Debian GNU/Linux 11 syzkaller ttyS0 syzkaller login: [ 66.761713] sshd (236) used greatest stack depth: 23712 bytes left Warning: Permanently added '[localhost]:4858' (ECDSA) to the list of known hosts. 2025/01/24 07:29:44 fuzzer started 2025/01/24 07:29:44 dialing manager at localhost:45511 [ 70.660423] cgroup: Unknown subsys name 'net' [ 70.755272] cgroup: Unknown subsys name 'cpuset' [ 70.787258] cgroup: Unknown subsys name 'rlimit' [ 76.032312] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 07:30:01 syscalls: 2217 2025/01/24 07:30:01 code coverage: enabled 2025/01/24 07:30:01 comparison tracing: enabled 2025/01/24 07:30:01 extra coverage: enabled 2025/01/24 07:30:01 setuid sandbox: enabled 2025/01/24 07:30:01 namespace sandbox: enabled 2025/01/24 07:30:01 Android sandbox: enabled 2025/01/24 07:30:01 fault injection: enabled 2025/01/24 07:30:01 leak checking: enabled 2025/01/24 07:30:01 net packet injection: enabled 2025/01/24 07:30:01 net device setup: enabled 2025/01/24 07:30:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 07:30:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 07:30:01 USB emulation: enabled 2025/01/24 07:30:01 hci packet injection: enabled 2025/01/24 07:30:01 wifi device emulation: enabled 2025/01/24 07:30:01 802.15.4 emulation: enabled 2025/01/24 07:30:01 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/24 07:30:01 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/24 07:30:01 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/24 07:30:01 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/24 07:30:01 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 07:30:01 fetching corpus: 0, signal 0/8823 (executing program) 2025/01/24 07:30:04 starting 8 fuzzer processes 07:30:04 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x2ee9) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x4e21, 0x4, @loopback, 0xfffff801}, 0xf50e, [0x5, 0x7, 0x9, 0x7fffffff, 0x52bb, 0xff, 0x2, 0x3]}, 0x5c) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)=""/122, &(0x7f0000000140)=0x7a) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000180)="5f632d0d800fee0514d6eca9300d90891c37d726ad2e2f9661dcc1a79e2fe58eb25a1fdbf24b7983924b3b748ebdb8ff285314768ce619ac1bc374ae6c64f5ecd1d42c3999ac11e61a09ec48e3383bea2a29692af9e6e4b416a16333ddc79f1deb538cb7331d2141a120a535267ac7b72f55075ccddf12411dcca3217fafd667d00f7a9da8b827eecf969695facf8c3fe922c26ae66e970d01ead7f89e34e49ce8f20bdbefa3defa7d1cedc98895d4b0eab70278f0d8") r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x4002, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000280)="bfa9f879fe13bb9064419e31c24e29806e23ef6c4fb1bb85f5720d809f6fe98b26fbd642076313576931fe1a0cfa23f53f0470b56640b04b208d16cd18019b115a34abd8acb49cc1d30a2dac96432559035b7caba508035b46e2e1012eb48b3efcc2078520b181682a0d54e05bca936e32f8b798d4afa13e74f30761242f1ac8087d1e16dbc9f060488778f929c3ac4822ab93ec5c6717da4ebb77e52ac4347623f6482b4c11d85db1fe5f646bdfe4cd", 0xb0}, {&(0x7f0000000340)="6ee90c78f76db6895bb1a210fb8b249d6d55b1842cdabc570983f9f77eba834af1e2fdd652e8cc904fa102ab1a30009af24bcbea58302aed3829fc7084d35fe0cf438e2ba03457cb1b0284dd17e7fefca13d8220469d5c33d19a2f9128a0dc0aebad8470e310335a08ba45d9059252237b5f1b49319b8bbbebf2862cfe1d21a98cf9f1966d310915aac964d425a3be485c5e684a4b58b820fe06f37c16ad07ec60805a55c1722edde5423c16af2483b745963bb74f4b2588cb78af92b5a18aaadef134c1c42a1b16bc5a5cda5d96ad74b555bed221a7bc942884ffc530b9bedc8243e84aff4e4e", 0xe7}, {&(0x7f0000000440)="d3f3bad9abc8cbc483154509e41c54a7d163635cb2a8a34a270424d73491ab9fdf6ea2860fe33b825f995e1019d24cd05f0f75f177f6719a8f4b303dc0d660f5ccdd30baa5ad735b0cf6bc379de331b2d4e073b94eeced7e03fe087972cc0edd5e22ea4b8a8e36d7a05b0ab2767597bf23038dee4fcf0b1bdb2bd96e8c2bca672f2961b5dfc52cae176adf7b1e3445e0b3e30de92e3a15873a0aec0f9508d8d8bc0fc2d2ce0b608e71e16efb621973a238f7645cf74bc813e9a3519de6edb07765a33cbfa680ea743cebba031060a0346bbc85d314f006f751c0adc158a5283b623ab9b178cc", 0xe6}], 0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000580)={0x1, 0xfee2f69}) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x2, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4880}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000700)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000740)={0x3, 0x2, 0x9}) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=0x1000) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000017c0), 0x124000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xb4, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x8c, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="d4fe878ba3f5d8ab63c142405162accfbc90a0a6"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x23, 0x0, @random="517acd9aeda98b172a81b0b65efa9be7b1e9d04129fe1690bb4a48e870494f"}, {0xe, 0x0, @random="bc4545cae64000f6421b"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x91}, 0x4845) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xc4, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r1) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, r6, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x247}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0xc1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x58, 0x0, 0x200, 0x9, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 07:30:04 executing program 1: ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0xe29) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xfffffffffffffffe]}, 0x8, 0x80800) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x5, 0x6, 0x2, 0x0, 0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x14}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000240)={0x7ff, 0x100, 0xd767}) r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x6, 0x30501) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xf7}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3f}, @NL80211_TXQ_ATTR_CWMIN={0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xa7}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xffff}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x7}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x341002, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000540)={&(0x7f0000000440)=""/231, 0xe7}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000580)={0xa33, 0x101, 0x4}) epoll_pwait2(r3, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x4, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x101]}, 0x8) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000680)={0x26e7, 0x9, 0x1f, 0x9599, 0x20, 0x1}) ioctl$TIOCSCTTY(r4, 0x540e, 0x1) r5 = fsmount(r4, 0x1, 0x80) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f00000006c0)={0x1, 0xbaee, 0x6}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0x4010, r3, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000740)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x6007, @fd, 0x80, 0x7f, 0x0, 0x0, 0x0, {0x2}}, 0x5) 07:30:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x3) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0xe08, 0xfffffffffffffff8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000015100)={0x9, {0x22, 0x10000, 0xffffffffffffffde, 0x20, 0xe6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000015180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000015280)={&(0x7f0000015140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000015240)={&(0x7f00000151c0)={0x4c, 0x0, 0xb20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c094}, 0x44000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000015340)={'syztnl0\x00', &(0x7f00000152c0)={'erspan0\x00', 0x0, 0x1, 0x700, 0x0, 0x2, {{0x18, 0x4, 0x2, 0x2c, 0x60, 0x67, 0x0, 0x75, 0x0, 0x0, @multicast2, @local, {[@rr={0x7, 0xb, 0x27, [@multicast1, @multicast2]}, @cipso={0x86, 0x3c, 0x0, [{0x7, 0x3, 'f'}, {0x6, 0x10, "0c5972fa2a7903ec9e516fea001f"}, {0x6, 0xf, "f7aa9b8abd47d80318873bd7f6"}, {0x5, 0x4, "771a"}, {0x7, 0x2}, {0x6, 0xe, "30c05667be3fecb8d3370e5b"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000015380)={0x52, 0x6, 0x4, {0x0, 0xbc}, {0x7, 0xd1e7}, @rumble={0x8, 0x3}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000153c0), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x5) flistxattr(r2, &(0x7f0000015400)=""/104, 0x68) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000015480), 0x6081, 0x0) sendmsg$AUDIT_USER(r3, &(0x7f0000015580)={&(0x7f00000154c0)={0x10, 0x0, 0x0, 0x8504100}, 0xc, &(0x7f0000015540)={&(0x7f0000015500)={0x28, 0x3ed, 0x2, 0x70bd2a, 0x25dfdbfc, "f7f759d098bdea702d5e9be8920a82aef7b298df2ad9f4"}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000155c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000015740)={&(0x7f0000015600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000015700)={&(0x7f0000015640)={0x8c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000015a00)={&(0x7f0000015780), 0xc, &(0x7f00000159c0)={&(0x7f00000157c0)={0x1c4, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x101}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x200, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffffffe0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @remote, 0x828}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @empty, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24000014}, 0x8084) r5 = syz_mount_image$nfs(&(0x7f0000015a40), &(0x7f0000015a80)='./file0\x00', 0x4, 0x3, &(0x7f0000015c40)=[{&(0x7f0000015ac0)="b0719650b53811b2663d7d76f2099d211160487e1ae3afd0921dd8a0259767ab24630e21f49f22383c2c2ca906aa28a989061b14d46e9e6b109f1b17c2d35888e86d7893595fe680476a469ed8ce845ff8b0b6948dd2b4aa", 0x58, 0x6}, {&(0x7f0000015b40)="ee18cd5cd0fd600a900a173787d8844c999af3db93c2bfd245d3ef9f138d64c4e3433681bd64bc6a32b94440fb1de63299c12f0601a50d50bf39c74d97d20d48a8bbe504a281b6864a103e7fe22657322d494eeaf45988fb3f9b65cc441225c962b778f9a889e94715064d95af5e0fe42a605c1d230c559662849fe9eb5d27f22fe46fd5c35c649e6c63cc7f0375", 0x8e, 0x6}, {&(0x7f0000015c00)="ce16f0d5a6207e05cd9a022cf7", 0xd, 0x200}], 0x2800080, &(0x7f0000015cc0)={[{'+'}, {'eth'}, {'eth'}, {'veth1_to_batadv\x00'}, {' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x34, 0x38, 0x64, 0x65, 0x0, 0x65, 0x39], 0x2d, [0x64, 0x66, 0x63, 0x64], 0x2d, [0x31, 0x35, 0x35, 0x31], 0x2d, [0x58, 0x30, 0x64, 0x66], 0x2d, [0x64, 0x66, 0x36, 0x65, 0x33, 0x61, 0x65, 0x9c]}}}, {@uid_gt}, {@euid_eq}]}) pidfd_getfd(r4, r5, 0x0) pipe(&(0x7f0000015d80)={0xffffffffffffffff}) accept$unix(r6, 0x0, &(0x7f0000015dc0)) 07:30:04 executing program 3: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x88000, 0x6e8dc2660ece9693) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x401) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8001}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000041) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x10) r4 = accept(r0, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000540)=0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r5) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000580)={0x67, 0x48a}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000001980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000000680)={0x12bc, r7, 0x402, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x323}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e6b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x102c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x21, 0x3, "0366f26a15519a10295419f2adf2162c18c5f6c330ccc324283f47ea47"}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x88, 0x3, "cbd0c8eee4a78a2255db73512ba4e26a54dab9b575631f0e46e60123e45f623747b54370aefee577c215b1ed3cf57e6a809b40fe51b2647a524f8d5d87081d4e91b158bdcffb7b6134740a329ca4388f5967a24580519f3ae97db8056eb69d4485520a53664d6d3db6a40cd6373812a306915183047dfcb1057ea8706da7e3fc4954bc6a"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c104c4d353ddcba392fbd05d88284bf8c13df815316926657f9c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "c95632f6519139ca371555c668eb71d8c41daef251"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x10}, 0x4044) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r8, &(0x7f0000001a80)={&(0x7f00000019c0), 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000011) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000001ac0), 0x80640, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000001c80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xe8, r7, 0x184ec4ca8d4f31a2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4b92}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x880}, 0x400c000) [ 90.384905] audit: type=1400 audit(1737703804.572:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:30:04 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)="737a98fcf5d866ea19f9b7a7c99b2a4f14188ee122059486c94296f9a2e1ad07bb879529ace0c1a913c5fd3f62ba086c7083af0cb0a79812c0438d1f38b4ffcb824ddace4ab05d1cbebbc08f2ba7f1c3e2d8e902ff5b7dda826645d0914f32f35c6bd5", 0x63}, {&(0x7f0000000080)="ae7f6c2f9d699c7ab44703dec1886dc01cc73fc6b38a78e3cd12388ddb17c4725b8bd3f59fd457792bb7c804e01f2f38978981c7686eeb5decf57da47e404c0af7b7947064040773797614804ba53945fe446c7a7d", 0x55}, {&(0x7f0000000100)="ac121d7aa342cc2d30758f8286352438a58cbe44b31b191bed5ae927e853a9ec81e74232436ebf079bbb90d092778756235a88517b66783b93ae7634b4d37e3948df5ec1df", 0x45}, {&(0x7f0000000180)="95060fdb46d83c0922f8eeac94dadd17acf4cc858353f9035ea4ab01545cf13bf87a88124aeb422448f4ca23fd821dc69b2c181868e31a848498606c3c31970ff1f14c406b99a782de5aa816cbb40785fdf3e774a7537bcbd411343a8469ff46a6e0fd015ab7d7180e818d1faf2f6735a3c114ac9e2e4ae2fc2ad4a579986dc754f5cb73139fcaf0e1704a508696fccf", 0x90}, {&(0x7f0000000240)="1bc20fa8d141df94d196bd926aba264f8e52e91990f4b15fd6d114a18526ef1520ec78087a08ec641f3847d1b39f3aa7e586bcc56429845dce2d160458f594d85e55f6941d341dc194cc651ee4c5dacb92feb15e0b5bea2abc5dd8f483bf52acf80105e2820fe7647fbe9c3b8ed8a4820498bc74f7744b6b66638f2bc2c9f91b41542a735f9a2f6d10960a7d33c9b249bc098fa813daa2674d948f432d3bb7852fe0f8d87395", 0xa6}, {&(0x7f0000000300)="37a340e01a8b4b22bedae2c44c92ad0e45142d46cc45f433ae1f8506e551d54113c18c6e7016ed9e1c71eea51be829c21ca76e94cd702394fafc98851fc90822", 0x40}, {&(0x7f0000000340)}, {&(0x7f0000000380)="8711eb01e9534e6cae84b2293f05d9143958934b53c9bc63bd241ed04759ec7c3766aaedb7999424b77ed496180f453c8c945ee4394c83511d352640694f04921eb38a89f2bcc10ccb26a8a608ed7bdf005b70fea09377611139e6f28960e3c8897732ac70c0d4fc22a1b4fc9db56e47a23301e90f4b00d88ea8fda9e2ec3b53c310fd09785cf82367af25f7e23ad3451eff348501200991c50ea830bd5c38597ca176786219eb5974212bb0266b8db3d9310fb27b2afa", 0xb7}, {&(0x7f0000000440)="bb5396dee8cb8718a6674efbcd1dca88a6b0ded48e90c0fff63c132aa3ab548d6e46a5c24cdb203a0ceb29a8fed3fe6a1bf1d939623c9c71f115744d4ac6ea7e1e0de2670f56826d7f3d21e079eaed05a56721ab55f7cfeff506856debafd8eab5493931f62655a4f23ace3224647a89d92656444dd3f0dfba25b98babc85f3ce7d4ddbef0423ee74b35fc47cd1170cc658e760d11193fbde1d46befe796b144be156d5ce2465213fb3a", 0xaa}], 0x9, 0x4) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f00000005c0)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xec, 0x2, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8001}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_ID={0x8}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1309}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x24008881) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000800)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000840), 0xa00, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000880)={0x16bd, 0x929, 0x3}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000008c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'syztnl2\x00', r2, 0x29, 0x1f, 0x4, 0x7fffffff, 0x31, @private2={0xfc, 0x2, '\x00', 0xc6}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x10, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', r2, 0x4, 0xff, 0x40, 0xffffdf2c, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x80a8, 0x800, 0x3}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000c80)={@dev, @multicast2, 0x0}, &(0x7f0000000cc0)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x14c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x14c}}, 0x20004840) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000f00)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f40)='./binderfs2/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000f80)) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001000)='/sys/module/devres', 0x2, 0x100) syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), r6) 07:30:04 executing program 5: fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0xc01, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8811) getpeername(r0, &(0x7f00000003c0)=@ieee802154={0x24, @short}, &(0x7f0000000440)=0x80) chmod(&(0x7f0000000480)='./file0\x00', 0x40) acct(&(0x7f00000004c0)='./file0\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x7, 0x7, 0x4, 0x3, {{0x5, 0x4, 0x3, 0x29, 0x14, 0x65, 0x0, 0x11, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100}}}}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000020) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000700)) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x800) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x244, r2, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x1f}}}}, [@NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b2d8b8a3ccd63afe81260096a841baa5ec8b0afeea6c9e44530903c6d0f44ded"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff8}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7c60402cba71a7f8"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="635cb52135b6f1514572ed5f0ae87d2e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5e9}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cb70e81a0edc2d7d62df0d56876a95c85ed598bd25941c89737809244ab208f"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f9a80018d83343a793c3b30e559a2186"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b2a14f28b44cf8b1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "67131a84d943b073"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2f8e9f6bfc2ec16a513849ecce3f3cc249a683ec9af4b50c5b5daf0890ca4e40"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="be5d725c053c1d4054718bb7e89321e8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb41ebcb84fa042cdabd58ca3659baa6"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf5d6383c71640c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e5052e193ebc7e53412908740a304416"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b22c2207a8e6be28"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "32f86b0570f84991"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="65b49bb8b17e141d34adce88befe6fc830eeff49a2114733"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f54b5f4bc9dd335a84ab2445602d0e792107f5bfb601572c1c4fe76e9c81ca9d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3b114e87cffc1543d4263884106835ceceebd3168b1d097e6301f24c8592a666"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7dcb230e5d6e8606aa649fb00fccc0f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa98c9d0b576f718"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "46fd41c3680868de"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d959d19a9c0dcdcd0a144d07074095a9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6ae551782b34347a"}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x190b) 07:30:04 executing program 6: umount2(&(0x7f0000000000)='./file0\x00', 0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8) getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x20001, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl(r0, 0x4, &(0x7f0000000280)="5468ada11d33425c387158010c140655cf3bb6771c735e33c19edf189e62271ba786b80649097798b85fc94dbc4af3da609e7deb4f2e64d683b74397542a7c18e48e42e8e64fc299589a17e76b9bf82c009f6cef648fc69d480b2d7b18ca0d662c3db5e721f42f5643c3bb7d05d90f3985411edb8f70b87686047df7c8f0f363f4f298251dea0db0ddfd16c86771c7e95b231968366228476b9e792618853e11469d1e626900395be36a3833fac56360c0e4cb67ac80c0a6aee3a2e9e8b078fdc69ec0e3d2a698c50751e9af7df2103ffcc93b47b1abf273385d84c78aaf59060742473ba4c0916ab994298bef") ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000380)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0x101401, 0x0) r5 = dup(r2) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x8, 0x80, 0x8a, 0x8, 0x0, 0x1, 0x21001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x4, @perf_bp={&(0x7f00000003c0), 0x2}, 0x801, 0x8, 0x1, 0x0, 0x0, 0x1, 0xff, 0x0, 0x7, 0x0, 0x3c}, r4, 0xe, r5, 0xb) r6 = epoll_create(0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f00000004c0)={0x0, 0xfffffffffffffffd, [0x4fd, 0x2a, 0xffffffff7fffffff, 0x0, 0x9, 0x2]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0x0, 0xee01}}, './file0\x00'}) syz_io_uring_setup(0x24bc, &(0x7f0000000540)={0x0, 0xa5d5, 0x20, 0x3, 0x105}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) r7 = accept$inet(r3, &(0x7f0000000640)={0x2, 0x0, @initdev}, &(0x7f0000000680)=0x10) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f00000006c0), &(0x7f0000000700)=0x10) 07:30:04 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'vxcan1\x00', @link_local}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x830}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x48094) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000300)={0x6c, 0x17, "f1f09290835de6d4b82a85b40094709ef71f226f2ba80b"}) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={0xffffffffffffffff, 0x1800, 0x20}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0xa00, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x16}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}]}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x80c0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000005c0)) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4080) accept$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040844}, 0x1) r5 = perf_event_open$cgroup(&(0x7f0000000980)={0x3, 0x80, 0x0, 0x9, 0x4, 0x4, 0x0, 0x8, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x4, 0x2}, 0x84, 0x8000, 0x1, 0x6, 0xff, 0x6, 0x9a, 0x0, 0x2, 0x0, 0x6}, r2, 0x5, r2, 0x4) perf_event_open$cgroup(&(0x7f0000000900)={0x2, 0x80, 0x80, 0x0, 0x3, 0x1, 0x0, 0x9, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2bc9512ba3ae68a4, @perf_bp={&(0x7f00000008c0), 0xa}, 0x10001, 0x5, 0x744, 0x8, 0x80000000, 0x4, 0x8001, 0x0, 0x7fff, 0x0, 0x8}, r2, 0xffffffffffffffff, r5, 0x8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x101c00, 0x0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x80) [ 91.931954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.935742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.938568] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.944010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.950644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.952913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.993723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.000552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.010487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.014913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.020101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.022493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.024258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.025687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.029001] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.033657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.037551] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.042436] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.045725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.049106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.053514] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.055588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.058022] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.069582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.071817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.100994] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.103670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.112593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.117308] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.123562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.124951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.133656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.143936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.151901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.152025] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.158004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.160725] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.162660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.169018] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.203399] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.207371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.210671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.212306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.216890] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.218654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.229705] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.234632] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.244243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.015908] Bluetooth: hci0: command tx timeout [ 94.079446] Bluetooth: hci1: command tx timeout [ 94.142924] Bluetooth: hci3: command tx timeout [ 94.145277] Bluetooth: hci2: command tx timeout [ 94.206543] Bluetooth: hci4: command tx timeout [ 94.271564] Bluetooth: hci5: command tx timeout [ 94.334619] Bluetooth: hci7: command tx timeout [ 94.336540] Bluetooth: hci6: command tx timeout [ 96.063242] Bluetooth: hci0: command tx timeout [ 96.126916] Bluetooth: hci1: command tx timeout [ 96.191271] Bluetooth: hci2: command tx timeout [ 96.191779] Bluetooth: hci3: command tx timeout [ 96.254224] Bluetooth: hci4: command tx timeout [ 96.318467] Bluetooth: hci5: command tx timeout [ 96.383231] Bluetooth: hci7: command tx timeout [ 96.383726] Bluetooth: hci6: command tx timeout [ 98.110233] Bluetooth: hci0: command tx timeout [ 98.176087] Bluetooth: hci1: command tx timeout [ 98.240189] Bluetooth: hci2: command tx timeout [ 98.240701] Bluetooth: hci3: command tx timeout [ 98.302233] Bluetooth: hci4: command tx timeout [ 98.367239] Bluetooth: hci5: command tx timeout [ 98.430349] Bluetooth: hci7: command tx timeout [ 98.430864] Bluetooth: hci6: command tx timeout [ 100.158768] Bluetooth: hci0: command tx timeout [ 100.222612] Bluetooth: hci1: command tx timeout [ 100.286636] Bluetooth: hci3: command tx timeout [ 100.287757] Bluetooth: hci2: command tx timeout [ 100.350237] Bluetooth: hci4: command tx timeout [ 100.414299] Bluetooth: hci5: command tx timeout [ 100.478348] Bluetooth: hci6: command tx timeout [ 100.480029] Bluetooth: hci7: command tx timeout [ 154.126086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.130562] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.136097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.143589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.146866] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.148806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.181576] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.189775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.193626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.200502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.204364] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.206326] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.404104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.407030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.411642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.414649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.423807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.435908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.438774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.443216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.450305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.452245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.453545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.461767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.461804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.463506] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.465888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.470617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.494681] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.500625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.524096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.553599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.556406] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.580427] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.587022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.592784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.641327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.648002] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.652574] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.654756] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.654897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.657955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.992489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.998584] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.000584] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.009731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.017038] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.020998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.222257] Bluetooth: hci0: command tx timeout [ 156.286588] Bluetooth: hci1: command tx timeout [ 156.543213] Bluetooth: hci2: command tx timeout [ 156.606382] Bluetooth: hci3: command tx timeout [ 156.606395] Bluetooth: hci4: command tx timeout [ 156.735271] Bluetooth: hci5: command tx timeout [ 156.735336] Bluetooth: hci6: command tx timeout [ 157.312341] Bluetooth: hci7: command tx timeout [ 158.270239] Bluetooth: hci0: command tx timeout [ 158.334232] Bluetooth: hci1: command tx timeout [ 158.591258] Bluetooth: hci2: command tx timeout [ 158.655214] Bluetooth: hci3: command tx timeout [ 158.655702] Bluetooth: hci4: command tx timeout [ 158.782258] Bluetooth: hci5: command tx timeout [ 158.783232] Bluetooth: hci6: command tx timeout [ 159.358223] Bluetooth: hci7: command tx timeout [ 160.319229] Bluetooth: hci0: command tx timeout [ 160.382267] Bluetooth: hci1: command tx timeout [ 160.639224] Bluetooth: hci2: command tx timeout [ 160.702268] Bluetooth: hci3: command tx timeout [ 160.703243] Bluetooth: hci4: command tx timeout [ 160.831207] Bluetooth: hci6: command tx timeout [ 160.831696] Bluetooth: hci5: command tx timeout [ 161.406205] Bluetooth: hci7: command tx timeout [ 162.366326] Bluetooth: hci0: command tx timeout [ 162.432178] Bluetooth: hci1: command tx timeout [ 162.689189] Bluetooth: hci2: command tx timeout [ 162.751213] Bluetooth: hci4: command tx timeout [ 162.751672] Bluetooth: hci3: command tx timeout [ 162.878250] Bluetooth: hci5: command tx timeout [ 162.878269] Bluetooth: hci6: command tx timeout [ 163.454721] Bluetooth: hci7: command tx timeout [ 216.342644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.345786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.349423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.354566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.358552] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.361072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.598034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.600460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.604421] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.608945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.614291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.619304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.637769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.641307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.643045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.647365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.666248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.678538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.725577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.732069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.737571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.741531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.743355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.747651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.755026] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.760766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.762803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.769671] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.769744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.786756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.879569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.899589] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.906802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.910892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.914593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.920609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.930672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.932450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.935306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.981756] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.993767] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.004019] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.005912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.017046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.018941] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.020734] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.025049] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.027003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.430277] Bluetooth: hci0: command tx timeout [ 218.686288] Bluetooth: hci1: command tx timeout [ 218.750273] Bluetooth: hci2: command tx timeout [ 218.878482] Bluetooth: hci4: command tx timeout [ 218.942285] Bluetooth: hci3: command tx timeout [ 219.070259] Bluetooth: hci6: command tx timeout [ 219.071393] Bluetooth: hci5: command tx timeout [ 219.135240] Bluetooth: hci7: command tx timeout [ 220.479191] Bluetooth: hci0: command tx timeout [ 220.734272] Bluetooth: hci1: command tx timeout [ 220.798221] Bluetooth: hci2: command tx timeout [ 220.928168] Bluetooth: hci4: command tx timeout [ 220.990207] Bluetooth: hci3: command tx timeout [ 221.118846] Bluetooth: hci6: command tx timeout [ 221.118875] Bluetooth: hci5: command tx timeout [ 221.183329] Bluetooth: hci7: command tx timeout [ 222.529697] Bluetooth: hci0: command tx timeout [ 222.783247] Bluetooth: hci1: command tx timeout [ 222.847238] Bluetooth: hci2: command tx timeout [ 222.975551] Bluetooth: hci4: command tx timeout [ 223.040327] Bluetooth: hci3: command tx timeout [ 223.166304] Bluetooth: hci5: command tx timeout [ 223.167459] Bluetooth: hci6: command tx timeout [ 223.230259] Bluetooth: hci7: command tx timeout [ 224.574297] Bluetooth: hci0: command tx timeout [ 224.830340] Bluetooth: hci1: command tx timeout [ 224.895200] Bluetooth: hci2: command tx timeout [ 225.022193] Bluetooth: hci4: command tx timeout [ 225.086174] Bluetooth: hci3: command tx timeout [ 225.214304] Bluetooth: hci6: command tx timeout [ 225.214451] Bluetooth: hci5: command tx timeout [ 225.280127] Bluetooth: hci7: command tx timeout [ 278.416881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.419963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.422850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.436767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.441061] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.444515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.683388] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.687981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.690750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.698236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.703783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.706866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.870575] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.877459] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.901939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.907795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.914669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.914940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.922568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.927501] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.935884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.938745] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.949426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.950438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.965486] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.971640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.984853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.000034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.011836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.016472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.086736] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.100775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.105363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.141694] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.175541] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 279.186745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.219714] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.223504] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.265553] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.266553] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.282387] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.285604] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.301552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.307698] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 279.313412] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.371791] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.411621] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 279.428797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.510227] Bluetooth: hci0: command tx timeout [ 280.766443] Bluetooth: hci1: command tx timeout [ 281.023255] Bluetooth: hci2: command tx timeout [ 281.086304] Bluetooth: hci4: command tx timeout [ 281.087621] Bluetooth: hci3: command tx timeout [ 281.279146] Bluetooth: hci5: command tx timeout [ 281.406320] Bluetooth: hci6: command tx timeout [ 281.471146] Bluetooth: hci7: command tx timeout [ 282.558188] Bluetooth: hci0: command tx timeout [ 282.814183] Bluetooth: hci1: command tx timeout [ 283.071444] Bluetooth: hci2: command tx timeout [ 283.134187] Bluetooth: hci3: command tx timeout [ 283.134305] Bluetooth: hci4: command tx timeout [ 283.326268] Bluetooth: hci5: command tx timeout [ 283.455200] Bluetooth: hci6: command tx timeout [ 283.519235] Bluetooth: hci7: command tx timeout [ 284.607181] Bluetooth: hci0: command tx timeout [ 284.863171] Bluetooth: hci1: command tx timeout [ 285.118268] Bluetooth: hci2: command tx timeout [ 285.182250] Bluetooth: hci4: command tx timeout [ 285.185207] Bluetooth: hci3: command tx timeout [ 285.374176] Bluetooth: hci5: command tx timeout [ 285.502158] Bluetooth: hci6: command tx timeout [ 285.566306] Bluetooth: hci7: command tx timeout [ 286.655067] Bluetooth: hci0: command tx timeout [ 286.910246] Bluetooth: hci1: command tx timeout [ 287.167147] Bluetooth: hci2: command tx timeout [ 287.231163] Bluetooth: hci3: command tx timeout [ 287.231198] Bluetooth: hci4: command tx timeout [ 287.422807] Bluetooth: hci5: command tx timeout [ 287.550616] Bluetooth: hci6: command tx timeout [ 287.614157] Bluetooth: hci7: command tx timeout [ 336.698533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.699356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.990021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.991112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.239792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.240516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.090950] [ 338.091215] ====================================================== [ 338.091745] WARNING: possible circular locking dependency detected [ 338.092263] 6.13.0-next-20250123 #1 Not tainted [ 338.092715] ------------------------------------------------------ [ 338.093597] kworker/u8:2/13583 is trying to acquire lock: [ 338.094787] ffffffff8621d8e8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.096505] [ 338.096505] but task is already holding lock: [ 338.097512] ffff888034c38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.099593] [ 338.099593] which lock already depends on the new lock. [ 338.099593] [ 338.101021] [ 338.101021] the existing dependency chain (in reverse order) is: [ 338.102337] [ 338.102337] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 338.102927] __mutex_lock+0x13d/0xb50 [ 338.103350] wiphy_register+0x1b2e/0x25d0 [ 338.103794] ieee80211_register_hw+0x23a4/0x3d60 [ 338.104262] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 338.104784] init_mac80211_hwsim+0x389/0x870 [ 338.105237] do_one_initcall+0xf9/0x640 [ 338.105662] kernel_init_freeable+0x53d/0x7a0 [ 338.106122] kernel_init+0x1e/0x2d0 [ 338.106528] ret_from_fork+0x48/0x80 [ 338.106926] ret_from_fork_asm+0x1a/0x30 [ 338.107365] [ 338.107365] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 338.107927] __lock_acquire+0x29fd/0x4580 [ 338.108350] lock_acquire+0x19b/0x520 [ 338.108808] __mutex_lock+0x13d/0xb50 [ 338.109211] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.109796] unregister_netdevice_queue+0x224/0x2e0 [ 338.110295] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.110813] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.111308] ieee80211_unregister_hw+0x55/0x3a0 [ 338.111794] hwsim_exit_net+0x3a0/0x730 [ 338.112239] ops_exit_list+0xb3/0x180 [ 338.112647] cleanup_net+0x546/0xad0 [ 338.113075] process_one_work+0x8ee/0x1a10 [ 338.113513] worker_thread+0x674/0xe70 [ 338.113960] kthread+0x3ab/0x720 [ 338.114343] ret_from_fork+0x48/0x80 [ 338.114726] ret_from_fork_asm+0x1a/0x30 [ 338.115187] [ 338.115187] other info that might help us debug this: [ 338.115187] [ 338.115834] Possible unsafe locking scenario: [ 338.115834] [ 338.116354] CPU0 CPU1 [ 338.116767] ---- ---- [ 338.117176] lock(&rdev->wiphy.mtx); [ 338.117532] lock(rtnl_mutex); [ 338.118037] lock(&rdev->wiphy.mtx); [ 338.118608] lock(rtnl_mutex); [ 338.118920] [ 338.118920] *** DEADLOCK *** [ 338.118920] [ 338.119447] 4 locks held by kworker/u8:2/13583: [ 338.119860] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 338.120804] #1: ffff8880353efd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 338.121705] #2: ffffffff86211910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 338.122503] #3: ffff888034c38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 338.123413] [ 338.123413] stack backtrace: [ 338.123835] CPU: 0 UID: 0 PID: 13583 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250123 #1 [ 338.123873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 338.123896] Workqueue: netns cleanup_net [ 338.123939] Call Trace: [ 338.123948] [ 338.123960] dump_stack_lvl+0xca/0x120 [ 338.124019] print_circular_bug+0x47b/0x750 [ 338.124065] check_noncircular+0x2e9/0x3c0 [ 338.124106] ? srso_return_thunk+0x5/0x5f [ 338.124164] ? __pfx_check_noncircular+0x10/0x10 [ 338.124206] ? hlock_class+0x4e/0x130 [ 338.124237] ? mark_lock+0xac/0xed0 [ 338.124276] ? srso_return_thunk+0x5/0x5f [ 338.124333] ? sched_clock+0x37/0x60 [ 338.124400] ? lockdep_lock+0xba/0x1b0 [ 338.124458] ? __pfx_lockdep_lock+0x10/0x10 [ 338.124521] __lock_acquire+0x29fd/0x4580 [ 338.124576] ? __pfx___lock_acquire+0x10/0x10 [ 338.124629] ? lock_release+0x20f/0x6f0 [ 338.124684] ? __pfx_lock_release+0x10/0x10 [ 338.124734] lock_acquire+0x19b/0x520 [ 338.124786] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.124837] ? __pfx_lock_acquire+0x10/0x10 [ 338.124882] ? srso_return_thunk+0x5/0x5f [ 338.124938] ? lock_release+0x20f/0x6f0 [ 338.124982] ? srso_return_thunk+0x5/0x5f [ 338.125038] ? lock_is_held_type+0x9e/0x120 [ 338.125093] ? srso_return_thunk+0x5/0x5f [ 338.125153] __mutex_lock+0x13d/0xb50 [ 338.125211] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.125257] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.125304] ? srso_return_thunk+0x5/0x5f [ 338.125360] ? synchronize_rcu_expedited+0x38a/0x420 [ 338.125405] ? __pfx___mutex_lock+0x10/0x10 [ 338.125460] ? __pfx_autoremove_wake_function+0x10/0x10 [ 338.125514] ? srso_return_thunk+0x5/0x5f [ 338.125570] ? kasan_quarantine_put+0x84/0x1e0 [ 338.125642] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 338.125685] ? srso_return_thunk+0x5/0x5f [ 338.125757] unregister_netdevice_many_notify+0x1612/0x1c80 [ 338.125806] ? __virt_addr_valid+0x2e8/0x5d0 [ 338.125859] ? __pfx_lock_release+0x10/0x10 [ 338.125905] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 338.125952] ? find_held_lock+0x2c/0x110 [ 338.126010] ? srso_return_thunk+0x5/0x5f [ 338.126068] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 338.126129] ? srso_return_thunk+0x5/0x5f [ 338.126185] ? lock_release+0x20f/0x6f0 [ 338.126229] ? __pfx_lock_release+0x10/0x10 [ 338.126273] ? srso_return_thunk+0x5/0x5f [ 338.126329] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.126376] ? srso_return_thunk+0x5/0x5f [ 338.126438] unregister_netdevice_queue+0x224/0x2e0 [ 338.126482] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 338.126526] ? up_write+0x195/0x520 [ 338.126588] _cfg80211_unregister_wdev+0x57b/0x700 [ 338.126654] ? srso_return_thunk+0x5/0x5f [ 338.126722] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 338.126761] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 338.126805] ? srso_return_thunk+0x5/0x5f [ 338.126867] ? srso_return_thunk+0x5/0x5f [ 338.126923] ? synchronize_rcu+0x1ff/0x260 [ 338.126966] ieee80211_unregister_hw+0x55/0x3a0 [ 338.127012] hwsim_exit_net+0x3a0/0x730 [ 338.127055] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.127096] ? srso_return_thunk+0x5/0x5f [ 338.127152] ? netdev_run_todo+0x788/0x1040 [ 338.127203] ? __pfx_hwsim_exit_net+0x10/0x10 [ 338.127246] ops_exit_list+0xb3/0x180 [ 338.127290] cleanup_net+0x546/0xad0 [ 338.127335] ? __pfx_cleanup_net+0x10/0x10 [ 338.127389] process_one_work+0x8ee/0x1a10 [ 338.127455] ? __pfx_lock_acquire+0x10/0x10 [ 338.127500] ? __pfx_process_one_work+0x10/0x10 [ 338.127558] ? srso_return_thunk+0x5/0x5f [ 338.127627] ? move_linked_works+0x172/0x270 [ 338.127679] ? srso_return_thunk+0x5/0x5f [ 338.127744] ? assign_work+0x196/0x240 [ 338.127801] worker_thread+0x674/0xe70 [ 338.127859] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 338.127923] ? srso_return_thunk+0x5/0x5f [ 338.127979] ? __pfx_worker_thread+0x10/0x10 [ 338.128039] kthread+0x3ab/0x720 [ 338.128091] ? __pfx_kthread+0x10/0x10 [ 338.128143] ? srso_return_thunk+0x5/0x5f [ 338.128199] ? finish_task_switch.isra.0+0x206/0x840 [ 338.128251] ? __pfx_kthread+0x10/0x10 [ 338.128305] ret_from_fork+0x48/0x80 [ 338.128336] ? __pfx_kthread+0x10/0x10 [ 338.128404] ret_from_fork_asm+0x1a/0x30 [ 338.128470] [ 340.101955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.103734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.105680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.109851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.113735] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.115702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.167049] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.168904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.170633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.175452] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.177781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.179776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.239641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.240375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.246413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.259979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.260829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.260958] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.264907] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.265670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.268866] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.270040] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.273471] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.274095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.566148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.572284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.577911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.581738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.587951] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.588861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.589952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.628326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.628353] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.646491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.648456] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.653487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.656860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.658322] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.668846] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.670009] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.675268] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.675384] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.677434] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.700165] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.709961] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.718199] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.718437] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.728630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.142132] Bluetooth: hci0: command tx timeout [ 342.207119] Bluetooth: hci1: command tx timeout [ 342.334166] Bluetooth: hci3: command tx timeout [ 342.334258] Bluetooth: hci2: command tx timeout [ 342.654138] Bluetooth: hci4: command tx timeout [ 342.719132] Bluetooth: hci6: command tx timeout [ 342.783107] Bluetooth: hci7: command tx timeout [ 342.846800] Bluetooth: hci5: command tx timeout [ 344.191263] Bluetooth: hci0: command tx timeout [ 344.254198] Bluetooth: hci1: command tx timeout [ 344.382250] Bluetooth: hci2: command tx timeout [ 344.382287] Bluetooth: hci3: command tx timeout [ 344.702208] Bluetooth: hci4: command tx timeout [ 344.766344] Bluetooth: hci6: command tx timeout [ 344.830196] Bluetooth: hci7: command tx timeout [ 344.894890] Bluetooth: hci5: command tx timeout [ 346.238189] Bluetooth: hci0: command tx timeout [ 346.303204] Bluetooth: hci1: command tx timeout [ 346.430220] Bluetooth: hci2: command tx timeout [ 346.430237] Bluetooth: hci3: command tx timeout [ 346.750274] Bluetooth: hci4: command tx timeout [ 346.814300] Bluetooth: hci6: command tx timeout [ 346.878145] Bluetooth: hci7: command tx timeout [ 346.942147] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 07:34:12 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283eaa5 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880353eec70 R8 =0000000000000001 R9 =ffffed1006a7dd84 R10=0000000000000000 R11=3038383866666666 R12=0000000000000000 R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283eafd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005580a897cfe0 CR3=000000000980e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=0000000000ff000000000000000000ff XMM02=0000000000ff000000000000000000ff XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=ff000000010100ff00000005ffffffff XMM06=697665642e3130323a366963682d3669 XMM07=00000000000000000000000000000000 XMM08=636f72702f0064696e6f697373657300 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000009a8c6e RBX=00007f9a39b0a000 RCX=0000000000000003 RDX=0000000000000000 RSI=0000000000000003 RDI=ffffff40006a2c6e RBP=000000c0000bfe98 RSP=000000c0000bfe70 R8 =00007f9a39af8fff R9 =000000c000306000 R10=000000c000021e98 R11=000000000000a438 R12=00000000009a8c6e R13=0000000001240aa0 R14=0000000000000000 R15=0000000000000000 RIP=00000000004148f4 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c0002f0410 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560a3b8e8b10 CR3=0000000015a64000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0002fefc0000000c007767940 XMM04=000000000041a7e90000000000b12868 XMM05=000000c007778e8000000000008e84e0 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=000000c007865e4000000000004643c1 XMM11=000000c00000f878000000c00000f870 XMM12=000000c00000f888000000c00000f880 XMM13=69727420636578650b00657461646964 XMM14=696d696e696d20636578650d00656761 XMM15=00006873616d7320636578650a00657a