU0 CPU1 [ 1408.218037][ T1116] ---- ---- [ 1408.223382][ T1116] lock(k-sk_lock-AF_INET); [ 1408.227959][ T1116] lock(sk_lock-AF_INET); [ 1408.234883][ T1116] lock(k-sk_lock-AF_INET); [ 1408.241978][ T1116] rlock(&mm->mmap_lock); [ 1408.246380][ T1116] [ 1408.246380][ T1116] *** DEADLOCK *** [ 1408.246380][ T1116] [ 1408.254511][ T1116] 2 locks held by syz.6.9212/1116: [ 1408.259607][ T1116] #0: ffff88806896d510 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x181/0xab0 [ 1408.270133][ T1116] #1: ffff888046a6a8a0 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: do_tcp_setsockopt+0x854/0x1f20 [ 1408.280216][ T1116] [ 1408.280216][ T1116] stack backtrace: [ 1408.286095][ T1116] CPU: 1 UID: 0 PID: 1116 Comm: syz.6.9212 Not tainted syzkaller #0 PREEMPT(full) [ 1408.286116][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1408.286126][ T1116] Call Trace: [ 1408.286133][ T1116] [ 1408.286141][ T1116] dump_stack_lvl+0x189/0x250 [ 1408.286160][ T1116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1408.286174][ T1116] ? __pfx__printk+0x10/0x10 [ 1408.286196][ T1116] ? stack_trace_save+0x9c/0xe0 [ 1408.286223][ T1116] print_circular_bug+0x2ee/0x310 [ 1408.286254][ T1116] check_noncircular+0x134/0x160 [ 1408.286277][ T1116] validate_chain+0xb9b/0x2140 [ 1408.286305][ T1116] __lock_acquire+0xab9/0xd20 [ 1408.286325][ T1116] ? __might_fault+0xb0/0x130 [ 1408.286341][ T1116] lock_acquire+0x120/0x360 [ 1408.286358][ T1116] ? __might_fault+0xb0/0x130 [ 1408.286376][ T1116] ? futex_unqueue+0x22/0x240 [ 1408.286398][ T1116] ? __might_fault+0xb0/0x130 [ 1408.286414][ T1116] __might_fault+0xcc/0x130 [ 1408.286429][ T1116] ? __might_fault+0xb0/0x130 [ 1408.286446][ T1116] _copy_from_user+0x28/0xb0 [ 1408.286462][ T1116] tcp_v4_parse_md5_keys+0xec/0x600 [ 1408.286484][ T1116] ? __pfx_tcp_v4_parse_md5_keys+0x10/0x10 [ 1408.286503][ T1116] ? __lock_acquire+0xab9/0xd20 [ 1408.286526][ T1116] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1408.286546][ T1116] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1408.286569][ T1116] do_tcp_setsockopt+0x11dc/0x1f20 [ 1408.286588][ T1116] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1408.286603][ T1116] ? __pfx___mutex_lock+0x10/0x10 [ 1408.286619][ T1116] ? l2cap_sock_connect+0x67b/0x7a0 [ 1408.286640][ T1116] ? __lock_acquire+0xab9/0xd20 [ 1408.286657][ T1116] ? sock_common_setsockopt+0x36/0xc0 [ 1408.286679][ T1116] ? tcp_setsockopt+0x3d/0xe0 [ 1408.286694][ T1116] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1408.286716][ T1116] smc_setsockopt+0x22f/0xab0 [ 1408.286742][ T1116] ? __pfx_smc_setsockopt+0x10/0x10 [ 1408.286764][ T1116] ? aa_sock_opt_perm+0xff/0x1b0 [ 1408.286788][ T1116] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1408.286810][ T1116] ? __pfx_smc_setsockopt+0x10/0x10 [ 1408.286832][ T1116] do_sock_setsockopt+0x179/0x1b0 [ 1408.286851][ T1116] __x64_sys_setsockopt+0x13f/0x1b0 [ 1408.286870][ T1116] do_syscall_64+0xfa/0xfa0 [ 1408.286884][ T1116] ? lockdep_hardirqs_on+0x9c/0x150 [ 1408.286899][ T1116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.286915][ T1116] ? clear_bhb_loop+0x60/0xb0 [ 1408.286933][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.286949][ T1116] RIP: 0033:0x7f942af8ebe9 [ 1408.286964][ T1116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.286980][ T1116] RSP: 002b:00007f942be24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1408.286997][ T1116] RAX: ffffffffffffffda RBX: 00007f942b1c5fa0 RCX: 00007f942af8ebe9 [ 1408.287010][ T1116] RDX: 0000000000000020 RSI: 0000000000000006 RDI: 0000000000000003 [ 1408.287021][ T1116] RBP: 00007f942b011e19 R08: 00000000000000d8 R09: 0000000000000000 [ 1408.287032][ T1116] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 1408.287044][ T1116] R13: 00007f942b1c6038 R14: 00007f942b1c5fa0 R15: 00007ffe771bf3b8 [ 1408.287062][ T1116] [ 1408.592646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1408.745105][T27199] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1408.803324][ T5908] usb 2-1: USB disconnect, device number 73 [ 1408.907520][T27199] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.917684][T27199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.928637][T27199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.938444][T27199] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1408.954054][T27199] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1408.963237][T27199] usb 8-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1408.971367][T27199] usb 8-1: Manufacturer: syz [ 1408.977028][T27199] usb 8-1: config 0 descriptor?? [ 1409.631647][ T1108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.640391][ T1108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.650041][T27199] usbhid 8-1:0.0: can't add hid device: -71 [ 1409.656175][T27199] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1409.669976][T27199] usb 8-1: USB disconnect, device number 19