Warning: Permanently added '[localhost]:32507' (ECDSA) to the list of known hosts. 2025/01/25 15:36:09 fuzzer started 2025/01/25 15:36:09 dialing manager at localhost:40883 syzkaller login: [ 68.641041] cgroup: Unknown subsys name 'net' [ 68.706525] cgroup: Unknown subsys name 'cpuset' [ 68.725920] cgroup: Unknown subsys name 'rlimit' [ 73.384025] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 15:36:25 syscalls: 2217 2025/01/25 15:36:25 code coverage: enabled 2025/01/25 15:36:25 comparison tracing: enabled 2025/01/25 15:36:25 extra coverage: enabled 2025/01/25 15:36:25 setuid sandbox: enabled 2025/01/25 15:36:25 namespace sandbox: enabled 2025/01/25 15:36:25 Android sandbox: enabled 2025/01/25 15:36:25 fault injection: enabled 2025/01/25 15:36:25 leak checking: enabled 2025/01/25 15:36:25 net packet injection: enabled 2025/01/25 15:36:25 net device setup: enabled 2025/01/25 15:36:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 15:36:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 15:36:25 USB emulation: enabled 2025/01/25 15:36:25 hci packet injection: enabled 2025/01/25 15:36:25 wifi device emulation: enabled 2025/01/25 15:36:25 802.15.4 emulation: enabled 2025/01/25 15:36:25 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/4000 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/6000 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/8000 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/10000 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/12000 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/14000 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/14245 (executing program) 2025/01/25 15:36:25 fetching corpus: 0, signal 0/14245 (executing program) 2025/01/25 15:36:27 starting 8 fuzzer processes 15:36:27 executing program 0: sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x64}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8804) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000100)=""/128) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x7, "7bd884badf7ef29caa5f5dd9"}, 0xe, 0x1) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000340)=""/56, 0x38}], 0x3) fstat(r0, &(0x7f00000003c0)) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000004c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7f}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x8}, @NL80211_TXQ_ATTR_CWMAX={0x6}]}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xff}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xe0000000}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f00000006c0)="32149cf9b2f53ac0ce41e7ba293a79df9ea4f3555492c75b58515506e41432dc40c3763eb6e6c2b514ff8ef4b7aa", 0x2e) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) ioctl$int_out(r5, 0x5462, &(0x7f0000000740)) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000000780)={0x0, 0x6}) r7 = syz_open_dev$vcsn(&(0x7f0000001780), 0xa74, 0x4200) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000017c0)={0x1000, 0x8, 0x8, 0x7, 0xfff, 0xfffc}) 15:36:27 executing program 3: prctl$PR_GET_SECUREBITS(0x1b) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000080)={0x3, 0xff}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x2, 0x2, 0x4, 0x4, 0x1, 0x8, 0x9, 0x6, 0x5}}, 0x43) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000004) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x8, 'batadv0\x00', {'rose0\x00'}, 0x200}) prctl$PR_GET_SECUREBITS(0x1b) r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0xa, &(0x7f0000000a80)=[{&(0x7f0000000340)="09ad50b958a8cd6f826bdd38a187eeac57a93973e1e7b8e83a222e4c6c69ba4ae8169bea12174e6d47af86c0bf11966f0a420cdf18ae70f89e73de725f4d4dc63a750f2697b1bf6475acd0ce67b14172bc27b722b8755dc851f1a3e0400e1342bd489586b9259c6fb86e155cef0d5ed0da5c0e3c9f9f6c3b7b09ff1be54e9a7046aa83df54531f025abcc967eeb2460865c85d7b865fe1523c7a342959380d567c2780bb", 0xa4}, {&(0x7f0000000400)="80e0b8a1811d7341640cae0a860a2d9e039841d43597c0313175ce240007022bd965eb02d8af53185699e377b7f7be556668142ac2bc595d148a676c095eea065f6dce8108bc44c5267bc1662a282487d3fbef99927b03dad7ce8f65", 0x5c, 0x7}, {&(0x7f0000000480)="1dc8af65827fb45e886f9cc3805fd5f7ad669d23740a997de2b223cd53bc54dd28127f43094912fed2de036fd446a54988f3c834812222faddb8f63d0bd9a698e962ffcfc20451c605c6dbd9d56549c2ed1d8e4a0913c991a54ab9d33cc6bce6c470a5c0ac09905d94d91ddb124ac7be67c4825af695a6e2a705bc4a3343e067477d6f00284ebf6b7df79ed6f94a9a962577528327fe", 0x96, 0x100000000}, {&(0x7f0000000540)="808f9e5470c10aa4bae0f4fd613aa1b802c5b3476cef36a4b8feb76855a0f6b81451fca92796772eda4e671b600c8faf2a27215576506f3f7117085f020cfd6ab44d7722bbf96f8902a08a09096dd55bf0dd6461efc1feef9e1252b6986b6f6c205f6328e8bbc65c8837aa20f874fe361afd0b649910c6efa2c2614c2704323c6ee17b277bdacece56787bb0", 0x8c, 0x1}, {&(0x7f0000000600)="5b9e9622972a2db7d9841a6b8fe8c6e064e47907a585b66770c83fb9bf403cf31050891aac1e358732b81277ed386e45c6c8beebfa8279df6de71fa82f7730ad8640abbf20decadb88a49bd25b5e2e72068f3a0f4416db46789abc92902e2e81f37e27c0ff7ecff2a46ea561fcdc09e19f09a6e073f58ba521f00b65159fc24de7eaf67b", 0x84, 0x6}, {&(0x7f00000006c0)="2aae16d29f1056a88fd511f37ac167718545538598a72d06ebca4ddca924e5c7fa41f5328ceab2f1d7ce20c35383942c6536780aca9fa376d771627eef3f65894d8efc72fbd7a354cdacfa241d80549c04b04056f724591a319580893eac4bd2daea38f2ac5e7cefa9a96659ba20a28e6d4667319ed4859065363a60d765b72877274e30b9c820c512e4fe5555dc6057165a287b41e43fbb47970b767e20643f6750dc09eb5892cf3d78358ed24ab218e76e9a9e0b693ad35768dd349dac", 0xbe, 0x80000000}, {&(0x7f0000000780)="8abebdf3bdce4b5dea411be352f6a687b15d0a21cfd1838374622a7a912e51b58378860445abcc79d3ee23eaf9982ca81c6f71184044785db6c74cd90f670e94f387d8c31a4774755d85e816db55fa06eb4f727d16b0c4f4ab52ed8cd1f498cf7bc65647457a801e2f6291676c841011b1899a2250117ea89ab8e5c5175e3a61ad1b9252567b507906424f53afba67c7", 0x90, 0x5}, {&(0x7f0000000840)="204b5418023d001ebbd0480be4e8a49fb8da8104125a4723aeec2e1ac16eb8bd2c9ff92194df5459cdf41967d6c469e0d28d846805b391a9891fb5b0f7510bed48cfc436b98ba429a00617d0ceb59777946375814ee86d846958bee03b97dafa4fe455565015c6874309a1aee158e567b71a70", 0x73, 0x1}, {&(0x7f00000008c0)="22e8eaaa965265c87929e2c4b6da1f8f57e3c0893f9ac33d33a3676da17edbd03097bb8b7764def0c026912fc060ea9317f1ebf8ad2c9806e63f7c8796a8b9531466a39fa2eb1047b9e41688e1e535152f664dc38e4b80863b801c0dc472c08f7b45263ae9e925802b3e9a480c8eb6f2247e25c77202890daf58a813ff4831dcdd5cbcecb98e0ea3b45822f2c0101057af0a7a2573f4e5a691a79d9ae42d24a69b96e78d0d8966b21b76369e44fa1486ba4f", 0xb2, 0x3}, {&(0x7f0000000980)="722b5e7ef8cfa5667be6c603cf69201b80db008b35fd57ccb0d514d260894c80058db0b0fd44d19b97590d62e2496f4dae74fb47ea7412022539f6b77d89bc2bbc88eeea4b17a93fdb0eb9bd9c902e41bfcc3da406149996213d3f87f7a97b23a1a523a9f5966726625a3eaaa4d92a8e10ad53c6344e184965258ed6297dc55f5bc59d98fb3342fcf42689a56dd00c8c3dca2d7826337710072371ea00d551639d360d2e6896921f51351e4712bfe2b1b6114a5f7af538157f8ad20662bd14a315383275b4ab26643dbe6940cfb9515989680f2193", 0xd5}], 0x10, &(0x7f0000000b80)={[{@nodots}, {@dots}], [{@context={'context', 0x3d, 'root'}}, {@context={'context', 0x3d, 'user_u'}}]}) fcntl$setstatus(r2, 0x4, 0x400) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101040, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000c40)={0x0, r4, 0x458, 0x3, 0x0, 0x9}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c80), r5) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fadvise64(r0, 0xedc, 0x1, 0x0) get_thread_area(&(0x7f0000000d00)={0x800, 0x20000000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x1}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4a044) 15:36:27 executing program 1: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000080}, 0x4044011) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x214, r0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa915}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x170e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x72}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x77b7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @local, 0xfffffffb}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "b1d0cf7ffd4da4225c0459da5f50a68822ad2e6b92280d792238c4d368f7b36669fbec"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "23ba1813be6399c753dfbc0c9501031ea8894d5cd025a409651f"}}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4011}, 0x140408d0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x9c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x9c}}, 0x4000040) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf0}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xaa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000054}, 0x4000010) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x1000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x80) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000008c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x178, 0x1, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7fffffff, 0x5, 0x7]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_LABELS_MASK={0x8, 0x17, [0x3f]}, @CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000000}, 0x895) r3 = creat(&(0x7f0000000b00)='./file0\x00', 0x89) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000b40)="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") ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000c40)) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfe, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x24000}, 0x24004040) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000e00)=@buf={0x69, &(0x7f0000000d80)="3a585472eef33cbb30d82336459f09f836eef92737177b1a20486207c8c885f68a07318ccd836d0efcce6bcad4b83aac067947e76d4733e6c8d8148fe347ee7653804372a9061fbf9e54f8458cfe7bf47c8b978b710b5b50a13dad991c8a4cde4843deefe6eb11b937"}) setsockopt(r3, 0x1, 0x0, &(0x7f0000000e40)="1d2493f2eda3250152f04667c4acbfb8a48d39a5a21da02218ca9e12cb8efcbb7fee3faf942f500710083f264dcd570315a2b3f5c7ada56c6ff56e26754de539bcce0901d2b7f5cfca244abb5d7feb7e5410c20f8be3b7e765df172b5e", 0x5d) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80, 0xc}}, './file0\x00'}) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000f00)={{0x2, 0x4e20, @empty}, {0x6, @multicast}, 0x40, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 'batadv_slave_0\x00'}) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000f80)) accept4$inet6(r1, &(0x7f0000000fc0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001000)=0x1c, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x8001}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x491d1}, 0x1) 15:36:27 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xc, 0x4, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}}, 0x20004004) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003900)='ns/user\x00') ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000003940)={{}, 0x0, 0x22, @unused=[0xbf85, 0xfffffffffffffb5c, 0x8, 0x50000000000000], @subvolid=0x7}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000004940)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$CDROMREADALL(r2, 0x5318, &(0x7f0000004980)) r3 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000005400), 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000005440)={0x0, 0x0}) fcntl$lock(r3, 0x24, &(0x7f0000005480)={0x0, 0x1, 0x7a7e, 0x5, r4}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000054c0)={0x8, 0xfd, 0x8, 0x5}, 0x10) ioctl$CDROM_DISC_STATUS(r2, 0x5327) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000005500)) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000005540)=0x8) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000056c0)={&(0x7f0000005580), 0xc, &(0x7f0000005680)={&(0x7f00000055c0)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x45) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000057c0)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005780)={&(0x7f0000005740)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) fremovexattr(r3, &(0x7f0000005800)=@known='com.apple.system.Security\x00') pipe2(&(0x7f0000005840)={0xffffffffffffffff}, 0x80000) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000005880), 0x4) r6 = open(&(0x7f00000058c0)='\x00', 0x80082, 0x40) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000005900)={0x0, 0x7, 0x2, 0x1}) [ 85.716908] audit: type=1400 audit(1737819387.072:7): avc: denied { execmem } for pid=279 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:36:27 executing program 2: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x7ff}) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x4bc, 0x0, 0x5, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x6d48}, 0x0, 0x2d, 0x3, 0x7, 0xc, 'syz0\x00', "f1d7e8a56d302d1668ac43677c7fa03e242e9325472c88086ac9bb77829459dc", "9d3978af1a704a65fb150db448a99263058bc10a20e4649394a61f3d9b10f021", [{0x1, 0xffff, {0x2, 0x1}}, {0x265c, 0x2, {0x0, 0x6}}, {0xd2, 0x2, {0x1, 0x401}}, {0x8, 0xfff, {0x2, 0x100}}, {0x2000, 0x2, {0x3, 0x25}}, {0x1, 0x3}, {0x100, 0x9, {0x3, 0x1c}}, {0x2, 0x1, {0x0, 0x80000000}}, {0x3, 0x3, {0x0, 0x1}}, {0x7, 0x9, {0x3, 0x2}}, {0x400, 0x4b4d, {0x0, 0x1}}, {0x5, 0x8, {0x2, 0xfff}}, {0x6, 0xfff, {0x0, 0x10c}}, {0x3, 0x3f, {0x0, 0x9ac2}}, {0x7f, 0x0, {0x1, 0x6}}, {0xb7, 0x9, {0x1}}, {0xfffc, 0xffff, {0x3, 0x3}}, {0x4, 0x86, {0x1, 0xff}}, {0x1, 0x5, {0x3, 0xfffffff7}}, {0x7, 0x9, {0x3, 0x2eb1ac6b}}, {0x7, 0x2, {0x2, 0x1}}, {0x101, 0x7, {0x1, 0x80000001}}, {0x1f, 0x8a, {0x0, 0x200}}, {0x200, 0x7f, {0x1, 0x10000}}, {0xd88a, 0x9052, {0x2, 0x73}}, {0x3, 0x3456, {0x0, 0x9}}, {0x8, 0x4, {0x1, 0x4}}, {0x100, 0xfff9, {0x3, 0x3}}, {0xa6, 0x1000, {0x2, 0x5}}, {0x400, 0x2, {0x0, 0x72b}}, {0x40, 0x5, {0x2, 0x6}}, {0x9, 0x1f, {0x2, 0xeb6}}, {0x6, 0x3, {0x1, 0xacf3}}, {0x8, 0x8, {0x2}}, {0x1, 0xff, {0x2, 0x4}}, {0x0, 0x3, {0x1, 0x5}}, {0x49d, 0x6, {0x3, 0x8}}, {0x0, 0x2916, {0x1, 0x5dc90}}, {0x5, 0x3eb8, {0x3, 0xfffffffb}}, {0xa351, 0x8, {0x3, 0xc2}}]}}}, {{0x254, 0x1, {{0x1, 0x7f}, 0x1, 0x0, 0xfff, 0x2d, 0xb, 'syz1\x00', "56670411dbafb3d01d13471077594cf5e9695587aa1f632c8c2e3adbca3c9f42", "c7c1c01e426f7c62c2bb6645c4c73e671c5039570603cbe12871387cc7246958", [{0xf88e, 0x5, {0x0, 0xc64}}, {0x9, 0xdd14, {0x3, 0x100}}, {0x6, 0xf1aa, {0x2, 0x7}}, {0x1, 0x470, {0x2, 0xfffffff9}}, {0x3f, 0x40, {0x1, 0xff}}, {0x4, 0x7c5, {0x1, 0x16c}}, {0x8ed4, 0x1000, {0x1, 0x7ff}}, {0x2, 0x586, {0x0, 0xfff}}, {0x2, 0x0, {0x3, 0x80}}, {0x3, 0x80, {0x2, 0x5}}, {0x1000, 0xfffe, {0x2, 0x5}}, {0x1f, 0x4, {0x1, 0x821}}, {0x40, 0x1, {0x1, 0xbf8}}, {0x0, 0x6, {0x1, 0x2}}, {0x401, 0x5, {0x2, 0xb23}}, {0xf25, 0x18, {0x2, 0x6}}, {0x800, 0x0, {0x1, 0x1}}, {0x7, 0x401, {0x0, 0xfff}}, {0x1000, 0x2e1, {0x3, 0x37be}}, {0x4a83, 0x4, {0x1, 0x4}}, {0x7, 0x3, {0x3, 0x7ff}}, {0x0, 0x8, {0x3, 0xc000000}}, {0x9, 0xe164, {0x3, 0x1}}, {0x7fff, 0xba, {0x3}}, {0xfffd, 0x8, {0x0, 0x6}}, {0x5, 0x8001, {0x2, 0x2cc}}, {0x3, 0x2, {0x2, 0x40}}, {0xe8, 0xfe00, {0x2}}, {0x7, 0xd03}, {0x4, 0x2, {0x3, 0x8d}}, {0x1, 0x1, {0x3, 0x3}}, {0x0, 0x4, {0x1, 0x10c}}, {0x6, 0x80, {0x3, 0x9}}, {0x1, 0x9, {0x3}}, {0x8, 0x1000, {0x7, 0x47}}, {0x1, 0xffff, {0x3, 0xc26}}, {0x4, 0x40, {0x0, 0x92}}, {0x5, 0x2, {0x0, 0x8}}, {0x7, 0x8, {0x1, 0x9}}, {0x5, 0x1, {0x1, 0x4}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24000880}, 0x24000051) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000680)={0xd35, 0x9e2d, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000014480)={&(0x7f00000143c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000014440)={&(0x7f0000014400)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8084) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000144c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x41}}, './file0\x00'}) readlinkat(r1, &(0x7f0000014500)='./file0\x00', &(0x7f0000014540)=""/94, 0x5e) sendto$unix(r0, &(0x7f00000145c0)="a74c27d740077cc7d34102a49fcaeae704d3ec42d3d423c2fa8c5b96a01f77", 0x1f, 0xc4, &(0x7f0000014600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000146c0), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000014780)={&(0x7f0000014680)={0x10, 0x0, 0x0, 0x81fb53cf498d4572}, 0xc, &(0x7f0000014740)={&(0x7f0000014700)={0x1c, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000147c0), 0x1c18c1, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000148c0)={&(0x7f0000014800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000014880)={&(0x7f0000014840)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x26}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r4 = add_key$keyring(&(0x7f0000014a00), &(0x7f0000014a40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000014900), &(0x7f0000014940)={'fscrypt:', @desc4}, &(0x7f0000014980)={0x0, "9e40e0542a143242c46a2d17968eb564efee0615bba7cedc41cd35ad587ad2d8e8ea174d327fc49e17c3a7fb3e8cc8d774494cfdd16c3fb421ed00cb4c7cc678", 0x16}, 0x48, r4) r5 = openat$cgroup_ro(r1, &(0x7f0000014ac0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000014b80)={&(0x7f0000014a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000014b40)={&(0x7f0000014b00)={0x40, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x40}}, 0x50) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000014bc0)=0x1) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000014d00)={&(0x7f0000014c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000014cc0)={&(0x7f0000014c80)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000100) 15:36:27 executing program 5: r0 = msgget$private(0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x127, 0x9}, 0x0, 0x0, 0x1, 0x1, 0x6, 0x10001, 0x41, 0x5, 0x401, 0x32b3, 0xffffffffffffffff, r1}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)="475b243ee6e0a8dda79007762aba1343624665926f609008b8fa902e803af84f156dc3cc0d4f347340c6b78dc01e645e002beec0e9b5da0b706887b761f1f27fdc40277a64eb449c566fd0302c69325182923b44ca6873858253c7e6278844e6e8414814d315ab56878d617533fe0a4ed2269d0d123989337b0d75c55e21a1510815555dfc2ef4444dd5e62bd52e02922636ab18d585bc0e7ad1255ae3fc0eefcb49dfeee14ec1848e8efd16e99d7082787d6e0b0c1e6a81d598b5e88da6816f14f2920accc09a395f02e74153658bb16b60a4c7af8ca1f24247b82a235c4160fd44") mknodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xc000, 0x7ff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_int(r2, 0x0, 0x22779be5593eded1, &(0x7f0000000380)=0x6b5513b1, 0x4) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000400)) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x620100, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000540), &(0x7f0000000580)=0x30) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000005c0)=""/131) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x8000, 0x4, 0x8, 0x1c, "7dbaf457d5c682e8398339c1012385c26dd82c64408e7ae697665d509ef3881f538712e889a60110b628f0f90dab54f8289f9405b4daf2327874581e27910a17", "767ba7a1191f01e31543a78c5bf4055741e81b29c7e6c5455364f95cc9ee0fd4", [0x335, 0x4]}) r5 = accept4$inet6(r4, &(0x7f0000000740)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000780)=0x1c, 0x800) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000007c0)) getsockname$inet(r2, &(0x7f0000000800)={0x2, 0x0, @private}, &(0x7f0000000840)=0x10) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000880)=@gcm_256={{0x304}, "69048186706bdd4e", "039e1bd57c1f31f245303e3749bf28b841e097b4b0c1bdbf3ae69fc208b98fe1", "5cf7c271", "4e7ea18c7cf30eb1"}, 0x38) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 15:36:27 executing program 6: timer_create(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="a50ae10504e89b7fd27314032a7c6c0088ad330fe2485bf04a06eb37581d54d31bc18c23af", 0x25, 0xfffffffffffffffc) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x100000000, 0x100, 0x0, 0x1c, 0x0, {0x2, r1}}, 0x6) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "279f20f61d6e6918d3b23e3dfedfe8ab753c3c0fe2873d2ac26617669544c139109a141901f70e400020492e4d7f1b748f41c6d5a86e2239616f2bbc3921c4f9", 0x2d}, 0x48, 0xfffffffffffffffd) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000300)=0xc) r3 = add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff8) r4 = add_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="685f50dfc59644de98e977ada7d86937a02cbcd66cf7874efcf3e03e29bb0fb6d62c32f6398b99c344afeb82c96b7a4ea0223d30149484b5a0525470abec9304856e2dac49b944e1a95eeb71a4bbf3430a457fa11e432183d9de5a1d94e15806", 0x60, r2) keyctl$search(0xa, r3, &(0x7f0000000440)='cifs.idmap\x00', &(0x7f0000000480)={'syz', 0x0}, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r5, 0xfffffffc, 0x8, &(0x7f00000005c0)="680efca9e44a59d186d7fe6a25804efe26e9bbff235cf5886c272debe7680d495b81edf8627be1eeb9421bbc711dae780261cb5bff06b6db394a90a7bf80ea5ad0be9e1c415e56e30ce62c82437697a93b07c3571319b6268cd55e1e2c3596b952590d9e288c23a5c10b82fd4ccc62668d978a78f7866c871319a18333065a067952c5a06bad8a3d1deb1419198552f1560dd5a9f8c89eeb2edbcbd474eebea3fa603e8c6a1962a5fa155641", 0xac) r6 = request_key(&(0x7f0000000680)='.dead\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)='fscrypt-provisioning\x00', r2) keyctl$reject(0x13, r6, 0xa8bf, 0x3af79bd9, r4) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x50) getsockname$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @remote}, &(0x7f0000000880)=0x10) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f00000008c0)={0x0, 0x0, 0x12}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x503, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb6d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7b21}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1b6}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xac}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) 15:36:27 executing program 7: getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x202002, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000000c0)=""/89, &(0x7f0000000140)=0x59) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)={0xcaa, 0x1ff, 0x4, 0x2f, 0xc7, 0xf6, 0x5}, 0xc) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x498380, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000300)) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000340)='veth0_virt_wifi\x00') ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/215}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000500)={0x1, 0x5}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x41}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) getpeername(r2, &(0x7f0000000680)=@tipc=@name, &(0x7f0000000700)=0x80) r4 = openat$incfs(r1, &(0x7f0000000740)='.log\x00', 0x0, 0x12a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r3, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000895) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/module/md_mod', 0x101000, 0x131) ioctl(r6, 0x40, &(0x7f0000000900)="dae22f8575c86fb8973b990a4f4c87dab9ec079072b4ee5c3ca50b1a474ab0a6f389b3a8ead98137b5af71cb6d449dfc574fdd786a7669ef6d24ab249866b89c4e4fd847da75db32e1992d68d4580991828636a3f4dc0ca6692fa07d6f1db4c2fa4294971f03946acaacd3319fb025450439647368022596") [ 87.164907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.167835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.170443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.177054] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.180798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.183850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.225582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.230949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.233020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.234886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.242842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.247050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.255002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.258108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.263956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.268186] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.269916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.275869] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.279970] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.283862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.289225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.290993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.299112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.307525] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.313869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.320119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.323416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.331677] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.333418] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.336167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.338731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.340288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.341364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.349891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.362849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.369005] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.374292] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.376278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.383578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.394298] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.397981] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.407942] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.412454] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.421827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.426123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.434337] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.441558] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.443941] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.241899] Bluetooth: hci0: command tx timeout [ 89.369180] Bluetooth: hci2: command tx timeout [ 89.369829] Bluetooth: hci1: command tx timeout [ 89.432758] Bluetooth: hci4: command tx timeout [ 89.433336] Bluetooth: hci5: command tx timeout [ 89.434074] Bluetooth: hci3: command tx timeout [ 89.496735] Bluetooth: hci7: command tx timeout [ 89.497718] Bluetooth: hci6: command tx timeout [ 91.288758] Bluetooth: hci0: command tx timeout [ 91.417516] Bluetooth: hci1: command tx timeout [ 91.418074] Bluetooth: hci2: command tx timeout [ 91.481009] Bluetooth: hci3: command tx timeout [ 91.481509] Bluetooth: hci5: command tx timeout [ 91.482464] Bluetooth: hci4: command tx timeout [ 91.544863] Bluetooth: hci6: command tx timeout [ 91.545350] Bluetooth: hci7: command tx timeout [ 93.337639] Bluetooth: hci0: command tx timeout [ 93.464869] Bluetooth: hci2: command tx timeout [ 93.465378] Bluetooth: hci1: command tx timeout [ 93.528919] Bluetooth: hci4: command tx timeout [ 93.529439] Bluetooth: hci5: command tx timeout [ 93.530250] Bluetooth: hci3: command tx timeout [ 93.592674] Bluetooth: hci6: command tx timeout [ 93.593129] Bluetooth: hci7: command tx timeout [ 95.384680] Bluetooth: hci0: command tx timeout [ 95.513657] Bluetooth: hci2: command tx timeout [ 95.514147] Bluetooth: hci1: command tx timeout [ 95.577770] Bluetooth: hci5: command tx timeout [ 95.578259] Bluetooth: hci3: command tx timeout [ 95.578832] Bluetooth: hci4: command tx timeout [ 95.640721] Bluetooth: hci6: command tx timeout [ 95.641227] Bluetooth: hci7: command tx timeout [ 147.341849] syz-executor.3 (289) used greatest stack depth: 23760 bytes left [ 149.796626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.798948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.800163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.804317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.806633] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.808231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.809353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.810898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.813037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.842974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.858000] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.860163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.871283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.884470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.888826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.890540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.894017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.907381] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.907423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.913801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.919086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.919935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.923823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.929278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.021526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.035963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.048363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.076995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.083161] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.084423] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.088935] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.088962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.100901] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.146919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.191447] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.211345] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.213002] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.219059] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.240295] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.245059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.250056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.252053] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.255409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.258272] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.261786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.280801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.291222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.310793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.833673] Bluetooth: hci0: command tx timeout [ 151.896841] Bluetooth: hci1: command tx timeout [ 151.960678] Bluetooth: hci2: command tx timeout [ 151.960786] Bluetooth: hci3: command tx timeout [ 152.217683] Bluetooth: hci4: command tx timeout [ 152.344864] Bluetooth: hci7: command tx timeout [ 152.345004] Bluetooth: hci6: command tx timeout [ 152.409858] Bluetooth: hci5: command tx timeout [ 153.881014] Bluetooth: hci0: command tx timeout [ 153.945847] Bluetooth: hci1: command tx timeout [ 154.008944] Bluetooth: hci3: command tx timeout [ 154.008980] Bluetooth: hci2: command tx timeout [ 154.266078] Bluetooth: hci4: command tx timeout [ 154.393040] Bluetooth: hci7: command tx timeout [ 154.393692] Bluetooth: hci6: command tx timeout [ 154.457818] Bluetooth: hci5: command tx timeout [ 155.929277] Bluetooth: hci0: command tx timeout [ 155.992946] Bluetooth: hci1: command tx timeout [ 156.056717] Bluetooth: hci2: command tx timeout [ 156.057453] Bluetooth: hci3: command tx timeout [ 156.312695] Bluetooth: hci4: command tx timeout [ 156.441809] Bluetooth: hci7: command tx timeout [ 156.441894] Bluetooth: hci6: command tx timeout [ 156.504745] Bluetooth: hci5: command tx timeout [ 157.976767] Bluetooth: hci0: command tx timeout [ 158.040830] Bluetooth: hci1: command tx timeout [ 158.106633] Bluetooth: hci2: command tx timeout [ 158.106688] Bluetooth: hci3: command tx timeout [ 158.360817] Bluetooth: hci4: command tx timeout [ 158.489076] Bluetooth: hci6: command tx timeout [ 158.489108] Bluetooth: hci7: command tx timeout [ 158.552819] Bluetooth: hci5: command tx timeout [ 211.880928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.884051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.886323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.890816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.894202] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.897104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.900336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.905012] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.908377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.931271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.941815] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.943153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.008359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.012198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.017864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.026686] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.029920] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.030992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.082234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.084552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.085917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.091929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.096112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.099382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.160354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.169495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.178771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.214140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.217325] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.223297] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.228787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.230029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.232146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.246052] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.258272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.262469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.315231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.327320] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.333025] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.363126] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.365381] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.382036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.412019] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.431499] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.433705] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.454406] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.518977] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.524953] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 213.976689] Bluetooth: hci0: command tx timeout [ 213.976717] Bluetooth: hci1: command tx timeout [ 214.105662] Bluetooth: hci2: command tx timeout [ 214.168655] Bluetooth: hci3: command tx timeout [ 214.297658] Bluetooth: hci4: command tx timeout [ 214.365378] Bluetooth: hci5: command tx timeout [ 214.488850] Bluetooth: hci6: command tx timeout [ 214.680696] Bluetooth: hci7: command tx timeout [ 216.025156] Bluetooth: hci1: command tx timeout [ 216.025640] Bluetooth: hci0: command tx timeout [ 216.152729] Bluetooth: hci2: command tx timeout [ 216.216698] Bluetooth: hci3: command tx timeout [ 216.344861] Bluetooth: hci4: command tx timeout [ 216.408771] Bluetooth: hci5: command tx timeout [ 216.536803] Bluetooth: hci6: command tx timeout [ 216.730743] Bluetooth: hci7: command tx timeout [ 218.073051] Bluetooth: hci1: command tx timeout [ 218.073691] Bluetooth: hci0: command tx timeout [ 218.200704] Bluetooth: hci2: command tx timeout [ 218.264764] Bluetooth: hci3: command tx timeout [ 218.395601] Bluetooth: hci4: command tx timeout [ 218.457688] Bluetooth: hci5: command tx timeout [ 218.584656] Bluetooth: hci6: command tx timeout [ 218.777671] Bluetooth: hci7: command tx timeout [ 220.120826] Bluetooth: hci0: command tx timeout [ 220.122089] Bluetooth: hci1: command tx timeout [ 220.248662] Bluetooth: hci2: command tx timeout [ 220.312894] Bluetooth: hci3: command tx timeout [ 220.440678] Bluetooth: hci4: command tx timeout [ 220.504746] Bluetooth: hci5: command tx timeout [ 220.632687] Bluetooth: hci6: command tx timeout [ 220.824682] Bluetooth: hci7: command tx timeout [ 274.341412] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.344483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.351175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.359242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.363651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.365527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.534373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.538141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.542026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.546657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.558920] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.562045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.595963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.607021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.611808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.614412] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.620231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.625323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.638020] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.639326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.645798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.647978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.666925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.676940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.681066] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.684476] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.687008] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.693928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.699084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.710451] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.714934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.716494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.731933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.734210] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.737314] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.739304] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.741036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.744943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.792890] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.801215] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.805197] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.830235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.874046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.892056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.893136] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.898219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.898349] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.907124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.441980] Bluetooth: hci0: command tx timeout [ 276.633644] Bluetooth: hci1: command tx timeout [ 276.697165] Bluetooth: hci2: command tx timeout [ 276.760873] Bluetooth: hci3: command tx timeout [ 276.824687] Bluetooth: hci6: command tx timeout [ 276.888697] Bluetooth: hci4: command tx timeout [ 277.016791] Bluetooth: hci5: command tx timeout [ 277.080975] Bluetooth: hci7: command tx timeout [ 278.488615] Bluetooth: hci0: command tx timeout [ 278.681149] Bluetooth: hci1: command tx timeout [ 278.745121] Bluetooth: hci2: command tx timeout [ 278.810749] Bluetooth: hci3: command tx timeout [ 278.872815] Bluetooth: hci6: command tx timeout [ 278.936695] Bluetooth: hci4: command tx timeout [ 279.064705] Bluetooth: hci5: command tx timeout [ 279.129032] Bluetooth: hci7: command tx timeout [ 280.537654] Bluetooth: hci0: command tx timeout [ 280.728764] Bluetooth: hci1: command tx timeout [ 280.792720] Bluetooth: hci2: command tx timeout [ 280.857610] Bluetooth: hci3: command tx timeout [ 280.920628] Bluetooth: hci6: command tx timeout [ 280.985696] Bluetooth: hci4: command tx timeout [ 281.112640] Bluetooth: hci5: command tx timeout [ 281.177753] Bluetooth: hci7: command tx timeout [ 282.584668] Bluetooth: hci0: command tx timeout [ 282.776825] Bluetooth: hci1: command tx timeout [ 282.842673] Bluetooth: hci2: command tx timeout [ 282.905227] Bluetooth: hci3: command tx timeout [ 282.968718] Bluetooth: hci6: command tx timeout [ 283.032701] Bluetooth: hci4: command tx timeout [ 283.161009] Bluetooth: hci5: command tx timeout [ 283.224803] Bluetooth: hci7: command tx timeout [ 337.129998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.135065] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.137441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.146271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.151351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.154982] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.157642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.161997] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.173051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.178316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.182991] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.185854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.258306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.268072] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.271146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.276788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.287095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.290181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.338067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.345076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.352921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.361161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.392192] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.398746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.400475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.431868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.437949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.472945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.478882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.484122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.507983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.510352] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.512760] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.516921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.519696] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.521379] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.565110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.573862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.579106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.585268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.587273] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.600950] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.603858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.611910] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.616393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.654328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.679053] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.693393] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.225618] Bluetooth: hci1: command tx timeout [ 339.289600] Bluetooth: hci0: command tx timeout [ 339.353670] Bluetooth: hci2: command tx timeout [ 339.480911] Bluetooth: hci3: command tx timeout [ 339.544691] Bluetooth: hci5: command tx timeout [ 339.545463] Bluetooth: hci4: command tx timeout [ 339.736624] Bluetooth: hci6: command tx timeout [ 339.802591] Bluetooth: hci7: command tx timeout [ 341.272876] Bluetooth: hci1: command tx timeout [ 341.336824] Bluetooth: hci0: command tx timeout [ 341.400714] Bluetooth: hci2: command tx timeout [ 341.528762] Bluetooth: hci3: command tx timeout [ 341.592915] Bluetooth: hci4: command tx timeout [ 341.593869] Bluetooth: hci5: command tx timeout [ 341.784612] Bluetooth: hci6: command tx timeout [ 341.848595] Bluetooth: hci7: command tx timeout [ 343.320667] Bluetooth: hci1: command tx timeout [ 343.385564] Bluetooth: hci0: command tx timeout [ 343.448763] Bluetooth: hci2: command tx timeout [ 343.576745] Bluetooth: hci3: command tx timeout [ 343.640631] Bluetooth: hci5: command tx timeout [ 343.641091] Bluetooth: hci4: command tx timeout [ 343.832698] Bluetooth: hci6: command tx timeout [ 343.898580] Bluetooth: hci7: command tx timeout [ 345.368775] Bluetooth: hci1: command tx timeout [ 345.432762] Bluetooth: hci0: command tx timeout [ 345.496989] Bluetooth: hci2: command tx timeout [ 345.625067] Bluetooth: hci3: command tx timeout [ 345.688672] Bluetooth: hci5: command tx timeout [ 345.690145] Bluetooth: hci4: command tx timeout [ 345.881872] Bluetooth: hci6: command tx timeout [ 345.944693] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:41:28 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff81aef79d RCX=0000000000000001 RDX=1ffff11006d41f66 RSI=ffff888036a0fca8 RDI=ffffffff81aef79d RBP=ffffffff81aef79d RSP=ffff888036a0fa88 R8 =0000000000000001 R9 =ffff888036a0fb18 R10=000000000003ab7c R11=00000000000252ff R12=0000000000000001 R13=0000000000000000 R14=ffff888035b15340 R15=0000000000000cc0 RIP=ffffffff81421e92 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6923ed9540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f72998ec6f4 CR3=0000000016a60000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff8880097378c8 RCX=0000000000000001 RDX=1ffff110012e6f24 RSI=ffff888009737d98 RDI=ffffffff813a8961 RBP=ffff888009737920 RSP=ffff8880097378b0 R8 =0000000000000001 R9 =ffff888009737908 R10=000000000003ab7c R11=0000000000011528 R12=ffff888009737990 R13=0000000000000000 R14=ffff888009715340 R15=ffff888036a91de0 RIP=ffffffff81348c19 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa035734438 CR3=000000002c640000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249 XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000