last executing test programs:

7.649590617s ago: executing program 2 (id=1546):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffffc]}, 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r0)
inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)
r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0)
write$smack_current(r2, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0x1)
inotify_add_watch(r0, 0x0, 0x40000c17)
rmdir(&(0x7f0000000100)='./control\x00')

7.434895079s ago: executing program 3 (id=1551):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x4, 0x2, 0x2000000, 0x20, 0x20, 0x1, 0x2000000, &(0x7f0000000600)=[0x7], 0x1, 0x0})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff8, 0xfffffffff7ffffff, 0x8a, 0x9, 0x4, 0x9, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0x5})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x29, 0x3, 0x3a)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f00000012c0)=ANY=[], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a0afe582730000000000900030073797a310000000050000000060a010400000000000000000100000308000b400000000028000480240001800b0001007470726f7879000014000280080003400000001108000140000000000900010073797a300000000014000000110001000000000000000000"], 0xc4}}, 0x0)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000800)=0x5f5e0f7, 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x403, 0x0)
unshare(0x20040600)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x1, 0x6, 0x0, 0xffffffff}, 0xc)
recvmmsg(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a00)=""/227, 0xe3}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/168, 0xa8}, {&(0x7f0000003c40)=""/105, 0x69}], 0x6}, 0x6}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "d6d3cb7f6624b779bab337944ee514178c0ec787e903d0b2535d078d724bc00bf81ec36670e215557d61468e9c9f264ae7ddd4f919172e041f3c160ec9f3f9ab3f3035e9b371be34cdfc99bcb9957ebcd7f8d303aace76484680ee8b0a48b0f2a9375da52e4f177c88854f53b2bc3955c16c2c0f4034d208c519eedee232629775f167f26ed715187e5db088bf67de1c959cf730fb7227f4e470832759e724e8f65a96eae1a7656a43a9ea08da88817d151281541f998fb800e58654482c396604b0504d29413479017cfa549e06827c1a5f4b4bf62e8ccb46da3051f7d9ae54"}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x160, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x108, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x190, 0xb, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x168, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4f0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000880)

7.408594014s ago: executing program 2 (id=1553):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

7.240445611s ago: executing program 2 (id=1555):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000000200)="311d", 0x2}], 0x2)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @rose, 0x1, @rose}, &(0x7f0000000040)=0x1c, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x1, 0x103, 0x9}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x8000010)
accept4$x25(r3, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "52ae0000"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902240001000000000904"], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002300090425d9f900ffd3df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="840000001900010028bd7000ffdbdf251d010000150003000200004004010000d743f729ac4b0f850200000015000200030000e00500000040bbd5ce698f4c14030000000800050001"], 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x40800)
close(0xffffffffffffffff)

5.823083508s ago: executing program 2 (id=1581):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 3)

5.667842057s ago: executing program 2 (id=1583):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109"], 0x0)
syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x0, 0x824ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
io_setup(0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010105, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0)

4.28528466s ago: executing program 3 (id=1601):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0)
landlock_restrict_self(r0, 0xd)
landlock_restrict_self(r0, 0x4)
landlock_restrict_self(r0, 0xd)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x10)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc)
syz_usb_connect(0x3, 0xfdb, &(0x7f0000001d80)=ANY=[@ANYBLOB="12015002cd00ae0821040801c0b9010203010902c90f040801600509047af1030202ff030a240103003f000201020c240204"], &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0})
fcntl$notify(r1, 0x402, 0x27)
mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x20000001)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000640)='2', 0x1}], 0x1)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000080))
tee(r3, r4, 0x1, 0x0)
ioctl(r1, 0x9, &(0x7f0000000680)="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")
r5 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r0, 0x7)
landlock_restrict_self(r0, 0x4)
landlock_restrict_self(r6, 0x4)
landlock_restrict_self(r0, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000003080)=[{{&(0x7f0000000500)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000580)="ea", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000003000)=[{&(0x7f0000000180)='P', 0x1}], 0x1}}], 0x2, 0x400c000)

3.506213464s ago: executing program 1 (id=1613):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (fail_nth: 3)

3.37277344s ago: executing program 1 (id=1615):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0x4159, &(0x7f0000000180)={0x0, 0xac26, 0x10000, 0x1, 0x8002b0}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000010c0)={r4, r3, r2}, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.194271175s ago: executing program 1 (id=1617):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x103, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @remote, @void, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x34, 0x1, 0x0, 0x0, "fbbc8e1bee66e86281bd9a9698c951ed3bbb2f58130f3cd79d876b4ddd22738a34131dc0e3eccc872d8e8041fe2489dae1a4a748e70a071ed3edd49b82d3871f"}}}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}, @IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r8 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14)
getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48083}, 0x0)

3.099002133s ago: executing program 1 (id=1620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000140)={0x2c, r1, 0xe8537378923c5951, 0x70bd2a, 0x25dfdc00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x14)

3.009445084s ago: executing program 4 (id=1622):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\b', 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x8002)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x1, 0x0, &(0x7f0000000000)='c', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4000000001040108000000000000000000000001080083ea5423000105000100010000000800034000002fdb08000440f50000030a00020000000fff01000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2.895039551s ago: executing program 1 (id=1623):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000002d40)=[{0x0}], 0x1, &(0x7f00000012c0)=[{0x10, 0x113, 0x8}], 0x10}}], 0x1, 0x4048054)

2.795227678s ago: executing program 4 (id=1625):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

2.721754373s ago: executing program 1 (id=1626):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x110)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108)
close(r0)

2.712462302s ago: executing program 3 (id=1627):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0x4159, &(0x7f0000000180)={0x0, 0xac26, 0x10000, 0x1, 0x8002b0}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000010c0)={r4, r3, r2}, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.654844405s ago: executing program 4 (id=1628):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0x4159, &(0x7f0000000180)={0x0, 0xac26, 0x10000, 0x1, 0x8002b0}, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2002004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x20003}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2.337824438s ago: executing program 2 (id=1632):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x2017be01})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
syz_io_uring_submit(r1, r2, r3, 0x0)
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)
r8 = syz_usb_connect$uac3(0x2, 0x8a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040630730204000010203010902780003017fc008080b0001010130230904000000010130"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0)
gettid()
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, 'W'}, 0x0, 0x0, 0x0, 0x0})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r12 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x5, 0x200)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r13=>r12, {0x2}}, './file0\x00'})
bind$unix(r13, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$XFS_IOC_GETBMAP(r12, 0xc0205826, &(0x7f0000000200)={0x2, 0x10001, 0x3, 0x60f68509, 0x1})
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r11, @ANYBLOB="000000000000000018100000", @ANYRES32=r14, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r14, 0x2, 0x1, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r15, r10}, 0xc)

2.336978822s ago: executing program 3 (id=1633):
socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlink(0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00')
preadv(r3, &(0x7f0000002180)=[{&(0x7f00000010c0)=""/62, 0x3e}], 0x1, 0x40, 0x7fffffff)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
r5 = semget(0x0, 0x1, 0x206)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = getgid()
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000240)={{0x0, r6, 0x0, r6, 0x189, 0x80, 0xae38}, 0x23d, 0x4, 0x2, 0x0, 0x7ffd})
r7 = socket(0x1e, 0x4, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0x4c)
setresuid(0x0, r8, 0x0)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
write$P9_RSTATu(r4, &(0x7f0000001300)={0x4d3, 0x7d, 0x8001, {{0x0, 0x4b3, 0x3, 0x5, {0x0, 0x1, 0x5}, 0x4100000, 0xfffffff2, 0x7, 0xa4, 0x189, '\x85u\xbak\x10\xf7x\xee\xdb\xd5\xa6\xd2\xd5\xfb\x8a:Q\xc7\x8e\xb8\xdb\x06SYu|VY\x98\xa2M5MJ\xba\xfc\xef\x96\xe8J\xe5\xb1W\x18\xc2J/\xfd\tGg\x8d\xc7>,T\x8b\x15\r\xc3u\xe6\xed\xc06~C^a\x8b@\"\xb3\xff\xe9yvR\v\xf2\xdfZG\xce2\xfc\xe3\xd1j\xf6\xedR\f\r%gz#\xd96D\xaf$n\xc4\xe5\x16\x9f\xae/\xd0\xa8\x88\x125rZG\xc9L\x17H\x981[\xe90\x1b(e\xbcdv\x86\x90\xf7\x15t\xac\x8e\xb0\xd3\x98\a2\x7f\xeb]\xaeD\x11\xb1\x96\xb1d\xe5\x87\x9c\x05\x9ab\xf4\x16\"\x95\'8\xc1\xa8\a\xceJ\xf5\x193\xa0\x05D\xec&j\xb6\xd9u\xf3lD\xfd(\x02\xd1Zx\xe8\x06Q\xf3R\x1a\xf1\v <\xff\xfa\xb4\x11J\xcd\xc4\xc7\xdc\xf2\x11\xa4\xbe\xbcn\xedK\xa0\xc3[p\xa8\xe3e7S\x01\x89\x18*\x1b\x1b\xbd\xa1+\x99\x911\xd3\x95 J\xf3\x93<\x9e\"\x86\xf2\xe9d\xf7\x95\xc1\xd0\xcc3\xbaF\xca\rd\xca\x8eCO\x13\x96L\r\xec1\x11\xb9j\x03ciS\x15\xa0\x9d\n\x92\x92\xb2~\xcf\x1b\xed\x9f\xc6\xa4\xa1\xce\x85\xd7\x86\xf1S\xda\xd5A\xef\x9a\x95=\xb5\xfb\xba\xd6\xd6\xf4=\x8f\xcb\x13O\xbf\xa3\"\xdf\xd7\xbc\x0e_\x7fSf\x00\x1c\"\xbbM<\xcf\xe2Z\xb8d>\xf9\x055VXp\x91n\xaat\xbb\x06^\xcf\x14F\xed\xda\xc7?\xf9}\x00\'\xbc\x11\xff\xa5U$\xbc\xa9\x11F?O`\x9ca\xd3\xe8\xf6\xa3\x9d\x12\xadX\x89\xfb', 0x3c, '\xf6\xb6+\r\xaa\x12\xe4\x98B\xad\xe4H8\xc43>w\xe6?\xc3\x85\xd6\x8f\xefl\xf61\xb3N<\tc\xd3XSP{z\xafRc\xd0\xfc\xa3\xf4\x1eV\x13\x9b\x854#C*\x91\x1e$\xaf\xed\xdf', 0x12d, '\x17\xe0_\x00\x00\x00\x00\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0PI\xff\x02)\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xf0|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x93#s\xbf\xfc\x12\xa2\xd6\xf3\x1bv\xbc6\x04\x8c\x10No\xb5\xe5\x82\xd1^f\xd3\x8bs\x91\x8d@.1mT>\xca\xf0\'\xb9\xf7\xb5K]\'\xda\x0fp\xca\x94\xe7\xe9{W0\x12\xa0\x90\x1b\xadB\xeaW\x14G4)\xf8\x1eP\xa69\xb0\xab\x96\x15\xdc\xdf\xc2\xf4\xe31!wG\x86\xa9Y;:\x93\x94KS\x16\xa7R\x11\xb6\xd6?\x9e\xac:\xf2\xd74\xa2dE\xfc\x1b;8\xca|<\xd9\x97h^mK\vF\xf5\xe2\xd3\x83bn\xbaQt\xfc\xf6\xbeI\x9awZ\x91\xf5\xc8yP\xef\t\xaaY\xb7f\x12\xc5zfz>R\xee\xc8\x16n.\xcd\xb1\x89@v5\x1d30\x00\xb5.\xf1\xd7\x03\x04&\xe197Jd\x85', 0x18e, '\x8fE\x88i\xa1\xda}\xeaO\x1c\xbf\xbb\xde\x95V$\xdc\xb1\x1a\xfc\xa0\xd7R\x80!\x1aA|\'\x8d\xc2\x80?\xa4\x13\xd0@\xcb$\xc6\xf4\x14\x9aEQ\'Ku\xec49\xbc\x06\x8f\x1bE\x00\x04\xad\xf3\xcfIb\xbd\x14\xa9\x0e\x92\xc1\xcb\xe71\xdc\xe4\xb2\x820\xf9Q\xbb\xdd\x80\x13[\xeb=\t\xddnV\x1a\x96\xb1?\x0f\x8b\xbe\x03M~\xb1\x14c\xa6\x89\n{\xfd\xa9O\x00\x88\xbb2\xd4\xa7\x90\x1f\x90\xf3\xd8\xc0\xb3\x83IUH`AAb\x19I<\x17Wu\x06\x0f\xcd\xe7)\xf34?\xa3\xf6\xc5\xfd\x15Q\t$$\"k]\xce\xf5\n\xf0\x13\xf9\xf2g\xa0\x84\x10\\\xf0+f\x02-\v5vP\xcbs)\xfd\x1bt\x85p\xd7M6\x8c\xea\x80\xed\xd9\xe7J\"N\\\xc7\x19\b\x15\x02\x14\xb9\x14\xac\xaa3Q\'\x02f\xc8[u\xf5\xbe\x94\xe1\xc47W04\xf9=\xbc\xe5\xc6\xb4\x87\x14\xa7\t\xdb\x8d\x0e]\x7f</\'\xae\xde\xe6\xc4\x87\x95:8\xa6\xd1k\xb5\xc8<\b\xc7\x92\xf2\r\'\xb2\xcd\xb6\x19\xb5e\x14i\x0ekL\xe24\xc5p\xa2\x1a\x13\xab\x96\x97\xc0\xec\xd4e\x80\x04\xeb(\x96\xef1\x12\xec,\xe3\xd3b\xe9\xfb\xf7\xd1\xe1\x11\xb5\x16<\xe7\xed\xe6\xc3\xd4\r\"APMT\xd2\x94\x19 HN\xa8\x86\xfb\xe3\x0f\xcfT\x8a\xfe\xabG\x1d\x8c\xec\xc2\x19o\xf6+\xa7r\xcd\xed\xb9-\x01qE\xea\xda\xcd\x84#v|\xb0\x81_E\xf9\xf6\xa7\x1c\xb5\x80\xc7\xac\x8c\x15S\xdc[\x00'/398}, 0xb, '\x00\xf2\xff\xff\xff\xff\xff\xff\xff\x00\x00', r9, r6, r8}}, 0x4d3)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)

2.335710849s ago: executing program 4 (id=1634):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x3, 0x80)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000140)=0x5eae)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
close_range(r1, r1, 0x2)
ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4002000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f00000049c0)={0x6000004, 0x11ab, &(0x7f0000000300)=[0x10, 0x5, 0x5, 0xfffffff2, 0x3, 0x9, 0x2, 0x800, 0x900, 0x1b, 0x2, 0x10, 0x5, 0xfffffffe, 0x80000001, 0x7, 0x1, 0x0, 0x2, 0xa, 0x4, 0x5, 0x22, 0x1, 0x1, 0xffff, 0x6, 0x6, 0x81, 0xe6, 0x2, 0x80000000, 0x6249, 0xfa, 0x573b, 0x7ff, 0x1, 0xffffffff, 0x3c5, 0x3, 0x1ff, 0x3, 0xd, 0x5eba, 0x200, 0xa4, 0x2, 0x2, 0xffff, 0x7, 0x8, 0x7, 0x4, 0x8, 0x8, 0x800, 0x4, 0x7, 0x200, 0x6, 0x7c9b, 0x80, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0xc, 0x7, 0xb0, 0x1, 0x101, 0x10, 0x800, 0xd, 0x1, 0xf, 0x9a, 0x10000, 0x10000, 0x6, 0x7, 0x101, 0x2, 0x1, 0x0, 0xa83, 0x8, 0x4, 0x7, 0x2, 0x2582, 0x5, 0x1c, 0x0, 0xfffffff8, 0x2, 0x3, 0x8, 0x1, 0x3, 0x3ff, 0x1, 0x8000, 0x80000001, 0x3, 0x7, 0x9187, 0x2, 0x4, 0x9, 0xff, 0x8, 0x29, 0xe, 0xc000000, 0x2, 0x1, 0x3, 0x3, 0x5, 0xfffffffc, 0x47bc, 0x3, 0x8, 0x70, 0x5, 0x3, 0x2, 0xe000000, 0x7, 0x4, 0x5, 0x2, 0x1, 0x6e, 0x6, 0x43, 0x5, 0xa1, 0x5489, 0x1, 0x1, 0x883c, 0x5, 0x0, 0x29c, 0x3, 0x7, 0x7fff, 0x1, 0x61da, 0xff, 0x6, 0x8, 0xd6, 0x9a8, 0x5e17, 0x8001, 0x4, 0xfffffffe, 0x7f, 0x7, 0x7, 0xfffffffe, 0x81, 0x6, 0x1, 0x1, 0x6, 0x830, 0x3, 0x4, 0x634c4228, 0xacf, 0xe, 0x9, 0x2, 0xfffffff9, 0x1d3e2127, 0x9, 0x1, 0x2, 0x2, 0x3, 0x5, 0x140000, 0xb9, 0x176, 0x0, 0xfffffff9, 0xd540, 0x9, 0x6a0, 0x6, 0x7, 0xd2d9, 0x8, 0x9, 0xb, 0x5, 0x10001, 0x1, 0x5, 0x9, 0x1, 0x0, 0x96a2, 0x7, 0x1, 0x24, 0x0, 0x9, 0x7fff, 0x7fff, 0x2, 0x8, 0x2, 0x45, 0x4, 0xb7, 0x3, 0xbb8, 0x3, 0x9, 0x3, 0x5, 0x8, 0x2, 0x3, 0x4, 0x7, 0x1, 0x80, 0x8f, 0x3, 0x80000000, 0x5, 0x6, 0x4, 0x7, 0x200, 0x8, 0x3, 0x6, 0xfffffbff, 0xe394, 0x0, 0x1, 0x81, 0x288, 0xa943, 0x2, 0x800, 0x6, 0xffffffff, 0x8, 0x2, 0x6, 0x80000000, 0x3, 0x9, 0xbca, 0x8, 0x200, 0x9, 0x5a, 0x5, 0x5, 0x10, 0xc, 0x8, 0x8000, 0x5, 0x3, 0x3, 0x8001, 0x2, 0x2, 0x4, 0x6, 0x6, 0x9, 0x7, 0x0, 0x5, 0x80, 0x3, 0x2, 0x7, 0x5, 0x7, 0x3ff, 0x10000, 0x5, 0x3, 0x7ff, 0xfff, 0xfffff001, 0x7fffffff, 0xff, 0x8001, 0xe0, 0x8001, 0x1, 0xd86b, 0x1, 0x7, 0xb, 0xffff, 0x19, 0x4, 0x9, 0xe, 0x8, 0xfffffffc, 0x3, 0x8, 0x1ff, 0xffffffff, 0x9, 0x8, 0x9, 0x5, 0x414f15e1, 0x8, 0x6, 0x3c7, 0x0, 0x9, 0x3, 0x8, 0x4, 0xc, 0x3, 0xfffffffb, 0x11ceabd1, 0x400, 0xc525, 0x80dd, 0x6, 0xb, 0x1, 0xbe5, 0x5, 0x0, 0x3ff, 0x1, 0x1, 0x6, 0x7, 0x1, 0x8001, 0x800, 0x7, 0x5, 0x9, 0x4, 0x400, 0x6, 0xfffff254, 0x7f, 0x0, 0xfff, 0x0, 0x40, 0x2, 0x7fffffff, 0x2, 0x4, 0x40, 0x1, 0xb8ec, 0x2, 0x10, 0x1, 0x6, 0x2, 0x72, 0x1, 0x1ff, 0x200, 0x9, 0x3, 0x5, 0x9, 0x6, 0x40000, 0x3, 0x800, 0x7, 0x80000001, 0x1, 0x7, 0x81, 0x6, 0x4, 0x3, 0x2, 0x8001, 0x6, 0x2, 0x9, 0xfffffe00, 0x7, 0x7, 0x4, 0x0, 0x5, 0xff, 0x1ff, 0xad, 0xb7, 0x3, 0x8, 0x1c, 0x1ff, 0x3, 0x3, 0x1, 0x5, 0x7fffffff, 0x5, 0x7fff, 0x7f, 0x800, 0x9, 0x2, 0x80000001, 0x101, 0x6, 0xd, 0xa6, 0x8, 0xf14b, 0x5, 0x32, 0x7, 0xffff, 0x7d7b, 0x8000, 0x8, 0x5, 0x6, 0x4, 0x6, 0x10000, 0x0, 0xa, 0x8, 0x7, 0x1, 0x5969c877, 0x2b5, 0x0, 0x3, 0x14a718ae, 0x7, 0x6, 0x3, 0xffffff81, 0x7, 0x400, 0x0, 0x4, 0x0, 0x8, 0x9, 0x9, 0x9, 0x5, 0x0, 0xffffffff, 0x3, 0x1, 0x8d, 0x8, 0xffffff81, 0x2, 0x0, 0x8, 0x4, 0xfffffff7, 0x6, 0x4, 0x7, 0x7, 0xa6, 0x10000, 0x80000000, 0xfffffff2, 0x1, 0x5, 0xfffffffb, 0x0, 0x1, 0x5, 0x2, 0x211c, 0x1, 0x9229, 0x0, 0x8, 0x3, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x0, 0x4, 0x77f, 0x3, 0x1, 0x80, 0x6, 0x3, 0x3, 0x0, 0x2, 0xf, 0x5, 0x7, 0xfbc, 0xfffffffd, 0x6, 0x2, 0x5, 0x0, 0x8, 0x5, 0x2, 0xf04e, 0x2, 0x7ff, 0x79, 0x5, 0x9, 0x1000, 0x3, 0x10000, 0x6, 0xb, 0x37, 0x919, 0x5, 0x8000, 0x8, 0x2, 0x401, 0xf1, 0x4, 0xffff670b, 0xc4, 0x4b8, 0x80000000, 0x6, 0x4, 0x7ff, 0x2, 0x2, 0x0, 0x5, 0x7b6e, 0x7fffffff, 0x3, 0x14, 0x8, 0x7, 0x2, 0x8, 0x9, 0x5, 0x943d, 0x9, 0x0, 0x9, 0xfffff801, 0x520, 0x800, 0xffffffc0, 0x2700, 0x20b, 0x7, 0x759b, 0x4d, 0x872d, 0x6, 0x6, 0x100, 0x8001, 0x1, 0x0, 0x7a, 0x2, 0x88, 0x9, 0x8, 0xb, 0x7, 0x1, 0x8000, 0x8, 0xd21, 0xd4, 0x0, 0x3, 0x9, 0x5, 0x2, 0xf, 0x71, 0x9, 0x9, 0x8, 0x7, 0x101, 0x65, 0x3ff, 0x80000001, 0x6, 0x9, 0xfffffffd, 0x81e1, 0x8, 0xf, 0x1800, 0x3, 0x6, 0x1, 0x2, 0x3, 0xfffffff4, 0x4, 0xc, 0xff, 0x10, 0xe1d, 0x2, 0x17b, 0x10001, 0x9, 0x4e53, 0x4, 0x7f, 0x2, 0x7, 0x8, 0xe43, 0xd, 0x34, 0x1, 0x6, 0x1, 0x80, 0x27, 0xfffffff8, 0x1000, 0x3, 0x24, 0x40, 0x3, 0x7, 0xfa70, 0x297, 0xf7d, 0x9, 0x6, 0x0, 0x200, 0x7, 0x1, 0xa, 0x5, 0x5, 0x0, 0x2, 0x509c, 0x6, 0x5, 0x5bb3, 0x80, 0x9ae5, 0xfffffffa, 0x10001, 0x7, 0x6, 0x9, 0x5, 0x8000, 0xffff4322, 0x1b4, 0x7, 0x1000, 0x0, 0x2, 0x8, 0x6, 0x8, 0x945473a, 0x0, 0x4, 0x88c, 0x28, 0x6, 0x4, 0x1, 0x9, 0x8, 0x5, 0xa, 0xffffffff, 0x80000000, 0xffffff7f, 0x80000001, 0x1, 0x3cc, 0x4d, 0x4, 0x6, 0x5, 0x8, 0x6, 0x9, 0x7, 0x76, 0xe2c7, 0x7fffffff, 0x4, 0x72361e8d, 0x7fffffff, 0x8b12278a, 0x8, 0x9, 0x0, 0x7, 0x16ac, 0xd827, 0x9, 0xff, 0x80000001, 0x6, 0x2, 0x7ee, 0xffffffff, 0x2, 0x0, 0x2, 0x10, 0x4, 0x4d, 0x0, 0x8000, 0x6, 0x0, 0x10001, 0x8, 0x9, 0xfffffc00, 0x7, 0x2, 0x0, 0xd, 0x22ea, 0xfffffffa, 0x5, 0x6, 0x5, 0x8, 0x1, 0x0, 0x3, 0x1, 0x1, 0x9, 0x30, 0x4, 0x10001, 0x6, 0x101, 0x200, 0x7, 0x3, 0x9, 0x40, 0x1, 0x6, 0x3, 0x615b, 0xfffffff9, 0x100, 0x464, 0x8, 0x5, 0x91e9, 0x100, 0x8, 0x9, 0x226, 0x7, 0xe, 0x3, 0x81, 0xfffffffa, 0x7, 0x5, 0x1, 0x80000001, 0x10, 0x401, 0x8, 0x90000000, 0xa, 0x7, 0x7, 0x5, 0x159, 0xe, 0xe, 0x7, 0x2, 0x7, 0x9, 0xe17, 0x6, 0x0, 0xac7, 0xffffffff, 0x2, 0x2, 0x9, 0x1, 0x8, 0xff, 0x9, 0x4, 0xfff, 0xfffffff9, 0xfffff801, 0x81, 0x0, 0x7, 0x7, 0x5, 0xf5, 0x3, 0x3, 0x1, 0x4, 0x10001, 0x0, 0x9, 0x4, 0xfffffff8, 0x1, 0x4, 0xd0, 0x0, 0x5, 0x3f, 0x1, 0xd4f, 0xffffffc2, 0x2, 0xfffffffd, 0x1, 0x0, 0x75, 0x8, 0x5, 0x3, 0xf, 0x4, 0x2, 0x7a, 0x800000, 0x401, 0x3, 0x1, 0xf, 0x0, 0x8, 0x3, 0x6, 0x3, 0x0, 0x1, 0x3, 0x0, 0x1, 0x4, 0x9, 0x2, 0x7fff, 0x7, 0x8, 0x2, 0x7ff, 0x4, 0x1, 0xfffffffb, 0x2, 0x2, 0x1, 0x5, 0x9, 0x8422, 0x71, 0x3, 0x1ff, 0xaac, 0x7f, 0x8000, 0x9, 0xd5, 0x4, 0x401, 0xa4a80000, 0x81, 0x4, 0x8, 0x70e2, 0x101, 0x3, 0x67cd, 0x4, 0x7, 0x746, 0x3, 0xfffffc72, 0x7, 0x2, 0x10001, 0x9, 0xca06, 0x40, 0x40, 0x3, 0x0, 0x1, 0x10, 0x7ff, 0xa, 0x20000000, 0x9, 0x3, 0x80, 0xd05c, 0xe02, 0x10000, 0x4d, 0x1, 0x78147aa8, 0xe0e3, 0x25130acb, 0x8, 0xfffffffb, 0x0, 0x3, 0xf4ec, 0x80, 0x6, 0x6e, 0xfffffff7, 0x8, 0x9, 0x9, 0x3, 0x1, 0x6, 0x1, 0x4c0, 0x7ff, 0x8000, 0x9, 0x29f, 0x77, 0x8, 0x4, 0xa06d5352, 0x0, 0x3c00000, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffe, 0x8001, 0x80000000, 0xac, 0xf90eaae, 0x100, 0x81, 0x0, 0xfffffffe, 0x7, 0x5, 0x213, 0xffff, 0x65, 0x80000000, 0x3, 0x5bc, 0xffffffff, 0x5, 0x5, 0x10, 0x3ff, 0xe930, 0x10000, 0xffffffff, 0x3, 0x1, 0x80, 0x101, 0xb556, 0xfff, 0x9, 0x8000, 0x4, 0x3, 0x3, 0xa8, 0xfffffffc, 0x0, 0x7ff, 0x7, 0xb33, 0x6, 0xd2, 0x2, 0x1, 0x800, 0xfff, 0x2, 0xffff, 0x81, 0x0, 0xf, 0x1, 0x4, 0x0, 0x0, 0x1, 0x4f, 0x80000000, 0x0, 0x80, 0x1, 0x3, 0x0, 0xfffffffe, 0x5, 0x9, 0x7, 0x4, 0xfffff37d, 0x1dd, 0x5, 0x4, 0x3, 0x7ff, 0x5, 0x957, 0x3, 0x43f9, 0x1, 0x7, 0x8000, 0xac2, 0x0, 0x0, 0x7, 0x800, 0x6, 0x101, 0xffffff6d, 0x0, 0x3, 0x6, 0xfffffe00, 0x5, 0xb32, 0x1000, 0x3ff, 0x4, 0x6dfb, 0x0, 0x100, 0x3ff, 0x4, 0x6, 0x9, 0x62, 0x9, 0x5, 0x5, 0x1, 0x99, 0x8, 0x10001, 0x5, 0xc, 0x3, 0xc984, 0x81, 0x80000001, 0xfc2, 0x8, 0x7f, 0x7, 0x1, 0x8001, 0x7, 0x6, 0x80000001, 0x2, 0x8, 0x1, 0x1000, 0x6, 0x66fa3a21, 0xd, 0xee, 0x935, 0x1, 0x8, 0x800, 0x2, 0xd, 0x5, 0x1, 0x1, 0x100, 0x1, 0xb44, 0x5, 0x1000, 0x9, 0xff, 0x8, 0x9cd, 0x14, 0xef, 0x5, 0x7, 0x6, 0x1c32, 0x80000001, 0xffffffff, 0x5, 0x124, 0x3, 0x8, 0x800, 0xffffffff, 0x9, 0x4, 0x7, 0xfffffff7, 0x1, 0x6, 0x4cf, 0x7ff, 0x2, 0xd15, 0x5, 0x8001, 0xab0, 0x0, 0x1000, 0x2, 0x8, 0xa7, 0xc380, 0xed6d, 0x7e2e, 0xfffffff8, 0x80000001, 0xfffffc01, 0x4, 0x4, 0x4, 0x8, 0x0, 0x5, 0x3, 0x1, 0x1, 0x0, 0x3b, 0xfffffff7, 0x1, 0x3, 0x10001, 0x8, 0x6, 0x9, 0x8, 0x2, 0x9, 0x1ff, 0x100, 0x47e8, 0x3, 0x200, 0x4, 0x9, 0x5, 0x423, 0x5, 0x800, 0x4, 0x0, 0xfffffff2, 0x3, 0x8, 0xdd, 0x5, 0x9, 0x530, 0x5, 0xffffffff, 0x7, 0x7fff, 0x1, 0x0, 0x4, 0x9, 0x8, 0xa, 0x0, 0x1a, 0x2, 0x0, 0xc6d, 0x0, 0x5, 0x5, 0xc, 0x4, 0x9f, 0x3, 0x10, 0x96b, 0x0, 0x708, 0x7f, 0x2, 0xffffffff, 0x4eb, 0x1, 0xfffffffd, 0x2, 0x4, 0x83a, 0xff, 0x7, 0x0, 0x8, 0x1ff, 0xa, 0x80000000, 0x8, 0x4, 0x8, 0x100, 0x101, 0x3c2, 0xf, 0x9, 0x0, 0x2, 0x4, 0x8, 0x8001, 0x3, 0xc, 0x0, 0x7, 0xd5c6, 0x8, 0x3, 0x3, 0x5, 0xb, 0x1, 0x4800000, 0x6, 0x6, 0x1, 0xe, 0x1, 0x6, 0xa849, 0xfffffff9, 0x1, 0x5, 0x6173, 0x9, 0xe, 0x9, 0x4, 0x2, 0x9, 0x0, 0x0, 0x3, 0x9, 0x5, 0x6, 0x875, 0x6, 0x8e0, 0x4, 0x6, 0x5, 0x508, 0x101, 0x2, 0x40, 0x6, 0x5, 0x9, 0x7, 0x1000, 0x7, 0xa9, 0x8, 0xd154, 0x7, 0xc, 0x1, 0xff, 0x9, 0xfffffffe, 0x6f1f, 0x7f, 0x0, 0x1, 0x7, 0x7, 0x7, 0x101, 0x9, 0x37e, 0xf, 0x7, 0x1, 0xb2, 0x7, 0x9, 0x7fffffff, 0x6, 0x7, 0xf, 0x0, 0x2, 0x9, 0x4, 0x3, 0x2, 0x8, 0x7fff, 0x8001, 0x2, 0x80000001, 0x3, 0xfffffff6, 0x6, 0x81, 0x1, 0x8001, 0x8, 0x10001, 0x8, 0x4, 0x80000000, 0x2, 0x6, 0x200, 0xf, 0xe4a5, 0x9, 0xe50, 0x1000, 0x800, 0x3, 0x5, 0x1, 0xc, 0x6, 0x101, 0xf7, 0x0, 0x9, 0x8000, 0x6, 0x9, 0x7fffffff, 0x6, 0x5, 0xfff, 0x8, 0x59ea, 0x7, 0x0, 0x8, 0x5, 0x7, 0x7, 0x7, 0x0, 0x0, 0x6, 0x60b92167, 0x9a, 0x3e29557b, 0x1000, 0x0, 0xd, 0x615, 0x57e6, 0x8001, 0x9, 0x4, 0x8, 0x3, 0xa, 0xff, 0x7, 0xab67, 0x3, 0x40000, 0x6, 0x1, 0x9, 0x0, 0x6, 0xfffffffd, 0x4, 0x400, 0x0, 0xa, 0x80, 0x7, 0x0, 0x4, 0xc, 0x6, 0x81, 0x5, 0xffff8000, 0x78, 0x8000, 0x2, 0x4, 0x512e, 0x9, 0x3, 0xffffffff, 0x10001, 0x10001, 0x401, 0x9b58000, 0xfffffff8, 0xfffffffa, 0x8, 0x1, 0x22d, 0x12afd498, 0x4089, 0x3, 0x6, 0xc, 0x0, 0xfffffffe, 0xbe88, 0x7, 0x7e, 0x12, 0x80000001, 0x3ff, 0xb, 0xd3a, 0x3, 0xfffffffe, 0x4b413df4, 0x0, 0xfffe0000, 0x100, 0x80000001, 0x8, 0x800, 0x101, 0x5, 0x0, 0xc, 0x5, 0x1, 0x2, 0x1, 0x400, 0x1, 0x6, 0x4, 0x0, 0x800000, 0x8, 0x40, 0x4, 0x7fffffff, 0x4, 0x7fffffff, 0x0, 0xc40, 0x1ff, 0x9522, 0xddbe, 0x1, 0x7, 0x101, 0x3, 0x7, 0xc, 0xffff, 0x7f, 0x7, 0x5, 0x6, 0x4, 0xaee, 0xd5, 0x6, 0x4, 0x7ff, 0x10001, 0x8000, 0xa517, 0xfff, 0x3, 0x8, 0x9, 0x9, 0x3, 0x4873, 0xffffc71f, 0x3, 0x2, 0x6, 0x7, 0x8, 0xe, 0x81, 0xec, 0x7, 0x7, 0x2, 0x1, 0x2, 0x8, 0x80, 0x1, 0x8, 0x5, 0x0, 0x3, 0xfffffff9, 0x600, 0x0, 0x0, 0xc760cbd, 0x8, 0x1, 0x5, 0xfffffbff, 0xe, 0x4, 0x695a, 0x200, 0xf, 0x1, 0x6, 0x7, 0x9, 0x0, 0x1, 0x1b, 0x6, 0x5, 0x4, 0x24, 0x1, 0x9, 0x8e, 0x501, 0x1, 0x9, 0x2, 0x8, 0x9, 0x3, 0x8001, 0x8, 0x4, 0x7, 0x1, 0x0, 0x2, 0x9, 0x6, 0xf, 0x0, 0x4, 0xda, 0x227, 0x3, 0xd87, 0x3, 0x2, 0xe78e, 0x7, 0x1, 0x78ad4010, 0x7, 0x1495, 0xe, 0x2, 0x81, 0x800, 0xf1f, 0x6, 0x101, 0x9, 0x8, 0x7, 0x5, 0xfffffff6, 0x79, 0x4, 0x3, 0xffff60e8, 0xfffffff3, 0xc, 0xffff, 0x3, 0x3, 0x7f, 0xf990, 0xffffff9f, 0x10, 0x10, 0x73a, 0x4, 0x2, 0x80000001, 0x0, 0xffff9ae4, 0x2, 0x0, 0x12, 0x2, 0x2, 0x4, 0x100, 0x0, 0x5, 0x4, 0xed4c, 0x3, 0x8020, 0x400, 0x5, 0xffffff01, 0xffffffff, 0x1, 0x6d1, 0x10000, 0x8000, 0x2, 0x200, 0x7, 0x45f, 0x7, 0x3, 0x4, 0x0, 0xd, 0xb6, 0x36a8, 0xe30, 0xeaa6, 0xf1, 0x12000000, 0x400, 0x101, 0x8, 0x400, 0x6dc0, 0x40, 0x80, 0x0, 0xfffffff9, 0x100, 0x1ff, 0x3, 0x9, 0x273, 0x1, 0x3, 0x4, 0x7, 0x1, 0x8, 0x5, 0xffff0001, 0x6, 0x6, 0xfffffff9, 0x8, 0xfffffff4, 0x0, 0x2, 0x3, 0x10, 0x800, 0x9, 0x865b, 0x6, 0xfffffffd, 0x9, 0x1000, 0x9, 0x3, 0x3, 0x100, 0xa24, 0x8, 0xe9e, 0x3, 0x7fffffff, 0x2, 0x0, 0x1, 0x7, 0x9, 0x5, 0xffff, 0x6, 0xa, 0x0, 0x33, 0x10, 0x98, 0xffff, 0x5, 0x3ff, 0x65, 0x7fffffff, 0x3, 0x6, 0x20000000, 0x6, 0x8, 0x2, 0x1, 0x8e, 0x2, 0x5, 0x2f07, 0xc0, 0x40, 0x1, 0x2, 0xd0, 0x8, 0xf5c00000, 0xd, 0xffff, 0x6, 0x7ff, 0x6, 0x7b07, 0x64, 0xf06, 0x1, 0x6e, 0x7, 0x4, 0x6, 0x4, 0xfffffffd, 0x0, 0x5, 0x5, 0x3, 0x4, 0x5, 0x2, 0xffff, 0x5, 0xef000, 0x8, 0x9, 0x80, 0x2, 0x1ff, 0x7, 0x4, 0x7fff, 0x6, 0x1, 0x0, 0x20, 0x5f, 0x7fffffff, 0x3155, 0xad4de21, 0xe08, 0x0, 0x4, 0x2d488661, 0xb, 0xa98, 0x6, 0x0, 0x9, 0x7fffffff, 0x4, 0x65, 0x6fc, 0x7, 0x8, 0x8000000, 0x5, 0x1, 0xc8, 0x0, 0x2, 0xd, 0x2dc, 0xff, 0xfffffffc, 0x7, 0x90be, 0x8, 0x4, 0x3, 0x0, 0x7, 0xbd, 0x3, 0x5, 0x3, 0x0, 0xc0000000, 0xde61, 0x3, 0x5, 0x6154, 0x0, 0x9, 0x3, 0x7, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0x7, 0x5ee, 0x9, 0x5, 0x5, 0x3, 0x8, 0x6, 0x1, 0x80000001, 0x3ff, 0x6, 0x800, 0x6, 0x3692, 0xf84c, 0x10001, 0x10200000, 0x2, 0x1, 0x5, 0x6, 0x8, 0x20, 0x6, 0x7, 0x6, 0x859, 0x2, 0xfffffffb, 0x9, 0x0, 0xd96, 0x0, 0x8000, 0x2, 0x3, 0x1, 0x8, 0x4, 0x7, 0x9, 0x800, 0x4, 0x80, 0x1, 0x1, 0x9, 0x1db2fec2, 0x1, 0x8, 0x6, 0x619, 0x5, 0x1, 0x8, 0x6, 0x2b0, 0x5b7f, 0x401, 0xfff, 0x80000000, 0x2, 0x8, 0x5299, 0x7, 0x10000, 0x1, 0x1, 0x9, 0x6, 0x10001, 0x6200, 0x8, 0x4, 0x0, 0x9, 0x4, 0x1, 0x4, 0x4, 0x5, 0x7ff, 0x5, 0xde5f, 0x8, 0x10000, 0x5, 0x5, 0x3, 0x6, 0x6, 0x0, 0x0, 0x4, 0x40, 0x0, 0x74, 0x10001, 0x2, 0x9, 0x9, 0xfffffffd, 0xc, 0x0, 0x2, 0xff, 0x7fffffff, 0x8, 0x5, 0x5, 0x5bcc, 0x7ee3, 0x2, 0x59f, 0xd, 0x7, 0x3, 0x81, 0x7, 0x6, 0x4, 0x3, 0xc, 0x7, 0x9, 0x6, 0x3ff80, 0xa, 0x0, 0x7, 0x3, 0x0, 0x101, 0x0, 0x3, 0x1, 0x8000, 0x9, 0xfffffffb, 0xfffffffd, 0x8, 0x9d1a, 0xd, 0x1, 0x6, 0x8, 0xfffffffa, 0x1, 0xffffffff, 0x3, 0x2, 0x6, 0xffffff8a, 0x81, 0x3, 0x3, 0x3, 0x78b5, 0x6, 0x40, 0x83b, 0x5, 0x10000, 0x2, 0x6, 0x6, 0x2, 0x7, 0x0, 0xff, 0x1, 0x400, 0x7ff, 0xd, 0x6, 0x7f, 0x80000001, 0x9, 0xfffffffb, 0x1, 0x2, 0x8, 0x0, 0x0, 0x7, 0x4f8, 0x6, 0x3, 0x10000, 0x400, 0x400, 0xfff, 0x5, 0x1000, 0x2, 0xffffffff, 0x4, 0x0, 0x4, 0x4, 0x8000, 0x1, 0x6, 0x7fffffff, 0xffff, 0x9, 0x400, 0x10, 0x9, 0x8, 0x0, 0x3, 0xfff, 0xd, 0x1, 0x5, 0x3, 0x8, 0xd, 0x3, 0x2, 0xb, 0x0, 0x0, 0x2, 0xe3d, 0xf, 0xa02, 0x400, 0x7, 0x5, 0x5, 0x3c280bb8, 0xfffffff1, 0x1bd, 0xffffff81, 0xb800000, 0xe, 0xfff, 0x10, 0x8, 0xab7, 0x1000, 0x0, 0x81, 0x7, 0x80, 0x2, 0x3, 0x2, 0x1, 0x7799, 0x3, 0x7761, 0x3, 0x80000001, 0x1310, 0x4, 0x1, 0x1000, 0x3, 0xe, 0x10000, 0x5, 0x9, 0x9, 0x6, 0x1000, 0x4, 0x400, 0x1, 0x0, 0x1, 0xb, 0xc6, 0xb7, 0x2, 0xfffffffb, 0x4, 0x4, 0x2, 0x9, 0x2df, 0x3ff, 0xffffff01, 0x2, 0x1020, 0x0, 0x10000, 0x3, 0x3, 0x1, 0xff, 0x80000000, 0x9f6e, 0x6, 0x4, 0x9, 0x7, 0x10001, 0x9, 0x2, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1dc6, 0x8, 0x4000, 0x3, 0x4, 0x0, 0x8, 0x0, 0x101, 0x8000, 0x24, 0x5, 0x0, 0x7ed, 0xfffffff9, 0x10001, 0x9, 0xfffff76b, 0xb, 0x6, 0x9, 0xffff0001, 0x1, 0x203a9d04, 0x0, 0x80000001, 0x7687, 0x4, 0xc4, 0x6, 0x3, 0x5a97ac21, 0x3db5, 0xeb9, 0x0, 0x4, 0x4, 0x7, 0x4, 0x3, 0x7, 0x9, 0x1ff, 0x1, 0x800, 0x9, 0x8, 0xe3, 0xa, 0x7, 0xfffff1b9, 0x79cee667, 0x3ff, 0x958e, 0x6, 0x8, 0xff, 0x848, 0xc, 0x1, 0x7, 0x7, 0xc985, 0xffff8001, 0x6, 0x8, 0x5, 0x8, 0x3, 0xfffffff7, 0x1, 0xfffffffb, 0x7, 0x8, 0x12e453f7, 0x1, 0x0, 0x8, 0xffffffff, 0x7, 0x3, 0x4, 0x5, 0x7, 0x8, 0x4, 0x80000000, 0xfffffffa, 0xfffff960, 0xb, 0x2, 0x4, 0xfffffffc, 0x80000000, 0xad, 0x8, 0x7, 0xb9, 0xd, 0xf7, 0x0, 0x7, 0xe, 0x49ad, 0x5, 0x0, 0x2, 0x2, 0xea9, 0x0, 0x3, 0x8, 0xf0, 0x9, 0x9, 0x1, 0x60000, 0x4, 0x6, 0x5, 0x40, 0x40, 0x3, 0x40, 0x2, 0x81, 0x80000000, 0x8, 0x3, 0x9, 0x2, 0x3, 0x4, 0x80000001, 0x7, 0x7b, 0x7f, 0x401, 0x0, 0xe, 0x80000001, 0x7, 0x6, 0x8, 0x2, 0x5, 0x53c, 0x9, 0x1, 0x4, 0x6, 0xffff, 0x4, 0x3, 0x5, 0xfffffffc, 0x7fffffff, 0x5fe, 0xe58e, 0x7, 0x1, 0x2, 0x4, 0x8, 0x101, 0xf96, 0x5, 0xf, 0x6, 0xe5a, 0xf, 0xa70, 0x7, 0x9, 0x1, 0x1, 0x65, 0x7f, 0x9, 0x101, 0xffc00000, 0x9, 0x5, 0x7, 0xfffffff5, 0x10, 0x6, 0xffff, 0x0, 0x2, 0x3ff, 0x100, 0x2000000, 0x10000, 0x6, 0xd2, 0xfffffefb, 0x0, 0x6, 0x1, 0x8, 0x5c, 0xffffff67, 0x6, 0x47c0f793, 0xfff, 0x22, 0x101, 0x5, 0x8, 0x0, 0x81, 0xd, 0x6d2eff9c, 0xab, 0x4, 0x8, 0x4, 0x8, 0x10, 0x7, 0x2, 0xf, 0x7, 0x80000000, 0x1, 0x1ff, 0x80000001, 0x608, 0x3, 0x6, 0x1, 0x0, 0x2, 0x7f, 0x6, 0x101, 0x1, 0xa20c, 0x7, 0x2, 0xf400000, 0x6, 0x9, 0x1df, 0x7, 0x3, 0x8, 0xa, 0x63, 0x7, 0x4, 0x9, 0x1, 0x5, 0x1, 0x8, 0x6, 0x5a43, 0x7, 0x71c00000, 0x9, 0x4, 0xfffffff9, 0x8, 0x650c, 0xf, 0x6, 0x1000, 0x0, 0xb, 0x1, 0x80000000, 0x5, 0x9, 0x7, 0x2, 0xf500000, 0x777, 0xff, 0x8, 0x7, 0x9, 0x1000, 0x6, 0xf2, 0x5, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0x5, 0x7, 0x3, 0x0, 0xb, 0x10, 0x4, 0x7, 0x55, 0x8, 0x6, 0xd1, 0xffffffff, 0x401, 0x0, 0x5, 0x1, 0x0, 0x5ad0, 0x1000, 0xff, 0x8, 0x6, 0x2, 0xf5, 0x1, 0x9, 0x0, 0x4, 0x9, 0x7fff, 0x5, 0x5, 0x3, 0x7, 0x5c570000, 0x2, 0x8000, 0x4fde, 0x7, 0x80000000, 0xffffff01, 0x800, 0xffffffff, 0x400, 0x4486, 0x9, 0x8, 0x3, 0x9, 0x1, 0xb7, 0x1, 0x7, 0x1, 0x81, 0x2, 0x7, 0x5, 0xffff, 0x200, 0xffffffff, 0x800, 0x1, 0x7fff, 0x0, 0xfffffffe, 0x9, 0x6, 0x400, 0x0, 0xebf, 0x9, 0x1c6b, 0x7, 0xa, 0x6, 0x5, 0xc2, 0x4, 0x7, 0x2, 0x6, 0x2, 0x2, 0xfffffffd, 0x1, 0xffffffff, 0x8000, 0x4, 0x800, 0x4, 0x64, 0x7fffffff, 0x0, 0x1, 0x80000000, 0x1, 0x3c4c, 0x6, 0x6, 0x46e, 0x4b, 0x3, 0x4, 0x0, 0x7, 0x2, 0x8, 0x4c, 0x7, 0x2, 0x7f, 0x2, 0x400, 0x1, 0x6, 0x5, 0x4, 0x5, 0x0, 0x5, 0x7, 0x0, 0x27, 0xfd0, 0x1, 0x7ff, 0x1800000, 0x4, 0x3, 0x7, 0x44e9, 0x0, 0xa, 0x8000, 0x4, 0x0, 0xe220, 0x6, 0x1, 0x400, 0x2e, 0x3, 0x9, 0x80000001, 0x8, 0x3, 0x2, 0x8, 0x5, 0x1, 0x8, 0xf, 0x23, 0x6, 0x4, 0x6, 0x5, 0xc, 0x2, 0x3, 0x2, 0x9, 0x8, 0xffff8000, 0xb83, 0xff, 0x4, 0x6, 0x3831, 0x7, 0x4, 0x2, 0x7ff, 0xfffffff3, 0xffffff67, 0x10000, 0x0, 0x80, 0xfffffffe, 0xfffffff7, 0xaf6b, 0x5, 0x5, 0x7, 0x4, 0x3, 0x100, 0x7, 0x7, 0x3, 0x9, 0x7, 0xff, 0x2, 0x10ea, 0x4, 0x800, 0x1, 0x4ae, 0x9, 0x80000001, 0xfffffffc, 0x2, 0x7, 0xed5, 0x599, 0x2c28, 0x6, 0x8, 0x400, 0x9, 0x4, 0xe17, 0x4, 0x5, 0x2, 0x401, 0x1000, 0x1ce, 0x7fff, 0x2, 0x2, 0x5, 0x7fffffff, 0x4, 0x4, 0xb, 0xe, 0x5, 0x4, 0x401, 0x8, 0x6, 0x8, 0x5, 0xe61, 0x75f, 0x2c1c, 0x4, 0x817, 0x6e, 0x5, 0x457, 0x7, 0x8000, 0x8001, 0x1e6, 0x400, 0x8, 0x7, 0x9, 0xffff8e24, 0xffff, 0x0, 0x0, 0x0, 0xfffffc01, 0x6, 0xff, 0x81, 0x0, 0x6, 0xffff, 0x8, 0x4, 0xffffffff, 0x1, 0x8bd, 0x10, 0x1, 0x0, 0x1, 0x6, 0x7, 0x7fffffff, 0xfa4, 0x1, 0x1, 0x3, 0x0, 0xfda, 0x4000000, 0x8, 0x0, 0xfffffffc, 0x10, 0x9, 0xfffff000, 0x3, 0x4, 0x6d65b580, 0x0, 0x40, 0x4, 0x8000, 0x8, 0x800, 0x8, 0x6, 0x6, 0x80000000, 0x3, 0x8, 0x1, 0x7fff, 0x1000, 0x8, 0x8, 0x67cf, 0x10001, 0x800, 0xa802, 0x3, 0x0, 0x5, 0x8, 0x2, 0x1, 0x8001, 0x83, 0x0, 0x2, 0x6, 0xfff, 0x2, 0x51ad, 0x0, 0x6, 0x33e, 0x1a3e, 0x8, 0xe, 0xfffffc01, 0xb300000, 0x4, 0x5, 0x5, 0x5, 0x7, 0x9, 0x7, 0xfffffff9, 0x2, 0xee4e, 0x3, 0x101, 0x8, 0x3, 0x4, 0xb, 0xa, 0x0, 0x9, 0x6, 0x8000, 0x5, 0xb8, 0x218, 0x5, 0x8, 0xf35, 0x1, 0x8, 0x9, 0xfae, 0x7fff, 0x4, 0x1, 0x6e3c, 0x6, 0x8000, 0x1000, 0x6, 0x2, 0x8, 0x3, 0x6, 0x488b, 0x0, 0x0, 0xd, 0x1000, 0x3, 0x3, 0x2, 0x4, 0xe, 0x7ff, 0x2, 0x3, 0xe1, 0x4, 0x100, 0x4, 0xffff, 0x4, 0x0, 0x5, 0xffff8001, 0xffffffff, 0x0, 0x3, 0x9, 0x7, 0x1, 0x4, 0x8, 0x6, 0x9, 0x5a03, 0x1, 0xfffffff9, 0x0, 0x5, 0x3, 0x4, 0x4, 0x7, 0x3, 0x5, 0x1, 0x1, 0x5, 0x4, 0xa1f, 0x85a4, 0x3, 0xfff, 0x20c6, 0x3, 0x4eb, 0xffffffff, 0x7, 0x8, 0x5, 0x67, 0x9, 0x658, 0x40, 0x10000, 0x7, 0x7, 0x359800, 0x4, 0x2, 0x9, 0x3, 0xf2b6, 0x7, 0x5, 0x2, 0x9, 0x8e, 0x10, 0x6, 0x0, 0x4, 0x8001, 0x5, 0x5, 0x7fff, 0x80000001, 0x0, 0x7, 0x6, 0xecd3, 0x3, 0xc1, 0x1, 0x52, 0xa36, 0x6, 0xbfb, 0x2cb, 0x0, 0x4, 0x1, 0x0, 0x10000, 0x6, 0x7, 0x0, 0x0, 0x7fffffff, 0x81, 0x2aac6cc, 0x2, 0xe, 0x40ab, 0x401, 0x7, 0x9, 0x0, 0x8, 0x94, 0x0, 0x5, 0x2, 0x5, 0xac3, 0x6, 0x1c8f, 0x9, 0x4, 0xd, 0x4, 0x5, 0x7, 0xff, 0x0, 0x1, 0x3, 0x5, 0x76, 0x93, 0x6, 0xf, 0x10000, 0x3, 0x81, 0xffffffff, 0x0, 0x7ff, 0x4, 0x8, 0x3, 0x1, 0x3, 0x10001, 0x0, 0xed000000, 0x7, 0x401, 0xb2, 0xa, 0x25, 0x0, 0x3, 0x2, 0x3, 0xe41c, 0xb, 0x6, 0xe3da, 0xffff0000, 0x2, 0x1, 0x1, 0x8, 0x1, 0x75e, 0x3ff, 0x6f8, 0xf, 0x5, 0x401, 0x2, 0x5, 0x6, 0x0, 0x80000000, 0x1, 0x7, 0x2, 0x9, 0x0, 0x1000, 0x3, 0x8, 0x6, 0x5, 0x800, 0x6, 0x3, 0x6, 0x2, 0x879, 0x2, 0x800, 0x4, 0x76, 0x8, 0x1, 0x7, 0x2, 0x3, 0x7fff, 0x7f06bc93, 0x2, 0x0, 0x0, 0x9, 0x0, 0xf5b, 0x1, 0x4, 0xe, 0x7, 0x7, 0xf23, 0x45a0, 0x7fffffff, 0x0, 0x1f, 0x8, 0x7, 0x3, 0x0, 0x55, 0x3, 0x4, 0x9, 0xad0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x7, 0xc4, 0x2, 0x401, 0xc, 0xffffffff, 0x1, 0x6, 0x4, 0x100, 0x9, 0x1b, 0x401, 0xd0, 0x82, 0x5, 0xf00000, 0x7fff, 0x7, 0xa23, 0x80000000, 0xfff, 0x3f8, 0x9, 0xd8, 0x9, 0x6, 0xd, 0x45, 0xfffffffd, 0x1, 0x0, 0x5, 0xf6d, 0x0, 0x40, 0x5, 0x4, 0x9, 0xfffffffe, 0x4c6, 0x2, 0x7, 0x3, 0x40, 0x90, 0x9, 0xc3e, 0x9, 0x4, 0x10000, 0x3, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x2165, 0xffffffff, 0x4, 0xfffffffe, 0x4, 0xfffffff8, 0x6, 0x1, 0x1, 0xe, 0x8, 0x5, 0x5, 0x3, 0x5, 0xffffff01, 0xc629, 0x33c00000, 0xffff, 0xfffffff7, 0xcd1, 0x7fff, 0x2, 0xa97a, 0x8bbf, 0x1, 0x7f, 0x40, 0x5, 0x8, 0x1, 0x6, 0x4, 0x9, 0x1f2, 0x7fff, 0x7, 0x8, 0x1, 0x1, 0x9, 0x8d7, 0xae3d, 0x6942, 0x1000, 0xffffffff, 0x1, 0xfffff800, 0x7e6e, 0x8a9a569, 0x3ff, 0x10001, 0x7f, 0x5, 0xe90, 0x401, 0x0, 0x5, 0x2, 0x0, 0x8, 0x8, 0x86a, 0x1, 0x0, 0x6, 0x5861, 0x1, 0x3ed0ad44, 0xffffffda, 0x2, 0x5, 0x1, 0x1, 0x4, 0x7, 0x2, 0x5, 0x8, 0x5, 0xffff, 0x10001, 0x8, 0x1, 0x3, 0x8, 0xffff, 0x8, 0x401, 0x1, 0x9, 0xfff, 0x4, 0x8, 0x9, 0x9, 0x8, 0x8, 0xb, 0x2, 0x7f, 0xa, 0x1, 0x4, 0x8, 0x3, 0x7, 0x4, 0xd, 0x2, 0xff, 0x88, 0x7ff, 0x7f, 0x81, 0x7, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x4, 0x80000000, 0x2, 0x2, 0x5, 0x6, 0x0, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x80, 0x7fffffff, 0x0, 0xf25, 0x43b6, 0x1, 0x8, 0x8f, 0xe, 0x2, 0x6, 0x1, 0x401, 0x1, 0x7, 0x8, 0x401, 0x1000, 0x8, 0x37, 0xaf, 0xff, 0x6, 0x9, 0x2, 0x2, 0x4, 0x0, 0x80000000, 0x6, 0x8000, 0xeb, 0x3, 0x9, 0x7, 0x7, 0x8, 0xffff3a2c, 0x8, 0x80000000, 0x200, 0x1, 0xc2b, 0xb541, 0x2802, 0x4, 0x7a6625c1, 0xe0, 0xfffffffd, 0x0, 0xfffffffe, 0xa4d, 0x9, 0x9, 0x3, 0x8, 0x6, 0x7, 0xb55a, 0x7, 0xfffffffa, 0x74, 0x80000000, 0xfc5, 0x8000, 0x3, 0x24, 0x7, 0x8, 0x1, 0xf80000, 0x5, 0x2, 0x1000, 0x0, 0x6, 0x240, 0x7f, 0x7, 0x5, 0x2, 0x80000000, 0x5, 0x5, 0x1, 0xfffffffa, 0x8, 0x100, 0x6, 0x3, 0x2, 0xf, 0x7, 0x2, 0xe, 0x44ce, 0x80, 0x1ff, 0x4, 0x8, 0x1, 0xc, 0xe8e3, 0x4800000, 0x4, 0xe, 0xfb6, 0x9, 0x400, 0xea28, 0xffff16b5, 0x800, 0x41, 0x7, 0xa17, 0x8e7, 0xce2, 0x3, 0xff, 0x7, 0x1, 0x3, 0x9, 0x1, 0xffffff01, 0x8, 0x0, 0x3, 0x100, 0x8000, 0x7f, 0xee, 0x8000, 0x2, 0x80000000, 0x5, 0xfffffff5, 0x4, 0x4, 0xffffffc0, 0x6, 0x5, 0x2, 0x2, 0x9, 0x10000, 0xd828, 0x8000000, 0x3d9, 0x0, 0x52, 0x6, 0x3, 0xfffffff7, 0x10001, 0x8, 0x3, 0x8, 0xf15, 0x7, 0x3, 0x0, 0x3, 0xb, 0x8001, 0x7, 0x4, 0x8, 0x9, 0x3b, 0xf, 0x7c, 0x9, 0x10000, 0x5, 0x1, 0x7, 0x8, 0x6, 0x4, 0x5, 0x5, 0x0, 0xb66b, 0x2, 0x0, 0xfff, 0x2, 0xfff, 0x0, 0x7, 0x1, 0x40, 0x33, 0x7, 0x8001, 0x7, 0x2800, 0xd84, 0x0, 0x226, 0x5, 0x0, 0x3, 0x6, 0x31f87fc7, 0x100, 0x4, 0x7fff, 0x7, 0x4, 0x3, 0x0, 0x3, 0x80, 0xe, 0xe5e7, 0x81, 0x9, 0x2, 0x9, 0x0, 0x5, 0x81, 0x7, 0x100, 0x0, 0xbfb, 0x2294, 0x9, 0x2, 0x9, 0xc, 0xaeb, 0x0, 0x400, 0x8, 0x8f, 0x9, 0x401, 0x7, 0x10, 0x1, 0x6, 0x7, 0x6, 0x8, 0x5, 0x0, 0x0, 0x3, 0x6, 0x1dc, 0x40, 0x246, 0x4, 0x4, 0x8, 0xb, 0x0, 0x59, 0x80000000, 0x5, 0x93d, 0x9, 0xd4, 0x4, 0x9, 0x6, 0x9, 0x0, 0xf, 0x7fff, 0x0, 0x6, 0x9, 0x4, 0x4, 0x7c53, 0x2, 0x5, 0x934b, 0x9, 0x9, 0x4, 0xdcb9, 0x7, 0x8, 0x4, 0x8, 0xb1, 0xa3, 0xc0000000, 0x7f, 0x3, 0x3, 0xc, 0x4, 0xc825, 0x7fff, 0x9, 0x4, 0x2, 0x200, 0x7, 0x3, 0x3, 0x81, 0x2, 0x80, 0x736d, 0x0, 0x80000001, 0xf3, 0xc268, 0x8000, 0x76c1, 0x7fff, 0xffffff7f, 0xea7a, 0xfffffffb, 0x6, 0x8001, 0xffffffff, 0x4, 0x8, 0x0, 0x8, 0x2, 0xc, 0x0, 0x0, 0x4, 0x8, 0x9, 0xb2, 0x150, 0x1, 0x67, 0x517, 0xfffffff9, 0xcd, 0x7, 0x1, 0x0, 0x6, 0x3, 0x10, 0x3, 0x7, 0xe4c, 0xacab, 0x4, 0x2909, 0x6, 0x10, 0x3, 0x1, 0x0, 0x81, 0x80000001, 0x9, 0xd0f3, 0x6c49, 0x0, 0x3, 0x1000, 0xd, 0x2, 0x10, 0x8, 0x4, 0x4, 0x5, 0xd094, 0xe6d8, 0x6203f14f, 0x6, 0x80000001, 0x10001, 0x6, 0x9, 0xdf89, 0xa, 0x4, 0x10000, 0x7136c5af, 0x5, 0x7, 0x3, 0x345, 0x80000001, 0x1, 0xc, 0x7, 0x3e35, 0x6, 0x8, 0x8, 0x9, 0x1, 0x6, 0x3, 0x100, 0x100, 0xffff, 0xa, 0x4, 0x7, 0x80000000, 0x3, 0x80000000, 0x8, 0xa50, 0x8f, 0x80, 0x3, 0x9, 0x4, 0x1, 0x5, 0x9, 0x4, 0x9f, 0x2, 0x115c, 0x40, 0x101, 0x8, 0xc, 0x9, 0x2e97, 0x8, 0x100, 0x5, 0x9, 0x8, 0x2, 0x6b, 0x0, 0x9, 0x9, 0xd9b, 0x7c89fa3e, 0x6, 0xcb2, 0x3, 0x6, 0xff, 0x29, 0x9, 0x49fb6bb1, 0x6, 0xfffffffc, 0xdf, 0xfffffffd, 0x9, 0x4, 0x8, 0x8, 0xf18d, 0x10000, 0x2, 0x9, 0xffff, 0x9, 0x9, 0x8, 0x7, 0x80000000, 0x4, 0xa, 0x4800, 0x5, 0x18000000, 0x80000001, 0x3, 0x8, 0x81, 0xfffffff0, 0x6, 0x3d, 0xff, 0x7, 0x26, 0x6, 0x4, 0x164, 0x8, 0x9, 0x10000, 0x37, 0x1d, 0x40, 0x81, 0xfffff800, 0x5, 0xb, 0x8, 0x8, 0x5, 0x80, 0x7f, 0x66f, 0x80000001, 0x341, 0x5, 0xff, 0x80, 0x8, 0x6, 0xffffff00, 0xa, 0x800, 0x4, 0xfff, 0xfffffff8, 0xc, 0x1000, 0x4, 0x3, 0x3ff, 0xffffffff, 0x8, 0x2, 0x9, 0x80000000, 0x5, 0xfffffffc, 0x9, 0xc, 0x8, 0xe9, 0x7, 0x4, 0x7fff, 0x7fffffff, 0x7fffffff, 0x10, 0xe, 0x7, 0x40, 0xc9, 0x9, 0x81, 0x4d, 0x8001, 0x401, 0x6, 0x3, 0x7, 0x3, 0x8, 0x4, 0x8, 0x3d7666c, 0x6b, 0x3, 0x699, 0x0, 0xc, 0x2, 0x16, 0x7fffffff, 0x5, 0x8, 0xa, 0xfffffffd, 0x101, 0x0, 0x1000, 0x3, 0x3, 0xfff, 0x5, 0x3, 0x0, 0x9, 0xffff3887, 0x101, 0xd, 0x4, 0xc, 0x8, 0x3957, 0x0, 0xe, 0xfffffffb, 0x4, 0x9, 0x6, 0x9, 0x9d30, 0x7, 0x81, 0x7fffffff, 0x0, 0x7f, 0x3, 0x800, 0x5, 0x6, 0x16, 0x8, 0x3, 0xfffff001, 0x1dae, 0x6, 0x10001, 0x10001, 0x5, 0x9, 0x401, 0x0, 0x1d92, 0x2, 0x2, 0x8000, 0x4, 0x0, 0x70, 0x1, 0x8, 0xfffffffc, 0x7, 0x1, 0x2, 0xfffffff8, 0x5, 0x3, 0x6, 0x81, 0x5, 0x1, 0xf, 0x8, 0x7, 0x1ff, 0xad2, 0x9, 0x40, 0x7d, 0x2, 0x4, 0x2, 0x8, 0x0, 0x6, 0xd, 0x0, 0xffffdfb0, 0x5, 0x2, 0x6, 0x1, 0x1ff, 0xb6b, 0xffff, 0x80000000, 0x5, 0x4, 0x2, 0x6, 0x3ff, 0x192, 0x7, 0xffff, 0x5, 0x1000, 0x2, 0x81, 0xfffffffd, 0x1000, 0x200, 0x6, 0x80, 0x5, 0xffffffff, 0x0, 0x8, 0x2, 0x2, 0x6, 0x10000, 0x1000, 0x0, 0x2, 0x2, 0x7, 0x6, 0x5, 0x0, 0xddf, 0x7fffffff, 0xc, 0x2, 0xfffffffb, 0xff, 0xfb, 0x6, 0x81e0, 0xd76, 0x5, 0x8, 0x7, 0x6, 0x2, 0x1, 0xdb86, 0xfff, 0x4, 0x3, 0x9, 0x0, 0xb9b, 0x3, 0x1000, 0x6, 0x827, 0x3, 0x1, 0xa, 0xa3, 0x1, 0xb8, 0x0, 0x3ff, 0x8001, 0x5, 0x2, 0x9, 0x249, 0xb6ef, 0x9, 0xb, 0xc4c, 0x0, 0x3, 0xf, 0x1, 0x240000, 0x3, 0x2b1, 0x5, 0x3922, 0x7ebe, 0x5, 0x6, 0x35bd, 0x65, 0x10, 0x10001, 0x7ff, 0x0, 0x3, 0x7fff, 0xf00a, 0x5f, 0x7, 0x7ff, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x200, 0x3, 0x7c8d, 0x8001, 0x92, 0x80000000, 0x9, 0xffff, 0x3, 0x10000, 0x4, 0x7c0, 0x3, 0x7fffffff, 0xff, 0x5, 0x6, 0x1, 0xe, 0x3, 0x3, 0x7, 0x0, 0xe6, 0x9, 0x8119, 0x4, 0x9, 0xcdb9, 0x0, 0xfffffff8, 0x3, 0x800, 0x7, 0x3, 0x9, 0x3, 0x7, 0x5, 0x0, 0xeb2, 0x0, 0x20, 0x3, 0x1, 0x4, 0x1, 0xc, 0x2, 0x8, 0x9, 0x6d2, 0x400, 0x1, 0x9, 0x3, 0x3, 0x5, 0xc4, 0x5, 0xe7, 0x7, 0x80000001, 0x7, 0x4, 0x66, 0x1, 0x344, 0x7ff, 0x37e54c3, 0x4, 0x800, 0x7, 0x94, 0x819d, 0x8, 0x8001, 0xf, 0x2f1, 0x14000, 0x9, 0xfff, 0x12, 0x3, 0xd108, 0x7, 0xd303, 0x5, 0x3, 0x1, 0x10000000, 0x2, 0x4, 0x80000000, 0x9, 0x2, 0x32, 0x8fb, 0x0, 0x0, 0x8, 0x4, 0x10000, 0x8, 0x10, 0x2, 0x1ff, 0x2, 0x1, 0x7, 0x7ad, 0x5, 0xffffffff, 0x780000, 0x9, 0x0, 0xfffffff7, 0x3ff, 0xe36, 0x2, 0x1, 0x0, 0x6130, 0xfff, 0xa78, 0x3, 0x0, 0x8001, 0x8, 0x200, 0xa, 0x3, 0x2, 0x66, 0x8, 0xb04, 0x0, 0x8, 0x7fff, 0x6, 0x8, 0x7, 0x3ff, 0x5, 0x7, 0xf604, 0x9, 0x9, 0x7ff, 0x7f, 0x5, 0x9, 0xa62, 0x0, 0x2, 0x10000, 0x8001, 0x100, 0x18, 0x10000, 0xfffffffa, 0x8, 0x7fff, 0x1c3, 0x80000001, 0x1, 0xfffff2bc, 0x0, 0x3, 0x1, 0x9, 0x7fffffff, 0x8001, 0x1c, 0x0, 0x6, 0x0, 0x2943, 0x9, 0xf, 0x8, 0xa81b, 0x1ff, 0x6, 0x8, 0x6, 0x80, 0x2, 0x9, 0x3, 0x7, 0x79, 0x8, 0xe2f2, 0x0, 0xe07, 0x8000, 0x0, 0x8, 0x0, 0x7fff, 0x10, 0x3, 0xf, 0x6c, 0x9, 0x0, 0x0, 0x400, 0x2, 0x2, 0x4, 0x6, 0x1, 0x4, 0xb5d0, 0x5ccf, 0x9, 0x0, 0x6, 0x2, 0x400, 0x7, 0xa, 0x1, 0x2, 0x7, 0x1, 0xd6a, 0x3ff, 0x5, 0x9, 0x8, 0x1, 0x1, 0x0, 0x1ff, 0xff, 0x3, 0x3, 0x5, 0x4, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0ee, 0x7, 0x2, 0x9, 0x9, 0xc, 0x8, 0x7fff, 0xc3, 0x3, 0x8, 0xbe, 0xce, 0x9, 0xf, 0x5, 0x7, 0x800, 0x3, 0x5, 0xa5c88682, 0x3, 0x1, 0x5, 0x7, 0x4, 0x1, 0x2, 0xcc, 0x400, 0x6, 0xe, 0x0, 0xfffffffc, 0x2c, 0x1, 0x400, 0xfffffff7, 0x400, 0x6b, 0x2, 0x3, 0x8, 0x4, 0x1000, 0x7, 0x7ff, 0x8, 0xfffffff9, 0x5, 0x3, 0xd0, 0x9, 0xc, 0x3, 0x4ff2, 0x4, 0xe, 0x1ff, 0x15, 0x101, 0x1, 0x8, 0x40, 0x7, 0x3ff, 0x3, 0x2, 0x4, 0x0, 0x800, 0xfffffffb, 0x8, 0x0, 0x0, 0x7fff, 0x5, 0x9, 0x9, 0x4, 0xb0000000, 0x1, 0x8, 0x3, 0x40, 0x5, 0x1, 0xbd, 0x6, 0x40, 0x7, 0x7, 0x6, 0x7, 0xd3, 0x8000, 0x8, 0x5, 0x9, 0x5, 0x7fff, 0xc, 0x4, 0xcc54, 0x0, 0x2, 0x1ff, 0x6, 0xff, 0x1ff, 0xffffffff, 0xfffff801, 0xfff, 0xe, 0x53afc1b2, 0x9, 0x73, 0x0, 0x0, 0x6, 0x20000, 0x6, 0x401, 0x6, 0x0, 0x9, 0x200, 0x7, 0x81, 0x240000, 0x80000001, 0x5, 0x10, 0x2, 0x9, 0x9, 0xd, 0x6, 0x8, 0x7ff, 0x4a65, 0xffff, 0x4, 0x168, 0x1, 0x2, 0x5, 0x4, 0x1f, 0x81, 0x2, 0x27, 0x8, 0x2a6e, 0x800, 0xffffc586, 0x6c, 0x9, 0x8, 0x1a2d, 0x9, 0x101, 0xfffffff8, 0x7fff, 0x1, 0x2, 0x4, 0x2, 0x2f14, 0x101, 0x1, 0xff, 0x8f23, 0x0, 0x0, 0x4, 0x0, 0x6, 0x9, 0x400, 0x401, 0x1, 0x3, 0x6, 0x1000, 0x8, 0x8000, 0x87, 0x4, 0x1, 0x101, 0x9, 0x5, 0x3, 0x6, 0xfffffff9, 0x8, 0x2, 0x8000, 0xff, 0x3612, 0x3, 0x0, 0x10001, 0x0, 0x100, 0x0, 0x4, 0xffffc825, 0xe87, 0x5, 0x7fffffff, 0x7fff, 0x3, 0x30000, 0x800, 0x2, 0x7ff, 0x0, 0xe0d0260, 0xffffff4f, 0xfffffffe, 0x3, 0x5, 0x3ff, 0x71a94307, 0x2], 0x4, 0x7})

2.018443119s ago: executing program 4 (id=1635):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)='\b', 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x8002)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x1, 0x0, &(0x7f0000000000)='c', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)=ANY=[@ANYBLOB="4000000001040108000000000000000000000001080083ea5423000105000100010000000800034000002fdb08000440f50000030a00020000000fff01000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1.135529414s ago: executing program 0 (id=1637):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "7acc6338a90000b0"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00\b\x00\xff\x00\x00'}, {0x20, 'd\x1c&*)*'}, {0x20, '\x00\x00'}, {}, {0x20, '\x00'}, {}]}, 0x20)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r6, 0x0, 0x0, 0x0)

1.065932683s ago: executing program 3 (id=1638):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x15, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xffff7fff, 0x66, &(0x7f0000000140)=""/102, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x2, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000280)=[{0x1, 0x5, 0x10}, {0x2, 0x3, 0x2, 0x5}, {0x2, 0x1, 0xc, 0x6}, {0x0, 0x5, 0x2, 0xc}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0)
ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00001727c0)=[{0xe000003, 0x0, 0x0, 0x8, 0x5}]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={0x0})
clock_getres(0x8, 0x0)

970.448664ms ago: executing program 4 (id=1639):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x4, 0x2, 0x2000000, 0x20, 0x20, 0x1, 0x2000000, &(0x7f0000000600)=[0x7], 0x1, 0x0})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff8, 0xfffffffff7ffffff, 0x8a, 0x9, 0x4, 0x9, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0x5})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x29, 0x3, 0x3a)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f00000012c0)=ANY=[], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a0afe582730000000000900030073797a310000000050000000060a010400000000000000000100000308000b400000000028000480240001800b0001007470726f7879000014000280080003400000001108000140000000000900010073797a300000000014000000110001000000000000000000"], 0xc4}}, 0x0)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000800)=0x5f5e0f7, 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x403, 0x0)
unshare(0x20040600)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x1, 0x6, 0x0, 0xffffffff}, 0xc)
recvmmsg(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a00)=""/227, 0xe3}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/168, 0xa8}, {&(0x7f0000003c40)=""/105, 0x69}], 0x6}, 0x6}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "d6d3cb7f6624b779bab337944ee514178c0ec787e903d0b2535d078d724bc00bf81ec36670e215557d61468e9c9f264ae7ddd4f919172e041f3c160ec9f3f9ab3f3035e9b371be34cdfc99bcb9957ebcd7f8d303aace76484680ee8b0a48b0f2a9375da52e4f177c88854f53b2bc3955c16c2c0f4034d208c519eedee232629775f167f26ed715187e5db088bf67de1c959cf730fb7227f4e470832759e724e8f65a96eae1a7656a43a9ea08da88817d151281541f998fb800e58654482c396604b0504d29413479017cfa549e06827c1a5f4b4bf62e8ccb46da3051f7d9ae54"}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x160, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x108, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x190, 0xb, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x168, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4f0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000880)

898.374376ms ago: executing program 0 (id=1640):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x94, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x58, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000030d0a010300000000000000000500009f0400020073797a31000000000900010073797a310000000006ce9ff7bb13bff291d550df428e358b6f8880d923f0cb9229002c3f873639293887b4617a5b20a0bd7959ecf25d81dfc70232d892b5860ced3841c71018596a48f67ff0f1a940bc1db1e3c17a4c042e487c422c049b067af35fbfd4fd062256c40460a2f1b37f9b7cc70390f3cb74583cffca562828ed79be67b5621b78f61862acaaf089795c37a581ebcf7358768fc969f23fe1bfab68f97f38525cdab97482e0403349c382578fcb841bfd5f9941869eee422c5c55f334b91cb51939c89d0e88e57c75acbb56d06378f9ee17a496769553a49c2f00ccfb9700"/277], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x0)
r2 = mq_open(&(0x7f0000000040)='rmdF\x17\x01\x00\x00\x00\x00\x00\x00\x00\xe7\xef6n\xf5\xfa\xcc\xe0lU)56\x00\x00\x19\f\xed\v\xb6$\x8duN\x86\xf6y\xe6\xbec', 0x6e93ebbbcc0884f2, 0x74, 0x0)
mq_notify(r2, &(0x7f0000000200)={0x0, 0x32, 0x0, @thr={0x0, 0x0}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c)
listen(r7, 0x6)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4)
sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r7, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00242dbd7000fddbdf25591543e879aea3c4c300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x44000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mq_notify(r2, &(0x7f0000000140)={0x0, 0x3e})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

725.943775ms ago: executing program 0 (id=1641):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400"], 0x0)
syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x0, 0x824ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
io_setup(0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010105, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0)

532.861366ms ago: executing program 0 (id=1642):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0x4159, &(0x7f0000000180)={0x0, 0xac26, 0x10000, 0x1, 0x8002b0}, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f00000010c0)={r4, r3, r2}, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

293.98125ms ago: executing program 0 (id=1643):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_setup(0x4159, &(0x7f0000000180)={0x0, 0xac26, 0x10000, 0x1, 0x8002b0}, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2002004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x20003}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

172.963333ms ago: executing program 0 (id=1644):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x3, 0x80)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000140)=0x5eae)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
close_range(r1, r1, 0x2)
ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4002000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f00000049c0)={0x6000004, 0x11ab, &(0x7f0000000300)=[0x10, 0x5, 0x5, 0xfffffff2, 0x3, 0x9, 0x2, 0x800, 0x900, 0x1b, 0x2, 0x10, 0x5, 0xfffffffe, 0x80000001, 0x7, 0x1, 0x0, 0x2, 0xa, 0x4, 0x5, 0x22, 0x1, 0x1, 0xffff, 0x6, 0x6, 0x81, 0xe6, 0x2, 0x80000000, 0x6249, 0xfa, 0x573b, 0x7ff, 0x1, 0xffffffff, 0x3c5, 0x3, 0x1ff, 0x3, 0xd, 0x5eba, 0x200, 0xa4, 0x2, 0x2, 0xffff, 0x7, 0x8, 0x7, 0x4, 0x8, 0x8, 0x800, 0x4, 0x7, 0x200, 0x6, 0x7c9b, 0x80, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0xc, 0x7, 0xb0, 0x1, 0x101, 0x10, 0x800, 0xd, 0x1, 0xf, 0x9a, 0x10000, 0x10000, 0x6, 0x7, 0x101, 0x2, 0x1, 0x0, 0xa83, 0x8, 0x4, 0x7, 0x2, 0x2582, 0x5, 0x1c, 0x0, 0xfffffff8, 0x2, 0x3, 0x8, 0x1, 0x3, 0x3ff, 0x1, 0x8000, 0x80000001, 0x3, 0x7, 0x9187, 0x2, 0x4, 0x9, 0xff, 0x8, 0x29, 0xe, 0xc000000, 0x2, 0x1, 0x3, 0x3, 0x5, 0xfffffffc, 0x47bc, 0x3, 0x8, 0x70, 0x5, 0x3, 0x2, 0xe000000, 0x7, 0x4, 0x5, 0x2, 0x1, 0x6e, 0x6, 0x43, 0x5, 0xa1, 0x5489, 0x1, 0x1, 0x883c, 0x5, 0x0, 0x29c, 0x3, 0x7, 0x7fff, 0x1, 0x61da, 0xff, 0x6, 0x8, 0xd6, 0x9a8, 0x5e17, 0x8001, 0x4, 0xfffffffe, 0x7f, 0x7, 0x7, 0xfffffffe, 0x81, 0x6, 0x1, 0x1, 0x6, 0x830, 0x3, 0x4, 0x634c4228, 0xacf, 0xe, 0x9, 0x2, 0xfffffff9, 0x1d3e2127, 0x9, 0x1, 0x2, 0x2, 0x3, 0x5, 0x140000, 0xb9, 0x176, 0x0, 0xfffffff9, 0xd540, 0x9, 0x6a0, 0x6, 0x7, 0xd2d9, 0x8, 0x9, 0xb, 0x5, 0x10001, 0x1, 0x5, 0x9, 0x1, 0x0, 0x96a2, 0x7, 0x1, 0x24, 0x0, 0x9, 0x7fff, 0x7fff, 0x2, 0x8, 0x2, 0x45, 0x4, 0xb7, 0x3, 0xbb8, 0x3, 0x9, 0x3, 0x5, 0x8, 0x2, 0x3, 0x4, 0x7, 0x1, 0x80, 0x8f, 0x3, 0x80000000, 0x5, 0x6, 0x4, 0x7, 0x200, 0x8, 0x3, 0x6, 0xfffffbff, 0xe394, 0x0, 0x1, 0x81, 0x288, 0xa943, 0x2, 0x800, 0x6, 0xffffffff, 0x8, 0x2, 0x6, 0x80000000, 0x3, 0x9, 0xbca, 0x8, 0x200, 0x9, 0x5a, 0x5, 0x5, 0x10, 0xc, 0x8, 0x8000, 0x5, 0x3, 0x3, 0x8001, 0x2, 0x2, 0x4, 0x6, 0x6, 0x9, 0x7, 0x0, 0x5, 0x80, 0x3, 0x2, 0x7, 0x5, 0x7, 0x3ff, 0x10000, 0x5, 0x3, 0x7ff, 0xfff, 0xfffff001, 0x7fffffff, 0xff, 0x8001, 0xe0, 0x8001, 0x1, 0xd86b, 0x1, 0x7, 0xb, 0xffff, 0x19, 0x4, 0x9, 0xe, 0x8, 0xfffffffc, 0x3, 0x8, 0x1ff, 0xffffffff, 0x9, 0x8, 0x9, 0x5, 0x414f15e1, 0x8, 0x6, 0x3c7, 0x0, 0x9, 0x3, 0x8, 0x4, 0xc, 0x3, 0xfffffffb, 0x11ceabd1, 0x400, 0xc525, 0x80dd, 0x6, 0xb, 0x1, 0xbe5, 0x5, 0x0, 0x3ff, 0x1, 0x1, 0x6, 0x7, 0x1, 0x8001, 0x800, 0x7, 0x5, 0x9, 0x4, 0x400, 0x6, 0xfffff254, 0x7f, 0x0, 0xfff, 0x0, 0x40, 0x2, 0x7fffffff, 0x2, 0x4, 0x40, 0x1, 0xb8ec, 0x2, 0x10, 0x1, 0x6, 0x2, 0x72, 0x1, 0x1ff, 0x200, 0x9, 0x3, 0x5, 0x9, 0x6, 0x40000, 0x3, 0x800, 0x7, 0x80000001, 0x1, 0x7, 0x81, 0x6, 0x4, 0x3, 0x2, 0x8001, 0x6, 0x2, 0x9, 0xfffffe00, 0x7, 0x7, 0x4, 0x0, 0x5, 0xff, 0x1ff, 0xad, 0xb7, 0x3, 0x8, 0x1c, 0x1ff, 0x3, 0x3, 0x1, 0x5, 0x7fffffff, 0x5, 0x7fff, 0x7f, 0x800, 0x9, 0x2, 0x80000001, 0x101, 0x6, 0xd, 0xa6, 0x8, 0xf14b, 0x5, 0x32, 0x7, 0xffff, 0x7d7b, 0x8000, 0x8, 0x5, 0x6, 0x4, 0x6, 0x10000, 0x0, 0xa, 0x8, 0x7, 0x1, 0x5969c877, 0x2b5, 0x0, 0x3, 0x14a718ae, 0x7, 0x6, 0x3, 0xffffff81, 0x7, 0x400, 0x0, 0x4, 0x0, 0x8, 0x9, 0x9, 0x9, 0x5, 0x0, 0xffffffff, 0x3, 0x1, 0x8d, 0x8, 0xffffff81, 0x2, 0x0, 0x8, 0x4, 0xfffffff7, 0x6, 0x4, 0x7, 0x7, 0xa6, 0x10000, 0x80000000, 0xfffffff2, 0x1, 0x5, 0xfffffffb, 0x0, 0x1, 0x5, 0x2, 0x211c, 0x1, 0x9229, 0x0, 0x8, 0x3, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x0, 0x4, 0x77f, 0x3, 0x1, 0x80, 0x6, 0x3, 0x3, 0x0, 0x2, 0xf, 0x5, 0x7, 0xfbc, 0xfffffffd, 0x6, 0x2, 0x5, 0x0, 0x8, 0x5, 0x2, 0xf04e, 0x2, 0x7ff, 0x79, 0x5, 0x9, 0x1000, 0x3, 0x10000, 0x6, 0xb, 0x37, 0x919, 0x5, 0x8000, 0x8, 0x2, 0x401, 0xf1, 0x4, 0xffff670b, 0xc4, 0x4b8, 0x80000000, 0x6, 0x4, 0x7ff, 0x2, 0x2, 0x0, 0x5, 0x7b6e, 0x7fffffff, 0x3, 0x14, 0x8, 0x7, 0x2, 0x8, 0x9, 0x5, 0x943d, 0x9, 0x0, 0x9, 0xfffff801, 0x520, 0x800, 0xffffffc0, 0x2700, 0x20b, 0x7, 0x759b, 0x4d, 0x872d, 0x6, 0x6, 0x100, 0x8001, 0x1, 0x0, 0x7a, 0x2, 0x88, 0x9, 0x8, 0xb, 0x7, 0x1, 0x8000, 0x8, 0xd21, 0xd4, 0x0, 0x3, 0x9, 0x5, 0x2, 0xf, 0x71, 0x9, 0x9, 0x8, 0x7, 0x101, 0x65, 0x3ff, 0x80000001, 0x6, 0x9, 0xfffffffd, 0x81e1, 0x8, 0xf, 0x1800, 0x3, 0x6, 0x1, 0x2, 0x3, 0xfffffff4, 0x4, 0xc, 0xff, 0x10, 0xe1d, 0x2, 0x17b, 0x10001, 0x9, 0x4e53, 0x4, 0x7f, 0x2, 0x7, 0x8, 0xe43, 0xd, 0x34, 0x1, 0x6, 0x1, 0x80, 0x27, 0xfffffff8, 0x1000, 0x3, 0x24, 0x40, 0x3, 0x7, 0xfa70, 0x297, 0xf7d, 0x9, 0x6, 0x0, 0x200, 0x7, 0x1, 0xa, 0x5, 0x5, 0x0, 0x2, 0x509c, 0x6, 0x5, 0x5bb3, 0x80, 0x9ae5, 0xfffffffa, 0x10001, 0x7, 0x6, 0x9, 0x5, 0x8000, 0xffff4322, 0x1b4, 0x7, 0x1000, 0x0, 0x2, 0x8, 0x6, 0x8, 0x945473a, 0x0, 0x4, 0x88c, 0x28, 0x6, 0x4, 0x1, 0x9, 0x8, 0x5, 0xa, 0xffffffff, 0x80000000, 0xffffff7f, 0x80000001, 0x1, 0x3cc, 0x4d, 0x4, 0x6, 0x5, 0x8, 0x6, 0x9, 0x7, 0x76, 0xe2c7, 0x7fffffff, 0x4, 0x72361e8d, 0x7fffffff, 0x8b12278a, 0x8, 0x9, 0x0, 0x7, 0x16ac, 0xd827, 0x9, 0xff, 0x80000001, 0x6, 0x2, 0x7ee, 0xffffffff, 0x2, 0x0, 0x2, 0x10, 0x4, 0x4d, 0x0, 0x8000, 0x6, 0x0, 0x10001, 0x8, 0x9, 0xfffffc00, 0x7, 0x2, 0x0, 0xd, 0x22ea, 0xfffffffa, 0x5, 0x6, 0x5, 0x8, 0x1, 0x0, 0x3, 0x1, 0x1, 0x9, 0x30, 0x4, 0x10001, 0x6, 0x101, 0x200, 0x7, 0x3, 0x9, 0x40, 0x1, 0x6, 0x3, 0x615b, 0xfffffff9, 0x100, 0x464, 0x8, 0x5, 0x91e9, 0x100, 0x8, 0x9, 0x226, 0x7, 0xe, 0x3, 0x81, 0xfffffffa, 0x7, 0x5, 0x1, 0x80000001, 0x10, 0x401, 0x8, 0x90000000, 0xa, 0x7, 0x7, 0x5, 0x159, 0xe, 0xe, 0x7, 0x2, 0x7, 0x9, 0xe17, 0x6, 0x0, 0xac7, 0xffffffff, 0x2, 0x2, 0x9, 0x1, 0x8, 0xff, 0x9, 0x4, 0xfff, 0xfffffff9, 0xfffff801, 0x81, 0x0, 0x7, 0x7, 0x5, 0xf5, 0x3, 0x3, 0x1, 0x4, 0x10001, 0x0, 0x9, 0x4, 0xfffffff8, 0x1, 0x4, 0xd0, 0x0, 0x5, 0x3f, 0x1, 0xd4f, 0xffffffc2, 0x2, 0xfffffffd, 0x1, 0x0, 0x75, 0x8, 0x5, 0x3, 0xf, 0x4, 0x2, 0x7a, 0x800000, 0x401, 0x3, 0x1, 0xf, 0x0, 0x8, 0x3, 0x6, 0x3, 0x0, 0x1, 0x3, 0x0, 0x1, 0x4, 0x9, 0x2, 0x7fff, 0x7, 0x8, 0x2, 0x7ff, 0x4, 0x1, 0xfffffffb, 0x2, 0x2, 0x1, 0x5, 0x9, 0x8422, 0x71, 0x3, 0x1ff, 0xaac, 0x7f, 0x8000, 0x9, 0xd5, 0x4, 0x401, 0xa4a80000, 0x81, 0x4, 0x8, 0x70e2, 0x101, 0x3, 0x67cd, 0x4, 0x7, 0x746, 0x3, 0xfffffc72, 0x7, 0x2, 0x10001, 0x9, 0xca06, 0x40, 0x40, 0x3, 0x0, 0x1, 0x10, 0x7ff, 0xa, 0x20000000, 0x9, 0x3, 0x80, 0xd05c, 0xe02, 0x10000, 0x4d, 0x1, 0x78147aa8, 0xe0e3, 0x25130acb, 0x8, 0xfffffffb, 0x0, 0x3, 0xf4ec, 0x80, 0x6, 0x6e, 0xfffffff7, 0x8, 0x9, 0x9, 0x3, 0x1, 0x6, 0x1, 0x4c0, 0x7ff, 0x8000, 0x9, 0x29f, 0x77, 0x8, 0x4, 0xa06d5352, 0x0, 0x3c00000, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffe, 0x8001, 0x80000000, 0xac, 0xf90eaae, 0x100, 0x81, 0x0, 0xfffffffe, 0x7, 0x5, 0x213, 0xffff, 0x65, 0x80000000, 0x3, 0x5bc, 0xffffffff, 0x5, 0x5, 0x10, 0x3ff, 0xe930, 0x10000, 0xffffffff, 0x3, 0x1, 0x80, 0x101, 0xb556, 0xfff, 0x9, 0x8000, 0x4, 0x3, 0x3, 0xa8, 0xfffffffc, 0x0, 0x7ff, 0x7, 0xb33, 0x6, 0xd2, 0x2, 0x1, 0x800, 0xfff, 0x2, 0xffff, 0x81, 0x0, 0xf, 0x1, 0x4, 0x0, 0x0, 0x1, 0x4f, 0x80000000, 0x0, 0x80, 0x1, 0x3, 0x0, 0xfffffffe, 0x5, 0x9, 0x7, 0x4, 0xfffff37d, 0x1dd, 0x5, 0x4, 0x3, 0x7ff, 0x5, 0x957, 0x3, 0x43f9, 0x1, 0x7, 0x8000, 0xac2, 0x0, 0x0, 0x7, 0x800, 0x6, 0x101, 0xffffff6d, 0x0, 0x3, 0x6, 0xfffffe00, 0x5, 0xb32, 0x1000, 0x3ff, 0x4, 0x6dfb, 0x0, 0x100, 0x3ff, 0x4, 0x6, 0x9, 0x62, 0x9, 0x5, 0x5, 0x1, 0x99, 0x8, 0x10001, 0x5, 0xc, 0x3, 0xc984, 0x81, 0x80000001, 0xfc2, 0x8, 0x7f, 0x7, 0x1, 0x8001, 0x7, 0x6, 0x80000001, 0x2, 0x8, 0x1, 0x1000, 0x6, 0x66fa3a21, 0xd, 0xee, 0x935, 0x1, 0x8, 0x800, 0x2, 0xd, 0x5, 0x1, 0x1, 0x100, 0x1, 0xb44, 0x5, 0x1000, 0x9, 0xff, 0x8, 0x9cd, 0x14, 0xef, 0x5, 0x7, 0x6, 0x1c32, 0x80000001, 0xffffffff, 0x5, 0x124, 0x3, 0x8, 0x800, 0xffffffff, 0x9, 0x4, 0x7, 0xfffffff7, 0x1, 0x6, 0x4cf, 0x7ff, 0x2, 0xd15, 0x5, 0x8001, 0xab0, 0x0, 0x1000, 0x2, 0x8, 0xa7, 0xc380, 0xed6d, 0x7e2e, 0xfffffff8, 0x80000001, 0xfffffc01, 0x4, 0x4, 0x4, 0x8, 0x0, 0x5, 0x3, 0x1, 0x1, 0x0, 0x3b, 0xfffffff7, 0x1, 0x3, 0x10001, 0x8, 0x6, 0x9, 0x8, 0x2, 0x9, 0x1ff, 0x100, 0x47e8, 0x3, 0x200, 0x4, 0x9, 0x5, 0x423, 0x5, 0x800, 0x4, 0x0, 0xfffffff2, 0x3, 0x8, 0xdd, 0x5, 0x9, 0x530, 0x5, 0xffffffff, 0x7, 0x7fff, 0x1, 0x0, 0x4, 0x9, 0x8, 0xa, 0x0, 0x1a, 0x2, 0x0, 0xc6d, 0x0, 0x5, 0x5, 0xc, 0x4, 0x9f, 0x3, 0x10, 0x96b, 0x0, 0x708, 0x7f, 0x2, 0xffffffff, 0x4eb, 0x1, 0xfffffffd, 0x2, 0x4, 0x83a, 0xff, 0x7, 0x0, 0x8, 0x1ff, 0xa, 0x80000000, 0x8, 0x4, 0x8, 0x100, 0x101, 0x3c2, 0xf, 0x9, 0x0, 0x2, 0x4, 0x8, 0x8001, 0x3, 0xc, 0x0, 0x7, 0xd5c6, 0x8, 0x3, 0x3, 0x5, 0xb, 0x1, 0x4800000, 0x6, 0x6, 0x1, 0xe, 0x1, 0x6, 0xa849, 0xfffffff9, 0x1, 0x5, 0x6173, 0x9, 0xe, 0x9, 0x4, 0x2, 0x9, 0x0, 0x0, 0x3, 0x9, 0x5, 0x6, 0x875, 0x6, 0x8e0, 0x4, 0x6, 0x5, 0x508, 0x101, 0x2, 0x40, 0x6, 0x5, 0x9, 0x7, 0x1000, 0x7, 0xa9, 0x8, 0xd154, 0x7, 0xc, 0x1, 0xff, 0x9, 0xfffffffe, 0x6f1f, 0x7f, 0x0, 0x1, 0x7, 0x7, 0x7, 0x101, 0x9, 0x37e, 0xf, 0x7, 0x1, 0xb2, 0x7, 0x9, 0x7fffffff, 0x6, 0x7, 0xf, 0x0, 0x2, 0x9, 0x4, 0x3, 0x2, 0x8, 0x7fff, 0x8001, 0x2, 0x80000001, 0x3, 0xfffffff6, 0x6, 0x81, 0x1, 0x8001, 0x8, 0x10001, 0x8, 0x4, 0x80000000, 0x2, 0x6, 0x200, 0xf, 0xe4a5, 0x9, 0xe50, 0x1000, 0x800, 0x3, 0x5, 0x1, 0xc, 0x6, 0x101, 0xf7, 0x0, 0x9, 0x8000, 0x6, 0x9, 0x7fffffff, 0x6, 0x5, 0xfff, 0x8, 0x59ea, 0x7, 0x0, 0x8, 0x5, 0x7, 0x7, 0x7, 0x0, 0x0, 0x6, 0x60b92167, 0x9a, 0x3e29557b, 0x1000, 0x0, 0xd, 0x615, 0x57e6, 0x8001, 0x9, 0x4, 0x8, 0x3, 0xa, 0xff, 0x7, 0xab67, 0x3, 0x40000, 0x6, 0x1, 0x9, 0x0, 0x6, 0xfffffffd, 0x4, 0x400, 0x0, 0xa, 0x80, 0x7, 0x0, 0x4, 0xc, 0x6, 0x81, 0x5, 0xffff8000, 0x78, 0x8000, 0x2, 0x4, 0x512e, 0x9, 0x3, 0xffffffff, 0x10001, 0x10001, 0x401, 0x9b58000, 0xfffffff8, 0xfffffffa, 0x8, 0x1, 0x22d, 0x12afd498, 0x4089, 0x3, 0x6, 0xc, 0x0, 0xfffffffe, 0xbe88, 0x7, 0x7e, 0x12, 0x80000001, 0x3ff, 0xb, 0xd3a, 0x3, 0xfffffffe, 0x4b413df4, 0x0, 0xfffe0000, 0x100, 0x80000001, 0x8, 0x800, 0x101, 0x5, 0x0, 0xc, 0x5, 0x1, 0x2, 0x1, 0x400, 0x1, 0x6, 0x4, 0x0, 0x800000, 0x8, 0x40, 0x4, 0x7fffffff, 0x4, 0x7fffffff, 0x0, 0xc40, 0x1ff, 0x9522, 0xddbe, 0x1, 0x7, 0x101, 0x3, 0x7, 0xc, 0xffff, 0x7f, 0x7, 0x5, 0x6, 0x4, 0xaee, 0xd5, 0x6, 0x4, 0x7ff, 0x10001, 0x8000, 0xa517, 0xfff, 0x3, 0x8, 0x9, 0x9, 0x3, 0x4873, 0xffffc71f, 0x3, 0x2, 0x6, 0x7, 0x8, 0xe, 0x81, 0xec, 0x7, 0x7, 0x2, 0x1, 0x2, 0x8, 0x80, 0x1, 0x8, 0x5, 0x0, 0x3, 0xfffffff9, 0x600, 0x0, 0x0, 0xc760cbd, 0x8, 0x1, 0x5, 0xfffffbff, 0xe, 0x4, 0x695a, 0x200, 0xf, 0x1, 0x6, 0x7, 0x9, 0x0, 0x1, 0x1b, 0x6, 0x5, 0x4, 0x24, 0x1, 0x9, 0x8e, 0x501, 0x1, 0x9, 0x2, 0x8, 0x9, 0x3, 0x8001, 0x8, 0x4, 0x7, 0x1, 0x0, 0x2, 0x9, 0x6, 0xf, 0x0, 0x4, 0xda, 0x227, 0x3, 0xd87, 0x3, 0x2, 0xe78e, 0x7, 0x1, 0x78ad4010, 0x7, 0x1495, 0xe, 0x2, 0x81, 0x800, 0xf1f, 0x6, 0x101, 0x9, 0x8, 0x7, 0x5, 0xfffffff6, 0x79, 0x4, 0x3, 0xffff60e8, 0xfffffff3, 0xc, 0xffff, 0x3, 0x3, 0x7f, 0xf990, 0xffffff9f, 0x10, 0x10, 0x73a, 0x4, 0x2, 0x80000001, 0x0, 0xffff9ae4, 0x2, 0x0, 0x12, 0x2, 0x2, 0x4, 0x100, 0x0, 0x5, 0x4, 0xed4c, 0x3, 0x8020, 0x400, 0x5, 0xffffff01, 0xffffffff, 0x1, 0x6d1, 0x10000, 0x8000, 0x2, 0x200, 0x7, 0x45f, 0x7, 0x3, 0x4, 0x0, 0xd, 0xb6, 0x36a8, 0xe30, 0xeaa6, 0xf1, 0x12000000, 0x400, 0x101, 0x8, 0x400, 0x6dc0, 0x40, 0x80, 0x0, 0xfffffff9, 0x100, 0x1ff, 0x3, 0x9, 0x273, 0x1, 0x3, 0x4, 0x7, 0x1, 0x8, 0x5, 0xffff0001, 0x6, 0x6, 0xfffffff9, 0x8, 0xfffffff4, 0x0, 0x2, 0x3, 0x10, 0x800, 0x9, 0x865b, 0x6, 0xfffffffd, 0x9, 0x1000, 0x9, 0x3, 0x3, 0x100, 0xa24, 0x8, 0xe9e, 0x3, 0x7fffffff, 0x2, 0x0, 0x1, 0x7, 0x9, 0x5, 0xffff, 0x6, 0xa, 0x0, 0x33, 0x10, 0x98, 0xffff, 0x5, 0x3ff, 0x65, 0x7fffffff, 0x3, 0x6, 0x20000000, 0x6, 0x8, 0x2, 0x1, 0x8e, 0x2, 0x5, 0x2f07, 0xc0, 0x40, 0x1, 0x2, 0xd0, 0x8, 0xf5c00000, 0xd, 0xffff, 0x6, 0x7ff, 0x6, 0x7b07, 0x64, 0xf06, 0x1, 0x6e, 0x7, 0x4, 0x6, 0x4, 0xfffffffd, 0x0, 0x5, 0x5, 0x3, 0x4, 0x5, 0x2, 0xffff, 0x5, 0xef000, 0x8, 0x9, 0x80, 0x2, 0x1ff, 0x7, 0x4, 0x7fff, 0x6, 0x1, 0x0, 0x20, 0x5f, 0x7fffffff, 0x3155, 0xad4de21, 0xe08, 0x0, 0x4, 0x2d488661, 0xb, 0xa98, 0x6, 0x0, 0x9, 0x7fffffff, 0x4, 0x65, 0x6fc, 0x7, 0x8, 0x8000000, 0x5, 0x1, 0xc8, 0x0, 0x2, 0xd, 0x2dc, 0xff, 0xfffffffc, 0x7, 0x90be, 0x8, 0x4, 0x3, 0x0, 0x7, 0xbd, 0x3, 0x5, 0x3, 0x0, 0xc0000000, 0xde61, 0x3, 0x5, 0x6154, 0x0, 0x9, 0x3, 0x7, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0x7, 0x5ee, 0x9, 0x5, 0x5, 0x3, 0x8, 0x6, 0x1, 0x80000001, 0x3ff, 0x6, 0x800, 0x6, 0x3692, 0xf84c, 0x10001, 0x10200000, 0x2, 0x1, 0x5, 0x6, 0x8, 0x20, 0x6, 0x7, 0x6, 0x859, 0x2, 0xfffffffb, 0x9, 0x0, 0xd96, 0x0, 0x8000, 0x2, 0x3, 0x1, 0x8, 0x4, 0x7, 0x9, 0x800, 0x4, 0x80, 0x1, 0x1, 0x9, 0x1db2fec2, 0x1, 0x8, 0x6, 0x619, 0x5, 0x1, 0x8, 0x6, 0x2b0, 0x5b7f, 0x401, 0xfff, 0x80000000, 0x2, 0x8, 0x5299, 0x7, 0x10000, 0x1, 0x1, 0x9, 0x6, 0x10001, 0x6200, 0x8, 0x4, 0x0, 0x9, 0x4, 0x1, 0x4, 0x4, 0x5, 0x7ff, 0x5, 0xde5f, 0x8, 0x10000, 0x5, 0x5, 0x3, 0x6, 0x6, 0x0, 0x0, 0x4, 0x40, 0x0, 0x74, 0x10001, 0x2, 0x9, 0x9, 0xfffffffd, 0xc, 0x0, 0x2, 0xff, 0x7fffffff, 0x8, 0x5, 0x5, 0x5bcc, 0x7ee3, 0x2, 0x59f, 0xd, 0x7, 0x3, 0x81, 0x7, 0x6, 0x4, 0x3, 0xc, 0x7, 0x9, 0x6, 0x3ff80, 0xa, 0x0, 0x7, 0x3, 0x0, 0x101, 0x0, 0x3, 0x1, 0x8000, 0x9, 0xfffffffb, 0xfffffffd, 0x8, 0x9d1a, 0xd, 0x1, 0x6, 0x8, 0xfffffffa, 0x1, 0xffffffff, 0x3, 0x2, 0x6, 0xffffff8a, 0x81, 0x3, 0x3, 0x3, 0x78b5, 0x6, 0x40, 0x83b, 0x5, 0x10000, 0x2, 0x6, 0x6, 0x2, 0x7, 0x0, 0xff, 0x1, 0x400, 0x7ff, 0xd, 0x6, 0x7f, 0x80000001, 0x9, 0xfffffffb, 0x1, 0x2, 0x8, 0x0, 0x0, 0x7, 0x4f8, 0x6, 0x3, 0x10000, 0x400, 0x400, 0xfff, 0x5, 0x1000, 0x2, 0xffffffff, 0x4, 0x0, 0x4, 0x4, 0x8000, 0x1, 0x6, 0x7fffffff, 0xffff, 0x9, 0x400, 0x10, 0x9, 0x8, 0x0, 0x3, 0xfff, 0xd, 0x1, 0x5, 0x3, 0x8, 0xd, 0x3, 0x2, 0xb, 0x0, 0x0, 0x2, 0xe3d, 0xf, 0xa02, 0x400, 0x7, 0x5, 0x5, 0x3c280bb8, 0xfffffff1, 0x1bd, 0xffffff81, 0xb800000, 0xe, 0xfff, 0x10, 0x8, 0xab7, 0x1000, 0x0, 0x81, 0x7, 0x80, 0x2, 0x3, 0x2, 0x1, 0x7799, 0x3, 0x7761, 0x3, 0x80000001, 0x1310, 0x4, 0x1, 0x1000, 0x3, 0xe, 0x10000, 0x5, 0x9, 0x9, 0x6, 0x1000, 0x4, 0x400, 0x1, 0x0, 0x1, 0xb, 0xc6, 0xb7, 0x2, 0xfffffffb, 0x4, 0x4, 0x2, 0x9, 0x2df, 0x3ff, 0xffffff01, 0x2, 0x1020, 0x0, 0x10000, 0x3, 0x3, 0x1, 0xff, 0x80000000, 0x9f6e, 0x6, 0x4, 0x9, 0x7, 0x10001, 0x9, 0x2, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1dc6, 0x8, 0x4000, 0x3, 0x4, 0x0, 0x8, 0x0, 0x101, 0x8000, 0x24, 0x5, 0x0, 0x7ed, 0xfffffff9, 0x10001, 0x9, 0xfffff76b, 0xb, 0x6, 0x9, 0xffff0001, 0x1, 0x203a9d04, 0x0, 0x80000001, 0x7687, 0x4, 0xc4, 0x6, 0x3, 0x5a97ac21, 0x3db5, 0xeb9, 0x0, 0x4, 0x4, 0x7, 0x4, 0x3, 0x7, 0x9, 0x1ff, 0x1, 0x800, 0x9, 0x8, 0xe3, 0xa, 0x7, 0xfffff1b9, 0x79cee667, 0x3ff, 0x958e, 0x6, 0x8, 0xff, 0x848, 0xc, 0x1, 0x7, 0x7, 0xc985, 0xffff8001, 0x6, 0x8, 0x5, 0x8, 0x3, 0xfffffff7, 0x1, 0xfffffffb, 0x7, 0x8, 0x12e453f7, 0x1, 0x0, 0x8, 0xffffffff, 0x7, 0x3, 0x4, 0x5, 0x7, 0x8, 0x4, 0x80000000, 0xfffffffa, 0xfffff960, 0xb, 0x2, 0x4, 0xfffffffc, 0x80000000, 0xad, 0x8, 0x7, 0xb9, 0xd, 0xf7, 0x0, 0x7, 0xe, 0x49ad, 0x5, 0x0, 0x2, 0x2, 0xea9, 0x0, 0x3, 0x8, 0xf0, 0x9, 0x9, 0x1, 0x60000, 0x4, 0x6, 0x5, 0x40, 0x40, 0x3, 0x40, 0x2, 0x81, 0x80000000, 0x8, 0x3, 0x9, 0x2, 0x3, 0x4, 0x80000001, 0x7, 0x7b, 0x7f, 0x401, 0x0, 0xe, 0x80000001, 0x7, 0x6, 0x8, 0x2, 0x5, 0x53c, 0x9, 0x1, 0x4, 0x6, 0xffff, 0x4, 0x3, 0x5, 0xfffffffc, 0x7fffffff, 0x5fe, 0xe58e, 0x7, 0x1, 0x2, 0x4, 0x8, 0x101, 0xf96, 0x5, 0xf, 0x6, 0xe5a, 0xf, 0xa70, 0x7, 0x9, 0x1, 0x1, 0x65, 0x7f, 0x9, 0x101, 0xffc00000, 0x9, 0x5, 0x7, 0xfffffff5, 0x10, 0x6, 0xffff, 0x0, 0x2, 0x3ff, 0x100, 0x2000000, 0x10000, 0x6, 0xd2, 0xfffffefb, 0x0, 0x6, 0x1, 0x8, 0x5c, 0xffffff67, 0x6, 0x47c0f793, 0xfff, 0x22, 0x101, 0x5, 0x8, 0x0, 0x81, 0xd, 0x6d2eff9c, 0xab, 0x4, 0x8, 0x4, 0x8, 0x10, 0x7, 0x2, 0xf, 0x7, 0x80000000, 0x1, 0x1ff, 0x80000001, 0x608, 0x3, 0x6, 0x1, 0x0, 0x2, 0x7f, 0x6, 0x101, 0x1, 0xa20c, 0x7, 0x2, 0xf400000, 0x6, 0x9, 0x1df, 0x7, 0x3, 0x8, 0xa, 0x63, 0x7, 0x4, 0x9, 0x1, 0x5, 0x1, 0x8, 0x6, 0x5a43, 0x7, 0x71c00000, 0x9, 0x4, 0xfffffff9, 0x8, 0x650c, 0xf, 0x6, 0x1000, 0x0, 0xb, 0x1, 0x80000000, 0x5, 0x9, 0x7, 0x2, 0xf500000, 0x777, 0xff, 0x8, 0x7, 0x9, 0x1000, 0x6, 0xf2, 0x5, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0x5, 0x7, 0x3, 0x0, 0xb, 0x10, 0x4, 0x7, 0x55, 0x8, 0x6, 0xd1, 0xffffffff, 0x401, 0x0, 0x5, 0x1, 0x0, 0x5ad0, 0x1000, 0xff, 0x8, 0x6, 0x2, 0xf5, 0x1, 0x9, 0x0, 0x4, 0x9, 0x7fff, 0x5, 0x5, 0x3, 0x7, 0x5c570000, 0x2, 0x8000, 0x4fde, 0x7, 0x80000000, 0xffffff01, 0x800, 0xffffffff, 0x400, 0x4486, 0x9, 0x8, 0x3, 0x9, 0x1, 0xb7, 0x1, 0x7, 0x1, 0x81, 0x2, 0x7, 0x5, 0xffff, 0x200, 0xffffffff, 0x800, 0x1, 0x7fff, 0x0, 0xfffffffe, 0x9, 0x6, 0x400, 0x0, 0xebf, 0x9, 0x1c6b, 0x7, 0xa, 0x6, 0x5, 0xc2, 0x4, 0x7, 0x2, 0x6, 0x2, 0x2, 0xfffffffd, 0x1, 0xffffffff, 0x8000, 0x4, 0x800, 0x4, 0x64, 0x7fffffff, 0x0, 0x1, 0x80000000, 0x1, 0x3c4c, 0x6, 0x6, 0x46e, 0x4b, 0x3, 0x4, 0x0, 0x7, 0x2, 0x8, 0x4c, 0x7, 0x2, 0x7f, 0x2, 0x400, 0x1, 0x6, 0x5, 0x4, 0x5, 0x0, 0x5, 0x7, 0x0, 0x27, 0xfd0, 0x1, 0x7ff, 0x1800000, 0x4, 0x3, 0x7, 0x44e9, 0x0, 0xa, 0x8000, 0x4, 0x0, 0xe220, 0x6, 0x1, 0x400, 0x2e, 0x3, 0x9, 0x80000001, 0x8, 0x3, 0x2, 0x8, 0x5, 0x1, 0x8, 0xf, 0x23, 0x6, 0x4, 0x6, 0x5, 0xc, 0x2, 0x3, 0x2, 0x9, 0x8, 0xffff8000, 0xb83, 0xff, 0x4, 0x6, 0x3831, 0x7, 0x4, 0x2, 0x7ff, 0xfffffff3, 0xffffff67, 0x10000, 0x0, 0x80, 0xfffffffe, 0xfffffff7, 0xaf6b, 0x5, 0x5, 0x7, 0x4, 0x3, 0x100, 0x7, 0x7, 0x3, 0x9, 0x7, 0xff, 0x2, 0x10ea, 0x4, 0x800, 0x1, 0x4ae, 0x9, 0x80000001, 0xfffffffc, 0x2, 0x7, 0xed5, 0x599, 0x2c28, 0x6, 0x8, 0x400, 0x9, 0x4, 0xe17, 0x4, 0x5, 0x2, 0x401, 0x1000, 0x1ce, 0x7fff, 0x2, 0x2, 0x5, 0x7fffffff, 0x4, 0x4, 0xb, 0xe, 0x5, 0x4, 0x401, 0x8, 0x6, 0x8, 0x5, 0xe61, 0x75f, 0x2c1c, 0x4, 0x817, 0x6e, 0x5, 0x457, 0x7, 0x8000, 0x8001, 0x1e6, 0x400, 0x8, 0x7, 0x9, 0xffff8e24, 0xffff, 0x0, 0x0, 0x0, 0xfffffc01, 0x6, 0xff, 0x81, 0x0, 0x6, 0xffff, 0x8, 0x4, 0xffffffff, 0x1, 0x8bd, 0x10, 0x1, 0x0, 0x1, 0x6, 0x7, 0x7fffffff, 0xfa4, 0x1, 0x1, 0x3, 0x0, 0xfda, 0x4000000, 0x8, 0x0, 0xfffffffc, 0x10, 0x9, 0xfffff000, 0x3, 0x4, 0x6d65b580, 0x0, 0x40, 0x4, 0x8000, 0x8, 0x800, 0x8, 0x6, 0x6, 0x80000000, 0x3, 0x8, 0x1, 0x7fff, 0x1000, 0x8, 0x8, 0x67cf, 0x10001, 0x800, 0xa802, 0x3, 0x0, 0x5, 0x8, 0x2, 0x1, 0x8001, 0x83, 0x0, 0x2, 0x6, 0xfff, 0x2, 0x51ad, 0x0, 0x6, 0x33e, 0x1a3e, 0x8, 0xe, 0xfffffc01, 0xb300000, 0x4, 0x5, 0x5, 0x5, 0x7, 0x9, 0x7, 0xfffffff9, 0x2, 0xee4e, 0x3, 0x101, 0x8, 0x3, 0x4, 0xb, 0xa, 0x0, 0x9, 0x6, 0x8000, 0x5, 0xb8, 0x218, 0x5, 0x8, 0xf35, 0x1, 0x8, 0x9, 0xfae, 0x7fff, 0x4, 0x1, 0x6e3c, 0x6, 0x8000, 0x1000, 0x6, 0x2, 0x8, 0x3, 0x6, 0x488b, 0x0, 0x0, 0xd, 0x1000, 0x3, 0x3, 0x2, 0x4, 0xe, 0x7ff, 0x2, 0x3, 0xe1, 0x4, 0x100, 0x4, 0xffff, 0x4, 0x0, 0x5, 0xffff8001, 0xffffffff, 0x0, 0x3, 0x9, 0x7, 0x1, 0x4, 0x8, 0x6, 0x9, 0x5a03, 0x1, 0xfffffff9, 0x0, 0x5, 0x3, 0x4, 0x4, 0x7, 0x3, 0x5, 0x1, 0x1, 0x5, 0x4, 0xa1f, 0x85a4, 0x3, 0xfff, 0x20c6, 0x3, 0x4eb, 0xffffffff, 0x7, 0x8, 0x5, 0x67, 0x9, 0x658, 0x40, 0x10000, 0x7, 0x7, 0x359800, 0x4, 0x2, 0x9, 0x3, 0xf2b6, 0x7, 0x5, 0x2, 0x9, 0x8e, 0x10, 0x6, 0x0, 0x4, 0x8001, 0x5, 0x5, 0x7fff, 0x80000001, 0x0, 0x7, 0x6, 0xecd3, 0x3, 0xc1, 0x1, 0x52, 0xa36, 0x6, 0xbfb, 0x2cb, 0x0, 0x4, 0x1, 0x0, 0x10000, 0x6, 0x7, 0x0, 0x0, 0x7fffffff, 0x81, 0x2aac6cc, 0x2, 0xe, 0x40ab, 0x401, 0x7, 0x9, 0x0, 0x8, 0x94, 0x0, 0x5, 0x2, 0x5, 0xac3, 0x6, 0x1c8f, 0x9, 0x4, 0xd, 0x4, 0x5, 0x7, 0xff, 0x0, 0x1, 0x3, 0x5, 0x76, 0x93, 0x6, 0xf, 0x10000, 0x3, 0x81, 0xffffffff, 0x0, 0x7ff, 0x4, 0x8, 0x3, 0x1, 0x3, 0x10001, 0x0, 0xed000000, 0x7, 0x401, 0xb2, 0xa, 0x25, 0x0, 0x3, 0x2, 0x3, 0xe41c, 0xb, 0x6, 0xe3da, 0xffff0000, 0x2, 0x1, 0x1, 0x8, 0x1, 0x75e, 0x3ff, 0x6f8, 0xf, 0x5, 0x401, 0x2, 0x5, 0x6, 0x0, 0x80000000, 0x1, 0x7, 0x2, 0x9, 0x0, 0x1000, 0x3, 0x8, 0x6, 0x5, 0x800, 0x6, 0x3, 0x6, 0x2, 0x879, 0x2, 0x800, 0x4, 0x76, 0x8, 0x1, 0x7, 0x2, 0x3, 0x7fff, 0x7f06bc93, 0x2, 0x0, 0x0, 0x9, 0x0, 0xf5b, 0x1, 0x4, 0xe, 0x7, 0x7, 0xf23, 0x45a0, 0x7fffffff, 0x0, 0x1f, 0x8, 0x7, 0x3, 0x0, 0x55, 0x3, 0x4, 0x9, 0xad0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x7, 0xc4, 0x2, 0x401, 0xc, 0xffffffff, 0x1, 0x6, 0x4, 0x100, 0x9, 0x1b, 0x401, 0xd0, 0x82, 0x5, 0xf00000, 0x7fff, 0x7, 0xa23, 0x80000000, 0xfff, 0x3f8, 0x9, 0xd8, 0x9, 0x6, 0xd, 0x45, 0xfffffffd, 0x1, 0x0, 0x5, 0xf6d, 0x0, 0x40, 0x5, 0x4, 0x9, 0xfffffffe, 0x4c6, 0x2, 0x7, 0x3, 0x40, 0x90, 0x9, 0xc3e, 0x9, 0x4, 0x10000, 0x3, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x2165, 0xffffffff, 0x4, 0xfffffffe, 0x4, 0xfffffff8, 0x6, 0x1, 0x1, 0xe, 0x8, 0x5, 0x5, 0x3, 0x5, 0xffffff01, 0xc629, 0x33c00000, 0xffff, 0xfffffff7, 0xcd1, 0x7fff, 0x2, 0xa97a, 0x8bbf, 0x1, 0x7f, 0x40, 0x5, 0x8, 0x1, 0x6, 0x4, 0x9, 0x1f2, 0x7fff, 0x7, 0x8, 0x1, 0x1, 0x9, 0x8d7, 0xae3d, 0x6942, 0x1000, 0xffffffff, 0x1, 0xfffff800, 0x7e6e, 0x8a9a569, 0x3ff, 0x10001, 0x7f, 0x5, 0xe90, 0x401, 0x0, 0x5, 0x2, 0x0, 0x8, 0x8, 0x86a, 0x1, 0x0, 0x6, 0x5861, 0x1, 0x3ed0ad44, 0xffffffda, 0x2, 0x5, 0x1, 0x1, 0x4, 0x7, 0x2, 0x5, 0x8, 0x5, 0xffff, 0x10001, 0x8, 0x1, 0x3, 0x8, 0xffff, 0x8, 0x401, 0x1, 0x9, 0xfff, 0x4, 0x8, 0x9, 0x9, 0x8, 0x8, 0xb, 0x2, 0x7f, 0xa, 0x1, 0x4, 0x8, 0x3, 0x7, 0x4, 0xd, 0x2, 0xff, 0x88, 0x7ff, 0x7f, 0x81, 0x7, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x4, 0x80000000, 0x2, 0x2, 0x5, 0x6, 0x0, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x80, 0x7fffffff, 0x0, 0xf25, 0x43b6, 0x1, 0x8, 0x8f, 0xe, 0x2, 0x6, 0x1, 0x401, 0x1, 0x7, 0x8, 0x401, 0x1000, 0x8, 0x37, 0xaf, 0xff, 0x6, 0x9, 0x2, 0x2, 0x4, 0x0, 0x80000000, 0x6, 0x8000, 0xeb, 0x3, 0x9, 0x7, 0x7, 0x8, 0xffff3a2c, 0x8, 0x80000000, 0x200, 0x1, 0xc2b, 0xb541, 0x2802, 0x4, 0x7a6625c1, 0xe0, 0xfffffffd, 0x0, 0xfffffffe, 0xa4d, 0x9, 0x9, 0x3, 0x8, 0x6, 0x7, 0xb55a, 0x7, 0xfffffffa, 0x74, 0x80000000, 0xfc5, 0x8000, 0x3, 0x24, 0x7, 0x8, 0x1, 0xf80000, 0x5, 0x2, 0x1000, 0x0, 0x6, 0x240, 0x7f, 0x7, 0x5, 0x2, 0x80000000, 0x5, 0x5, 0x1, 0xfffffffa, 0x8, 0x100, 0x6, 0x3, 0x2, 0xf, 0x7, 0x2, 0xe, 0x44ce, 0x80, 0x1ff, 0x4, 0x8, 0x1, 0xc, 0xe8e3, 0x4800000, 0x4, 0xe, 0xfb6, 0x9, 0x400, 0xea28, 0xffff16b5, 0x800, 0x41, 0x7, 0xa17, 0x8e7, 0xce2, 0x3, 0xff, 0x7, 0x1, 0x3, 0x9, 0x1, 0xffffff01, 0x8, 0x0, 0x3, 0x100, 0x8000, 0x7f, 0xee, 0x8000, 0x2, 0x80000000, 0x5, 0xfffffff5, 0x4, 0x4, 0xffffffc0, 0x6, 0x5, 0x2, 0x2, 0x9, 0x10000, 0xd828, 0x8000000, 0x3d9, 0x0, 0x52, 0x6, 0x3, 0xfffffff7, 0x10001, 0x8, 0x3, 0x8, 0xf15, 0x7, 0x3, 0x0, 0x3, 0xb, 0x8001, 0x7, 0x4, 0x8, 0x9, 0x3b, 0xf, 0x7c, 0x9, 0x10000, 0x5, 0x1, 0x7, 0x8, 0x6, 0x4, 0x5, 0x5, 0x0, 0xb66b, 0x2, 0x0, 0xfff, 0x2, 0xfff, 0x0, 0x7, 0x1, 0x40, 0x33, 0x7, 0x8001, 0x7, 0x2800, 0xd84, 0x0, 0x226, 0x5, 0x0, 0x3, 0x6, 0x31f87fc7, 0x100, 0x4, 0x7fff, 0x7, 0x4, 0x3, 0x0, 0x3, 0x80, 0xe, 0xe5e7, 0x81, 0x9, 0x2, 0x9, 0x0, 0x5, 0x81, 0x7, 0x100, 0x0, 0xbfb, 0x2294, 0x9, 0x2, 0x9, 0xc, 0xaeb, 0x0, 0x400, 0x8, 0x8f, 0x9, 0x401, 0x7, 0x10, 0x1, 0x6, 0x7, 0x6, 0x8, 0x5, 0x0, 0x0, 0x3, 0x6, 0x1dc, 0x40, 0x246, 0x4, 0x4, 0x8, 0xb, 0x0, 0x59, 0x80000000, 0x5, 0x93d, 0x9, 0xd4, 0x4, 0x9, 0x6, 0x9, 0x0, 0xf, 0x7fff, 0x0, 0x6, 0x9, 0x4, 0x4, 0x7c53, 0x2, 0x5, 0x934b, 0x9, 0x9, 0x4, 0xdcb9, 0x7, 0x8, 0x4, 0x8, 0xb1, 0xa3, 0xc0000000, 0x7f, 0x3, 0x3, 0xc, 0x4, 0xc825, 0x7fff, 0x9, 0x4, 0x2, 0x200, 0x7, 0x3, 0x3, 0x81, 0x2, 0x80, 0x736d, 0x0, 0x80000001, 0xf3, 0xc268, 0x8000, 0x76c1, 0x7fff, 0xffffff7f, 0xea7a, 0xfffffffb, 0x6, 0x8001, 0xffffffff, 0x4, 0x8, 0x0, 0x8, 0x2, 0xc, 0x0, 0x0, 0x4, 0x8, 0x9, 0xb2, 0x150, 0x1, 0x67, 0x517, 0xfffffff9, 0xcd, 0x7, 0x1, 0x0, 0x6, 0x3, 0x10, 0x3, 0x7, 0xe4c, 0xacab, 0x4, 0x2909, 0x6, 0x10, 0x3, 0x1, 0x0, 0x81, 0x80000001, 0x9, 0xd0f3, 0x6c49, 0x0, 0x3, 0x1000, 0xd, 0x2, 0x10, 0x8, 0x4, 0x4, 0x5, 0xd094, 0xe6d8, 0x6203f14f, 0x6, 0x80000001, 0x10001, 0x6, 0x9, 0xdf89, 0xa, 0x4, 0x10000, 0x7136c5af, 0x5, 0x7, 0x3, 0x345, 0x80000001, 0x1, 0xc, 0x7, 0x3e35, 0x6, 0x8, 0x8, 0x9, 0x1, 0x6, 0x3, 0x100, 0x100, 0xffff, 0xa, 0x4, 0x7, 0x80000000, 0x3, 0x80000000, 0x8, 0xa50, 0x8f, 0x80, 0x3, 0x9, 0x4, 0x1, 0x5, 0x9, 0x4, 0x9f, 0x2, 0x115c, 0x40, 0x101, 0x8, 0xc, 0x9, 0x2e97, 0x8, 0x100, 0x5, 0x9, 0x8, 0x2, 0x6b, 0x0, 0x9, 0x9, 0xd9b, 0x7c89fa3e, 0x6, 0xcb2, 0x3, 0x6, 0xff, 0x29, 0x9, 0x49fb6bb1, 0x6, 0xfffffffc, 0xdf, 0xfffffffd, 0x9, 0x4, 0x8, 0x8, 0xf18d, 0x10000, 0x2, 0x9, 0xffff, 0x9, 0x9, 0x8, 0x7, 0x80000000, 0x4, 0xa, 0x4800, 0x5, 0x18000000, 0x80000001, 0x3, 0x8, 0x81, 0xfffffff0, 0x6, 0x3d, 0xff, 0x7, 0x26, 0x6, 0x4, 0x164, 0x8, 0x9, 0x10000, 0x37, 0x1d, 0x40, 0x81, 0xfffff800, 0x5, 0xb, 0x8, 0x8, 0x5, 0x80, 0x7f, 0x66f, 0x80000001, 0x341, 0x5, 0xff, 0x80, 0x8, 0x6, 0xffffff00, 0xa, 0x800, 0x4, 0xfff, 0xfffffff8, 0xc, 0x1000, 0x4, 0x3, 0x3ff, 0xffffffff, 0x8, 0x2, 0x9, 0x80000000, 0x5, 0xfffffffc, 0x9, 0xc, 0x8, 0xe9, 0x7, 0x4, 0x7fff, 0x7fffffff, 0x7fffffff, 0x10, 0xe, 0x7, 0x40, 0xc9, 0x9, 0x81, 0x4d, 0x8001, 0x401, 0x6, 0x3, 0x7, 0x3, 0x8, 0x4, 0x8, 0x3d7666c, 0x6b, 0x3, 0x699, 0x0, 0xc, 0x2, 0x16, 0x7fffffff, 0x5, 0x8, 0xa, 0xfffffffd, 0x101, 0x0, 0x1000, 0x3, 0x3, 0xfff, 0x5, 0x3, 0x0, 0x9, 0xffff3887, 0x101, 0xd, 0x4, 0xc, 0x8, 0x3957, 0x0, 0xe, 0xfffffffb, 0x4, 0x9, 0x6, 0x9, 0x9d30, 0x7, 0x81, 0x7fffffff, 0x0, 0x7f, 0x3, 0x800, 0x5, 0x6, 0x16, 0x8, 0x3, 0xfffff001, 0x1dae, 0x6, 0x10001, 0x10001, 0x5, 0x9, 0x401, 0x0, 0x1d92, 0x2, 0x2, 0x8000, 0x4, 0x0, 0x70, 0x1, 0x8, 0xfffffffc, 0x7, 0x1, 0x2, 0xfffffff8, 0x5, 0x3, 0x6, 0x81, 0x5, 0x1, 0xf, 0x8, 0x7, 0x1ff, 0xad2, 0x9, 0x40, 0x7d, 0x2, 0x4, 0x2, 0x8, 0x0, 0x6, 0xd, 0x0, 0xffffdfb0, 0x5, 0x2, 0x6, 0x1, 0x1ff, 0xb6b, 0xffff, 0x80000000, 0x5, 0x4, 0x2, 0x6, 0x3ff, 0x192, 0x7, 0xffff, 0x5, 0x1000, 0x2, 0x81, 0xfffffffd, 0x1000, 0x200, 0x6, 0x80, 0x5, 0xffffffff, 0x0, 0x8, 0x2, 0x2, 0x6, 0x10000, 0x1000, 0x0, 0x2, 0x2, 0x7, 0x6, 0x5, 0x0, 0xddf, 0x7fffffff, 0xc, 0x2, 0xfffffffb, 0xff, 0xfb, 0x6, 0x81e0, 0xd76, 0x5, 0x8, 0x7, 0x6, 0x2, 0x1, 0xdb86, 0xfff, 0x4, 0x3, 0x9, 0x0, 0xb9b, 0x3, 0x1000, 0x6, 0x827, 0x3, 0x1, 0xa, 0xa3, 0x1, 0xb8, 0x0, 0x3ff, 0x8001, 0x5, 0x2, 0x9, 0x249, 0xb6ef, 0x9, 0xb, 0xc4c, 0x0, 0x3, 0xf, 0x1, 0x240000, 0x3, 0x2b1, 0x5, 0x3922, 0x7ebe, 0x5, 0x6, 0x35bd, 0x65, 0x10, 0x10001, 0x7ff, 0x0, 0x3, 0x7fff, 0xf00a, 0x5f, 0x7, 0x7ff, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x200, 0x3, 0x7c8d, 0x8001, 0x92, 0x80000000, 0x9, 0xffff, 0x3, 0x10000, 0x4, 0x7c0, 0x3, 0x7fffffff, 0xff, 0x5, 0x6, 0x1, 0xe, 0x3, 0x3, 0x7, 0x0, 0xe6, 0x9, 0x8119, 0x4, 0x9, 0xcdb9, 0x0, 0xfffffff8, 0x3, 0x800, 0x7, 0x3, 0x9, 0x3, 0x7, 0x5, 0x0, 0xeb2, 0x0, 0x20, 0x3, 0x1, 0x4, 0x1, 0xc, 0x2, 0x8, 0x9, 0x6d2, 0x400, 0x1, 0x9, 0x3, 0x3, 0x5, 0xc4, 0x5, 0xe7, 0x7, 0x80000001, 0x7, 0x4, 0x66, 0x1, 0x344, 0x7ff, 0x37e54c3, 0x4, 0x800, 0x7, 0x94, 0x819d, 0x8, 0x8001, 0xf, 0x2f1, 0x14000, 0x9, 0xfff, 0x12, 0x3, 0xd108, 0x7, 0xd303, 0x5, 0x3, 0x1, 0x10000000, 0x2, 0x4, 0x80000000, 0x9, 0x2, 0x32, 0x8fb, 0x0, 0x0, 0x8, 0x4, 0x10000, 0x8, 0x10, 0x2, 0x1ff, 0x2, 0x1, 0x7, 0x7ad, 0x5, 0xffffffff, 0x780000, 0x9, 0x0, 0xfffffff7, 0x3ff, 0xe36, 0x2, 0x1, 0x0, 0x6130, 0xfff, 0xa78, 0x3, 0x0, 0x8001, 0x8, 0x200, 0xa, 0x3, 0x2, 0x66, 0x8, 0xb04, 0x0, 0x8, 0x7fff, 0x6, 0x8, 0x7, 0x3ff, 0x5, 0x7, 0xf604, 0x9, 0x9, 0x7ff, 0x7f, 0x5, 0x9, 0xa62, 0x0, 0x2, 0x10000, 0x8001, 0x100, 0x18, 0x10000, 0xfffffffa, 0x8, 0x7fff, 0x1c3, 0x80000001, 0x1, 0xfffff2bc, 0x0, 0x3, 0x1, 0x9, 0x7fffffff, 0x8001, 0x1c, 0x0, 0x6, 0x0, 0x2943, 0x9, 0xf, 0x8, 0xa81b, 0x1ff, 0x6, 0x8, 0x6, 0x80, 0x2, 0x9, 0x3, 0x7, 0x79, 0x8, 0xe2f2, 0x0, 0xe07, 0x8000, 0x0, 0x8, 0x0, 0x7fff, 0x10, 0x3, 0xf, 0x6c, 0x9, 0x0, 0x0, 0x400, 0x2, 0x2, 0x4, 0x6, 0x1, 0x4, 0xb5d0, 0x5ccf, 0x9, 0x0, 0x6, 0x2, 0x400, 0x7, 0xa, 0x1, 0x2, 0x7, 0x1, 0xd6a, 0x3ff, 0x5, 0x9, 0x8, 0x1, 0x1, 0x0, 0x1ff, 0xff, 0x3, 0x3, 0x5, 0x4, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0ee, 0x7, 0x2, 0x9, 0x9, 0xc, 0x8, 0x7fff, 0xc3, 0x3, 0x8, 0xbe, 0xce, 0x9, 0xf, 0x5, 0x7, 0x800, 0x3, 0x5, 0xa5c88682, 0x3, 0x1, 0x5, 0x7, 0x4, 0x1, 0x2, 0xcc, 0x400, 0x6, 0xe, 0x0, 0xfffffffc, 0x2c, 0x1, 0x400, 0xfffffff7, 0x400, 0x6b, 0x2, 0x3, 0x8, 0x4, 0x1000, 0x7, 0x7ff, 0x8, 0xfffffff9, 0x5, 0x3, 0xd0, 0x9, 0xc, 0x3, 0x4ff2, 0x4, 0xe, 0x1ff, 0x15, 0x101, 0x1, 0x8, 0x40, 0x7, 0x3ff, 0x3, 0x2, 0x4, 0x0, 0x800, 0xfffffffb, 0x8, 0x0, 0x0, 0x7fff, 0x5, 0x9, 0x9, 0x4, 0xb0000000, 0x1, 0x8, 0x3, 0x40, 0x5, 0x1, 0xbd, 0x6, 0x40, 0x7, 0x7, 0x6, 0x7, 0xd3, 0x8000, 0x8, 0x5, 0x9, 0x5, 0x7fff, 0xc, 0x4, 0xcc54, 0x0, 0x2, 0x1ff, 0x6, 0xff, 0x1ff, 0xffffffff, 0xfffff801, 0xfff, 0xe, 0x53afc1b2, 0x9, 0x73, 0x0, 0x0, 0x6, 0x20000, 0x6, 0x401, 0x6, 0x0, 0x9, 0x200, 0x7, 0x81, 0x240000, 0x80000001, 0x5, 0x10, 0x2, 0x9, 0x9, 0xd, 0x6, 0x8, 0x7ff, 0x4a65, 0xffff, 0x4, 0x168, 0x1, 0x2, 0x5, 0x4, 0x1f, 0x81, 0x2, 0x27, 0x8, 0x2a6e, 0x800, 0xffffc586, 0x6c, 0x9, 0x8, 0x1a2d, 0x9, 0x101, 0xfffffff8, 0x7fff, 0x1, 0x2, 0x4, 0x2, 0x2f14, 0x101, 0x1, 0xff, 0x8f23, 0x0, 0x0, 0x4, 0x0, 0x6, 0x9, 0x400, 0x401, 0x1, 0x3, 0x6, 0x1000, 0x8, 0x8000, 0x87, 0x4, 0x1, 0x101, 0x9, 0x5, 0x3, 0x6, 0xfffffff9, 0x8, 0x2, 0x8000, 0xff, 0x3612, 0x3, 0x0, 0x10001, 0x0, 0x100, 0x0, 0x4, 0xffffc825, 0xe87, 0x5, 0x7fffffff, 0x7fff, 0x3, 0x30000, 0x800, 0x2, 0x7ff, 0x0, 0xe0d0260, 0xffffff4f, 0xfffffffe, 0x3, 0x5, 0x3ff, 0x71a94307, 0x2], 0x4, 0x7})

0s ago: executing program 3 (id=1645):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in=@rand_addr=0x64010101, 0x4d2, 0x6c}, @in=@multicast1, {0x16d7}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x1, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
sendfile(r6, r4, 0x0, 0x2000000000006)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e20, @empty}], 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1f1b0f"], 0x22)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x70}, 0x1, 0x0, 0x0, 0x24044815}, 0x4000004)
bind$ax25(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

6666:8801.0015: invalid report_size 29535
[  312.664918][ T6020] smartjoyplus 0003:6666:8801.0015: item 0 2 1 7 parsing failed
[  312.665629][ T6020] smartjoyplus 0003:6666:8801.0015: parse failed
[  312.665709][ T6020] smartjoyplus 0003:6666:8801.0015: probe with driver smartjoyplus failed with error -22
[  312.750866][ T8968] siw: device registration error -23
[  313.590406][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'.
[  313.617871][ T6020] usb 4-1: USB disconnect, device number 44
[  313.780369][ T8967] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  313.781374][   T43] usb 3-1: USB disconnect, device number 31
[  313.887113][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'.
[  313.887150][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'.
[  315.776713][ T9012] siw: device registration error -23
[  315.849081][   T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  316.447011][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  316.448977][ T5850] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  316.605418][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.605447][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.605485][    T9] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00
[  316.605506][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.623366][ T5850] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.623389][ T5850] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  316.623421][ T5850] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  316.623441][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.634098][    T9] usb 5-1: config 0 descriptor??
[  316.670651][   T43] usb 4-1: Using ep0 maxpacket: 32
[  316.672758][ T5850] usb 1-1: config 0 descriptor??
[  316.672991][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  316.716988][   T43] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  316.717017][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.717035][   T43] usb 4-1: Product: syz
[  316.717048][   T43] usb 4-1: Manufacturer: syz
[  316.717061][   T43] usb 4-1: SerialNumber: syz
[  316.761945][   T43] usb 4-1: config 0 descriptor??
[  316.792263][   T43] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  317.003714][   T42] usb 4-1: Failed to submit usb control message: -71
[  317.003749][   T42] usb 4-1: unable to send the bmi data to the device: -71
[  317.003766][   T42] usb 4-1: unable to get target info from device
[  317.003780][   T42] usb 4-1: could not get target info (-71)
[  317.003795][   T42] usb 4-1: could not probe fw (-71)
[  317.009721][   T43] usb 4-1: USB disconnect, device number 45
[  317.072350][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  317.072417][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  317.672162][ T9034] FAULT_INJECTION: forcing a failure.
[  317.672162][ T9034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.672301][ T9034] CPU: 0 UID: 0 PID: 9034 Comm: syz.1.1013 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  317.672322][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  317.672332][ T9034] Call Trace:
[  317.672338][ T9034]  <TASK>
[  317.672345][ T9034]  dump_stack_lvl+0xe8/0x150
[  317.672375][ T9034]  should_fail_ex+0x46b/0x600
[  317.672403][ T9034]  strncpy_from_user+0x36/0x2b0
[  317.672428][ T9034]  __se_sys_add_key+0xdb/0x420
[  317.672450][ T9034]  ? __pfx___se_sys_add_key+0x10/0x10
[  317.672474][ T9034]  ? __x64_sys_add_key+0x20/0xc0
[  317.672490][ T9034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.672508][ T9034]  do_syscall_64+0x15f/0xf80
[  317.672532][ T9034]  ? clear_bhb_loop+0x40/0x90
[  317.672551][ T9034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.672567][ T9034] RIP: 0033:0x7f6e4183c819
[  317.672584][ T9034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.672598][ T9034] RSP: 002b:00007f6e3fa54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  317.672627][ T9034] RAX: ffffffffffffffda RBX: 00007f6e41ab6180 RCX: 00007f6e4183c819
[  317.672639][ T9034] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100
[  317.672651][ T9034] RBP: 00007f6e3fa54090 R08: fffffffffffffffd R09: 0000000000000000
[  317.672662][ T9034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.672672][ T9034] R13: 00007f6e41ab6218 R14: 00007f6e41ab6180 R15: 00007ffc47a7e498
[  317.672699][ T9034]  </TASK>
[  318.087956][ T9026] loop9: detected capacity change from 0 to 524287872
[  318.308017][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  318.308687][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  318.326818][    T9] usb 5-1: USB disconnect, device number 34
[  318.793237][ T5975] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  318.954004][ T5975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.954036][ T5975] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  318.954060][ T5975] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  318.954071][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.965284][ T5975] usb 3-1: config 0 descriptor??
[  318.975595][ T5975] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  319.619508][ T9041] lo speed is unknown, defaulting to 1000
[  320.551680][ T7477] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  320.730868][ T7477] usb 4-1: Using ep0 maxpacket: 32
[  320.734214][ T7477] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  320.735213][ T7477] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.735281][ T7477] usb 4-1: config 0 has no interface number 0
[  320.735660][ T7477] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[  320.735718][ T7477] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  320.735774][ T7477] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  320.735830][ T7477] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  320.735889][ T7477] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  320.735944][ T7477] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  320.735966][ T7477] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  320.735987][ T7477] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  320.736004][ T7477] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  320.760271][ T7477] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  320.760299][ T7477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.760318][ T7477] usb 4-1: Product: syz
[  320.760331][ T7477] usb 4-1: Manufacturer: syz
[  320.760351][ T7477] usb 4-1: SerialNumber: syz
[  320.974545][ T7477] usb 4-1: config 0 descriptor??
[  320.975788][ T9065] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  321.008933][ T7477] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12
[  321.008950][ T7477] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  321.008959][ T7477] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  321.105581][ T7477] scsi host1: microtekX6
[  321.138109][ T2134] microtek usb (rev 0.4.3): error -90 submitting URB
[  321.153772][   T11] microtek usb (rev 0.4.3): error -90 submitting URB
[  321.168399][   T43] usb 1-1: USB disconnect, device number 40
[  321.205151][   T11] microtek usb (rev 0.4.3): error -90 submitting URB
[  321.250746][   T11] microtek usb (rev 0.4.3): error -90 submitting URB
[  321.579988][ T5975] usb 3-1: USB disconnect, device number 32
[  322.160667][ T5975] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  322.323790][ T5975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.323816][ T5975] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  322.323846][ T5975] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  322.323865][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.330489][ T5975] usb 3-1: config 0 descriptor??
[  322.486969][ T5811] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  323.221864][ T5975] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  323.410786][ T5975] usb 1-1: Using ep0 maxpacket: 32
[  323.412651][ T5975] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  323.412680][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  323.412704][ T5975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  323.412745][ T5975] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  323.412764][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.491575][ T5975] usb 1-1: config 0 descriptor??
[  323.492372][ T9106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  323.495046][ T5975] hub 1-1:0.0: USB hub found
[  323.663290][ T5850] usb 4-1: USB disconnect, device number 46
[  323.695666][ T5975] hub 1-1:0.0: 2 ports detected
[  323.936226][ T5975] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  323.936243][ T5975] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  323.943312][ T5975] usbhid 1-1:0.0: can't add hid device: -71
[  323.943418][ T5975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  323.966955][ T5975] usb 1-1: USB disconnect, device number 41
[  324.450751][ T5850] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  324.504243][ T9139] FAULT_INJECTION: forcing a failure.
[  324.504243][ T9139] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.504274][ T9139] CPU: 0 UID: 0 PID: 9139 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  324.504298][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  324.504309][ T9139] Call Trace:
[  324.504316][ T9139]  <TASK>
[  324.504324][ T9139]  dump_stack_lvl+0xe8/0x150
[  324.504354][ T9139]  should_fail_ex+0x46b/0x600
[  324.504384][ T9139]  _copy_from_user+0x2d/0xb0
[  324.504404][ T9139]  bpf_test_init+0xd8/0x150
[  324.504428][ T9139]  bpf_prog_test_run_xdp+0x529/0x1160
[  324.504463][ T9139]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  324.504487][ T9139]  ? __fget_files+0x2a/0x420
[  324.504510][ T9139]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  324.504535][ T9139]  bpf_prog_test_run+0x2cd/0x340
[  324.504563][ T9139]  __sys_bpf+0x643/0x950
[  324.504587][ T9139]  ? __pfx___sys_bpf+0x10/0x10
[  324.504607][ T9139]  ? rt_mutex_slowunlock+0x1cb/0x300
[  324.504643][ T9139]  ? ksys_write+0x248/0x270
[  324.504666][ T9139]  ? __pfx_ksys_write+0x10/0x10
[  324.504694][ T9139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.504717][ T9139]  __x64_sys_bpf+0x7c/0x90
[  324.504738][ T9139]  do_syscall_64+0x15f/0xf80
[  324.504763][ T9139]  ? clear_bhb_loop+0x40/0x90
[  324.504783][ T9139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.504800][ T9139] RIP: 0033:0x7f6e4183c819
[  324.504815][ T9139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.504829][ T9139] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  324.504847][ T9139] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  324.504858][ T9139] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  324.504869][ T9139] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  324.504878][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.504888][ T9139] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  324.504916][ T9139]  </TASK>
[  324.610765][ T5850] usb 4-1: Using ep0 maxpacket: 32
[  324.614317][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 2314, setting to 64
[  324.616848][ T5850] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  324.616871][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.616887][ T5850] usb 4-1: Product: syz
[  324.616900][ T5850] usb 4-1: Manufacturer: syz
[  324.616913][ T5850] usb 4-1: SerialNumber: syz
[  324.636078][ T5850] usb 4-1: config 0 descriptor??
[  324.785340][ T5850] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  325.006659][ T6020] usb 3-1: USB disconnect, device number 33
[  325.360687][ T7477] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  325.381573][  T142] usb 4-1: Failed to submit usb control message: -71
[  325.381606][  T142] usb 4-1: unable to send the bmi data to the device: -71
[  325.381622][  T142] usb 4-1: unable to get target info from device
[  325.381635][  T142] usb 4-1: could not get target info (-71)
[  325.381731][  T142] usb 4-1: could not probe fw (-71)
[  325.387751][ T5975] usb 4-1: USB disconnect, device number 47
[  325.519275][ T7477] usb 1-1: unable to get BOS descriptor or descriptor too short
[  325.520363][ T7477] usb 1-1: not running at top speed; connect to a high speed hub
[  325.547461][ T7477] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.547485][ T7477] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  325.581412][ T7477] usb 1-1: string descriptor 0 read error: -22
[  325.581547][ T7477] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  325.581568][ T7477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.230695][   T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  326.310730][ T7477] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  326.360686][   T43] usb 2-1: device descriptor read/64, error -71
[  326.441335][   T36] kauditd_printk_skb: 59 callbacks suppressed
[  326.441352][   T36] audit: type=1326 audit(1776331753.938:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.441398][   T36] audit: type=1326 audit(1776331753.938:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.444695][   T36] audit: type=1326 audit(1776331753.938:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.444755][   T36] audit: type=1326 audit(1776331753.938:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.445340][   T36] audit: type=1326 audit(1776331753.938:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.445423][   T36] audit: type=1326 audit(1776331753.938:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.445550][   T36] audit: type=1326 audit(1776331753.938:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.445821][   T36] audit: type=1326 audit(1776331753.938:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.446042][   T36] audit: type=1326 audit(1776331753.938:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.446384][   T36] audit: type=1326 audit(1776331753.938:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9186 comm="syz.4.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  326.539917][ T7477] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.539978][ T7477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.558403][ T7477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.558449][ T7477] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  326.558470][ T7477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.730721][   T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  326.742701][ T7477] usb 4-1: config 0 descriptor??
[  326.957022][   T43] usb 2-1: device descriptor read/64, error -71
[  326.993226][ T5850] usb 1-1: USB disconnect, device number 42
[  327.072151][ T9194] siw: device registration error -23
[  327.267016][   T43] usb usb2-port1: attempt power cycle
[  327.901185][ T7477] hid_parser_main: 8 callbacks suppressed
[  327.901206][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901234][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901259][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901283][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901305][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901330][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901353][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901377][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901402][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  327.901426][ T7477] hid-rmi 0003:0461:4E72.0016: unknown main item tag 0x0
[  328.031304][ T7477] hid-rmi 0003:0461:4E72.0016: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0
[  328.056532][ T7477] usb 4-1: USB disconnect, device number 48
[  328.216348][ T9200] fido_id[9200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  328.260809][   T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  328.443307][   T43] usb 2-1: device descriptor read/8, error -71
[  329.962178][ T5796] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  330.110662][ T5796] usb 1-1: Using ep0 maxpacket: 32
[  330.114501][ T5796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 2314, setting to 64
[  330.126476][ T5796] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  330.126501][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.126519][ T5796] usb 1-1: Product: syz
[  330.126531][ T5796] usb 1-1: Manufacturer: syz
[  330.126550][ T5796] usb 1-1: SerialNumber: syz
[  330.173767][ T5796] usb 1-1: config 0 descriptor??
[  330.174476][ T5850] kernel read not supported for file /comedi4 (pid: 5850 comm: kworker/0:4)
[  330.237186][ T5796] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  332.097993][ T9248] program syz.3.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  332.270476][ T1025] usb 1-1: Failed to submit usb control message: -110
[  332.270512][ T1025] usb 1-1: unable to send the bmi data to the device: -110
[  332.270529][ T1025] usb 1-1: unable to get target info from device
[  332.293474][ T1025] usb 1-1: could not get target info (-110)
[  332.293651][ T1025] usb 1-1: could not probe fw (-110)
[  332.360848][   T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  332.516648][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.516679][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.516713][   T43] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  332.516734][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.570350][   T43] usb 3-1: config 0 descriptor??
[  332.703153][ T5796] usb 1-1: USB disconnect, device number 43
[  333.616902][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1103'.
[  333.650671][ T5975] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  333.800812][ T5975] usb 4-1: Using ep0 maxpacket: 32
[  333.803360][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[  333.803389][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11
[  333.803412][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024
[  333.807641][ T5975] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  333.807666][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.807684][ T5975] usb 4-1: Product: syz
[  333.807696][ T5975] usb 4-1: Manufacturer: syz
[  333.807708][ T5975] usb 4-1: SerialNumber: syz
[  333.814540][ T5975] usb 4-1: config 0 descriptor??
[  333.815475][ T9275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  333.901077][   T43] usbhid 3-1:0.0: can't add hid device: -71
[  333.901188][   T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  333.906755][   T43] usb 3-1: USB disconnect, device number 34
[  333.915617][ T5975] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  334.017638][ T5975] usb 4-1: USB disconnect, device number 49
[  334.036510][ T3003] usb 4-1: Failed to submit usb control message: -71
[  334.036546][ T3003] usb 4-1: unable to send the bmi data to the device: -71
[  334.036561][ T3003] usb 4-1: unable to get target info from device
[  334.036574][ T3003] usb 4-1: could not get target info (-71)
[  334.036799][ T3003] usb 4-1: could not probe fw (-71)
[  334.428051][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1110'.
[  334.690752][ T5975] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  334.721146][ T9315] FAULT_INJECTION: forcing a failure.
[  334.721146][ T9315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.721178][ T9315] CPU: 1 UID: 0 PID: 9315 Comm: syz.1.1116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  334.721198][ T9315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  334.721209][ T9315] Call Trace:
[  334.721216][ T9315]  <TASK>
[  334.721224][ T9315]  dump_stack_lvl+0xe8/0x150
[  334.721255][ T9315]  should_fail_ex+0x46b/0x600
[  334.721285][ T9315]  _copy_from_user+0x2d/0xb0
[  334.721305][ T9315]  ___sys_sendmsg+0x1c6/0x360
[  334.721327][ T9315]  ? __lock_acquire+0x6b5/0x2cf0
[  334.721349][ T9315]  ? __pfx____sys_sendmsg+0x10/0x10
[  334.721404][ T9315]  ? __fget_files+0x2a/0x420
[  334.721420][ T9315]  ? __fget_files+0x3a6/0x420
[  334.721447][ T9315]  __x64_sys_sendmsg+0x1c3/0x2a0
[  334.721472][ T9315]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  334.721503][ T9315]  ? __pfx_ksys_write+0x10/0x10
[  334.721532][ T9315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.721552][ T9315]  do_syscall_64+0x15f/0xf80
[  334.721577][ T9315]  ? clear_bhb_loop+0x40/0x90
[  334.721604][ T9315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.721621][ T9315] RIP: 0033:0x7f6e4183c819
[  334.721639][ T9315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.721654][ T9315] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.721673][ T9315] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  334.721686][ T9315] RDX: 0000000020040000 RSI: 0000200000000100 RDI: 0000000000000003
[  334.721698][ T9315] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  334.721710][ T9315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.721720][ T9315] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  334.721750][ T9315]  </TASK>
[  334.850670][ T5975] usb 1-1: Using ep0 maxpacket: 32
[  334.878911][ T5975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.878937][ T5975] usb 1-1: config 0 has no interfaces?
[  334.920473][ T5975] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  334.920502][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  334.920520][ T5975] usb 1-1: Product: syz
[  334.920533][ T5975] usb 1-1: Manufacturer: syz
[  334.922405][ T5975] usb 1-1: SerialNumber: syz
[  334.967198][ T5975] usb 1-1: config 0 descriptor??
[  335.124964][ T9328] FAULT_INJECTION: forcing a failure.
[  335.124964][ T9328] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  335.124996][ T9328] CPU: 1 UID: 0 PID: 9328 Comm: syz.1.1122 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  335.125016][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  335.125026][ T9328] Call Trace:
[  335.125033][ T9328]  <TASK>
[  335.125041][ T9328]  dump_stack_lvl+0xe8/0x150
[  335.125071][ T9328]  should_fail_ex+0x46b/0x600
[  335.125102][ T9328]  prepare_alloc_pages+0x22a/0x6b0
[  335.125133][ T9328]  __alloc_frozen_pages_noprof+0x12f/0x380
[  335.125161][ T9328]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  335.125188][ T9328]  ? __pfx_policy_nodemask+0x10/0x10
[  335.125214][ T9328]  ? __lock_acquire+0x6b5/0x2cf0
[  335.125236][ T9328]  alloc_pages_mpol+0xd1/0x380
[  335.125263][ T9328]  alloc_pages_noprof+0xd2/0x2f0
[  335.125288][ T9328]  pte_alloc_one+0x22/0x380
[  335.125309][ T9328]  __pte_alloc+0x25/0x1a0
[  335.125337][ T9328]  do_pte_missing+0x1c13/0x2950
[  335.125365][ T9328]  ? mt_find+0x186/0x630
[  335.125396][ T9328]  handle_mm_fault+0xd0a/0x13c0
[  335.125417][ T9328]  ? mt_find+0x186/0x630
[  335.125443][ T9328]  ? handle_mm_fault+0xe7/0x13c0
[  335.125466][ T9328]  ? __pfx_handle_mm_fault+0x10/0x10
[  335.125515][ T9328]  __get_user_pages+0x168f/0x2570
[  335.125565][ T9328]  __gup_longterm_locked+0xdcf/0x1630
[  335.125595][ T9328]  ? gup_fast_fallback+0x161/0x2040
[  335.125614][ T9328]  ? sanity_check_pinned_pages+0x7af/0x870
[  335.125643][ T9328]  gup_fast_fallback+0x1cf3/0x2040
[  335.125687][ T9328]  ? rcu_is_watching+0x15/0xb0
[  335.125706][ T9328]  ? __pfx_gup_fast_fallback+0x10/0x10
[  335.125726][ T9328]  ? is_valid_gup_args+0x11f/0x200
[  335.125747][ T9328]  ? pin_user_pages_fast+0x4d/0xb0
[  335.125776][ T9328]  rds_info_getsockopt+0x20e/0x400
[  335.125804][ T9328]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  335.125827][ T9328]  ? __might_fault+0xaf/0x130
[  335.125852][ T9328]  ? rds_getsockopt+0x2d4/0x500
[  335.125876][ T9328]  ? __pfx_rds_getsockopt+0x10/0x10
[  335.125900][ T9328]  do_sock_getsockopt+0x51d/0x7e0
[  335.125927][ T9328]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  335.125962][ T9328]  ? __fget_files+0x3a6/0x420
[  335.125978][ T9328]  ? __fget_files+0x2a/0x420
[  335.126002][ T9328]  __x64_sys_getsockopt+0x1aa/0x250
[  335.126028][ T9328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.126048][ T9328]  do_syscall_64+0x15f/0xf80
[  335.126070][ T9328]  ? trace_irq_disable+0x3b/0x140
[  335.126092][ T9328]  ? clear_bhb_loop+0x40/0x90
[  335.126114][ T9328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.126131][ T9328] RIP: 0033:0x7f6e4183c819
[  335.126148][ T9328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.126162][ T9328] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  335.126183][ T9328] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  335.126195][ T9328] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003
[  335.126207][ T9328] RBP: 00007f6e3fa96090 R08: 0000200000000000 R09: 0000000000000000
[  335.126219][ T9328] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001
[  335.126230][ T9328] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  335.126265][ T9328]  </TASK>
[  335.621069][ T5975] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  335.773859][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.773891][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.773926][ T5975] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  335.773947][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.788413][ T5975] usb 3-1: config 0 descriptor??
[  335.799798][    T9] usb 1-1: USB disconnect, device number 44
[  335.965961][ T5796] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  336.467195][ T5796] usb 4-1: device descriptor read/64, error -71
[  336.710729][ T5796] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  336.825678][ T5975] usbhid 3-1:0.0: can't add hid device: -71
[  336.825791][ T5975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  336.844207][ T5796] usb 4-1: device descriptor read/64, error -71
[  336.851021][ T5975] usb 3-1: USB disconnect, device number 35
[  336.962789][ T5796] usb usb4-port1: attempt power cycle
[  337.300715][ T5796] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  337.321950][ T5796] usb 4-1: device descriptor read/8, error -71
[  337.570821][ T5796] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  337.591502][ T5796] usb 4-1: device descriptor read/8, error -71
[  337.701143][ T5796] usb usb4-port1: unable to enumerate USB device
[  337.840676][ T5850] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  337.865966][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  337.865983][   T36] audit: type=1326 audit(1776331765.348:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.866024][   T36] audit: type=1326 audit(1776331765.358:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.866061][   T36] audit: type=1326 audit(1776331765.358:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.866099][   T36] audit: type=1326 audit(1776331765.358:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.866411][   T36] audit: type=1326 audit(1776331765.358:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.869880][   T36] audit: type=1326 audit(1776331765.358:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.870777][   T36] audit: type=1326 audit(1776331765.358:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.875800][   T36] audit: type=1326 audit(1776331765.368:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.875841][   T36] audit: type=1326 audit(1776331765.368:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.875875][   T36] audit: type=1326 audit(1776331765.368:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9394 comm="syz.4.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  337.933997][ T9401] netlink: 6692 bytes leftover after parsing attributes in process `syz.4.1153'.
[  337.994069][ T5850] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  337.994099][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.094467][ T5850] usb 3-1: config 0 descriptor??
[  338.106643][ T5850] cp210x 3-1:0.0: cp210x converter detected
[  338.509692][ T5850] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  338.632611][ T5850] usb 3-1: cp210x converter now attached to ttyUSB0
[  338.751292][   T43] usb 3-1: USB disconnect, device number 36
[  338.804716][   T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  338.931078][   T43] cp210x 3-1:0.0: device disconnected
[  339.447126][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1180'.
[  339.675040][ T9462] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1184'.
[  339.722414][ T5850] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  339.746850][ T9472] FAULT_INJECTION: forcing a failure.
[  339.746850][ T9472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  339.746971][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.0.1188 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  339.746992][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  339.747003][ T9472] Call Trace:
[  339.747010][ T9472]  <TASK>
[  339.747017][ T9472]  dump_stack_lvl+0xe8/0x150
[  339.747048][ T9472]  should_fail_ex+0x46b/0x600
[  339.747077][ T9472]  _copy_from_iter+0x1d3/0x1670
[  339.747110][ T9472]  ? trace_kmem_cache_alloc+0x29/0xe0
[  339.747128][ T9472]  ? __alloc_skb+0x27d/0x7d0
[  339.747146][ T9472]  ? __pfx__copy_from_iter+0x10/0x10
[  339.747167][ T9472]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  339.747186][ T9472]  ? __alloc_skb+0x27d/0x7d0
[  339.747208][ T9472]  ? netlink_sendmsg+0x650/0xb40
[  339.747226][ T9472]  ? skb_put+0x11b/0x210
[  339.747247][ T9472]  netlink_sendmsg+0x6c0/0xb40
[  339.747272][ T9472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  339.747291][ T9472]  ? unwind_get_return_address+0x4d/0x90
[  339.747314][ T9472]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  339.747336][ T9472]  ____sys_sendmsg+0x94c/0x9c0
[  339.747364][ T9472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  339.747392][ T9472]  ? import_iovec+0x73/0xa0
[  339.747413][ T9472]  ___sys_sendmsg+0x2a5/0x360
[  339.747433][ T9472]  ? __lock_acquire+0x6b5/0x2cf0
[  339.747454][ T9472]  ? __pfx____sys_sendmsg+0x10/0x10
[  339.747515][ T9472]  ? __fget_files+0x2a/0x420
[  339.747531][ T9472]  ? __fget_files+0x3a6/0x420
[  339.747559][ T9472]  __x64_sys_sendmsg+0x1c3/0x2a0
[  339.747581][ T9472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  339.747609][ T9472]  ? __pfx_ksys_write+0x10/0x10
[  339.747636][ T9472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.747654][ T9472]  do_syscall_64+0x15f/0xf80
[  339.747678][ T9472]  ? trace_irq_disable+0x3b/0x140
[  339.747700][ T9472]  ? clear_bhb_loop+0x40/0x90
[  339.747721][ T9472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.747737][ T9472] RIP: 0033:0x7f57b914c819
[  339.747754][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.747769][ T9472] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  339.747788][ T9472] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  339.747800][ T9472] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004
[  339.747811][ T9472] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  339.747821][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.747831][ T9472] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  339.747860][ T9472]  </TASK>
[  339.875382][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.875413][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.875449][ T5850] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  339.875470][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.914033][ T5850] usb 3-1: config 0 descriptor??
[  340.172057][ T9478] dvmrp0: entered allmulticast mode
[  340.174559][ T9478] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1193'.
[  340.640514][ T9481] FAULT_INJECTION: forcing a failure.
[  340.640514][ T9481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.640737][ T9481] CPU: 0 UID: 0 PID: 9481 Comm: syz.1.1192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  340.640755][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  340.640763][ T9481] Call Trace:
[  340.640769][ T9481]  <TASK>
[  340.640775][ T9481]  dump_stack_lvl+0xe8/0x150
[  340.640803][ T9481]  should_fail_ex+0x46b/0x600
[  340.640826][ T9481]  _copy_from_iter+0x1d3/0x1670
[  340.640852][ T9481]  ? trace_kmem_cache_alloc+0x29/0xe0
[  340.640867][ T9481]  ? __alloc_skb+0x27d/0x7d0
[  340.640881][ T9481]  ? __pfx__copy_from_iter+0x10/0x10
[  340.640899][ T9481]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  340.640913][ T9481]  ? __alloc_skb+0x27d/0x7d0
[  340.640931][ T9481]  ? netlink_sendmsg+0x650/0xb40
[  340.640946][ T9481]  ? skb_put+0x11b/0x210
[  340.640963][ T9481]  netlink_sendmsg+0x6c0/0xb40
[  340.640984][ T9481]  ? __pfx_netlink_sendmsg+0x10/0x10
[  340.640999][ T9481]  ? unwind_get_return_address+0x4d/0x90
[  340.641017][ T9481]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  340.641036][ T9481]  ____sys_sendmsg+0x94c/0x9c0
[  340.641058][ T9481]  ? __pfx_____sys_sendmsg+0x10/0x10
[  340.641079][ T9481]  ? import_iovec+0x73/0xa0
[  340.641094][ T9481]  ___sys_sendmsg+0x2a5/0x360
[  340.641108][ T9481]  ? __lock_acquire+0x6b5/0x2cf0
[  340.641123][ T9481]  ? __pfx____sys_sendmsg+0x10/0x10
[  340.641162][ T9481]  ? __fget_files+0x2a/0x420
[  340.641174][ T9481]  ? __fget_files+0x3a6/0x420
[  340.641193][ T9481]  __x64_sys_sendmsg+0x1c3/0x2a0
[  340.641213][ T9481]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  340.641235][ T9481]  ? __pfx_ksys_write+0x10/0x10
[  340.641256][ T9481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.641270][ T9481]  do_syscall_64+0x15f/0xf80
[  340.641288][ T9481]  ? trace_irq_disable+0x3b/0x140
[  340.641306][ T9481]  ? clear_bhb_loop+0x40/0x90
[  340.641322][ T9481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.641336][ T9481] RIP: 0033:0x7f6e4183c819
[  340.641350][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.641363][ T9481] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.641379][ T9481] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  340.641390][ T9481] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004
[  340.641399][ T9481] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  340.641408][ T9481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.641417][ T9481] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  340.641440][ T9481]  </TASK>
[  340.960940][ T5850] usbhid 3-1:0.0: can't add hid device: -71
[  340.961054][ T5850] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  341.082204][ T5850] usb 3-1: USB disconnect, device number 37
[  343.896427][   T36] kauditd_printk_skb: 12 callbacks suppressed
[  343.896444][   T36] audit: type=1326 audit(1776331771.398:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.896485][   T36] audit: type=1326 audit(1776331771.398:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.899397][   T36] audit: type=1326 audit(1776331771.398:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.913973][   T36] audit: type=1326 audit(1776331771.408:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.914525][   T36] audit: type=1326 audit(1776331771.408:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.915842][   T36] audit: type=1326 audit(1776331771.408:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.928993][   T36] audit: type=1326 audit(1776331771.418:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.929035][   T36] audit: type=1326 audit(1776331771.418:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.929070][   T36] audit: type=1326 audit(1776331771.418:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  343.929105][   T36] audit: type=1326 audit(1776331771.418:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9528 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e8c9c819 code=0x7ffc0000
[  344.010699][ T9526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.441369][ T9545] siw: device registration error -23
[  347.080741][ T5850] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  347.102157][ T9611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.230786][ T5850] usb 3-1: Using ep0 maxpacket: 16
[  347.247885][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  347.247930][ T5850] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  347.247951][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.261308][ T9617] FAULT_INJECTION: forcing a failure.
[  347.261308][ T9617] name failslab, interval 1, probability 0, space 0, times 0
[  347.261338][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.1.1249 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  347.261360][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  347.261370][ T9617] Call Trace:
[  347.261378][ T9617]  <TASK>
[  347.261385][ T9617]  dump_stack_lvl+0xe8/0x150
[  347.261416][ T9617]  should_fail_ex+0x46b/0x600
[  347.261447][ T9617]  should_failslab+0xa8/0x100
[  347.261472][ T9617]  __kmalloc_noprof+0xdf/0x7b0
[  347.261491][ T9617]  ? kfree+0x4d/0x6c0
[  347.261509][ T9617]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  347.261539][ T9617]  tomoyo_realpath_from_path+0xe3/0x5d0
[  347.261565][ T9617]  ? tomoyo_domain+0xd8/0x130
[  347.261594][ T9617]  ? tomoyo_path_number_perm+0x219/0x630
[  347.261616][ T9617]  tomoyo_path_number_perm+0x246/0x630
[  347.261639][ T9617]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  347.261659][ T9617]  ? __lock_acquire+0x6b5/0x2cf0
[  347.261678][ T9617]  ? do_raw_spin_lock+0x12b/0x2f0
[  347.261740][ T9617]  ? __fget_files+0x2a/0x420
[  347.261760][ T9617]  ? __fget_files+0x2a/0x420
[  347.261776][ T9617]  ? __fget_files+0x3a6/0x420
[  347.261791][ T9617]  ? __fget_files+0x2a/0x420
[  347.261811][ T9617]  security_file_ioctl+0xc3/0x2a0
[  347.261834][ T9617]  __se_sys_ioctl+0x47/0x170
[  347.261854][ T9617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.261874][ T9617]  do_syscall_64+0x15f/0xf80
[  347.261898][ T9617]  ? trace_irq_disable+0x3b/0x140
[  347.261918][ T9617]  ? clear_bhb_loop+0x40/0x90
[  347.261935][ T9617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.261952][ T9617] RIP: 0033:0x7f6e4183c819
[  347.261968][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.261982][ T9617] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  347.262000][ T9617] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  347.262012][ T9617] RDX: 0000000000000000 RSI: 000000004080aebf RDI: 0000000000000005
[  347.262021][ T9617] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  347.262031][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  347.262041][ T9617] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  347.262069][ T9617]  </TASK>
[  347.262076][ T9617] ERROR: Out of memory at tomoyo_realpath_from_path.
[  347.264263][ T5850] usb 3-1: config 0 descriptor??
[  347.295748][ T5850] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  347.530750][ T5975] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  347.694213][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.694243][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.694278][ T5975] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  347.694299][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.725334][ T5975] usb 4-1: config 0 descriptor??
[  347.868808][ T9635] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1257'.
[  348.005463][ T9643] FAULT_INJECTION: forcing a failure.
[  348.005463][ T9643] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  348.005495][ T9643] CPU: 1 UID: 0 PID: 9643 Comm: syz.1.1262 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  348.005516][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  348.005526][ T9643] Call Trace:
[  348.005533][ T9643]  <TASK>
[  348.005541][ T9643]  dump_stack_lvl+0xe8/0x150
[  348.005571][ T9643]  should_fail_ex+0x46b/0x600
[  348.005601][ T9643]  prepare_alloc_pages+0x22a/0x6b0
[  348.005631][ T9643]  __alloc_frozen_pages_noprof+0x12f/0x380
[  348.005664][ T9643]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  348.005689][ T9643]  ? __pfx_policy_nodemask+0x10/0x10
[  348.005713][ T9643]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  348.005738][ T9643]  ? lockdep_hardirqs_on+0x7a/0x110
[  348.005766][ T9643]  alloc_pages_mpol+0xd1/0x380
[  348.005791][ T9643]  alloc_pages_noprof+0xd2/0x2f0
[  348.005816][ T9643]  get_free_pages_noprof+0xf/0x80
[  348.005839][ T9643]  __kasan_populate_vmalloc+0x38/0x1d0
[  348.005862][ T9643]  ? rt_spin_unlock+0x160/0x200
[  348.005884][ T9643]  alloc_vmap_area+0xd47/0x1480
[  348.005919][ T9643]  ? __pfx_alloc_vmap_area+0x10/0x10
[  348.005940][ T9643]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  348.005962][ T9643]  ? __get_vm_area_node+0x171/0x350
[  348.005980][ T9643]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.006002][ T9643]  __get_vm_area_node+0x226/0x350
[  348.006024][ T9643]  __vmalloc_node_range_noprof+0x36a/0x1750
[  348.006044][ T9643]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.006083][ T9643]  ? is_bpf_text_address+0x26/0x2b0
[  348.006110][ T9643]  ? kernel_text_address+0xa5/0xe0
[  348.006133][ T9643]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  348.006160][ T9643]  ? __lock_acquire+0x6b5/0x2cf0
[  348.006182][ T9643]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.006203][ T9643]  __vmalloc_noprof+0xd2/0x120
[  348.006222][ T9643]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.006248][ T9643]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.006276][ T9643]  bpf_prog_alloc+0x3c/0x1a0
[  348.006300][ T9643]  bpf_prog_load+0x7ba/0x1ae0
[  348.006335][ T9643]  ? __pfx_bpf_prog_load+0x10/0x10
[  348.006357][ T9643]  ? __might_fault+0xaf/0x130
[  348.006395][ T9643]  ? bpf_lsm_bpf+0x9/0x20
[  348.006416][ T9643]  ? security_bpf+0x7e/0x2d0
[  348.006441][ T9643]  __sys_bpf+0x618/0x950
[  348.006464][ T9643]  ? __pfx___sys_bpf+0x10/0x10
[  348.006484][ T9643]  ? rt_mutex_slowunlock+0x1cb/0x300
[  348.006517][ T9643]  ? ksys_write+0x248/0x270
[  348.006540][ T9643]  ? __pfx_ksys_write+0x10/0x10
[  348.006564][ T9643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.006584][ T9643]  __x64_sys_bpf+0x7c/0x90
[  348.006606][ T9643]  do_syscall_64+0x15f/0xf80
[  348.006628][ T9643]  ? trace_irq_disable+0x3b/0x140
[  348.006647][ T9643]  ? clear_bhb_loop+0x40/0x90
[  348.006675][ T9643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.006692][ T9643] RIP: 0033:0x7f6e4183c819
[  348.006709][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.006725][ T9643] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  348.006745][ T9643] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  348.006757][ T9643] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  348.006768][ T9643] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  348.006780][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.006790][ T9643] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  348.006820][ T9643]  </TASK>
[  348.007010][ T9643] warn_alloc: 1 callbacks suppressed
[  348.007022][ T9643] syz.1.1262: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  348.007131][ T9643] CPU: 0 UID: 0 PID: 9643 Comm: syz.1.1262 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  348.007150][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  348.007161][ T9643] Call Trace:
[  348.007168][ T9643]  <TASK>
[  348.007175][ T9643]  dump_stack_lvl+0xe8/0x150
[  348.007202][ T9643]  warn_alloc+0x263/0x3e0
[  348.007229][ T9643]  ? kasan_quarantine_put+0xbb/0x1f0
[  348.007251][ T9643]  ? __pfx_warn_alloc+0x10/0x10
[  348.007273][ T9643]  ? __get_vm_area_node+0x23f/0x350
[  348.007289][ T9643]  ? __get_vm_area_node+0x171/0x350
[  348.007308][ T9643]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.007331][ T9643]  ? __get_vm_area_node+0x23f/0x350
[  348.007354][ T9643]  __vmalloc_node_range_noprof+0x38f/0x1750
[  348.007390][ T9643]  ? is_bpf_text_address+0x26/0x2b0
[  348.007423][ T9643]  ? kernel_text_address+0xa5/0xe0
[  348.007447][ T9643]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  348.007472][ T9643]  ? __lock_acquire+0x6b5/0x2cf0
[  348.007492][ T9643]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.007512][ T9643]  __vmalloc_noprof+0xd2/0x120
[  348.007530][ T9643]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.007556][ T9643]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  348.007583][ T9643]  bpf_prog_alloc+0x3c/0x1a0
[  348.007607][ T9643]  bpf_prog_load+0x7ba/0x1ae0
[  348.007644][ T9643]  ? __pfx_bpf_prog_load+0x10/0x10
[  348.007665][ T9643]  ? __might_fault+0xaf/0x130
[  348.007703][ T9643]  ? bpf_lsm_bpf+0x9/0x20
[  348.007724][ T9643]  ? security_bpf+0x7e/0x2d0
[  348.007745][ T9643]  __sys_bpf+0x618/0x950
[  348.007768][ T9643]  ? __pfx___sys_bpf+0x10/0x10
[  348.007787][ T9643]  ? rt_mutex_slowunlock+0x1cb/0x300
[  348.007821][ T9643]  ? ksys_write+0x248/0x270
[  348.007843][ T9643]  ? __pfx_ksys_write+0x10/0x10
[  348.007867][ T9643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.007886][ T9643]  __x64_sys_bpf+0x7c/0x90
[  348.007907][ T9643]  do_syscall_64+0x15f/0xf80
[  348.007928][ T9643]  ? trace_irq_disable+0x3b/0x140
[  348.007949][ T9643]  ? clear_bhb_loop+0x40/0x90
[  348.007970][ T9643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.007987][ T9643] RIP: 0033:0x7f6e4183c819
[  348.008003][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.008018][ T9643] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  348.008036][ T9643] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  348.008048][ T9643] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  348.008060][ T9643] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  348.008071][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.008081][ T9643] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  348.008109][ T9643]  </TASK>
[  348.009511][ T9643] Mem-Info:
[  348.009523][ T9643] active_anon:258 inactive_anon:6502 isolated_anon:0
[  348.009523][ T9643]  active_file:7353 inactive_file:46365 isolated_file:0
[  348.009523][ T9643]  unevictable:768 dirty:29 writeback:0
[  348.009523][ T9643]  slab_reclaimable:11967 slab_unreclaimable:107494
[  348.009523][ T9643]  mapped:30744 shmem:1360 pagetables:1311
[  348.009523][ T9643]  sec_pagetables:0 bounce:0
[  348.009523][ T9643]  kernel_misc_reclaimable:0
[  348.009523][ T9643]  free:1309269 free_pcp:5211 free_cma:0
[  348.009812][ T9643] Node 0 active_anon:1032kB inactive_anon:26008kB active_file:29216kB inactive_file:185460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122976kB dirty:116kB writeback:0kB shmem:3904kB kernel_stack:13876kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  348.010042][ T9643] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  348.010086][ T9643] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  348.010139][ T9643] lowmem_reserve[]: 0 2505 2505 2505 2505
[  348.010442][ T9643] Node 0 DMA32 free:1293660kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:26008kB active_file:29216kB inactive_file:185460kB unevictable:1536kB writepending:116kB zspages:0kB present:3129332kB managed:2565444kB mlocked:0kB bounce:0kB free_pcp:19652kB local_pcp:9464kB free_cma:0kB
[  348.011050][ T9643] lowmem_reserve[]: 0 0 0 0 0
[  348.011081][ T9643] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:148kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  348.011131][ T9643] lowmem_reserve[]: 0 0 0 0 0
[  348.011207][ T9643] Node 1 Normal free:3928056kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1196kB local_pcp:456kB free_cma:0kB
[  348.011259][ T9643] lowmem_reserve[]: 0 0 0 0 0
[  348.011286][ T9643] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  348.011439][ T9643] Node 0 DMA32: 2873*4kB (UM) 2028*8kB (UM) 1033*16kB (UME) 178*32kB (UME) 22*64kB (UM) 86*128kB (UME) 60*256kB (UME) 21*512kB (UME) 11*1024kB (UME) 3*2048kB (UME) 290*4096kB (UM) = 1293716kB
[  348.011624][ T9643] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  348.011754][ T9643] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 958*4096kB (M) = 3928004kB
[  348.011925][ T9643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  348.011985][ T9643] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  348.012000][ T9643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  348.012014][ T9643] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  348.012027][ T9643] 55074 total pagecache pages
[  348.012033][ T9643] 0 pages in swap cache
[  348.012039][ T9643] Free swap  = 124996kB
[  348.012046][ T9643] Total swap = 124996kB
[  348.012053][ T9643] 2097051 pages RAM
[  348.012058][ T9643] 0 pages HighMem/MovableOnly
[  348.012064][ T9643] 424038 pages reserved
[  348.012071][ T9643] 0 pages cma reserved
[  348.499726][ T9650] FAULT_INJECTION: forcing a failure.
[  348.499726][ T9650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  348.499756][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.1.1264 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  348.499779][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  348.499790][ T9650] Call Trace:
[  348.499797][ T9650]  <TASK>
[  348.499803][ T9650]  dump_stack_lvl+0xe8/0x150
[  348.499833][ T9650]  should_fail_ex+0x46b/0x600
[  348.499863][ T9650]  _copy_to_user+0x31/0xb0
[  348.499884][ T9650]  simple_read_from_buffer+0xe1/0x170
[  348.499913][ T9650]  proc_fail_nth_read+0x1be/0x230
[  348.499941][ T9650]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  348.499969][ T9650]  ? rw_verify_area+0x2ac/0x4e0
[  348.499989][ T9650]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  348.500014][ T9650]  vfs_read+0x212/0xa80
[  348.500040][ T9650]  ? __pfx_vfs_read+0x10/0x10
[  348.500061][ T9650]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  348.500085][ T9650]  ? lockdep_hardirqs_on+0x7a/0x110
[  348.500108][ T9650]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  348.500131][ T9650]  ? mutex_lock_nested+0x152/0x1d0
[  348.500148][ T9650]  ? fdget_pos+0x252/0x320
[  348.500173][ T9650]  ksys_read+0x156/0x270
[  348.500194][ T9650]  ? __pfx_ksys_read+0x10/0x10
[  348.500211][ T9650]  ? fput+0xa0/0xd0
[  348.500240][ T9650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.500259][ T9650]  do_syscall_64+0x15f/0xf80
[  348.500279][ T9650]  ? trace_irq_disable+0x3b/0x140
[  348.500301][ T9650]  ? clear_bhb_loop+0x40/0x90
[  348.500322][ T9650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.500338][ T9650] RIP: 0033:0x7f6e417fd04e
[  348.500354][ T9650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  348.500368][ T9650] RSP: 002b:00007f6e3fa95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  348.500387][ T9650] RAX: ffffffffffffffda RBX: 00007f6e3fa966c0 RCX: 00007f6e417fd04e
[  348.500399][ T9650] RDX: 000000000000000f RSI: 00007f6e3fa960a0 RDI: 0000000000000004
[  348.500410][ T9650] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  348.500420][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.500431][ T9650] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  348.500458][ T9650]  </TASK>
[  348.690021][ T5975] usbhid 4-1:0.0: can't add hid device: -71
[  348.690127][ T5975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  348.713242][ T5975] usb 4-1: USB disconnect, device number 54
[  349.125048][ T9660] FAULT_INJECTION: forcing a failure.
[  349.125048][ T9660] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  349.125079][ T9660] CPU: 0 UID: 0 PID: 9660 Comm: syz.0.1268 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  349.125100][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  349.125111][ T9660] Call Trace:
[  349.125118][ T9660]  <TASK>
[  349.125124][ T9660]  dump_stack_lvl+0xe8/0x150
[  349.125157][ T9660]  should_fail_ex+0x46b/0x600
[  349.125185][ T9660]  prepare_alloc_pages+0x22a/0x6b0
[  349.125215][ T9660]  __alloc_frozen_pages_noprof+0x12f/0x380
[  349.125241][ T9660]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  349.125276][ T9660]  ? __pfx_policy_nodemask+0x10/0x10
[  349.125299][ T9660]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  349.125329][ T9660]  ? lockdep_hardirqs_on+0x7a/0x110
[  349.125356][ T9660]  alloc_pages_mpol+0xd1/0x380
[  349.125380][ T9660]  alloc_pages_noprof+0xd2/0x2f0
[  349.125404][ T9660]  get_free_pages_noprof+0xf/0x80
[  349.125426][ T9660]  __kasan_populate_vmalloc+0x38/0x1d0
[  349.125445][ T9660]  ? rt_spin_unlock+0x160/0x200
[  349.125466][ T9660]  alloc_vmap_area+0xd47/0x1480
[  349.125497][ T9660]  ? __pfx_alloc_vmap_area+0x10/0x10
[  349.125517][ T9660]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  349.125539][ T9660]  ? __get_vm_area_node+0x171/0x350
[  349.125556][ T9660]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  349.125580][ T9660]  __get_vm_area_node+0x226/0x350
[  349.125604][ T9660]  __vmalloc_node_range_noprof+0x36a/0x1750
[  349.125624][ T9660]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  349.125668][ T9660]  ? is_bpf_text_address+0x26/0x2b0
[  349.125694][ T9660]  ? kernel_text_address+0xa5/0xe0
[  349.125717][ T9660]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  349.125741][ T9660]  ? __lock_acquire+0x6b5/0x2cf0
[  349.125763][ T9660]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  349.125783][ T9660]  __vmalloc_noprof+0xd2/0x120
[  349.125802][ T9660]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  349.125826][ T9660]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  349.125852][ T9660]  bpf_prog_alloc+0x3c/0x1a0
[  349.125876][ T9660]  bpf_prog_load+0x7ba/0x1ae0
[  349.125911][ T9660]  ? __pfx_bpf_prog_load+0x10/0x10
[  349.125932][ T9660]  ? __might_fault+0xaf/0x130
[  349.125968][ T9660]  ? bpf_lsm_bpf+0x9/0x20
[  349.125989][ T9660]  ? security_bpf+0x7e/0x2d0
[  349.126011][ T9660]  __sys_bpf+0x618/0x950
[  349.126040][ T9660]  ? __pfx___sys_bpf+0x10/0x10
[  349.126059][ T9660]  ? rt_mutex_slowunlock+0x1cb/0x300
[  349.126091][ T9660]  ? ksys_write+0x248/0x270
[  349.126113][ T9660]  ? __pfx_ksys_write+0x10/0x10
[  349.126135][ T9660]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.126153][ T9660]  __x64_sys_bpf+0x7c/0x90
[  349.126173][ T9660]  do_syscall_64+0x15f/0xf80
[  349.126204][ T9660]  ? clear_bhb_loop+0x40/0x90
[  349.126224][ T9660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.126241][ T9660] RIP: 0033:0x7f57b914c819
[  349.126257][ T9660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.126276][ T9660] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  349.126294][ T9660] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  349.126312][ T9660] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  349.126323][ T9660] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  349.126332][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.126342][ T9660] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  349.126369][ T9660]  </TASK>
[  349.852782][ T5850] usb 3-1: USB disconnect, device number 38
[  349.900706][   T36] kauditd_printk_skb: 37 callbacks suppressed
[  349.900724][   T36] audit: type=1326 audit(1776331777.368:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.900765][   T36] audit: type=1326 audit(1776331777.388:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.900803][   T36] audit: type=1326 audit(1776331777.388:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.900840][   T36] audit: type=1326 audit(1776331777.388:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.905079][   T36] audit: type=1326 audit(1776331777.398:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.905125][   T36] audit: type=1326 audit(1776331777.398:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.905163][   T36] audit: type=1326 audit(1776331777.398:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.905202][   T36] audit: type=1326 audit(1776331777.398:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.910667][   T36] audit: type=1326 audit(1776331777.398:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a273ad04e code=0x7ffc0000
[  349.911051][   T36] audit: type=1326 audit(1776331777.408:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  349.981352][ T9687] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1277'.
[  350.212807][ T9694] FAULT_INJECTION: forcing a failure.
[  350.212807][ T9694] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  350.212962][ T9694] CPU: 1 UID: 0 PID: 9694 Comm: syz.2.1286 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  350.212984][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  350.212995][ T9694] Call Trace:
[  350.213003][ T9694]  <TASK>
[  350.213010][ T9694]  dump_stack_lvl+0xe8/0x150
[  350.213051][ T9694]  should_fail_ex+0x46b/0x600
[  350.213075][ T9694]  prepare_alloc_pages+0x22a/0x6b0
[  350.213099][ T9694]  __alloc_frozen_pages_noprof+0x12f/0x380
[  350.213120][ T9694]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  350.213140][ T9694]  ? __pfx_policy_nodemask+0x10/0x10
[  350.213160][ T9694]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  350.213180][ T9694]  ? lockdep_hardirqs_on+0x7a/0x110
[  350.213201][ T9694]  alloc_pages_mpol+0xd1/0x380
[  350.213220][ T9694]  alloc_pages_noprof+0xd2/0x2f0
[  350.213239][ T9694]  get_free_pages_noprof+0xf/0x80
[  350.213257][ T9694]  __kasan_populate_vmalloc+0x38/0x1d0
[  350.213272][ T9694]  ? rt_spin_unlock+0x160/0x200
[  350.213289][ T9694]  alloc_vmap_area+0xd47/0x1480
[  350.213315][ T9694]  ? __pfx_alloc_vmap_area+0x10/0x10
[  350.213331][ T9694]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  350.213348][ T9694]  ? __get_vm_area_node+0x171/0x350
[  350.213363][ T9694]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  350.213382][ T9694]  __get_vm_area_node+0x226/0x350
[  350.213418][ T9694]  __vmalloc_node_range_noprof+0x36a/0x1750
[  350.213435][ T9694]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  350.213466][ T9694]  ? is_bpf_text_address+0x26/0x2b0
[  350.213486][ T9694]  ? kernel_text_address+0xa5/0xe0
[  350.213504][ T9694]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  350.213524][ T9694]  ? __lock_acquire+0x6b5/0x2cf0
[  350.213543][ T9694]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  350.213563][ T9694]  __vmalloc_noprof+0xd2/0x120
[  350.213582][ T9694]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  350.213606][ T9694]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  350.213631][ T9694]  bpf_prog_alloc+0x3c/0x1a0
[  350.213653][ T9694]  bpf_prog_load+0x7ba/0x1ae0
[  350.213691][ T9694]  ? __pfx_bpf_prog_load+0x10/0x10
[  350.213714][ T9694]  ? __might_fault+0xaf/0x130
[  350.213754][ T9694]  ? bpf_lsm_bpf+0x9/0x20
[  350.213775][ T9694]  ? security_bpf+0x7e/0x2d0
[  350.213800][ T9694]  __sys_bpf+0x618/0x950
[  350.213825][ T9694]  ? __pfx___sys_bpf+0x10/0x10
[  350.213845][ T9694]  ? rt_mutex_slowunlock+0x1cb/0x300
[  350.213881][ T9694]  ? ksys_write+0x248/0x270
[  350.213904][ T9694]  ? __pfx_ksys_write+0x10/0x10
[  350.213928][ T9694]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.213947][ T9694]  __x64_sys_bpf+0x7c/0x90
[  350.213967][ T9694]  do_syscall_64+0x15f/0xf80
[  350.213990][ T9694]  ? trace_irq_disable+0x3b/0x140
[  350.214012][ T9694]  ? clear_bhb_loop+0x40/0x90
[  350.214034][ T9694]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.214051][ T9694] RIP: 0033:0x7f23e8c9c819
[  350.214069][ T9694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  350.214084][ T9694] RSP: 002b:00007f23e6eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  350.214102][ T9694] RAX: ffffffffffffffda RBX: 00007f23e8f15fa0 RCX: 00007f23e8c9c819
[  350.214115][ T9694] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  350.214126][ T9694] RBP: 00007f23e6eee090 R08: 0000000000000000 R09: 0000000000000000
[  350.214137][ T9694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.214147][ T9694] R13: 00007f23e8f16038 R14: 00007f23e8f15fa0 R15: 00007fff2c492728
[  350.214177][ T9694]  </TASK>
[  350.438983][ T9700] block nbd0: not configured, cannot reconfigure
[  350.680682][ T5850] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  350.811262][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1295'.
[  350.832403][ T5850] usb 4-1: Using ep0 maxpacket: 32
[  350.835254][ T5850] usb 4-1: unable to read config index 0 descriptor/start: -61
[  350.835286][ T5850] usb 4-1: can't read configurations, error -61
[  350.981016][ T5850] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  351.020871][ T5975] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  351.130676][ T5850] usb 4-1: Using ep0 maxpacket: 32
[  351.144890][ T5850] usb 4-1: unable to read config index 0 descriptor/start: -61
[  351.144923][ T5850] usb 4-1: can't read configurations, error -61
[  351.148976][ T5850] usb usb4-port1: attempt power cycle
[  351.384461][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.386870][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.490697][ T5850] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  351.513836][ T5850] usb 4-1: Using ep0 maxpacket: 32
[  351.522234][ T5850] usb 4-1: unable to read config index 0 descriptor/start: -61
[  351.522266][ T5850] usb 4-1: can't read configurations, error -61
[  351.693101][ T5850] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  351.711862][ T5850] usb 4-1: Using ep0 maxpacket: 32
[  351.716503][ T5850] usb 4-1: unable to read config index 0 descriptor/start: -61
[  351.716536][ T5850] usb 4-1: can't read configurations, error -61
[  351.724455][ T5850] usb usb4-port1: unable to enumerate USB device
[  352.215437][ T9768] FAULT_INJECTION: forcing a failure.
[  352.215437][ T9768] name failslab, interval 1, probability 0, space 0, times 0
[  352.215474][ T9768] CPU: 1 UID: 0 PID: 9768 Comm: syz.1.1319 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  352.215501][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  352.215513][ T9768] Call Trace:
[  352.215520][ T9768]  <TASK>
[  352.215527][ T9768]  dump_stack_lvl+0xe8/0x150
[  352.215558][ T9768]  should_fail_ex+0x46b/0x600
[  352.215587][ T9768]  should_failslab+0xa8/0x100
[  352.215610][ T9768]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  352.215631][ T9768]  ? __alloc_skb+0x1d0/0x7d0
[  352.215648][ T9768]  ? lockdep_hardirqs_on+0x7a/0x110
[  352.215677][ T9768]  __alloc_skb+0x1d0/0x7d0
[  352.215699][ T9768]  netlink_sendmsg+0x5d4/0xb40
[  352.215728][ T9768]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.215761][ T9768]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  352.215784][ T9768]  ____sys_sendmsg+0x94c/0x9c0
[  352.215814][ T9768]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.215842][ T9768]  ? import_iovec+0x73/0xa0
[  352.215863][ T9768]  ___sys_sendmsg+0x2a5/0x360
[  352.215882][ T9768]  ? __lock_acquire+0x6b5/0x2cf0
[  352.215901][ T9768]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.215925][ T9768]  ? kstrtouint+0x6e/0xe0
[  352.215978][ T9768]  ? __fget_files+0x2a/0x420
[  352.215995][ T9768]  ? __fget_files+0x3a6/0x420
[  352.216021][ T9768]  __sys_sendmmsg+0x282/0x4e0
[  352.216047][ T9768]  ? __pfx___sys_sendmmsg+0x10/0x10
[  352.216078][ T9768]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  352.216110][ T9768]  ? ksys_write+0x248/0x270
[  352.216133][ T9768]  ? __pfx_ksys_write+0x10/0x10
[  352.216159][ T9768]  __x64_sys_sendmmsg+0xa0/0xc0
[  352.216180][ T9768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.216199][ T9768]  do_syscall_64+0x15f/0xf80
[  352.216221][ T9768]  ? trace_irq_disable+0x3b/0x140
[  352.216244][ T9768]  ? clear_bhb_loop+0x40/0x90
[  352.216265][ T9768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.216282][ T9768] RIP: 0033:0x7f6e4183c819
[  352.216300][ T9768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.216315][ T9768] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  352.216334][ T9768] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  352.216347][ T9768] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000004
[  352.216358][ T9768] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  352.216368][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.216379][ T9768] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  352.216406][ T9768]  </TASK>
[  353.909769][ T5975] usb 3-1: unable to get BOS descriptor or descriptor too short
[  353.910778][ T5975] usb 3-1: unable to read config index 0 descriptor/start: -71
[  353.910808][ T5975] usb 3-1: can't read configurations, error -71
[  354.042664][ T9815] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1338'.
[  354.540701][ T5975] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  354.645626][ T9844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.682654][ T5975] usb 3-1: device descriptor read/64, error -71
[  354.791314][ T5975] usb usb3-port1: attempt power cycle
[  354.802716][ T9847] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1354'.
[  355.451164][ T9864] FAULT_INJECTION: forcing a failure.
[  355.451164][ T9864] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  355.451198][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.0.1362 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  355.451210][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  355.451217][ T9864] Call Trace:
[  355.451221][ T9864]  <TASK>
[  355.451226][ T9864]  dump_stack_lvl+0xe8/0x150
[  355.451245][ T9864]  should_fail_ex+0x46b/0x600
[  355.451263][ T9864]  prepare_alloc_pages+0x22a/0x6b0
[  355.451281][ T9864]  __alloc_frozen_pages_noprof+0x12f/0x380
[  355.451295][ T9864]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  355.451311][ T9864]  ? __pfx_policy_nodemask+0x10/0x10
[  355.451325][ T9864]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  355.451340][ T9864]  ? lockdep_hardirqs_on+0x7a/0x110
[  355.451355][ T9864]  alloc_pages_mpol+0xd1/0x380
[  355.451369][ T9864]  alloc_pages_noprof+0xd2/0x2f0
[  355.451382][ T9864]  get_free_pages_noprof+0xf/0x80
[  355.451395][ T9864]  __kasan_populate_vmalloc+0x38/0x1d0
[  355.451406][ T9864]  ? rt_spin_unlock+0x160/0x200
[  355.451418][ T9864]  alloc_vmap_area+0xd47/0x1480
[  355.451437][ T9864]  ? __pfx_alloc_vmap_area+0x10/0x10
[  355.451448][ T9864]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  355.451461][ T9864]  ? __get_vm_area_node+0x171/0x350
[  355.451470][ T9864]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.451485][ T9864]  __get_vm_area_node+0x226/0x350
[  355.451498][ T9864]  __vmalloc_node_range_noprof+0x36a/0x1750
[  355.451510][ T9864]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.451531][ T9864]  ? is_bpf_text_address+0x26/0x2b0
[  355.451546][ T9864]  ? kernel_text_address+0xa5/0xe0
[  355.451559][ T9864]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  355.451573][ T9864]  ? __lock_acquire+0x6b5/0x2cf0
[  355.451589][ T9864]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.451604][ T9864]  __vmalloc_noprof+0xd2/0x120
[  355.451615][ T9864]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.451628][ T9864]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.451643][ T9864]  bpf_prog_alloc+0x3c/0x1a0
[  355.451657][ T9864]  bpf_prog_load+0x7ba/0x1ae0
[  355.451678][ T9864]  ? __pfx_bpf_prog_load+0x10/0x10
[  355.451690][ T9864]  ? __might_fault+0xaf/0x130
[  355.451711][ T9864]  ? bpf_lsm_bpf+0x9/0x20
[  355.451724][ T9864]  ? security_bpf+0x7e/0x2d0
[  355.451737][ T9864]  __sys_bpf+0x618/0x950
[  355.451750][ T9864]  ? __pfx___sys_bpf+0x10/0x10
[  355.451761][ T9864]  ? rt_mutex_slowunlock+0x1cb/0x300
[  355.451782][ T9864]  ? __pfx_ksys_write+0x10/0x10
[  355.451795][ T9864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.451806][ T9864]  __x64_sys_bpf+0x7c/0x90
[  355.451817][ T9864]  do_syscall_64+0x15f/0xf80
[  355.451838][ T9864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.451848][ T9864]  ? clear_bhb_loop+0x40/0x90
[  355.451860][ T9864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.451869][ T9864] RIP: 0033:0x7f57b914c819
[  355.451880][ T9864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.451888][ T9864] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  355.451900][ T9864] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  355.451908][ T9864] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  355.451918][ T9864] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  355.451928][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.451936][ T9864] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  355.451961][ T9864]  </TASK>
[  355.480684][ T5975] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  355.495423][ T9867] FAULT_INJECTION: forcing a failure.
[  355.495423][ T9867] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  355.495453][ T9867] CPU: 1 UID: 0 PID: 9867 Comm: syz.1.1363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  355.495472][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  355.495484][ T9867] Call Trace:
[  355.495491][ T9867]  <TASK>
[  355.495498][ T9867]  dump_stack_lvl+0xe8/0x150
[  355.495526][ T9867]  should_fail_ex+0x46b/0x600
[  355.495555][ T9867]  prepare_alloc_pages+0x22a/0x6b0
[  355.495584][ T9867]  __alloc_frozen_pages_noprof+0x12f/0x380
[  355.495609][ T9867]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  355.495635][ T9867]  ? __pfx_policy_nodemask+0x10/0x10
[  355.495660][ T9867]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  355.495684][ T9867]  ? lockdep_hardirqs_on+0x7a/0x110
[  355.495710][ T9867]  alloc_pages_mpol+0xd1/0x380
[  355.495737][ T9867]  alloc_pages_noprof+0xd2/0x2f0
[  355.495760][ T9867]  get_free_pages_noprof+0xf/0x80
[  355.495782][ T9867]  __kasan_populate_vmalloc+0x38/0x1d0
[  355.495801][ T9867]  ? rt_spin_unlock+0x160/0x200
[  355.495822][ T9867]  alloc_vmap_area+0xd47/0x1480
[  355.495859][ T9867]  ? __pfx_alloc_vmap_area+0x10/0x10
[  355.495880][ T9867]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  355.495901][ T9867]  ? __get_vm_area_node+0x171/0x350
[  355.495918][ T9867]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.495941][ T9867]  __get_vm_area_node+0x226/0x350
[  355.495966][ T9867]  __vmalloc_node_range_noprof+0x36a/0x1750
[  355.495986][ T9867]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.496023][ T9867]  ? is_bpf_text_address+0x26/0x2b0
[  355.496048][ T9867]  ? kernel_text_address+0xa5/0xe0
[  355.496071][ T9867]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  355.496096][ T9867]  ? __lock_acquire+0x6b5/0x2cf0
[  355.496117][ T9867]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.496138][ T9867]  __vmalloc_noprof+0xd2/0x120
[  355.496156][ T9867]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.496180][ T9867]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  355.496206][ T9867]  bpf_prog_alloc+0x3c/0x1a0
[  355.496230][ T9867]  bpf_prog_load+0x7ba/0x1ae0
[  355.496264][ T9867]  ? __pfx_bpf_prog_load+0x10/0x10
[  355.496285][ T9867]  ? __might_fault+0xaf/0x130
[  355.496321][ T9867]  ? bpf_lsm_bpf+0x9/0x20
[  355.496342][ T9867]  ? security_bpf+0x7e/0x2d0
[  355.496365][ T9867]  __sys_bpf+0x618/0x950
[  355.496388][ T9867]  ? __pfx___sys_bpf+0x10/0x10
[  355.496407][ T9867]  ? rt_mutex_slowunlock+0x1cb/0x300
[  355.496439][ T9867]  ? ksys_write+0x248/0x270
[  355.496460][ T9867]  ? __pfx_ksys_write+0x10/0x10
[  355.496483][ T9867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.496501][ T9867]  __x64_sys_bpf+0x7c/0x90
[  355.496521][ T9867]  do_syscall_64+0x15f/0xf80
[  355.496542][ T9867]  ? trace_irq_disable+0x3b/0x140
[  355.496563][ T9867]  ? clear_bhb_loop+0x40/0x90
[  355.496583][ T9867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.496599][ T9867] RIP: 0033:0x7f6e4183c819
[  355.496615][ T9867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.496629][ T9867] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  355.496646][ T9867] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  355.496658][ T9867] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005
[  355.496669][ T9867] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  355.496679][ T9867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.496689][ T9867] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  355.496715][ T9867]  </TASK>
[  355.501470][ T5975] usb 3-1: device descriptor read/8, error -71
[  355.585914][ T9869] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  355.760666][ T5975] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  355.791559][ T5975] usb 3-1: device descriptor read/8, error -71
[  355.970799][ T5975] usb usb3-port1: unable to enumerate USB device
[  357.226777][ T9933] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1394'.
[  358.270583][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  359.306860][ T9965] FAULT_INJECTION: forcing a failure.
[  359.306860][ T9965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.306891][ T9965] CPU: 0 UID: 0 PID: 9965 Comm: syz.2.1406 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  359.306911][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  359.306921][ T9965] Call Trace:
[  359.306928][ T9965]  <TASK>
[  359.306936][ T9965]  dump_stack_lvl+0xe8/0x150
[  359.306966][ T9965]  should_fail_ex+0x46b/0x600
[  359.306997][ T9965]  _copy_from_iter+0x1d3/0x1670
[  359.307035][ T9965]  ? trace_kmem_cache_alloc+0x29/0xe0
[  359.307054][ T9965]  ? __alloc_skb+0x27d/0x7d0
[  359.307073][ T9965]  ? __pfx__copy_from_iter+0x10/0x10
[  359.307096][ T9965]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  359.307116][ T9965]  ? __alloc_skb+0x27d/0x7d0
[  359.307137][ T9965]  ? netlink_sendmsg+0x650/0xb40
[  359.307155][ T9965]  ? skb_put+0x11b/0x210
[  359.307176][ T9965]  netlink_sendmsg+0x6c0/0xb40
[  359.307202][ T9965]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.307224][ T9965]  ? unwind_get_return_address+0x4d/0x90
[  359.307247][ T9965]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  359.307269][ T9965]  ____sys_sendmsg+0x94c/0x9c0
[  359.307296][ T9965]  ? __pfx_____sys_sendmsg+0x10/0x10
[  359.307326][ T9965]  ? import_iovec+0x73/0xa0
[  359.307348][ T9965]  ___sys_sendmsg+0x2a5/0x360
[  359.307369][ T9965]  ? __lock_acquire+0x6b5/0x2cf0
[  359.307390][ T9965]  ? __pfx____sys_sendmsg+0x10/0x10
[  359.307452][ T9965]  ? __fget_files+0x2a/0x420
[  359.307469][ T9965]  ? __fget_files+0x3a6/0x420
[  359.307496][ T9965]  __x64_sys_sendmsg+0x1c3/0x2a0
[  359.307520][ T9965]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  359.307552][ T9965]  ? __pfx_ksys_write+0x10/0x10
[  359.307580][ T9965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.307600][ T9965]  do_syscall_64+0x15f/0xf80
[  359.307624][ T9965]  ? trace_irq_disable+0x3b/0x140
[  359.307647][ T9965]  ? clear_bhb_loop+0x40/0x90
[  359.307668][ T9965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.307686][ T9965] RIP: 0033:0x7f23e8c9c819
[  359.307702][ T9965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.307718][ T9965] RSP: 002b:00007f23e6eee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.307737][ T9965] RAX: ffffffffffffffda RBX: 00007f23e8f15fa0 RCX: 00007f23e8c9c819
[  359.307751][ T9965] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003
[  359.307762][ T9965] RBP: 00007f23e6eee090 R08: 0000000000000000 R09: 0000000000000000
[  359.307774][ T9965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.307784][ T9965] R13: 00007f23e8f16038 R14: 00007f23e8f15fa0 R15: 00007fff2c492728
[  359.307814][ T9965]  </TASK>
[  359.994988][ T9981] syz_tun: entered allmulticast mode
[  360.372674][ T9996] FAULT_INJECTION: forcing a failure.
[  360.372674][ T9996] name failslab, interval 1, probability 0, space 0, times 0
[  360.372706][ T9996] CPU: 1 UID: 0 PID: 9996 Comm: syz.0.1419 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  360.372727][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  360.372738][ T9996] Call Trace:
[  360.372745][ T9996]  <TASK>
[  360.372752][ T9996]  dump_stack_lvl+0xe8/0x150
[  360.372781][ T9996]  should_fail_ex+0x46b/0x600
[  360.372809][ T9996]  should_failslab+0xa8/0x100
[  360.372831][ T9996]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  360.372856][ T9996]  ? __alloc_skb+0x1d0/0x7d0
[  360.372872][ T9996]  ? lockdep_hardirqs_on+0x7a/0x110
[  360.372898][ T9996]  __alloc_skb+0x1d0/0x7d0
[  360.372920][ T9996]  alloc_skb_with_frags+0xc8/0x760
[  360.372941][ T9996]  ? __lock_acquire+0x6b5/0x2cf0
[  360.372961][ T9996]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  360.372986][ T9996]  sock_alloc_send_pskb+0x884/0x9a0
[  360.373014][ T9996]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  360.373046][ T9996]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  360.373071][ T9996]  ? dev_get_by_index+0x22/0x2e0
[  360.373093][ T9996]  ? dev_get_by_index+0x22/0x2e0
[  360.373120][ T9996]  packet_sendmsg+0x334e/0x5120
[  360.373161][ T9996]  ? __lock_acquire+0x6b5/0x2cf0
[  360.373183][ T9996]  ? __lock_acquire+0x6b5/0x2cf0
[  360.373202][ T9996]  ? smack_socket_sendmsg+0x1f8/0x590
[  360.373228][ T9996]  ? __pfx_smack_socket_sendmsg+0x10/0x10
[  360.373250][ T9996]  ? __lock_acquire+0x6b5/0x2cf0
[  360.373269][ T9996]  ? __pfx_packet_sendmsg+0x10/0x10
[  360.373289][ T9996]  ? __lock_acquire+0x6b5/0x2cf0
[  360.373311][ T9996]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  360.373354][ T9996]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  360.373377][ T9996]  ____sys_sendmsg+0x94c/0x9c0
[  360.373402][ T9996]  ? __pfx_____sys_sendmsg+0x10/0x10
[  360.373430][ T9996]  ? import_iovec+0x73/0xa0
[  360.373452][ T9996]  ___sys_sendmsg+0x2a5/0x360
[  360.373472][ T9996]  ? __lock_acquire+0x6b5/0x2cf0
[  360.373492][ T9996]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.373518][ T9996]  ? kstrtouint+0x6e/0xe0
[  360.373563][ T9996]  ? __fget_files+0x2a/0x420
[  360.373579][ T9996]  ? __fget_files+0x3a6/0x420
[  360.373605][ T9996]  __sys_sendmmsg+0x282/0x4e0
[  360.373631][ T9996]  ? __pfx___sys_sendmmsg+0x10/0x10
[  360.373660][ T9996]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  360.373693][ T9996]  ? ksys_write+0x248/0x270
[  360.373716][ T9996]  ? __pfx_ksys_write+0x10/0x10
[  360.373741][ T9996]  __x64_sys_sendmmsg+0xa0/0xc0
[  360.373763][ T9996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.373781][ T9996]  do_syscall_64+0x15f/0xf80
[  360.373803][ T9996]  ? trace_irq_disable+0x3b/0x140
[  360.373824][ T9996]  ? clear_bhb_loop+0x40/0x90
[  360.373846][ T9996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.373862][ T9996] RIP: 0033:0x7f57b914c819
[  360.373877][ T9996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.373892][ T9996] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  360.373911][ T9996] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  360.373924][ T9996] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004
[  360.373935][ T9996] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  360.373946][ T9996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.373957][ T9996] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  360.373985][ T9996]  </TASK>
[  360.547200][T10001] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1422'.
[  360.945444][ T9979] syz_tun: left allmulticast mode
[  362.099712][T10043] FAULT_INJECTION: forcing a failure.
[  362.099712][T10043] name failslab, interval 1, probability 0, space 0, times 0
[  362.099745][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.0.1438 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  362.099765][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  362.099780][T10043] Call Trace:
[  362.099787][T10043]  <TASK>
[  362.099795][T10043]  dump_stack_lvl+0xe8/0x150
[  362.099826][T10043]  should_fail_ex+0x46b/0x600
[  362.099857][T10043]  should_failslab+0xa8/0x100
[  362.099882][T10043]  __kmalloc_cache_noprof+0x84/0x690
[  362.099904][T10043]  ? sctp_stream_init_ext+0x57/0x180
[  362.099929][T10043]  sctp_stream_init_ext+0x57/0x180
[  362.099952][T10043]  sctp_sendmsg_to_asoc+0x8e4/0x1900
[  362.099985][T10043]  ? lockdep_hardirqs_on+0x7a/0x110
[  362.100010][T10043]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  362.100035][T10043]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  362.100064][T10043]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  362.100087][T10043]  ? __local_bh_enable+0x1e1/0x2f0
[  362.100116][T10043]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  362.100145][T10043]  ? sctp_sendmsg_check_sflags+0x18a/0x330
[  362.100175][T10043]  sctp_sendmsg+0x1110/0x2990
[  362.100214][T10043]  ? __pfx_sctp_sendmsg+0x10/0x10
[  362.100244][T10043]  ? __might_fault+0xaf/0x130
[  362.100268][T10043]  ? __might_fault+0xaf/0x130
[  362.100297][T10043]  ? sock_rps_record_flow+0x19/0x350
[  362.100321][T10043]  ? inet_sendmsg+0x2f4/0x370
[  362.100339][T10043]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  362.100363][T10043]  ____sys_sendmsg+0x7da/0x9c0
[  362.100392][T10043]  ? __pfx_____sys_sendmsg+0x10/0x10
[  362.100422][T10043]  ? import_iovec+0x73/0xa0
[  362.100445][T10043]  ___sys_sendmsg+0x2a5/0x360
[  362.100465][T10043]  ? __lock_acquire+0x6b5/0x2cf0
[  362.100487][T10043]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.100541][T10043]  ? __fget_files+0x2a/0x420
[  362.100556][T10043]  ? __fget_files+0x3a6/0x420
[  362.100578][T10043]  __x64_sys_sendmsg+0x1c3/0x2a0
[  362.100602][T10043]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  362.100633][T10043]  ? __pfx_ksys_write+0x10/0x10
[  362.100662][T10043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.100682][T10043]  do_syscall_64+0x15f/0xf80
[  362.100704][T10043]  ? trace_irq_disable+0x3b/0x140
[  362.100726][T10043]  ? clear_bhb_loop+0x40/0x90
[  362.100748][T10043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.100766][T10043] RIP: 0033:0x7f57b914c819
[  362.100783][T10043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.100798][T10043] RSP: 002b:00007f57b7385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.100817][T10043] RAX: ffffffffffffffda RBX: 00007f57b93c6090 RCX: 00007f57b914c819
[  362.100829][T10043] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  362.100841][T10043] RBP: 00007f57b7385090 R08: 0000000000000000 R09: 0000000000000000
[  362.100852][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.100863][T10043] R13: 00007f57b93c6128 R14: 00007f57b93c6090 R15: 00007ffcf1a44698
[  362.100892][T10043]  </TASK>
[  362.398916][T10049] siw: device registration error -23
[  363.817139][ T5796] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  363.945363][ T5796] usb 2-1: device descriptor read/64, error -71
[  364.180763][ T5796] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  364.330734][ T5796] usb 2-1: device descriptor read/64, error -71
[  364.442743][ T5796] usb usb2-port1: attempt power cycle
[  364.619747][T10091] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1459'.
[  364.766563][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1460'.
[  364.800715][ T5796] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  364.821646][ T5796] usb 2-1: device descriptor read/8, error -71
[  365.070944][ T5796] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  365.103289][ T5796] usb 2-1: device descriptor read/8, error -71
[  365.211265][ T5796] usb usb2-port1: unable to enumerate USB device
[  366.219103][T10119] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1468'.
[  366.236405][T10119] 9p: Could not find request transport: fd0x0000000000000004!ÿñ«rƒ†ép[QrUÚJ)¦´¹/›Ï¢ ÌËE»B
[  366.989101][   T36] kauditd_printk_skb: 70 callbacks suppressed
[  366.989119][   T36] audit: type=1326 audit(1776331794.478:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.989526][   T36] audit: type=1326 audit(1776331794.478:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.989968][   T36] audit: type=1326 audit(1776331794.478:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.990380][   T36] audit: type=1326 audit(1776331794.478:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.994667][   T36] audit: type=1326 audit(1776331794.478:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.994709][   T36] audit: type=1326 audit(1776331794.488:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.994744][   T36] audit: type=1326 audit(1776331794.488:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.994780][   T36] audit: type=1326 audit(1776331794.488:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  366.994813][   T36] audit: type=1326 audit(1776331794.488:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a273ad04e code=0x7ffc0000
[  366.994848][   T36] audit: type=1326 audit(1776331794.488:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10145 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a273ec819 code=0x7ffc0000
[  367.048009][T10148] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1479'.
[  367.664531][T10175] FAULT_INJECTION: forcing a failure.
[  367.664531][T10175] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  367.664571][T10175] CPU: 0 UID: 0 PID: 10175 Comm: syz.0.1490 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  367.664595][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  367.664609][T10175] Call Trace:
[  367.664617][T10175]  <TASK>
[  367.664625][T10175]  dump_stack_lvl+0xe8/0x150
[  367.664655][T10175]  should_fail_ex+0x46b/0x600
[  367.664686][T10175]  prepare_alloc_pages+0x22a/0x6b0
[  367.664717][T10175]  __alloc_frozen_pages_noprof+0x12f/0x380
[  367.664744][T10175]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  367.664773][T10175]  ? __pfx_policy_nodemask+0x10/0x10
[  367.664798][T10175]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  367.664822][T10175]  ? lockdep_hardirqs_on+0x7a/0x110
[  367.664850][T10175]  alloc_pages_mpol+0xd1/0x380
[  367.664876][T10175]  alloc_pages_noprof+0xd2/0x2f0
[  367.664900][T10175]  get_free_pages_noprof+0xf/0x80
[  367.664924][T10175]  __kasan_populate_vmalloc+0x38/0x1d0
[  367.664944][T10175]  ? rt_spin_unlock+0x160/0x200
[  367.664966][T10175]  alloc_vmap_area+0xd47/0x1480
[  367.664996][T10175]  ? __pfx_alloc_vmap_area+0x10/0x10
[  367.665016][T10175]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  367.665038][T10175]  ? __get_vm_area_node+0x171/0x350
[  367.665055][T10175]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.665079][T10175]  __get_vm_area_node+0x226/0x350
[  367.665103][T10175]  __vmalloc_node_range_noprof+0x36a/0x1750
[  367.665123][T10175]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.665164][T10175]  ? is_bpf_text_address+0x26/0x2b0
[  367.665190][T10175]  ? kernel_text_address+0xa5/0xe0
[  367.665214][T10175]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  367.665241][T10175]  ? __lock_acquire+0x6b5/0x2cf0
[  367.665263][T10175]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.665285][T10175]  __vmalloc_noprof+0xd2/0x120
[  367.665306][T10175]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.665339][T10175]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.665367][T10175]  bpf_prog_alloc+0x3c/0x1a0
[  367.665393][T10175]  bpf_prog_load+0x7ba/0x1ae0
[  367.665430][T10175]  ? __pfx_bpf_prog_load+0x10/0x10
[  367.665453][T10175]  ? __might_fault+0xaf/0x130
[  367.665493][T10175]  ? bpf_lsm_bpf+0x9/0x20
[  367.665515][T10175]  ? security_bpf+0x7e/0x2d0
[  367.665539][T10175]  __sys_bpf+0x618/0x950
[  367.665563][T10175]  ? __pfx___sys_bpf+0x10/0x10
[  367.665583][T10175]  ? rt_mutex_slowunlock+0x1cb/0x300
[  367.665617][T10175]  ? ksys_write+0x248/0x270
[  367.665640][T10175]  ? __pfx_ksys_write+0x10/0x10
[  367.665664][T10175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.665683][T10175]  __x64_sys_bpf+0x7c/0x90
[  367.665705][T10175]  do_syscall_64+0x15f/0xf80
[  367.665728][T10175]  ? trace_irq_disable+0x3b/0x140
[  367.665750][T10175]  ? clear_bhb_loop+0x40/0x90
[  367.665772][T10175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.665795][T10175] RIP: 0033:0x7f57b914c819
[  367.665812][T10175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.665827][T10175] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  367.665847][T10175] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  367.665860][T10175] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005
[  367.665872][T10175] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  367.665882][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.665892][T10175] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  367.665921][T10175]  </TASK>
[  367.666107][T10175] warn_alloc: 4 callbacks suppressed
[  367.666117][T10175] syz.0.1490: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  367.666179][T10175] CPU: 0 UID: 0 PID: 10175 Comm: syz.0.1490 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  367.666198][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  367.666208][T10175] Call Trace:
[  367.666215][T10175]  <TASK>
[  367.666221][T10175]  dump_stack_lvl+0xe8/0x150
[  367.666249][T10175]  warn_alloc+0x263/0x3e0
[  367.666273][T10175]  ? kasan_quarantine_put+0xbb/0x1f0
[  367.666295][T10175]  ? __pfx_warn_alloc+0x10/0x10
[  367.666326][T10175]  ? __get_vm_area_node+0x23f/0x350
[  367.666344][T10175]  ? __get_vm_area_node+0x171/0x350
[  367.666364][T10175]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.666390][T10175]  ? __get_vm_area_node+0x23f/0x350
[  367.666415][T10175]  __vmalloc_node_range_noprof+0x38f/0x1750
[  367.666455][T10175]  ? is_bpf_text_address+0x26/0x2b0
[  367.666482][T10175]  ? kernel_text_address+0xa5/0xe0
[  367.666505][T10175]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  367.666532][T10175]  ? __lock_acquire+0x6b5/0x2cf0
[  367.666553][T10175]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.666574][T10175]  __vmalloc_noprof+0xd2/0x120
[  367.666594][T10175]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.666620][T10175]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  367.666648][T10175]  bpf_prog_alloc+0x3c/0x1a0
[  367.666674][T10175]  bpf_prog_load+0x7ba/0x1ae0
[  367.666711][T10175]  ? __pfx_bpf_prog_load+0x10/0x10
[  367.666734][T10175]  ? __might_fault+0xaf/0x130
[  367.666773][T10175]  ? bpf_lsm_bpf+0x9/0x20
[  367.666794][T10175]  ? security_bpf+0x7e/0x2d0
[  367.666819][T10175]  __sys_bpf+0x618/0x950
[  367.666843][T10175]  ? __pfx___sys_bpf+0x10/0x10
[  367.666863][T10175]  ? rt_mutex_slowunlock+0x1cb/0x300
[  367.666898][T10175]  ? ksys_write+0x248/0x270
[  367.666921][T10175]  ? __pfx_ksys_write+0x10/0x10
[  367.666944][T10175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.666964][T10175]  __x64_sys_bpf+0x7c/0x90
[  367.666985][T10175]  do_syscall_64+0x15f/0xf80
[  367.667008][T10175]  ? trace_irq_disable+0x3b/0x140
[  367.667030][T10175]  ? clear_bhb_loop+0x40/0x90
[  367.667051][T10175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.667068][T10175] RIP: 0033:0x7f57b914c819
[  367.667084][T10175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  367.667098][T10175] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  367.667116][T10175] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  367.667129][T10175] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005
[  367.667140][T10175] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  367.667151][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.667162][T10175] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  367.667190][T10175]  </TASK>
[  367.667202][T10175] Mem-Info:
[  367.667209][T10175] active_anon:258 inactive_anon:7327 isolated_anon:0
[  367.667209][T10175]  active_file:7361 inactive_file:46365 isolated_file:0
[  367.667209][T10175]  unevictable:768 dirty:165 writeback:0
[  367.667209][T10175]  slab_reclaimable:12060 slab_unreclaimable:107038
[  367.667209][T10175]  mapped:32607 shmem:2209 pagetables:1307
[  367.667209][T10175]  sec_pagetables:0 bounce:0
[  367.667209][T10175]  kernel_misc_reclaimable:0
[  367.667209][T10175]  free:1305038 free_pcp:8804 free_cma:0
[  367.667257][T10175] Node 0 active_anon:1032kB inactive_anon:29308kB active_file:29248kB inactive_file:185460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130428kB dirty:660kB writeback:0kB shmem:7300kB kernel_stack:13904kB pagetables:5096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  367.667303][T10175] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  367.667355][T10175] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  367.667421][T10175] lowmem_reserve[]: 0 2505 2505 2505 2505
[  367.667453][T10175] Node 0 DMA32 free:1276352kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:29408kB active_file:29248kB inactive_file:185460kB unevictable:1536kB writepending:660kB zspages:0kB present:3129332kB managed:2565444kB mlocked:0kB bounce:0kB free_pcp:34436kB local_pcp:7872kB free_cma:0kB
[  367.667516][T10175] lowmem_reserve[]: 0 0 0 0 0
[  367.672177][T10175] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:148kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  367.672233][T10175] lowmem_reserve[]: 0 0 0 0 0
[  367.672263][T10175] Node 1 Normal free:3928440kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:768kB local_pcp:0kB free_cma:0kB
[  367.672319][T10175] lowmem_reserve[]: 0 0 0 0 0
[  367.672345][T10175] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  367.672449][T10175] Node 0 DMA32: 2293*4kB (UM) 1824*8kB (UM) 735*16kB (UE) 55*32kB (UME) 6*64kB (UE) 55*128kB (UM) 49*256kB (UME) 13*512kB (UME) 12*1024kB (UME) 6*2048kB (UME) 290*4096kB (UM) = 1276324kB
[  367.672579][T10175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  367.672666][T10175] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 958*4096kB (M) = 3928440kB
[  367.672799][T10175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  367.672814][T10175] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  367.672829][T10175] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  367.672844][T10175] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  367.672857][T10175] 55981 total pagecache pages
[  367.672869][T10175] 0 pages in swap cache
[  367.672876][T10175] Free swap  = 124996kB
[  367.672883][T10175] Total swap = 124996kB
[  367.672890][T10175] 2097051 pages RAM
[  367.672896][T10175] 0 pages HighMem/MovableOnly
[  367.672902][T10175] 424038 pages reserved
[  367.672908][T10175] 0 pages cma reserved
[  368.900856][T10115] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.909410][T10115] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.055845][T10198] FAULT_INJECTION: forcing a failure.
[  369.055845][T10198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.055875][T10198] CPU: 0 UID: 0 PID: 10198 Comm: syz.0.1500 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  369.055893][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  369.055902][T10198] Call Trace:
[  369.055908][T10198]  <TASK>
[  369.055915][T10198]  dump_stack_lvl+0xe8/0x150
[  369.055941][T10198]  should_fail_ex+0x46b/0x600
[  369.055965][T10198]  _copy_from_iter+0x1d3/0x1670
[  369.055997][T10198]  ? trace_kmem_cache_alloc+0x29/0xe0
[  369.056013][T10198]  ? __alloc_skb+0x27d/0x7d0
[  369.056027][T10198]  ? __pfx__copy_from_iter+0x10/0x10
[  369.056043][T10198]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  369.056057][T10198]  ? __alloc_skb+0x27d/0x7d0
[  369.056074][T10198]  ? netlink_sendmsg+0x650/0xb40
[  369.056088][T10198]  ? skb_put+0x11b/0x210
[  369.056105][T10198]  netlink_sendmsg+0x6c0/0xb40
[  369.056125][T10198]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.056141][T10198]  ? unwind_get_return_address+0x4d/0x90
[  369.056170][T10198]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  369.056188][T10198]  ____sys_sendmsg+0x94c/0x9c0
[  369.056211][T10198]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.056234][T10198]  ? import_iovec+0x73/0xa0
[  369.056253][T10198]  ___sys_sendmsg+0x2a5/0x360
[  369.056270][T10198]  ? __lock_acquire+0x6b5/0x2cf0
[  369.056288][T10198]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.056330][T10198]  ? __fget_files+0x2a/0x420
[  369.056342][T10198]  ? __fget_files+0x3a6/0x420
[  369.056360][T10198]  __x64_sys_sendmsg+0x1c3/0x2a0
[  369.056378][T10198]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  369.056401][T10198]  ? __pfx_ksys_write+0x10/0x10
[  369.056425][T10198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.056440][T10198]  do_syscall_64+0x15f/0xf80
[  369.056459][T10198]  ? trace_irq_disable+0x3b/0x140
[  369.056478][T10198]  ? clear_bhb_loop+0x40/0x90
[  369.056495][T10198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.056508][T10198] RIP: 0033:0x7f57b914c819
[  369.056523][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.056535][T10198] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.056551][T10198] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  369.056562][T10198] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  369.056571][T10198] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  369.056579][T10198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.056588][T10198] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  369.056616][T10198]  </TASK>
[  369.435398][T10200] FAULT_INJECTION: forcing a failure.
[  369.435398][T10200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.435429][T10200] CPU: 0 UID: 0 PID: 10200 Comm: syz.0.1501 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  369.435451][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  369.435462][T10200] Call Trace:
[  369.435469][T10200]  <TASK>
[  369.435477][T10200]  dump_stack_lvl+0xe8/0x150
[  369.435507][T10200]  should_fail_ex+0x46b/0x600
[  369.435538][T10200]  _copy_from_iter+0x1d3/0x1670
[  369.435569][T10200]  ? trace_kmem_cache_alloc+0x29/0xe0
[  369.435589][T10200]  ? __alloc_skb+0x27d/0x7d0
[  369.435607][T10200]  ? __pfx__copy_from_iter+0x10/0x10
[  369.435628][T10200]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  369.435646][T10200]  ? __alloc_skb+0x27d/0x7d0
[  369.435669][T10200]  ? netlink_sendmsg+0x650/0xb40
[  369.435687][T10200]  ? skb_put+0x11b/0x210
[  369.435706][T10200]  netlink_sendmsg+0x6c0/0xb40
[  369.435732][T10200]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.435752][T10200]  ? unwind_get_return_address+0x4d/0x90
[  369.435773][T10200]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  369.435793][T10200]  ____sys_sendmsg+0x94c/0x9c0
[  369.435819][T10200]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.435847][T10200]  ? import_iovec+0x73/0xa0
[  369.435868][T10200]  ___sys_sendmsg+0x2a5/0x360
[  369.435891][T10200]  ? __lock_acquire+0x6b5/0x2cf0
[  369.435910][T10200]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.435962][T10200]  ? __fget_files+0x2a/0x420
[  369.435979][T10200]  ? __fget_files+0x3a6/0x420
[  369.436004][T10200]  __x64_sys_sendmsg+0x1c3/0x2a0
[  369.436027][T10200]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  369.436055][T10200]  ? __pfx_ksys_write+0x10/0x10
[  369.436083][T10200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.436102][T10200]  do_syscall_64+0x15f/0xf80
[  369.436125][T10200]  ? trace_irq_disable+0x3b/0x140
[  369.436146][T10200]  ? clear_bhb_loop+0x40/0x90
[  369.436168][T10200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.436186][T10200] RIP: 0033:0x7f57b914c819
[  369.436204][T10200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.436219][T10200] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.436239][T10200] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  369.436253][T10200] RDX: 0000000000008024 RSI: 0000200000000140 RDI: 0000000000000003
[  369.436265][T10200] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  369.436276][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.436287][T10200] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  369.436316][T10200]  </TASK>
[  370.919302][T10235] FAULT_INJECTION: forcing a failure.
[  370.919302][T10235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.919329][T10235] CPU: 0 UID: 0 PID: 10235 Comm: syz.0.1518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  370.919349][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  370.919359][T10235] Call Trace:
[  370.919366][T10235]  <TASK>
[  370.919374][T10235]  dump_stack_lvl+0xe8/0x150
[  370.919405][T10235]  should_fail_ex+0x46b/0x600
[  370.919427][T10235]  _copy_from_user+0x2d/0xb0
[  370.919438][T10235]  wext_handle_ioctl+0xc7/0x1d0
[  370.919452][T10235]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  370.919466][T10235]  ? __asan_memset+0x22/0x50
[  370.919476][T10235]  ? smack_file_ioctl+0x263/0x360
[  370.919489][T10235]  sock_ioctl+0x15c/0x7f0
[  370.919505][T10235]  ? __pfx_sock_ioctl+0x10/0x10
[  370.919518][T10235]  ? __fget_files+0x2a/0x420
[  370.919527][T10235]  ? __fget_files+0x3a6/0x420
[  370.919535][T10235]  ? __fget_files+0x2a/0x420
[  370.919545][T10235]  ? bpf_lsm_file_ioctl+0x9/0x20
[  370.919559][T10235]  ? __pfx_sock_ioctl+0x10/0x10
[  370.919571][T10235]  __se_sys_ioctl+0xff/0x170
[  370.919583][T10235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.919594][T10235]  do_syscall_64+0x15f/0xf80
[  370.919607][T10235]  ? trace_irq_disable+0x3b/0x140
[  370.919620][T10235]  ? clear_bhb_loop+0x40/0x90
[  370.919631][T10235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.919641][T10235] RIP: 0033:0x7f57b914c819
[  370.919651][T10235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.919660][T10235] RSP: 002b:00007f57b73a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  370.919671][T10235] RAX: ffffffffffffffda RBX: 00007f57b93c5fa0 RCX: 00007f57b914c819
[  370.919678][T10235] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004
[  370.919685][T10235] RBP: 00007f57b73a6090 R08: 0000000000000000 R09: 0000000000000000
[  370.919691][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.919697][T10235] R13: 00007f57b93c6038 R14: 00007f57b93c5fa0 R15: 00007ffcf1a44698
[  370.919712][T10235]  </TASK>
[  371.463717][   T67] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.466401][   T67] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.466443][   T67] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.466476][   T67] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.692587][T10255] syz_tun: entered allmulticast mode
[  373.571686][T10254] syz_tun: left allmulticast mode
[  373.993555][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1551'.
[  374.450743][ T5796] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  374.603167][ T5796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  374.607500][ T5796] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  374.607527][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.607545][ T5796] usb 3-1: Product: syz
[  374.607559][ T5796] usb 3-1: Manufacturer: syz
[  374.607572][ T5796] usb 3-1: SerialNumber: syz
[  374.665170][ T5796] usb 3-1: config 0 descriptor??
[  374.684155][ T5796] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  374.876431][T10319] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1555'.
[  374.881173][   T43] usb 3-1: USB disconnect, device number 43
[  375.540299][T10381] FAULT_INJECTION: forcing a failure.
[  375.540299][T10381] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  375.540332][T10381] CPU: 1 UID: 0 PID: 10381 Comm: syz.2.1581 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  375.540354][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  375.540365][T10381] Call Trace:
[  375.540372][T10381]  <TASK>
[  375.540380][T10381]  dump_stack_lvl+0xe8/0x150
[  375.540410][T10381]  should_fail_ex+0x46b/0x600
[  375.540450][T10381]  _copy_from_user+0x2d/0xb0
[  375.540471][T10381]  ___sys_recvmsg+0x175/0x590
[  375.540500][T10381]  ? __pfx____sys_recvmsg+0x10/0x10
[  375.540525][T10381]  ? __fget_files+0x2a/0x420
[  375.540570][T10381]  do_recvmmsg+0x33a/0x800
[  375.540600][T10381]  ? __pfx_do_recvmmsg+0x10/0x10
[  375.540634][T10381]  ? rt_mutex_slowunlock+0x1cb/0x300
[  375.540669][T10381]  __x64_sys_recvmmsg+0x198/0x250
[  375.540693][T10381]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  375.540723][T10381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.540743][T10381]  do_syscall_64+0x15f/0xf80
[  375.540765][T10381]  ? trace_irq_disable+0x3b/0x140
[  375.540787][T10381]  ? clear_bhb_loop+0x40/0x90
[  375.540808][T10381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.540825][T10381] RIP: 0033:0x7f23e8c9c819
[  375.540842][T10381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.540856][T10381] RSP: 002b:00007f23e6eee028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  375.540874][T10381] RAX: ffffffffffffffda RBX: 00007f23e8f15fa0 RCX: 00007f23e8c9c819
[  375.540886][T10381] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004
[  375.540897][T10381] RBP: 00007f23e6eee090 R08: 0000000000000000 R09: 0000000000000000
[  375.540907][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.540917][T10381] R13: 00007f23e8f16038 R14: 00007f23e8f15fa0 R15: 00007fff2c492728
[  375.540944][T10381]  </TASK>
[  376.000669][ T5850] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  376.156068][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  376.156969][ T5850] usb 3-1: can't read configurations, error -61
[  376.280706][ T5850] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  376.434288][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  376.434325][ T5850] usb 3-1: can't read configurations, error -61
[  376.435523][ T5850] usb usb3-port1: attempt power cycle
[  376.780717][ T5850] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  376.803808][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  376.803843][ T5850] usb 3-1: can't read configurations, error -61
[  376.940919][ T5850] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  376.966137][ T5850] usb 3-1: unable to read config index 0 descriptor/start: -61
[  376.966172][ T5850] usb 3-1: can't read configurations, error -61
[  376.969833][ T5850] usb usb3-port1: unable to enumerate USB device
[  377.361625][   T31] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  377.510674][   T31] usb 4-1: Using ep0 maxpacket: 8
[  377.513009][   T31] usb 4-1: unable to get BOS descriptor or descriptor too short
[  377.514402][   T31] usb 4-1: config 8 has an invalid interface number: 122 but max is 3
[  377.514425][   T31] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  377.514443][   T31] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 4
[  377.514462][   T31] usb 4-1: config 8 has no interface number 0
[  377.514514][   T31] usb 4-1: config 8 interface 122 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  377.514538][   T31] usb 4-1: config 8 interface 122 has no altsetting 0
[  377.516941][   T31] usb 4-1: New USB device found, idVendor=0421, idProduct=0108, bcdDevice=b9.c0
[  377.516965][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.516983][   T31] usb 4-1: Product: syz
[  377.516996][   T31] usb 4-1: Manufacturer: syz
[  377.517009][   T31] usb 4-1: SerialNumber: syz
[  377.831145][T10458] FAULT_INJECTION: forcing a failure.
[  377.831145][T10458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.831176][T10458] CPU: 0 UID: 0 PID: 10458 Comm: syz.1.1613 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  377.831196][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  377.831206][T10458] Call Trace:
[  377.831212][T10458]  <TASK>
[  377.831220][T10458]  dump_stack_lvl+0xe8/0x150
[  377.831250][T10458]  should_fail_ex+0x46b/0x600
[  377.831280][T10458]  _copy_from_user+0x2d/0xb0
[  377.831300][T10458]  wext_handle_ioctl+0xc7/0x1d0
[  377.831325][T10458]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  377.831348][T10458]  ? __asan_memset+0x22/0x50
[  377.831366][T10458]  ? smack_file_ioctl+0x263/0x360
[  377.831390][T10458]  sock_ioctl+0x15c/0x7f0
[  377.831416][T10458]  ? __pfx_sock_ioctl+0x10/0x10
[  377.831441][T10458]  ? __fget_files+0x2a/0x420
[  377.831465][T10458]  ? __fget_files+0x3a6/0x420
[  377.831480][T10458]  ? __fget_files+0x2a/0x420
[  377.831499][T10458]  ? bpf_lsm_file_ioctl+0x9/0x20
[  377.831522][T10458]  ? __pfx_sock_ioctl+0x10/0x10
[  377.831544][T10458]  __se_sys_ioctl+0xff/0x170
[  377.831566][T10458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.831585][T10458]  do_syscall_64+0x15f/0xf80
[  377.831608][T10458]  ? trace_irq_disable+0x3b/0x140
[  377.831631][T10458]  ? clear_bhb_loop+0x40/0x90
[  377.831652][T10458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.831669][T10458] RIP: 0033:0x7f6e4183c819
[  377.831686][T10458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.831700][T10458] RSP: 002b:00007f6e3fa96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  377.831719][T10458] RAX: ffffffffffffffda RBX: 00007f6e41ab5fa0 RCX: 00007f6e4183c819
[  377.831732][T10458] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003
[  377.831751][T10458] RBP: 00007f6e3fa96090 R08: 0000000000000000 R09: 0000000000000000
[  377.831763][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.831774][T10458] R13: 00007f6e41ab6038 R14: 00007f6e41ab5fa0 R15: 00007ffc47a7e498
[  377.831802][T10458]  </TASK>
[  378.068505][   T31] rndis_host 4-1:8.122: ACM capabilities 04, not really RNDIS?
[  378.086499][   T31] usb 4-1: USB disconnect, device number 59
[  378.507743][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  378.507808][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  380.302201][ T5975] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  380.456035][ T5975] usb 3-1: unable to get BOS descriptor or descriptor too short
[  380.457099][ T5975] usb 3-1: not running at top speed; connect to a high speed hub
[  380.459803][ T5975] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.459825][ T5975] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  380.467662][ T5975] usb 3-1: string descriptor 0 read error: -22
[  380.467806][ T5975] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[  380.467828][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.574232][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1639'.
[  380.814750][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  380.851333][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  380.855313][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  380.886094][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  380.887161][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.414582][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'.
[  381.417646][ T5811] Bluetooth: hci0: Malformed LE Event: 0x1b
[  381.455989][ T5793] =========[  381.455989][ T5793] ==================================================================
[  381.456003][ T5793] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190
[  381.456028][ T5793] Read of size 8 at addr ffff88806105c780 by task syz-executor/5793
[  381.456039][ T5793] 
[  381.456048][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  381.456063][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  381.456071][ T5793] Call Trace:
[  381.456077][ T5793]  <TASK>
[  381.456083][ T5793]  dump_stack_lvl+0xe8/0x150
[  381.456103][ T5793]  print_address_description+0x55/0x1e0
[  381.456124][ T5793]  ? __list_del_entry_valid_or_report+0x92/0x190
[  381.456141][ T5793]  print_report+0x58/0x70
[  381.456158][ T5793]  kasan_report+0x117/0x150
[  381.456176][ T5793]  ? __list_del_entry_valid_or_report+0x92/0x190
[  381.456196][ T5793]  __list_del_entry_valid_or_report+0x92/0x190
[  381.456217][ T5793]  bt_accept_unlink+0x39/0x260
[  381.456234][ T5793]  l2cap_sock_teardown_cb+0x17e/0x490
[  381.456255][ T5793]  l2cap_chan_del+0xb5/0x610
[  381.456274][ T5793]  ? l2cap_conn_del+0x331/0x570
[  381.456292][ T5793]  l2cap_conn_del+0x33d/0x570
[  381.456309][ T5793]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  381.456327][ T5793]  hci_conn_hash_flush+0x10d/0x260
[  381.456347][ T5793]  hci_dev_close_sync+0x821/0x10e0
[  381.456367][ T5793]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  381.456384][ T5793]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  381.456405][ T5793]  ? hci_unregister_dev+0x212/0x5a0
[  381.456421][ T5793]  hci_unregister_dev+0x21a/0x5a0
[  381.456437][ T5793]  vhci_release+0x155/0x1b0
[  381.456460][ T5793]  ? __pfx_vhci_release+0x10/0x10
[  381.456477][ T5793]  __fput+0x461/0xa70
[  381.456492][ T5793]  task_work_run+0x1d9/0x270
[  381.456508][ T5793]  ? __pfx_task_work_run+0x10/0x10
[  381.456521][ T5793]  ? do_exit+0x70a/0x22c0
[  381.456532][ T5793]  ? kmem_cache_free+0x187/0x6c0
[  381.456546][ T5793]  ? put_net+0x191/0x260
[  381.456562][ T5793]  ? do_exit+0x70a/0x22c0
[  381.456575][ T5793]  do_exit+0x70f/0x22c0
[  381.456588][ T5793]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  381.456606][ T5793]  ? __pfx_do_exit+0x10/0x10
[  381.456617][ T5793]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  381.456636][ T5793]  ? reacquire_held_locks+0x104/0x190
[  381.456650][ T5793]  ? rt_spin_lock+0x1e0/0x400
[  381.456668][ T5793]  do_group_exit+0x21b/0x2d0
[  381.456681][ T5793]  ? rt_spin_unlock+0x160/0x200
[  381.456696][ T5793]  get_signal+0x125c/0x1310
[  381.456720][ T5793]  arch_do_signal_or_restart+0xbc/0x830
[  381.456740][ T5793]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  381.456759][ T5793]  ? ksys_read+0x202/0x270
[  381.456778][ T5793]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.456793][ T5793]  exit_to_user_mode_loop+0x86/0x480
[  381.456813][ T5793]  ? rcu_is_watching+0x15/0xb0
[  381.456828][ T5793]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.456843][ T5793]  do_syscall_64+0x33e/0xf80
[  381.456874][ T5793]  ? trace_irq_disable+0x3b/0x140
[  381.456893][ T5793]  ? clear_bhb_loop+0x40/0x90
[  381.456908][ T5793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.456921][ T5793] RIP: 0033:0x7f6e417fd04e
[  381.456933][ T5793] Code: Unable to access opcode bytes at 0x7f6e417fd024.
[  381.456940][ T5793] RSP: 002b:00007ffc47a7e798 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  381.456955][ T5793] RAX: fffffffffffffe00 RBX: 00005555683f4500 RCX: 00007f6e417fd04e
[  381.456965][ T5793] RDX: 0000000000000030 RSI: 00007ffc47a7e890 RDI: 00000000000000f9
[  381.456974][ T5793] RBP: 00007ffc47a7e83c R08: 0000000000000000 R09: 0000000000000000
[  381.456981][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258
[  381.456990][ T5793] R13: 00000000000927c0 R14: 000000000005c67b R15: 00007ffc47a7e890
[  381.457005][ T5793]  </TASK>
[  381.457010][ T5793] 
[  381.457014][ T5793] Allocated by task 10:
[  381.457020][ T5793]  kasan_save_track+0x3e/0x80
[  381.457035][ T5793]  __kasan_kmalloc+0x93/0xb0
[  381.457048][ T5793]  __kmalloc_cache_noprof+0x3a6/0x690
[  381.457063][ T5793]  wg_noise_handshake_begin_session+0xcc/0xbe0
[  381.457082][ T5793]  wg_packet_send_handshake_response+0x13c/0x310
[  381.457096][ T5793]  wg_packet_handshake_receive_worker+0x72a/0x10a0
[  381.457111][ T5793]  process_scheduled_works+0xb5d/0x1860
[  381.457127][ T5793]  worker_thread+0xa53/0xfc0
[  381.457144][ T5793]  kthread+0x388/0x470
[  381.457157][ T5793]  ret_from_fork+0x514/0xb70
[  381.457175][ T5793]  ret_from_fork_asm+0x1a/0x30
[  381.457190][ T5793] 
[  381.457193][ T5793] Freed by task 28:
[  381.457200][ T5793]  kasan_save_track+0x3e/0x80
[  381.457215][ T5793]  kasan_save_free_info+0x46/0x50
[  381.457235][ T5793]  __kasan_slab_free+0x5c/0x80
[  381.457250][ T5793]  kfree+0x1c5/0x6c0
[  381.457264][ T5793]  rcu_cpu_kthread+0x99e/0x1470
[  381.457278][ T5793]  smpboot_thread_fn+0x541/0xa50
[  381.457297][ T5793]  kthread+0x388/0x470
[  381.457310][ T5793]  ret_from_fork+0x514/0xb70
[  381.457329][ T5793]  ret_from_fork_asm+0x1a/0x30
[  381.457342][ T5793] 
[  381.457346][ T5793] Last potentially related work creation:
[  381.457353][ T5793]  kasan_save_stack+0x3e/0x60
[  381.457368][ T5793]  kasan_record_aux_stack+0xbd/0xd0
[  381.457388][ T5793]  call_rcu+0xee/0x890
[  381.457402][ T5793]  wg_noise_keypairs_clear+0x18d/0x2c0
[  381.457422][ T5793]  wg_stop+0x9c/0x600
[  381.457440][ T5793]  __dev_close_many+0x36d/0x6e0
[  381.457454][ T5793]  __dev_change_flags+0x2cb/0x690
[  381.457470][ T5793]  netif_change_flags+0x88/0x1a0
[  381.457485][ T5793]  do_setlink+0xf82/0x4590
[  381.457500][ T5793]  rtnl_newlink+0x14ca/0x1bb0
[  381.457513][ T5793]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  381.457527][ T5793]  netlink_rcv_skb+0x232/0x4b0
[  381.457542][ T5793]  netlink_unicast+0x780/0x920
[  381.457562][ T5793]  netlink_sendmsg+0x813/0xb40
[  381.457578][ T5793]  ____sys_sendmsg+0x94c/0x9c0
[  381.457595][ T5793]  ___sys_sendmsg+0x2a5/0x360
[  381.457613][ T5793]  __x64_sys_sendmsg+0x1c3/0x2a0
[  381.457631][ T5793]  do_syscall_64+0x15f/0xf80
[  381.457651][ T5793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.457667][ T5793] 
[  381.457671][ T5793] The buggy address belongs to the object at ffff88806105c000
[  381.457671][ T5793]  which belongs to the cache kmalloc-2k of size 2048
[  381.457687][ T5793] The buggy address is located 1920 bytes inside of
[  381.457687][ T5793]  freed 2048-byte region [ffff88806105c000, ffff88806105c800)
[  381.457705][ T5793] 
[  381.457710][ T5793] The buggy address belongs to the physical page:
[  381.457719][ T5793] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806105c000 pfn:0x61058
[  381.457738][ T5793] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  381.457752][ T5793] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[  381.457767][ T5793] page_type: f5(slab)
[  381.457782][ T5793] raw: 0080000000000240 ffff88801a021000 ffffea0001888610 ffffea0000ad1e10
[  381.457798][ T5793] raw: ffff88806105c000 0000000800080005 00000000f5000000 0000000000000000
[  381.457814][ T5793] head: 0080000000000240 ffff88801a021000 ffffea0001888610 ffffea0000ad1e10
[  381.457829][ T5793] head: ffff88806105c000 0000000800080005 00000000f5000000 0000000000000000
[  381.457844][ T5793] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  381.457866][ T5793] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  381.457874][ T5793] page dumped because: kasan: bad access detected
[  381.457888][ T5793] page_owner tracks the page as allocated
[  381.457894][ T5793] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5794, tgid 5794 (syz-executor), ts 78874319159, free_ts 0
[  381.457923][ T5793]  post_alloc_hook+0x231/0x280
[  381.457941][ T5793]  get_page_from_freelist+0x27c8/0x2840
[  381.457961][ T5793]  __alloc_frozen_pages_noprof+0x18d/0x380
[  381.457981][ T5793]  allocate_slab+0x77/0x660
[  381.458002][ T5793]  refill_objects+0x33c/0x3d0
[  381.458022][ T5793]  __pcs_replace_empty_main+0x373/0x720
[  381.458044][ T5793]  __kmalloc_node_track_caller_noprof+0x60b/0x7e0
[  381.458062][ T5793]  __alloc_skb+0x2c1/0x7d0
[  381.458078][ T5793]  inet6_ifinfo_notify+0x70/0x120
[  381.458094][ T5793]  addrconf_notify+0xca0/0x1050
[  381.458111][ T5793]  notifier_call_chain+0x1ad/0x3d0
[  381.458126][ T5793]  __dev_notify_flags+0x1a9/0x310
[  381.458143][ T5793]  netif_change_flags+0xe8/0x1a0
[  381.458158][ T5793]  do_setlink+0xf82/0x4590
[  381.458173][ T5793]  rtnl_newlink+0x15ad/0x1bb0
[  381.458187][ T5793]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  381.458201][ T5793] page_owner free stack trace missing
[  381.458207][ T5793] 
[  381.458212][ T5793] Memory state around the buggy address:
[  381.458221][ T5793]  ffff88806105c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.458232][ T5793]  ffff88806105c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.458243][ T5793] >ffff88806105c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.458251][ T5793]                    ^
[  381.458259][ T5793]  ffff88806105c800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  381.458270][ T5793]  ffff88806105c880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  381.458278][ T5793] ==================================================================
[  381.464651][ T5793] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  381.464669][ T5793] CPU: 0 UID: 0 PID: 5793 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  381.464690][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  381.464700][ T5793] Call Trace:
[  381.464707][ T5793]  <TASK>
[  381.464714][ T5793]  vpanic+0x56c/0xa60
[  381.464735][ T5793]  ? __pfx_vpanic+0x10/0x10
[  381.464755][ T5793]  panic+0xc5/0xd0
[  381.464769][ T5793]  ? __pfx_panic+0x10/0x10
[  381.464784][ T5793]  ? preempt_schedule_thunk+0x16/0x30
[  381.464805][ T5793]  ? __list_del_entry_valid_or_report+0x92/0x190
[  381.464828][ T5793]  ? preempt_schedule_thunk+0x16/0x30
[  381.464847][ T5793]  ? __list_del_entry_valid_or_report+0x92/0x190
[  381.464869][ T5793]  check_panic_on_warn+0x89/0xb0
[  381.464888][ T5793]  ? __list_del_entry_valid_or_report+0x92/0x190
[  381.464909][ T5793]  end_report+0x73/0x170
[  381.464929][ T5793]  ? __list_del_entry_valid_or_report+0x92/0x190
[  381.464951][ T5793]  kasan_report+0x128/0x150
[  381.464971][ T5793]  ? __list_del_entry_valid_or_report+0x92/0x190
[  381.464998][ T5793]  __list_del_entry_valid_or_report+0x92/0x190
[  381.465025][ T5793]  bt_accept_unlink+0x39/0x260
[  381.465045][ T5793]  l2cap_sock_teardown_cb+0x17e/0x490
[  381.465071][ T5793]  l2cap_chan_del+0xb5/0x610
[  381.465094][ T5793]  ? l2cap_conn_del+0x331/0x570
[  381.465124][ T5793]  l2cap_conn_del+0x33d/0x570
[  381.465145][ T5793]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  381.465167][ T5793]  hci_conn_hash_flush+0x10d/0x260
[  381.465192][ T5793]  hci_dev_close_sync+0x821/0x10e0
[  381.465215][ T5793]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  381.465234][ T5793]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  381.465257][ T5793]  ? hci_unregister_dev+0x212/0x5a0
[  381.465275][ T5793]  hci_unregister_dev+0x21a/0x5a0
[  381.465293][ T5793]  vhci_release+0x155/0x1b0
[  381.465317][ T5793]  ? __pfx_vhci_release+0x10/0x10
[  381.465341][ T5793]  __fput+0x461/0xa70
[  381.465360][ T5793]  task_work_run+0x1d9/0x270
[  381.465380][ T5793]  ? __pfx_task_work_run+0x10/0x10
[  381.465398][ T5793]  ? do_exit+0x70a/0x22c0
[  381.465414][ T5793]  ? kmem_cache_free+0x187/0x6c0
[  381.465434][ T5793]  ? put_net+0x191/0x260
[  381.465454][ T5793]  ? do_exit+0x70a/0x22c0
[  381.465471][ T5793]  do_exit+0x70f/0x22c0
[  381.465489][ T5793]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  381.465513][ T5793]  ? __pfx_do_exit+0x10/0x10
[  381.465529][ T5793]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  381.465548][ T5793]  ? reacquire_held_locks+0x104/0x190
[  381.465566][ T5793]  ? rt_spin_lock+0x1e0/0x400
[  381.465589][ T5793]  do_group_exit+0x21b/0x2d0
[  381.465607][ T5793]  ? rt_spin_unlock+0x160/0x200
[  381.465627][ T5793]  get_signal+0x125c/0x1310
[  381.465657][ T5793]  arch_do_signal_or_restart+0xbc/0x830
[  381.465680][ T5793]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  381.465704][ T5793]  ? ksys_read+0x202/0x270
[  381.465726][ T5793]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.465744][ T5793]  exit_to_user_mode_loop+0x86/0x480
[  381.465768][ T5793]  ? rcu_is_watching+0x15/0xb0
[  381.465785][ T5793]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.465801][ T5793]  do_syscall_64+0x33e/0xf80
[  381.465823][ T5793]  ? trace_irq_disable+0x3b/0x140
[  381.465844][ T5793]  ? clear_bhb_loop+0x40/0x90
[  381.465863][ T5793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.465880][ T5793] RIP: 0033:0x7f6e417fd04e
[  381.465896][ T5793] Code: Unable to access opcode bytes at 0x7f6e417fd024.
[  381.465905][ T5793] RSP: 002b:00007ffc47a7e798 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  381.465924][ T5793] RAX: fffffffffffffe00 RBX: 00005555683f4500 RCX: 00007f6e417fd04e
[  381.465937][ T5793] RDX: 0000000000000030 RSI: 00007ffc47a7e890 RDI: 00000000000000f9
[  381.465949][ T5793] RBP: 00007ffc47a7e83c R08: 0000000000000000 R09: 0000000000000000
[  381.465960][ T5793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258
[  381.465972][ T5793] R13: 00000000000927c0 R14: 000000000005c67b R15: 00007ffc47a7e890
[  381.465993][ T5793]  </TASK>
[  381.466340][ T5793] Kernel Offset: disabled