Warning: Permanently added '[localhost]:24803' (ECDSA) to the list of known hosts.
2022/10/06 08:38:18 fuzzer started
2022/10/06 08:38:18 dialing manager at localhost:37193
syzkaller login: [   44.297558] cgroup: Unknown subsys name 'net'
[   44.411121] cgroup: Unknown subsys name 'rlimit'
2022/10/06 08:38:33 syscalls: 2215
2022/10/06 08:38:33 code coverage: enabled
2022/10/06 08:38:33 comparison tracing: enabled
2022/10/06 08:38:33 extra coverage: enabled
2022/10/06 08:38:33 setuid sandbox: enabled
2022/10/06 08:38:33 namespace sandbox: enabled
2022/10/06 08:38:33 Android sandbox: enabled
2022/10/06 08:38:33 fault injection: enabled
2022/10/06 08:38:33 leak checking: enabled
2022/10/06 08:38:33 net packet injection: enabled
2022/10/06 08:38:33 net device setup: enabled
2022/10/06 08:38:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/06 08:38:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/06 08:38:33 USB emulation: enabled
2022/10/06 08:38:33 hci packet injection: enabled
2022/10/06 08:38:33 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005                                              )
2022/10/06 08:38:33 802.15.4 emulation: enabled
2022/10/06 08:38:33 fetching corpus: 50, signal 25990/27727 (executing program)
2022/10/06 08:38:33 fetching corpus: 100, signal 38478/41752 (executing program)
2022/10/06 08:38:34 fetching corpus: 150, signal 44091/48874 (executing program)
2022/10/06 08:38:34 fetching corpus: 200, signal 48070/54276 (executing program)
2022/10/06 08:38:34 fetching corpus: 250, signal 53118/60635 (executing program)
2022/10/06 08:38:34 fetching corpus: 300, signal 60320/68933 (executing program)
2022/10/06 08:38:34 fetching corpus: 350, signal 64225/74016 (executing program)
2022/10/06 08:38:34 fetching corpus: 400, signal 71742/82406 (executing program)
2022/10/06 08:38:34 fetching corpus: 450, signal 73438/85354 (executing program)
2022/10/06 08:38:34 fetching corpus: 500, signal 75482/88555 (executing program)
2022/10/06 08:38:34 fetching corpus: 550, signal 78534/92565 (executing program)
2022/10/06 08:38:35 fetching corpus: 600, signal 80799/95844 (executing program)
2022/10/06 08:38:35 fetching corpus: 650, signal 84265/100151 (executing program)
2022/10/06 08:38:35 fetching corpus: 700, signal 88101/104722 (executing program)
2022/10/06 08:38:35 fetching corpus: 750, signal 91564/108931 (executing program)
2022/10/06 08:38:35 fetching corpus: 800, signal 94116/112235 (executing program)
2022/10/06 08:38:35 fetching corpus: 850, signal 96123/115057 (executing program)
2022/10/06 08:38:35 fetching corpus: 900, signal 97923/117603 (executing program)
2022/10/06 08:38:35 fetching corpus: 950, signal 99492/119995 (executing program)
2022/10/06 08:38:35 fetching corpus: 1000, signal 100899/122250 (executing program)
2022/10/06 08:38:35 fetching corpus: 1050, signal 102313/124450 (executing program)
2022/10/06 08:38:36 fetching corpus: 1100, signal 104483/127209 (executing program)
2022/10/06 08:38:36 fetching corpus: 1150, signal 107099/130317 (executing program)
2022/10/06 08:38:36 fetching corpus: 1200, signal 108989/132780 (executing program)
2022/10/06 08:38:36 fetching corpus: 1250, signal 111073/135316 (executing program)
2022/10/06 08:38:36 fetching corpus: 1300, signal 112573/137458 (executing program)
2022/10/06 08:38:36 fetching corpus: 1350, signal 114370/139798 (executing program)
2022/10/06 08:38:36 fetching corpus: 1400, signal 115984/141921 (executing program)
2022/10/06 08:38:36 fetching corpus: 1450, signal 117288/143802 (executing program)
2022/10/06 08:38:36 fetching corpus: 1500, signal 119012/146003 (executing program)
2022/10/06 08:38:37 fetching corpus: 1550, signal 119867/147478 (executing program)
2022/10/06 08:38:37 fetching corpus: 1600, signal 120665/149011 (executing program)
2022/10/06 08:38:37 fetching corpus: 1650, signal 121345/150348 (executing program)
2022/10/06 08:38:37 fetching corpus: 1700, signal 123217/152477 (executing program)
2022/10/06 08:38:37 fetching corpus: 1750, signal 125686/155029 (executing program)
2022/10/06 08:38:37 fetching corpus: 1800, signal 128062/157414 (executing program)
2022/10/06 08:38:37 fetching corpus: 1850, signal 129934/159512 (executing program)
2022/10/06 08:38:37 fetching corpus: 1900, signal 131318/161204 (executing program)
2022/10/06 08:38:38 fetching corpus: 1950, signal 132230/162539 (executing program)
2022/10/06 08:38:38 fetching corpus: 2000, signal 133352/163997 (executing program)
2022/10/06 08:38:38 fetching corpus: 2050, signal 134470/165492 (executing program)
2022/10/06 08:38:38 fetching corpus: 2100, signal 136242/167280 (executing program)
2022/10/06 08:38:38 fetching corpus: 2150, signal 137274/168636 (executing program)
2022/10/06 08:38:38 fetching corpus: 2200, signal 138197/169944 (executing program)
2022/10/06 08:38:38 fetching corpus: 2250, signal 138997/171124 (executing program)
2022/10/06 08:38:38 fetching corpus: 2300, signal 140390/172679 (executing program)
2022/10/06 08:38:38 fetching corpus: 2350, signal 141327/173927 (executing program)
2022/10/06 08:38:38 fetching corpus: 2400, signal 141836/174885 (executing program)
2022/10/06 08:38:38 fetching corpus: 2450, signal 142728/176072 (executing program)
2022/10/06 08:38:39 fetching corpus: 2500, signal 143261/177099 (executing program)
2022/10/06 08:38:39 fetching corpus: 2550, signal 143760/178064 (executing program)
2022/10/06 08:38:39 fetching corpus: 2600, signal 145008/179396 (executing program)
2022/10/06 08:38:39 fetching corpus: 2650, signal 145668/180391 (executing program)
2022/10/06 08:38:39 fetching corpus: 2700, signal 146536/181457 (executing program)
2022/10/06 08:38:39 fetching corpus: 2750, signal 147392/182517 (executing program)
2022/10/06 08:38:39 fetching corpus: 2800, signal 148173/183522 (executing program)
2022/10/06 08:38:39 fetching corpus: 2850, signal 148971/184533 (executing program)
2022/10/06 08:38:39 fetching corpus: 2900, signal 151349/186194 (executing program)
2022/10/06 08:38:39 fetching corpus: 2950, signal 153681/187930 (executing program)
2022/10/06 08:38:40 fetching corpus: 3000, signal 155046/189092 (executing program)
2022/10/06 08:38:40 fetching corpus: 3050, signal 155853/190005 (executing program)
2022/10/06 08:38:40 fetching corpus: 3100, signal 156640/190889 (executing program)
2022/10/06 08:38:40 fetching corpus: 3150, signal 157857/191960 (executing program)
2022/10/06 08:38:40 fetching corpus: 3200, signal 158270/192670 (executing program)
2022/10/06 08:38:40 fetching corpus: 3250, signal 159087/193531 (executing program)
2022/10/06 08:38:40 fetching corpus: 3300, signal 159701/194278 (executing program)
2022/10/06 08:38:40 fetching corpus: 3350, signal 160100/194948 (executing program)
2022/10/06 08:38:40 fetching corpus: 3400, signal 160823/195754 (executing program)
2022/10/06 08:38:40 fetching corpus: 3450, signal 161631/196603 (executing program)
2022/10/06 08:38:41 fetching corpus: 3500, signal 162010/197221 (executing program)
2022/10/06 08:38:41 fetching corpus: 3550, signal 162517/197868 (executing program)
2022/10/06 08:38:41 fetching corpus: 3600, signal 163254/198648 (executing program)
2022/10/06 08:38:41 fetching corpus: 3650, signal 163729/199276 (executing program)
2022/10/06 08:38:41 fetching corpus: 3700, signal 164751/200061 (executing program)
2022/10/06 08:38:41 fetching corpus: 3750, signal 166064/200933 (executing program)
2022/10/06 08:38:41 fetching corpus: 3800, signal 166517/201548 (executing program)
2022/10/06 08:38:41 fetching corpus: 3850, signal 166952/202127 (executing program)
2022/10/06 08:38:41 fetching corpus: 3900, signal 167716/202773 (executing program)
2022/10/06 08:38:41 fetching corpus: 3950, signal 167983/203308 (executing program)
2022/10/06 08:38:41 fetching corpus: 4000, signal 168507/203872 (executing program)
2022/10/06 08:38:42 fetching corpus: 4050, signal 169050/204481 (executing program)
2022/10/06 08:38:42 fetching corpus: 4100, signal 169570/205069 (executing program)
2022/10/06 08:38:42 fetching corpus: 4150, signal 169991/205556 (executing program)
2022/10/06 08:38:42 fetching corpus: 4200, signal 170396/206088 (executing program)
2022/10/06 08:38:42 fetching corpus: 4250, signal 171533/206869 (executing program)
2022/10/06 08:38:42 fetching corpus: 4300, signal 172376/207431 (executing program)
2022/10/06 08:38:42 fetching corpus: 4350, signal 172887/207965 (executing program)
2022/10/06 08:38:42 fetching corpus: 4400, signal 173494/208506 (executing program)
2022/10/06 08:38:42 fetching corpus: 4450, signal 174049/209095 (executing program)
2022/10/06 08:38:42 fetching corpus: 4500, signal 174960/209611 (executing program)
2022/10/06 08:38:43 fetching corpus: 4550, signal 175907/210159 (executing program)
2022/10/06 08:38:43 fetching corpus: 4600, signal 176340/210603 (executing program)
2022/10/06 08:38:43 fetching corpus: 4650, signal 176550/210984 (executing program)
2022/10/06 08:38:43 fetching corpus: 4700, signal 177206/211479 (executing program)
2022/10/06 08:38:43 fetching corpus: 4750, signal 178381/211956 (executing program)
2022/10/06 08:38:43 fetching corpus: 4800, signal 178728/212381 (executing program)
2022/10/06 08:38:43 fetching corpus: 4850, signal 179150/212795 (executing program)
2022/10/06 08:38:43 fetching corpus: 4900, signal 179986/213228 (executing program)
2022/10/06 08:38:44 fetching corpus: 4950, signal 180592/213669 (executing program)
2022/10/06 08:38:44 fetching corpus: 5000, signal 180967/214051 (executing program)
2022/10/06 08:38:44 fetching corpus: 5050, signal 181578/214434 (executing program)
2022/10/06 08:38:44 fetching corpus: 5100, signal 182073/214787 (executing program)
2022/10/06 08:38:44 fetching corpus: 5150, signal 182425/215118 (executing program)
2022/10/06 08:38:44 fetching corpus: 5200, signal 182998/215443 (executing program)
2022/10/06 08:38:44 fetching corpus: 5250, signal 183209/215740 (executing program)
2022/10/06 08:38:44 fetching corpus: 5300, signal 183909/216106 (executing program)
2022/10/06 08:38:44 fetching corpus: 5350, signal 184568/216523 (executing program)
2022/10/06 08:38:44 fetching corpus: 5400, signal 184988/216740 (executing program)
2022/10/06 08:38:44 fetching corpus: 5450, signal 185472/216749 (executing program)
2022/10/06 08:38:44 fetching corpus: 5500, signal 185982/216749 (executing program)
2022/10/06 08:38:45 fetching corpus: 5550, signal 186919/216749 (executing program)
2022/10/06 08:38:45 fetching corpus: 5597, signal 187620/216826 (executing program)
2022/10/06 08:38:45 fetching corpus: 5597, signal 187620/216826 (executing program)
2022/10/06 08:38:47 starting 8 fuzzer processes
08:38:47 executing program 0:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40480c4}, 0x20008009)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x104, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x660}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x66c5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x80010}, 0x4040005)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000400), 0x84880, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f00000005c0)=0xe8)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, r2, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x40010)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', <r4=>0x0, 0x80, 0x8, 0x5, 0x5, {{0x12, 0x4, 0x3, 0x3e, 0x48, 0x65, 0x0, 0x53, 0x0, 0x0, @multicast2, @remote, {[@end, @cipso={0x86, 0x2f, 0x2, [{0x6, 0x3, "ed"}, {0x6, 0x8, "1943e89be908"}, {0x1, 0xc, "2432affbddb250094c17"}, {0x2, 0x12, "588757d189a08a876359cb6b6c8444da"}]}, @noop]}}}}})
connect(r1, &(0x7f0000000940)=@can={0x1d, r4}, 0x80)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r1)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004805}, 0x20000800)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r1)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001fc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f80)={&(0x7f0000000b80)={0x13f4, r6, 0x20a, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x11c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "7eb35794076e62c3e8029cd98bf6511b9d217f7f8a3a8e28e07c6f803f4683e3ce"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0x79, 0x3, "d39808970d4fc3b1b55b2c621de19b6f73c3dea765a07ff432463cc608a7fb9b69f5a58a3c769c7a0fbfe661b955172f1238a78e3133927f98dc0821b5f88eea966816167bb43a66e35e9242313acb2afc6733248e04a807408061797ac51a33be1b5393e7cafc5f68a5cef6605fd5640b1a194b3a"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xce, 0x3, "942f715620980c9f6877c9c4041f5cc2a95418bf9fe5db27f5766eab1a78315b444cb9b2ef9dcdd0563212d7c07dd9ea422cd45088b0928f5dbdeb622211646d724a88563080dddcbd6f349fc6438c11bba0a427a6b51020751f3aa8eec7cea1e83f8a5f689f70dcdd68e02dd607716c42b6fbc84114fd0ef3d7836635e1593038ff3255534152ba9361b26bacb1fe71b195dcb42687b9f11450e3c9cede3b6a63357b8fcc7c4054b9b2ba7fa264b7749d51ee8af687d5aecd9000fb28ed3e328385cb25959f9c4edad0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5c42}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd39}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10002}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x84f8}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x41a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x92}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x13f4}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000002040), r1)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x2c, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x218f911681640956}, 0x40044)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002140)={{{@in=@empty, @in=@private}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000002240)=0xe8)
r8 = syz_open_dev$vcsu(&(0x7f0000002280), 0x0, 0x2800)
ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f00000022c0)={{0x2, 0x4e21, @remote}, {0x6, @broadcast}, 0x22, {0x2, 0x4e24, @loopback}, 'caif0\x00'})
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x87, 0x3e}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x884}, 0x0)

08:38:47 executing program 1:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x3, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4048000)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x1c004050)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x42100, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x4, 0x0, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}]}, 0x1c}}, 0xc000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1)
sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800881}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x250, r2, 0x200, 0x70bd2c, 0xcbd4, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x68, 0x45, "2e3e5351c6863c4dfa2ebf47629e32f7ff4e09a95016deab8dabe4c74e96d71e96a05824f1316f7d9dbdf433f03fd8ddc15ea7c4f5359398150bba4ca6c63c5ef2dbb025ab2746f9a4a6cbdf259e986a9dd734dc5748ba28c5b0488d86080129f94a5f6a"}, @NL80211_ATTR_TESTDATA={0xc8, 0x45, "554aa9f795170827fcf18dde30786e5c98676e0cdb213fad3c58fff50a85e3ce0ea5bb999b5594717d45845eeef27bb518d3eedc508e9fefd7e7fc6e1eaf715149bb3349774be26deddf0cec7735b4403f765e269db9e7f3d9202fc0999c7a38a136bd6e4d63bf8afc197f0c82359ded0404a845f1baacfc4c541cc0e49ac2c29809b14726055436988107d934ae433220c80152a682ad8376593bb2a15e788b691cc7897c0bcd51acd2a76d86d4bb360b3df8dcb8e30c969f087d405c06cd9a3d9ccf53"}, @NL80211_ATTR_TESTDATA={0x102, 0x45, "efaa365c5100016d2c85bc69b7d1b54de780ba2ea2c0b899f633bb9319f772347639c3eae388c54f30cde3fbc2a02adff23537943e3c57ceb7f31f81250bf95a7afdbb135ea3193ef30aaa00543ab31fecef475284b09566319305c968c1e0bc8c10a38d797cffdd23cf37503bfc211d1f838612df5f8b98afefe6e944ce47e7b5752d47eee57cca18a24d610f7f535f858f50b68b6547e293e70636248aa2061f64e0665933c004f9d4205e8dcf6e204a096c4b7b46339b7557161750d934f91f4da986cb0e05715365a0e15cfbaa40f487e936d4908c06281e36ebe566387215df62f6bcd4608eb9cbbd9c69f5fa824235c11df20e5e70da95879c12e5"}]}, 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x200cd)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = signalfd(r3, &(0x7f0000000a80)={[0x9]}, 0x8)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2001}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r5=>r4, {0x7a2a2440}}, './file0\x00'})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r2, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x38}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb99}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x4000041)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000d40)={{0x1, 0x1, 0x18}, './file0\x00'})
r6 = open(&(0x7f0000000d80)='./file0\x00', 0x600000, 0x2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, r7, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x4000000)

08:38:47 executing program 2:
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x3, 0x0, 0x13, 0x9, 0xb1, "33dc8b19922bc8f0bbdbb2b20c009695ed395866b5de75475f2894eb5fd3c67e87900e2c6fb6b2bd2c4b7ec1cc987830339990e266185409c73b16a667ab7bff96f02e692215d4cdd0574a186f7bf3bc02ad56f035a115dcd3f77e2fe31b04cd507560a07f2bd50cec73ce926da9d52cec1910326748f847edf1e668dadf4be684eb1cabba0036c031b433a599279d75e914c5404adcf71a1bdd6cf434a7a42a5739fcf33f1fd7a22f2cb86eb67af66699"}, 0xba, 0x3)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x0, "85fe79", 0xbe, 0x4})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)={{0x108, 0x9, 0x7f, 0x27d, 0x18b, 0x0, 0x122, 0x3d6a}, "88233d87578a2e590adc93e861b6f409d44f228bca68144c0984a5c9789f95b970b550f792b5f9225c87a051dac9fe2ff74d70f6b06b0489fce404cd7d30ef3b3e4d6660f654c5ad1ca647", ['\x00', '\x00', '\x00', '\x00']}, 0x46b)
r0 = eventfd2(0xfff, 0x801)
preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4, 0x4}, {&(0x7f0000001640)=""/133, 0x85}, {&(0x7f0000001700)=""/190, 0xbe}, {&(0x7f00000017c0)=""/217, 0xd9}, {&(0x7f00000018c0)=""/177, 0xb1}, {&(0x7f0000001980)=""/228, 0xe4}, {&(0x7f0000001a80)=""/103, 0x67}, {&(0x7f0000001b00)=""/120, 0x78}], 0x9, 0x7, 0x3)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c40), 0x80000, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}}, 0x4000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001d80), 0x40, 0x0)
ioctl$CDROMSTART(r2, 0x5308)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001dc0)={0x0, 0x0, 0xfffffffffffeffff})
r3 = openat(r2, &(0x7f0000001e00)='./file0\x00', 0xc000, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001e40)={0xefc, 0x45, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000018600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000018700), 0x40040, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000018800)='net/ipv6_route\x00')
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000018ac0), 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000018c00)='totmaps\x00')
io_submit(0x0, 0x8, &(0x7f0000018d40)=[&(0x7f00000186c0)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f0000018640)="f86ab44f6c9f5c023c0a38feeaa7aed0d8853240f8a9254efb9f6c016cd8782d90beee831b8eb8d1df2735a0c4445381e02af0d274d920b0bef439087c46e5fae304dfc17423e6", 0x47, 0x6, 0x0, 0x1}, &(0x7f0000018840)={0x0, 0x0, 0x0, 0x2, 0x4, r6, &(0x7f0000018740)="ed33263ffd9abc6a9cef3fee26e78a953c1c9843324693684837f9796e7ffb3507abb12e0efd0d8972db8978b68e94bc382a43093bc3fb1d425957da65427908d8ebe62a0ab5804918f3a76e29657bd4ad50c4f527d45003ccf52b96b21205af175d98d25bd392e4e4cda8eca0d80f271b4c3e4da1f5bb12a839a409967cbfafacb2741cc0e085c928c4b6e04708a29b5ff994c470a01a52f806ae66af71074bd612da6f92381ad51142ec92", 0xac, 0x9, 0x0, 0x0, r7}, &(0x7f00000188c0)={0x0, 0x0, 0x0, 0x8, 0x3, r3, &(0x7f0000018880)="1c6c7f3f701b1daab6d54ca7f692badfcaba08925be1bfbbbf6352d310625167b015c08ee1b6ce4d0851f134b6fe444ac426b0f760032329aa67084a", 0x3c, 0x10000, 0x0, 0x3}, &(0x7f0000018940)={0x0, 0x0, 0x0, 0x0, 0x827, r0, &(0x7f0000018900)="8ff6c8c05b5cd7b42657a8aa6fe759f4725d740c67dda46f1e248694c82546", 0x1f, 0x7fff, 0x0, 0x2}, &(0x7f00000189c0)={0x0, 0x0, 0x0, 0x1, 0x36, r2, &(0x7f0000018980)="a49651470b53e0c3a25a592fa44a5b066d6f73219500bb6f", 0x18, 0x5, 0x0, 0x1, r1}, &(0x7f0000018b00)={0x0, 0x0, 0x0, 0x5, 0x1f, r1, &(0x7f0000018a00)="aec012d353be2bb3f047ae3a4fe9f736a89e5e8da1e981c27effd514fe1c2fbc5d683fecb079b314e3978fa5e0ac32c15a809e3c7de8f9876886d2fa2274a9aa339df3deb462b6633367f2fcb70c78210b01be681cee38bb7174bdd023dfaa0695267aea896a0378412e13fc1e4029fb9f4841ae906520ca34641fa915a8cb19be889a0c1a0c381b0bf782ea3e009a9364ccc8b7aeb592827eef1d036725a6ee56f6a7ed", 0xa4, 0x0, 0x0, 0x1, r8}, &(0x7f0000018c40)={0x0, 0x0, 0x0, 0x3, 0x81, 0xffffffffffffffff, &(0x7f0000018b40)="c2726121d927a2a4dabae6dc597931ee1668cf8d6541306b9063ef5796d43f266dd91168ea6e9a2aa4e8f0c74b937b4498713ee38c06588cc7d5a36bb1c5b6b3702931ec908786822c9207f8d6970fb7c67adae03622b73a127d4ea325c5391d18ec9e259574f46961b769968d79c9fd1bfe3612ac692782d8ca00d1db591b3ae8caf08ed2489b4d3d033fa39fb2b87297dbb0d9801e5b26672881", 0x9b, 0x400, 0x0, 0x1, r9}, &(0x7f0000018d00)={0x0, 0x0, 0x0, 0x5, 0x2, r3, &(0x7f0000018c80)="5514ac6719dbc7b6e53d1211fce5cb7cdd773d964851ccf86ef49cdba533a1bbcd9ee60d8d311c444f07b3eaced6c27eefae9840c4844d35749e12535301fbf8748299f16046ce86776d4d43daed5c2642a5", 0x52, 0x200, 0x0, 0x0, r2}])
write$binfmt_aout(r5, &(0x7f0000018d80)={{0x10b, 0xf8, 0x3, 0x15e, 0x236, 0x3f, 0x122, 0x3}, "3a439aab020a3ecfc4668193d3ab563d8eeb39951496e82d303019e5147589192d0e3c881b41c29049888d", ['\x00', '\x00']}, 0x24b)

08:38:47 executing program 3:
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004280)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/149, 0x95}, {&(0x7f0000000140)=""/113, 0x71}], 0x2, &(0x7f0000000200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r0=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/152, 0x98}], 0x1, &(0x7f00000004c0)=[@rights={{0x28, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000600)=""/46, 0x2e}, {&(0x7f0000000640)=""/65, 0x41}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/114, 0x72}], 0x6}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001940)=""/38, 0x26}, {&(0x7f0000001980)=""/157, 0x9d}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)}, {&(0x7f0000002a80)=""/118, 0x76}], 0x5, &(0x7f0000002b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002bc0), 0x6e, &(0x7f0000004000)=[{&(0x7f0000002c40)=""/26, 0x1a}, {&(0x7f0000002c80)=""/155, 0x9b}, {&(0x7f0000002d40)=""/95, 0x5f}, {&(0x7f0000002dc0)=""/76, 0x4c}, {&(0x7f0000002e40)=""/1, 0x1}, {&(0x7f0000002e80)=""/194, 0xc2}, {&(0x7f0000002f80)=""/96, 0x60}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x8, &(0x7f0000004080)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000004140)=@abs, 0x6e, &(0x7f00000041c0), 0x0, &(0x7f0000004200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x6, 0x0, &(0x7f0000004400)={0x77359400})
pidfd_open(r8, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f0000004440), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000004480)={{0x1, 0x1, 0x18, <r9=>r2}, './file0\x00'})
pwritev2(r9, &(0x7f0000005580)=[{&(0x7f00000044c0)="0eeab9e6354391bf304242d2a4ae4ea383c030e71191b0e51f697bed", 0x1c}, {&(0x7f0000004500)="814ee8df2a6bfefaa33744413edc8b4946b50507f66375d616e6d78c44e6c27f1a4a755c4db185a4da94c1f29b5d5dac62da35dfa50d6aff9f913e2897ce2e633588709ff6acdd6014f78bb40c29a2af036707b7bf729da3504d65c1b0b079b9", 0x60}, {&(0x7f0000004580)="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", 0x1000}], 0x3, 0x4, 0xa4, 0x4)
r10 = inotify_init1(0x800)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000055c0)={{0x1, 0x1, 0x18, r10}, './file0\x00'})
pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000005600)={0x7, 0xdf, 0x40}, 0x0)
inotify_add_watch(r5, &(0x7f0000005680)='./file0\x00', 0xa2000804)
pidfd_send_signal(r6, 0x28, &(0x7f00000056c0)={0x41, 0x2, 0xffff}, 0x0)
openat(r1, &(0x7f0000005740)='./file0\x00', 0x242100, 0x8)
read(r3, &(0x7f0000005780)=""/4096, 0x1000)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r11 = epoll_create(0x800)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000006780)='/proc/asound/timers\x00', 0x0, 0x0)
close_range(r11, r12, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000067c0)={{0x1, 0x1, 0x18, <r13=>0xffffffffffffffff, {0x1880b9a6}}, './file0\x00'})
epoll_pwait(r13, &(0x7f0000006800)=[{}, {}, {}, {}], 0x4, 0x9, &(0x7f0000006840)={[0x9]}, 0x8)
r14 = mq_open(&(0x7f0000006880)='\',$\xf1^:,]]\'^]\x00', 0x1, 0x6b, &(0x7f00000068c0)={0x7, 0x3, 0x8, 0x401})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r14, 0x6612)

[   72.993332] audit: type=1400 audit(1665045527.608:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:38:47 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7fff}}, './file0\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1000}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xb7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x15)
r2 = accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0, r2}, 0x68)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x40080)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg1\x00', <r3=>0x0})
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, 0x13, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1a, 0x1, 0x7, 0x0, {0x4e24, 0x4e22, [0x3, 0x400, 0x5, 0x10], [0x3, 0x4, 0x7fffffff, 0x4], r3, [0xffff, 0xffff]}, 0x80000000, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x13, 0x1, "327a4a57a50c43cf8d4304378e322b"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "01581bc2cdaf5d970f5d660af7d203cfcc1c5da83c07472786617ccb260689c2dd46b210577484243dbe4e55b4a37c8dad0c15f380c4a8c2112374f03802f8e2788a6335c153f329fd29f4b1b9b918af3fdd07137adcab2133291c6b491e66179f51271e25afc233fb5dd09d21baa406aab41600fdf2b3d5a5cd2b44e09cac37b7f37b8c625a05ec16b1a652f6f4f2ddcd4a26890e1bd2"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "f0f34f899cfe1036bd429ad460fcb2d9bf9ab67c28873e1d5112457f13113d6c80"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "6c78d3ff47c96ab68fe37662f0e8db87ae63501f88b72e7b015ec5d53d227f3fee4ce5231af64eb145968bb932709f95e15e342265273b6cac0f33a0b008ca942773b1d6ca3a9f0fd11ce9b47defa68ea85ed6a6e880bb7ec65e347184f37ac87ef55dad518f79d75067b116f37873d3db81969de02d0379be8dff55e9ddef652317e4ee905d798398f97ec851b699e97e634d7dafa6a47664bcb58ed4651a3264d035"}]}, 0x1cc}, 0x1, 0x0, 0x0, 0xd0}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', <r4=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in6=@empty, 0x4e20, 0x6, 0x4e24, 0x4, 0x2, 0x10, 0x10, 0x3c, r4}, {0x4, 0x0, 0x3, 0x2, 0x9, 0x2, 0x6, 0x1}, {0x7, 0x6, 0x6, 0x800}}, {{@in=@private=0xa010101, 0x4d4, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x0, 0x3, 0x7, 0x9, 0x6}}, 0xe8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r5=>r0, {0x76d8}}, './file0/file0\x00'})
fgetxattr(r5, &(0x7f0000000900)=@random={'trusted.', '\x00'}, &(0x7f0000000940)=""/101, 0x65)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r6=>r5, {0x7}}, './file0\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f00000009c0), r6)
setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@loopback, @in6=@remote, 0x4e20, 0x6, 0x4e20, 0x0, 0xa, 0xa0, 0x180, 0x2c, r4, 0xffffffffffffffff}, {0x1, 0x3f, 0x6, 0x81, 0x0, 0x5, 0x3, 0x9}, {0x0, 0x8, 0x1212, 0x6}, 0x5, 0x6e6bb9, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6}, 0x2, @in6=@loopback, 0x3503, 0x1, 0x0, 0x3a, 0x9, 0x3, 0x5}}, 0xe8)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x3c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xd1d1}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x11)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000c40)={0x400, 0x1ff, 0x1000, 0x2, 0x4, 0xc5, 0x4}, 0xc)
openat(0xffffffffffffffff, &(0x7f0000000c80)='./file0/file1\x00', 0x240100, 0xd1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r0)
syz_mount_image$iso9660(&(0x7f0000000d00), &(0x7f0000000d40)='./file0\x00', 0x6, 0x1, &(0x7f0000000e40)=[{&(0x7f0000000d80)="5334a58a45baa49cd1b76df48bfd8f8bc33cb8cf7714a12fe21dacc79dc211280f4ba8bf32a6cbd3b4a74ab07e72f816d07a8db6c6da1e7e04b36ab399d2337cbbbea8ddae5baa0685ea8ad84cf79f9f811a578e5862d425d5aebc07b36ec6256ea87a3c668b2d155867c3f42e73d07ecc5d36036c097f23e6737cfeef6ee6948d5e", 0x82, 0xfffffffffffffffe}], 0xb86060, &(0x7f0000001000)={[{@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@nojoliet}, {@hide}, {@nocompress}, {@cruft}, {@block={'block', 0x3d, 0x600}}], [{@euid_eq}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'trusted.'}}, {@uid_eq}]})

08:38:47 executing program 4:
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2})
keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3})
keyctl$join(0x1, 0x0)
keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2})
keyctl$join(0x1, 0x0)
keyctl$join(0x1, 0x0)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x2})
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x2})
keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x0})
keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x1})
keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x0})
keyctl$join(0x1, 0x0)
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x0})
keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x2})
keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x0})
keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x1})
keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x0})

08:38:47 executing program 6:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r0=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x801)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x40000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x58}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004048}, 0x800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "f67af451a2faac777123c7e31e375f9b"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a56dd20ffd0712690a2a66685a4c4dc4675917ac0600c0bff7712ebb17f22111"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x80)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x1040}, 0x80000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x24}}, 0x20004010)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x1, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x14)

08:38:47 executing program 7:
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)
prctl$PR_GET_SECUREBITS(0x1b)

[   74.303517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.305176] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.306991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.308175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.309981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.311295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.312051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.312801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.313652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.314657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.315839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.317362] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.322909] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.324157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.336233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   74.337219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.341672] Bluetooth: hci1: HCI_REQ-0x0c1a
[   74.343173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.343935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.345553] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   74.346599] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   74.347690] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.348340] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   74.349466] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.350468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.357626] Bluetooth: hci3: HCI_REQ-0x0c1a
[   74.360297] Bluetooth: hci0: HCI_REQ-0x0c1a
[   74.362933] Bluetooth: hci2: HCI_REQ-0x0c1a
[   74.378136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   74.380055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   74.395136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.396448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   74.399995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   74.400720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.402339] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   74.402990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.405827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   74.406707] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.408056] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   74.409509] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   74.410183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   74.411374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.415045] Bluetooth: hci6: HCI_REQ-0x0c1a
[   74.417105] Bluetooth: hci4: HCI_REQ-0x0c1a
[   74.479191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   74.480391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   74.485981] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   74.489994] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   74.493411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   74.498169] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   74.502704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   74.505163] Bluetooth: hci5: HCI_REQ-0x0c1a
[   74.511035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   74.515431] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   74.516685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   74.533322] Bluetooth: hci7: HCI_REQ-0x0c1a
[   76.373571] Bluetooth: hci1: command 0x0409 tx timeout
[   76.373931] Bluetooth: hci3: command 0x0409 tx timeout
[   76.436886] Bluetooth: hci2: command 0x0409 tx timeout
[   76.436965] Bluetooth: hci4: command 0x0409 tx timeout
[   76.437695] Bluetooth: hci0: command 0x0409 tx timeout
[   76.438410] Bluetooth: hci6: command 0x0409 tx timeout
[   76.564927] Bluetooth: hci7: command 0x0409 tx timeout
[   76.565830] Bluetooth: hci5: command 0x0409 tx timeout
[   78.423017] Bluetooth: hci3: command 0x041b tx timeout
[   78.423645] Bluetooth: hci1: command 0x041b tx timeout
[   78.484821] Bluetooth: hci6: command 0x041b tx timeout
[   78.485851] Bluetooth: hci0: command 0x041b tx timeout
[   78.486272] Bluetooth: hci4: command 0x041b tx timeout
[   78.487305] Bluetooth: hci2: command 0x041b tx timeout
[   78.613790] Bluetooth: hci5: command 0x041b tx timeout
[   78.614313] Bluetooth: hci7: command 0x041b tx timeout
[   80.468921] Bluetooth: hci1: command 0x040f tx timeout
[   80.469433] Bluetooth: hci3: command 0x040f tx timeout
[   80.532840] Bluetooth: hci2: command 0x040f tx timeout
[   80.533397] Bluetooth: hci4: command 0x040f tx timeout
[   80.533902] Bluetooth: hci0: command 0x040f tx timeout
[   80.534337] Bluetooth: hci6: command 0x040f tx timeout
[   80.661560] Bluetooth: hci7: command 0x040f tx timeout
[   80.662157] Bluetooth: hci5: command 0x040f tx timeout
[   82.516953] Bluetooth: hci3: command 0x0419 tx timeout
[   82.517445] Bluetooth: hci1: command 0x0419 tx timeout
[   82.580950] Bluetooth: hci6: command 0x0419 tx timeout
[   82.581483] Bluetooth: hci0: command 0x0419 tx timeout
[   82.582054] Bluetooth: hci4: command 0x0419 tx timeout
[   82.582514] Bluetooth: hci2: command 0x0419 tx timeout
[   82.709418] Bluetooth: hci5: command 0x0419 tx timeout
[   82.709931] Bluetooth: hci7: command 0x0419 tx timeout
[  136.433635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  136.435652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  136.437368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  136.439488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  136.441264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  136.442268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  136.447305] Bluetooth: hci0: HCI_REQ-0x0c1a
[  136.624094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  136.625195] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  136.629236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  136.630269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  136.631728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  136.632898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  136.633996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  136.636169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  136.638274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  136.639326] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  136.641358] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  136.642366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  136.646826] Bluetooth: hci2: HCI_REQ-0x0c1a
[  136.652470] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  136.653654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  136.656106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  136.658275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  136.659116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  136.663601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  136.667829] Bluetooth: hci4: HCI_REQ-0x0c1a
[  136.668867] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  136.675676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  136.682078] Bluetooth: hci1: HCI_REQ-0x0c1a
[  136.685320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  136.691290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  136.694919] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  136.699706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  136.709574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  136.712044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  136.713302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  136.715240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  136.718582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  136.721275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  136.722285] Bluetooth: hci3: HCI_REQ-0x0c1a
[  136.757850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  136.764998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  136.767908] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  136.768145] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  136.769685] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  136.830584] Bluetooth: hci6: HCI_REQ-0x0c1a
[  136.831400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  136.930943] Bluetooth: hci5: HCI_REQ-0x0c1a
[  138.452854] Bluetooth: hci0: command 0x0409 tx timeout
[  138.708832] Bluetooth: hci1: command 0x0409 tx timeout
[  138.708854] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  138.709558] Bluetooth: hci4: command 0x0409 tx timeout
[  138.710851] Bluetooth: hci2: command 0x0409 tx timeout
[  138.772831] Bluetooth: hci3: command 0x0409 tx timeout
[  138.836848] Bluetooth: hci6: command 0x0409 tx timeout
[  139.028825] Bluetooth: hci5: command 0x0409 tx timeout
[  140.500953] Bluetooth: hci0: command 0x041b tx timeout
[  140.756902] Bluetooth: hci2: command 0x041b tx timeout
[  140.757413] Bluetooth: hci4: command 0x041b tx timeout
[  140.757865] Bluetooth: hci1: command 0x041b tx timeout
[  140.821848] Bluetooth: hci3: command 0x041b tx timeout
[  140.885814] Bluetooth: hci6: command 0x041b tx timeout
[  141.076906] Bluetooth: hci5: command 0x041b tx timeout
[  142.549817] Bluetooth: hci0: command 0x040f tx timeout
[  142.804887] Bluetooth: hci1: command 0x040f tx timeout
[  142.804933] Bluetooth: hci4: command 0x040f tx timeout
[  142.805453] Bluetooth: hci2: command 0x040f tx timeout
[  142.868887] Bluetooth: hci3: command 0x040f tx timeout
[  142.933814] Bluetooth: hci6: command 0x040f tx timeout
[  143.125814] Bluetooth: hci5: command 0x040f tx timeout
[  143.573884] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  144.596853] Bluetooth: hci0: command 0x0419 tx timeout
[  144.852817] Bluetooth: hci2: command 0x0419 tx timeout
[  144.853881] Bluetooth: hci4: command 0x0419 tx timeout
[  144.853895] Bluetooth: hci1: command 0x0419 tx timeout
[  144.916856] Bluetooth: hci3: command 0x0419 tx timeout
[  144.980841] Bluetooth: hci6: command 0x0419 tx timeout
[  145.172832] Bluetooth: hci5: command 0x0419 tx timeout
[  146.330727] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  146.332479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  146.334195] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  146.377143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  146.396099] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  146.400295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  146.409440] Bluetooth: hci7: HCI_REQ-0x0c1a
[  148.501284] Bluetooth: hci7: command 0x0409 tx timeout
[  150.550158] Bluetooth: hci7: command 0x041b tx timeout
[  152.597127] Bluetooth: hci7: command 0x040f tx timeout
[  154.645108] Bluetooth: hci7: command 0x0419 tx timeout
[  198.681210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  198.682471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  198.686325] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  198.690143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  198.692142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  198.693138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  198.697018] Bluetooth: hci1: HCI_REQ-0x0c1a
[  199.001539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  199.002970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  199.005342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.008805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.011005] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  199.011923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.015448] Bluetooth: hci2: HCI_REQ-0x0c1a
[  199.106574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  199.108602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  199.110981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  199.111787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  199.113135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  199.113862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  199.122220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  199.123031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  199.126211] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  199.127055] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  199.127673] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.130217] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  199.133629] Bluetooth: hci5: HCI_REQ-0x0c1a
[  199.136920] Bluetooth: hci3: HCI_REQ-0x0c1a
[  200.404845] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  200.725832] Bluetooth: hci1: command 0x0409 tx timeout
[  201.044833] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  201.045970] Bluetooth: hci2: command 0x0409 tx timeout
[  201.047080] Bluetooth: hci4: Opcode 0x c03 failed: -110
[  201.173922] Bluetooth: hci3: command 0x0409 tx timeout
[  201.174796] Bluetooth: hci5: command 0x0409 tx timeout
[  202.772816] Bluetooth: hci1: command 0x041b tx timeout
[  202.969833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  202.972347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  202.973435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  202.998030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  203.002274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  203.003195] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  203.021139] Bluetooth: hci0: HCI_REQ-0x0c1a
[  203.093846] Bluetooth: hci2: command 0x041b tx timeout
[  203.220843] Bluetooth: hci5: command 0x041b tx timeout
[  203.221249] Bluetooth: hci3: command 0x041b tx timeout
[  203.671594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  203.672606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  203.674385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  203.676702] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  203.678835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  203.679649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  203.682567] Bluetooth: hci4: HCI_REQ-0x0c1a
[  204.820830] Bluetooth: hci1: command 0x040f tx timeout
[  205.077940] Bluetooth: hci0: command 0x0409 tx timeout
[  205.141776] Bluetooth: hci2: command 0x040f tx timeout
08:40:59 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)
symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x9, 0x20})

[  205.268824] Bluetooth: hci3: command 0x040f tx timeout
[  205.268893] Bluetooth: hci5: command 0x040f tx timeout
[  205.319920] audit: type=1400 audit(1665045659.934:7): avc:  denied  { open } for  pid=6813 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  205.716822] Bluetooth: hci4: command 0x0409 tx timeout
[  205.973854] Bluetooth: hci6: Opcode 0x c03 failed: -110
08:41:00 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)
symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x9, 0x20})

[  206.868915] Bluetooth: hci1: command 0x0419 tx timeout
[  207.124786] Bluetooth: hci0: command 0x041b tx timeout
[  207.188862] Bluetooth: hci2: command 0x0419 tx timeout
[  207.316814] Bluetooth: hci5: command 0x0419 tx timeout
[  207.316921] Bluetooth: hci3: command 0x0419 tx timeout
08:41:02 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="ff0f00000000000003000000000000000200000007000000030000000000000004000000000000000500000000000000000000000000000000000000000000000000000000000000dc3b437400000000000000000000000005000000000000000300000016b80000080000000000000000000000000000000000000000000000022400000000000000000000000000000400000000000000ffffffff000000004000000000000000000000000000000000000000000000000008000000000000000000000000000052966da42096de8da12bc6403107d58e7d2dfb9a3d981c6145217d0c799ffb4ad23c0663309d7fb35a8858af2f81c3137626e93e6a124667357915e92238b4f70b"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)
symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x9, 0x20})

[  207.764819] Bluetooth: hci4: command 0x041b tx timeout
[  208.753788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  208.755905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  208.764146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  208.779357] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  208.780613] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  208.782876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  208.790071] Bluetooth: hci6: HCI_REQ-0x0c1a
08:41:03 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="ff0f00000000000003000000000000000200000007000000030000000000000004000000000000000500000000000000000000000000000000000000000000000000000000000000dc3b437400000000000000000000000005000000000000000300000016b80000080000000000000000000000000000000000000000000000022400000000000000000000000000000400000000000000ffffffff000000004000000000000000000000000000000000000000000000000008000000000000000000000000000052966da42096de8da12bc6403107d58e7d2dfb9a3d981c6145217d0c799ffb4ad23c0663309d7fb35a8858af2f81c3137626e93e6a124667357915e92238b4f70b"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)
symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x9, 0x20})

[  209.172829] Bluetooth: hci0: command 0x040f tx timeout
[  209.812921] Bluetooth: hci4: command 0x040f tx timeout
08:41:04 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)
symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')

[  210.836861] Bluetooth: hci6: command 0x0409 tx timeout
[  211.220835] Bluetooth: hci0: command 0x0419 tx timeout
08:41:06 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)

[  211.860812] Bluetooth: hci4: command 0x0419 tx timeout
08:41:07 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)

[  212.884797] Bluetooth: hci6: command 0x041b tx timeout
08:41:08 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)

[  214.932790] Bluetooth: hci6: command 0x040f tx timeout
[  216.980874] Bluetooth: hci6: command 0x0419 tx timeout
[  252.348331] loop5: detected capacity change from 0 to 16383
[  252.350765] =======================================================
[  252.350765] WARNING: The mand mount option has been deprecated and
[  252.350765]          and is ignored by this kernel. Remove the mand
[  252.350765]          option from the mount to silence this warning.
[  252.350765] =======================================================
[  269.908811] Bluetooth: hci7: command 0x0406 tx timeout
08:42:05 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000009a63a7cd524be1d68d7651143200469c64c8a1542231745f3459ef48ddad729277d6f4ebf9ea197de677cd5a7e9e49939132dbbcd12ee49b2e644933ced6936c49d23be3c6a2ecbfe70fa70dc07b72ad572cbb5db5b12ca83e2c4d4a0b38c96fd7cfd8b7c602b319b52d946ad5637a2674c355f5374a7b64b0"], 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8)

08:42:05 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000000c0)=""/12, 0xc}], 0x4, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/31, 0x1f}, {&(0x7f0000000840)=""/74, 0x4a}], 0x5, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/114, 0x72}, {&(0x7f0000000bc0)=""/30, 0x1e}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/63, 0x6e}, {&(0x7f0000000c80)=""/219, 0xdb}], 0x6}}], 0x3, 0x40010041, &(0x7f0000000ec0)={0x77359400})
sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f80)="1119850d89d2de9f357e5e31add3b76460a8fc9bf2e6291c6383c283a168768765508dc423806b5b9636a532b96947d81a138230fec4f348b8f1f99d767e33a07570c7988bde35f7984625035937a4f8f83e93776abf2845c4afd85b6d00c0bf33124ebd27daef344e5eaf1733d3de9f27f17636e38b5be7868115b5cab99f44eb2a7fb88fb5ba04977e642ab0a79b7d7a567125744b4b22c133c2ad8baf347e71a03e355c32cc28ee7d0fcc936186c7fe7cca99ed2e8d663ffe0f61567c115ae11576da6df2f6fd2ae61d6f4feeb97ff12b195c4e4b3c9b6dcdcb682ce6be7fb8d1c510a1d975152430daa1feb63249445e8a5d00", 0xf5}, {&(0x7f0000001080)="e6af5732f14c81e004b0677bae41cd7aa0b550fa86e4392ea7e7df0c43c0d47d6abb83bd9a867f72e6989e8fbd7a95e8f183e3f1b1e386ee95ff494d94403461bbeccc01dfa2908b7094f7391c22641da0cbf50f233f72638011f6bf9237b0b97235a63735f8fe0ea785b651768728e5b80929bab21a5d53e44adfec4a39422c53551068bcfa1cc87bb10408a4feeb3c87f90de1535b7c1f444ac86443508290e749c43409593f45ac2c8233cdb883f4c8e8c87aec5dc4f18640f864c3601f60ca37ec7bd491a19028dc1cf12053bbed865f63ae7321a111e1eb44d23045abb434b157897ca0da04662f6d3536", 0xed}, {&(0x7f0000001180)="859af0c617b1e6867e313d7a146519c789ba9a1dee42d5cfde8fe0ec4c13da127de529ca9111995abd8bb40adbef2272359163c3ffda03b99bde1fbd4ce587b0551e2e06ad94eb117bb42fbdb1b5febf54e453c417f361ad97fbaba4b9b2d34e3a83b9305e664e7f3b046b1dd938e84a5a6dab420adb34847d051e809271d7e638d066530bed5d5eb6a420a938a0a38b687b8dcb2228a1c2a3710e036cb594d863f988cad103d237dcfee103cc9847a42d8096836086fb", 0xb7}], 0x3, 0x0, 0x0, 0x4000880}, 0x8040)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0x4}, {0x8, 0x81, 0x3, 0xd019}, {0x34, 0x2d, 0x0, 0x7}]})
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)

08:42:05 executing program 2:
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000))
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x3, 0x0, 0x13, 0x9, 0xb1, "33dc8b19922bc8f0bbdbb2b20c009695ed395866b5de75475f2894eb5fd3c67e87900e2c6fb6b2bd2c4b7ec1cc987830339990e266185409c73b16a667ab7bff96f02e692215d4cdd0574a186f7bf3bc02ad56f035a115dcd3f77e2fe31b04cd507560a07f2bd50cec73ce926da9d52cec1910326748f847edf1e668dadf4be684eb1cabba0036c031b433a599279d75e914c5404adcf71a1bdd6cf434a7a42a5739fcf33f1fd7a22f2cb86eb67af66699"}, 0xba, 0x3)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x3, 0x0, "85fe79", 0xbe, 0x4})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)={{0x108, 0x9, 0x7f, 0x27d, 0x18b, 0x0, 0x122, 0x3d6a}, "88233d87578a2e590adc93e861b6f409d44f228bca68144c0984a5c9789f95b970b550f792b5f9225c87a051dac9fe2ff74d70f6b06b0489fce404cd7d30ef3b3e4d6660f654c5ad1ca647", ['\x00', '\x00', '\x00', '\x00']}, 0x46b)
r0 = eventfd2(0xfff, 0x801)
preadv(r0, &(0x7f0000001b80)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/4, 0x4}, {&(0x7f0000001640)=""/133, 0x85}, {&(0x7f0000001700)=""/190, 0xbe}, {&(0x7f00000017c0)=""/217, 0xd9}, {&(0x7f00000018c0)=""/177, 0xb1}, {&(0x7f0000001980)=""/228, 0xe4}, {&(0x7f0000001a80)=""/103, 0x67}, {&(0x7f0000001b00)=""/120, 0x78}], 0x9, 0x7, 0x3)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c40), 0x80000, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}}, 0x4000000)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001d80), 0x40, 0x0)
ioctl$CDROMSTART(r2, 0x5308)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001dc0)={0x0, 0x0, 0xfffffffffffeffff})
r3 = openat(r2, &(0x7f0000001e00)='./file0\x00', 0xc000, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001e40)={0xefc, 0x45, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000018600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000018700), 0x40040, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000018800)='net/ipv6_route\x00')
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000018ac0), 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000018c00)='totmaps\x00')
io_submit(0x0, 0x8, &(0x7f0000018d40)=[&(0x7f00000186c0)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f0000018640)="f86ab44f6c9f5c023c0a38feeaa7aed0d8853240f8a9254efb9f6c016cd8782d90beee831b8eb8d1df2735a0c4445381e02af0d274d920b0bef439087c46e5fae304dfc17423e6", 0x47, 0x6, 0x0, 0x1}, &(0x7f0000018840)={0x0, 0x0, 0x0, 0x2, 0x4, r6, &(0x7f0000018740)="ed33263ffd9abc6a9cef3fee26e78a953c1c9843324693684837f9796e7ffb3507abb12e0efd0d8972db8978b68e94bc382a43093bc3fb1d425957da65427908d8ebe62a0ab5804918f3a76e29657bd4ad50c4f527d45003ccf52b96b21205af175d98d25bd392e4e4cda8eca0d80f271b4c3e4da1f5bb12a839a409967cbfafacb2741cc0e085c928c4b6e04708a29b5ff994c470a01a52f806ae66af71074bd612da6f92381ad51142ec92", 0xac, 0x9, 0x0, 0x0, r7}, &(0x7f00000188c0)={0x0, 0x0, 0x0, 0x8, 0x3, r3, &(0x7f0000018880)="1c6c7f3f701b1daab6d54ca7f692badfcaba08925be1bfbbbf6352d310625167b015c08ee1b6ce4d0851f134b6fe444ac426b0f760032329aa67084a", 0x3c, 0x10000, 0x0, 0x3}, &(0x7f0000018940)={0x0, 0x0, 0x0, 0x0, 0x827, r0, &(0x7f0000018900)="8ff6c8c05b5cd7b42657a8aa6fe759f4725d740c67dda46f1e248694c82546", 0x1f, 0x7fff, 0x0, 0x2}, &(0x7f00000189c0)={0x0, 0x0, 0x0, 0x1, 0x36, r2, &(0x7f0000018980)="a49651470b53e0c3a25a592fa44a5b066d6f73219500bb6f", 0x18, 0x5, 0x0, 0x1, r1}, &(0x7f0000018b00)={0x0, 0x0, 0x0, 0x5, 0x1f, r1, &(0x7f0000018a00)="aec012d353be2bb3f047ae3a4fe9f736a89e5e8da1e981c27effd514fe1c2fbc5d683fecb079b314e3978fa5e0ac32c15a809e3c7de8f9876886d2fa2274a9aa339df3deb462b6633367f2fcb70c78210b01be681cee38bb7174bdd023dfaa0695267aea896a0378412e13fc1e4029fb9f4841ae906520ca34641fa915a8cb19be889a0c1a0c381b0bf782ea3e009a9364ccc8b7aeb592827eef1d036725a6ee56f6a7ed", 0xa4, 0x0, 0x0, 0x1, r8}, &(0x7f0000018c40)={0x0, 0x0, 0x0, 0x3, 0x81, 0xffffffffffffffff, &(0x7f0000018b40)="c2726121d927a2a4dabae6dc597931ee1668cf8d6541306b9063ef5796d43f266dd91168ea6e9a2aa4e8f0c74b937b4498713ee38c06588cc7d5a36bb1c5b6b3702931ec908786822c9207f8d6970fb7c67adae03622b73a127d4ea325c5391d18ec9e259574f46961b769968d79c9fd1bfe3612ac692782d8ca00d1db591b3ae8caf08ed2489b4d3d033fa39fb2b87297dbb0d9801e5b26672881", 0x9b, 0x400, 0x0, 0x1, r9}, &(0x7f0000018d00)={0x0, 0x0, 0x0, 0x5, 0x2, r3, &(0x7f0000018c80)="5514ac6719dbc7b6e53d1211fce5cb7cdd773d964851ccf86ef49cdba533a1bbcd9ee60d8d311c444f07b3eaced6c27eefae9840c4844d35749e12535301fbf8748299f16046ce86776d4d43daed5c2642a5", 0x52, 0x200, 0x0, 0x0, r2}])
write$binfmt_aout(r5, &(0x7f0000018d80)={{0x10b, 0xf8, 0x3, 0x15e, 0x236, 0x3f, 0x122, 0x3}, "3a439aab020a3ecfc4668193d3ab563d8eeb39951496e82d303019e5147589192d0e3c881b41c29049888d", ['\x00', '\x00']}, 0x24b)

08:42:05 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)
symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')

08:42:05 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x38, r3, 0x2, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0)

08:42:05 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)

08:42:05 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)

08:42:05 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@measure}]}})
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x80040)
sendmsg$unix(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x20, 0x1, 0x1, [r5, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x9, 0x23e})

08:42:19 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00')
link(&(0x7f0000001200)='./file1\x00', &(0x7f0000001240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x480002, 0x1b0)

[  285.017152] audit: type=1400 audit(1665045739.632:8): avc:  denied  { kernel } for  pid=9788 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
08:42:19 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001})
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x400})
syz_open_dev$hiddev(&(0x7f0000000040), 0x2, 0xa00)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r1, 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r2, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r3, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x580, 0x0)
close_range(r4, r5, 0x2)
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r7, 0x0, 0x0)
read$usbmon(r7, &(0x7f00000001c0)=""/55, 0x37)
read$usbmon(r6, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x9, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="9adbf3b50f3a39537f81858fcd190d6f6bce78f645a24190e7e549fe3c177d278dc8aab344ee9006f50f0eeb48c29805a1377963c8114c516688b6ae2ce847afb4ce9f68807d6f26985dff4598548a0d65d7cfdf660ccbd03acf2a868b8b39e9c6eafff2a04f6c250822f9876852425b", 0x70, 0x5cf}, {&(0x7f0000000340)="7854ed0308e3d09e5ad64c6ea9f90cfd2b628dda175070bedfacf855bc843bfbc6b576aabef44b22c08814768690d5c5752ca2d751eec08cd80913b51b76", 0x3e, 0x8}], 0x144020, &(0x7f00000003c0)=ANY=[@ANYBLOB='huge=always,size=gepA-p41%,mpol=default,mpol=prefer=static:4,,nr_blocks=45p3m\t,gid=', @ANYRESHEX, @ANYBLOB=',huge=never,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c687567653d6e657665722c736d69636b6673666c6f6f723d2f64656b2f70747030002c736d61636b6673726f6f743d2f6465762f7573626d6f6e23002c736d61546b6673666c6f6f723d2c66736d616769633d3078303030303030303030303030303030372c61756469742c6d61736b3d5e4d41595f455845432c6673636f6e746578743d73797374656d5f752c66736e616d653d2f6465762f7573636b66736465663d2cff252c00"])
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000540))

08:42:19 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x1, 0x7, 0xe0, 0x0, 0x4, 0xc2800, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000004c0), 0x7}, 0x0, 0x6, 0x4, 0x3, 0xc0c4, 0x8, 0x4f, 0x0, 0x6, 0x0, 0x8001}, 0x0, 0x5, r2, 0x3)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e20, 0xffff, @mcast2, 0x4}}, 0x0, 0x0, 0x15, 0x0, "b25da62d685a38083e45ab1950001ca46105939b4b3d83bd945bed03b30b62897693132cb6e12788b1d58f9b2fff886055bea488ee0e2918a8c961a2684924dfa9841132b1916476e31d06d76d34a918"}, 0xd8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0)
ioctl$SG_EMULATED_HOST(r5, 0x5390, &(0x7f0000002340))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0xfffffffffffffffc)
r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x3709, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="1c2fe7f4768bbb4726372f7ae4f19dbebc055e338ef75483d768ff9661c6", 0x1e, 0x84a}, {&(0x7f00000001c0)="388cbf3d90953f6ab40ff6a75acbbf53880ed5b66aa541ae9a5f42fefb047436d6c2416285793361f23ace0e3666e47dac410a1047a20710ad0bc8781024d37ef2e3456ac7178fd2ea26d75d963423678b55bee32c0fc2696cb52f45a60b8e3635a982bbc6f643c54cfc4212fd717170f75e6fe08c5e2d007e43209704cc1e15c14da4db99a8a00e75", 0x89, 0x8}, {&(0x7f0000000300)="adbf3a6c6f8ced403e4d167f1835f0831b4a1878501e444d3fc569adb2d8dd01585c75b45e2624610b7f", 0x2a, 0xe9}], 0x200480c, &(0x7f0000000400)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}], [{@uid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]})
utimensat(r6, &(0x7f0000000480)='./file1\x00', &(0x7f0000000500)={{0x77359400}}, 0x100)
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000340))

08:42:19 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="ff0f00000000000003000000000000000200000007000000030000000000000004000000000000000500000000000000000000000000000000000000000000000000000000000000dc3b437400000000000000000000000005000000000000000300000016b80000080000000000000000000000000000000000000000000000022400000000000000000000000000000400000000000000ffffffff000000004000000000000000000000000000000000000000000000000008000000000000000000000000000052966da42096de8da12bc6403107d58e7d2dfb9a3d981c6145217d0c799ffb4ad23c0663309d7fb35a8858af2f81c3137626e93e6a124667357915e92238b4f70b"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
r5 = fcntl$dupfd(r3, 0x406, r3)
sendfile(r3, r5, 0x0, 0xfffffdef)
ioctl$TIOCSCTTY(r2, 0x540e, 0x3)
symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00')

08:42:19 executing program 1:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r5}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r6, r7], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000440), 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r8, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@xdp={0x2c, 0x10, 0x0, 0x3b}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))

08:42:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000340)=0xe8)
mount$cgroup2(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x100000, &(0x7f0000000380)={[{@subsystem='net_prio'}, {}, {@subsystem='cpuset'}, {}], [{@euid_eq={'euid', 0x3d, r1}}, {@obj_role={'obj_role', 0x3d, '].c^*%'}}, {@uid_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}]})
r2 = dup2(r0, r0)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', r0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r3, &(0x7f0000000140)="c0", 0x1, 0x75d6)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)

08:42:19 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x30da00, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000080)=0x5)
sendfile(r1, r0, &(0x7f00000003c0)=0x8, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r2, 0x0, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffffff91)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r4=>0x0})
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xa8, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x60041, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x100a, 0xfd2, 0xcc4a, 0x3, 0x3, 0x5, 0x8, 0x0, 0xfffffff9, 0x0, 0xffffffff00000000}, r4, 0x3, 0xffffffffffffffff, 0x9)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xfffffdef)

08:42:19 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000000c0)=""/12, 0xc}], 0x4, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/31, 0x1f}, {&(0x7f0000000840)=""/74, 0x4a}], 0x5, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/114, 0x72}, {&(0x7f0000000bc0)=""/30, 0x1e}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/63, 0x6e}, {&(0x7f0000000c80)=""/219, 0xdb}], 0x6}}], 0x3, 0x40010041, &(0x7f0000000ec0)={0x77359400})
sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f80)="1119850d89d2de9f357e5e31add3b76460a8fc9bf2e6291c6383c283a168768765508dc423806b5b9636a532b96947d81a138230fec4f348b8f1f99d767e33a07570c7988bde35f7984625035937a4f8f83e93776abf2845c4afd85b6d00c0bf33124ebd27daef344e5eaf1733d3de9f27f17636e38b5be7868115b5cab99f44eb2a7fb88fb5ba04977e642ab0a79b7d7a567125744b4b22c133c2ad8baf347e71a03e355c32cc28ee7d0fcc936186c7fe7cca99ed2e8d663ffe0f61567c115ae11576da6df2f6fd2ae61d6f4feeb97ff12b195c4e4b3c9b6dcdcb682ce6be7fb8d1c510a1d975152430daa1feb63249445e8a5d00", 0xf5}, {&(0x7f0000001080)="e6af5732f14c81e004b0677bae41cd7aa0b550fa86e4392ea7e7df0c43c0d47d6abb83bd9a867f72e6989e8fbd7a95e8f183e3f1b1e386ee95ff494d94403461bbeccc01dfa2908b7094f7391c22641da0cbf50f233f72638011f6bf9237b0b97235a63735f8fe0ea785b651768728e5b80929bab21a5d53e44adfec4a39422c53551068bcfa1cc87bb10408a4feeb3c87f90de1535b7c1f444ac86443508290e749c43409593f45ac2c8233cdb883f4c8e8c87aec5dc4f18640f864c3601f60ca37ec7bd491a19028dc1cf12053bbed865f63ae7321a111e1eb44d23045abb434b157897ca0da04662f6d3536", 0xed}, {&(0x7f0000001180)="859af0c617b1e6867e313d7a146519c789ba9a1dee42d5cfde8fe0ec4c13da127de529ca9111995abd8bb40adbef2272359163c3ffda03b99bde1fbd4ce587b0551e2e06ad94eb117bb42fbdb1b5febf54e453c417f361ad97fbaba4b9b2d34e3a83b9305e664e7f3b046b1dd938e84a5a6dab420adb34847d051e809271d7e638d066530bed5d5eb6a420a938a0a38b687b8dcb2228a1c2a3710e036cb594d863f988cad103d237dcfee103cc9847a42d8096836086fb", 0xb7}], 0x3, 0x0, 0x0, 0x4000880}, 0x8040)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0x4}, {0x8, 0x81, 0x3, 0xd019}, {0x34, 0x2d, 0x0, 0x7}]})
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)

[  285.040414] ------------[ cut here ]------------
[  285.040440] 
[  285.040444] ======================================================
[  285.040448] WARNING: possible circular locking dependency detected
[  285.040453] 6.0.0-next-20221005 #1 Not tainted
[  285.040461] ------------------------------------------------------
[  285.040465] syz-executor.3/9789 is trying to acquire lock:
[  285.040473] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  285.040521] 
[  285.040521] but task is already holding lock:
[  285.040524] ffff88800d56d420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  285.040559] 
[  285.040559] which lock already depends on the new lock.
[  285.040559] 
[  285.040562] 
[  285.040562] the existing dependency chain (in reverse order) is:
[  285.040567] 
[  285.040567] -> #3 (&ctx->lock){....}-{2:2}:
[  285.040587]        _raw_spin_lock+0x2a/0x40
[  285.040602]        __perf_event_task_sched_out+0x53b/0x18d0
[  285.040617]        __schedule+0xedd/0x2470
[  285.040637]        schedule+0xda/0x1b0
[  285.040656]        futex_wait_queue+0xf5/0x1e0
[  285.040672]        futex_wait+0x28e/0x690
[  285.040686]        do_futex+0x2ff/0x380
[  285.040698]        __x64_sys_futex+0x1c6/0x4d0
[  285.040712]        do_syscall_64+0x3b/0x90
[  285.040727]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  285.040748] 
[  285.040748] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  285.040769]        _raw_spin_lock_nested+0x30/0x40
[  285.040785]        raw_spin_rq_lock_nested+0x1e/0x30
[  285.040802]        task_fork_fair+0x63/0x4d0
[  285.040824]        sched_cgroup_fork+0x3d0/0x540
[  285.040843]        copy_process+0x4183/0x6e20
[  285.040858]        kernel_clone+0xe7/0x890
[  285.040871]        user_mode_thread+0xad/0xf0
[  285.040885]        rest_init+0x24/0x250
[  285.040901]        arch_call_rest_init+0xf/0x14
[  285.040926]        start_kernel+0x4c6/0x4eb
[  285.040949]        secondary_startup_64_no_verify+0xe0/0xeb
[  285.040967] 
[  285.040967] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  285.040986]        _raw_spin_lock_irqsave+0x39/0x60
[  285.041001]        try_to_wake_up+0xab/0x1930
[  285.041019]        up+0x75/0xb0
[  285.041039]        __up_console_sem+0x6e/0x80
[  285.041060]        console_unlock+0x46a/0x590
[  285.041081]        do_con_write+0xc05/0x1d50
[  285.041096]        con_write+0x21/0x40
[  285.041109]        n_tty_write+0x4d4/0xfe0
[  285.041125]        file_tty_write.constprop.0+0x455/0x8a0
[  285.041141]        vfs_write+0x9c3/0xd90
[  285.041163]        ksys_write+0x127/0x250
[  285.041184]        do_syscall_64+0x3b/0x90
[  285.041196]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  285.041214] 
[  285.041214] -> #0 ((console_sem).lock){....}-{2:2}:
[  285.041233]        __lock_acquire+0x2a02/0x5e70
[  285.041255]        lock_acquire+0x1a2/0x530
[  285.041276]        _raw_spin_lock_irqsave+0x39/0x60
[  285.041291]        down_trylock+0xe/0x70
[  285.041312]        __down_trylock_console_sem+0x3b/0xd0
[  285.041334]        vprintk_emit+0x16b/0x560
[  285.041355]        vprintk+0x84/0xa0
[  285.041377]        _printk+0xba/0xf1
[  285.041393]        report_bug.cold+0x72/0xab
[  285.041416]        handle_bug+0x3c/0x70
[  285.041428]        exc_invalid_op+0x14/0x50
[  285.041441]        asm_exc_invalid_op+0x16/0x20
[  285.041458]        group_sched_out.part.0+0x2c7/0x460
[  285.041482]        ctx_sched_out+0x8f1/0xc10
[  285.041504]        __perf_event_task_sched_out+0x6d0/0x18d0
[  285.041519]        __schedule+0xedd/0x2470
[  285.041538]        schedule+0xda/0x1b0
[  285.041557]        futex_wait_queue+0xf5/0x1e0
[  285.041572]        futex_wait+0x28e/0x690
[  285.041586]        do_futex+0x2ff/0x380
[  285.041598]        __x64_sys_futex+0x1c6/0x4d0
[  285.041612]        do_syscall_64+0x3b/0x90
[  285.041625]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  285.041643] 
[  285.041643] other info that might help us debug this:
[  285.041643] 
[  285.041646] Chain exists of:
[  285.041646]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  285.041646] 
[  285.041666]  Possible unsafe locking scenario:
[  285.041666] 
[  285.041669]        CPU0                    CPU1
[  285.041672]        ----                    ----
[  285.041675]   lock(&ctx->lock);
[  285.041682]                                lock(&rq->__lock);
[  285.041690]                                lock(&ctx->lock);
[  285.041699]   lock((console_sem).lock);
[  285.041706] 
[  285.041706]  *** DEADLOCK ***
[  285.041706] 
[  285.041709] 2 locks held by syz-executor.3/9789:
[  285.041718]  #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  285.041758]  #1: ffff88800d56d420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  285.041794] 
[  285.041794] stack backtrace:
[  285.041797] CPU: 1 PID: 9789 Comm: syz-executor.3 Not tainted 6.0.0-next-20221005 #1
[  285.041814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  285.041822] Call Trace:
[  285.041826]  <TASK>
[  285.041831]  dump_stack_lvl+0x8b/0xb3
[  285.041857]  check_noncircular+0x263/0x2e0
[  285.041879]  ? format_decode+0x26c/0xb50
[  285.041902]  ? print_circular_bug+0x450/0x450
[  285.041925]  ? simple_strtoul+0x30/0x30
[  285.041947]  ? lock_chain_count+0x20/0x20
[  285.041970]  ? format_decode+0x26c/0xb50
[  285.041994]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  285.042019]  __lock_acquire+0x2a02/0x5e70
[  285.042048]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  285.042078]  lock_acquire+0x1a2/0x530
[  285.042101]  ? down_trylock+0xe/0x70
[  285.042125]  ? lock_release+0x750/0x750
[  285.042152]  ? vprintk+0x84/0xa0
[  285.042177]  _raw_spin_lock_irqsave+0x39/0x60
[  285.042193]  ? down_trylock+0xe/0x70
[  285.042216]  down_trylock+0xe/0x70
[  285.042238]  ? vprintk+0x84/0xa0
[  285.042262]  __down_trylock_console_sem+0x3b/0xd0
[  285.042285]  vprintk_emit+0x16b/0x560
[  285.042311]  vprintk+0x84/0xa0
[  285.042334]  _printk+0xba/0xf1
[  285.042351]  ? record_print_text.cold+0x16/0x16
[  285.042373]  ? report_bug.cold+0x66/0xab
[  285.042399]  ? group_sched_out.part.0+0x2c7/0x460
[  285.042424]  report_bug.cold+0x72/0xab
[  285.042451]  handle_bug+0x3c/0x70
[  285.042465]  exc_invalid_op+0x14/0x50
[  285.042479]  asm_exc_invalid_op+0x16/0x20
[  285.042498] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  285.042526] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  285.042541] RSP: 0018:ffff888034a0f8f8 EFLAGS: 00010006
[  285.042553] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  285.042563] RDX: ffff888018033580 RSI: ffffffff81566da7 RDI: 0000000000000005
[  285.042574] RBP: ffff888034df8000 R08: 0000000000000005 R09: 0000000000000001
[  285.042584] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800d56d400
[  285.042594] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[  285.042609]  ? group_sched_out.part.0+0x2c7/0x460
[  285.042636]  ? group_sched_out.part.0+0x2c7/0x460
[  285.042662]  ctx_sched_out+0x8f1/0xc10
[  285.042689]  __perf_event_task_sched_out+0x6d0/0x18d0
[  285.042708]  ? lock_is_held_type+0xd7/0x130
[  285.042727]  ? __perf_cgroup_move+0x160/0x160
[  285.042742]  ? set_next_entity+0x304/0x550
[  285.042768]  ? lock_is_held_type+0xd7/0x130
[  285.042788]  __schedule+0xedd/0x2470
[  285.042812]  ? io_schedule_timeout+0x150/0x150
[  285.042834]  ? futex_wait_setup+0x166/0x230
[  285.042853]  schedule+0xda/0x1b0
[  285.042875]  futex_wait_queue+0xf5/0x1e0
[  285.042891]  futex_wait+0x28e/0x690
[  285.042908]  ? futex_wait_setup+0x230/0x230
[  285.042926]  ? wake_up_q+0x8b/0xf0
[  285.042944]  ? do_raw_spin_unlock+0x4f/0x220
[  285.042970]  ? futex_wake+0x158/0x490
[  285.042992]  ? fd_install+0x1f9/0x640
[  285.043012]  do_futex+0x2ff/0x380
[  285.043027]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  285.043049]  __x64_sys_futex+0x1c6/0x4d0
[  285.043066]  ? __x64_sys_futex_time32+0x480/0x480
[  285.043084]  ? syscall_enter_from_user_mode+0x1d/0x50
[  285.043103]  ? syscall_enter_from_user_mode+0x1d/0x50
[  285.043125]  do_syscall_64+0x3b/0x90
[  285.043139]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  285.043158] RIP: 0033:0x7f7527299b19
[  285.043168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  285.043183] RSP: 002b:00007f752480f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  285.043197] RAX: ffffffffffffffda RBX: 00007f75273acf68 RCX: 00007f7527299b19
[  285.043208] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f75273acf68
[  285.043218] RBP: 00007f75273acf60 R08: 0000000000000000 R09: 0000000000000000
[  285.043228] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75273acf6c
[  285.043238] R13: 00007ffcaeee900f R14: 00007f752480f300 R15: 0000000000022000
[  285.043255]  </TASK>
[  285.106937] WARNING: CPU: 1 PID: 9789 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  285.107653] Modules linked in:
[  285.107917] CPU: 1 PID: 9789 Comm: syz-executor.3 Not tainted 6.0.0-next-20221005 #1
[  285.108520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  285.109147] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  285.109580] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  285.110930] RSP: 0018:ffff888034a0f8f8 EFLAGS: 00010006
[  285.111337] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  285.111877] RDX: ffff888018033580 RSI: ffffffff81566da7 RDI: 0000000000000005
[  285.112423] RBP: ffff888034df8000 R08: 0000000000000005 R09: 0000000000000001
[  285.112961] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88800d56d400
[  285.113503] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[  285.114047] FS:  00007f752480f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  285.114654] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.115106] CR2: 00007fb3f6bbc018 CR3: 000000003de54000 CR4: 0000000000350ee0
[  285.115648] Call Trace:
[  285.115855]  <TASK>
[  285.116037]  ctx_sched_out+0x8f1/0xc10
[  285.116354]  __perf_event_task_sched_out+0x6d0/0x18d0
[  285.116780]  ? lock_is_held_type+0xd7/0x130
[  285.117122]  ? __perf_cgroup_move+0x160/0x160
[  285.117472]  ? set_next_entity+0x304/0x550
[  285.117811]  ? lock_is_held_type+0xd7/0x130
[  285.118151]  __schedule+0xedd/0x2470
[  285.118455]  ? io_schedule_timeout+0x150/0x150
[  285.118818]  ? futex_wait_setup+0x166/0x230
[  285.119159]  schedule+0xda/0x1b0
[  285.119436]  futex_wait_queue+0xf5/0x1e0
[  285.119758]  futex_wait+0x28e/0x690
[  285.120052]  ? futex_wait_setup+0x230/0x230
[  285.120393]  ? wake_up_q+0x8b/0xf0
[  285.120686]  ? do_raw_spin_unlock+0x4f/0x220
[  285.121045]  ? futex_wake+0x158/0x490
[  285.121353]  ? fd_install+0x1f9/0x640
[  285.121658]  do_futex+0x2ff/0x380
[  285.121936]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  285.122383]  __x64_sys_futex+0x1c6/0x4d0
[  285.122701]  ? __x64_sys_futex_time32+0x480/0x480
[  285.123076]  ? syscall_enter_from_user_mode+0x1d/0x50
[  285.123480]  ? syscall_enter_from_user_mode+0x1d/0x50
[  285.123886]  do_syscall_64+0x3b/0x90
[  285.124183]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  285.124590] RIP: 0033:0x7f7527299b19
[  285.124883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  285.126243] RSP: 002b:00007f752480f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  285.126818] RAX: ffffffffffffffda RBX: 00007f75273acf68 RCX: 00007f7527299b19
[  285.127357] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f75273acf68
[  285.127894] RBP: 00007f75273acf60 R08: 0000000000000000 R09: 0000000000000000
[  285.128447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75273acf6c
[  285.128992] R13: 00007ffcaeee900f R14: 00007f752480f300 R15: 0000000000022000
[  285.129546]  </TASK>
[  285.129733] irq event stamp: 448
[  285.129992] hardirqs last  enabled at (447): [<ffffffff842578bd>] syscall_enter_from_user_mode+0x1d/0x50
[  285.130701] hardirqs last disabled at (448): [<ffffffff84260bc5>] __schedule+0x1225/0x2470
[  285.131326] softirqs last  enabled at (356): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  285.131975] softirqs last disabled at (325): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  285.132632] ---[ end trace 0000000000000000 ]---
[  285.141163] loop5: detected capacity change from 0 to 5
[  285.141937] loop2: detected capacity change from 0 to 40
[  285.160104] syz-executor.2: attempt to access beyond end of device
[  285.160104] loop2: rw=2049, sector=88, nr_sectors = 4 limit=40
[  285.168571] loop5: detected capacity change from 0 to 5
08:42:19 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000000c0)=""/12, 0xc}], 0x4, &(0x7f0000000400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/31, 0x1f}, {&(0x7f0000000840)=""/74, 0x4a}], 0x5, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/114, 0x72}, {&(0x7f0000000bc0)=""/30, 0x1e}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/63, 0x6e}, {&(0x7f0000000c80)=""/219, 0xdb}], 0x6}}], 0x3, 0x40010041, &(0x7f0000000ec0)={0x77359400})
sendmsg$unix(r0, &(0x7f0000001280)={&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f80)="1119850d89d2de9f357e5e31add3b76460a8fc9bf2e6291c6383c283a168768765508dc423806b5b9636a532b96947d81a138230fec4f348b8f1f99d767e33a07570c7988bde35f7984625035937a4f8f83e93776abf2845c4afd85b6d00c0bf33124ebd27daef344e5eaf1733d3de9f27f17636e38b5be7868115b5cab99f44eb2a7fb88fb5ba04977e642ab0a79b7d7a567125744b4b22c133c2ad8baf347e71a03e355c32cc28ee7d0fcc936186c7fe7cca99ed2e8d663ffe0f61567c115ae11576da6df2f6fd2ae61d6f4feeb97ff12b195c4e4b3c9b6dcdcb682ce6be7fb8d1c510a1d975152430daa1feb63249445e8a5d00", 0xf5}, {&(0x7f0000001080)="e6af5732f14c81e004b0677bae41cd7aa0b550fa86e4392ea7e7df0c43c0d47d6abb83bd9a867f72e6989e8fbd7a95e8f183e3f1b1e386ee95ff494d94403461bbeccc01dfa2908b7094f7391c22641da0cbf50f233f72638011f6bf9237b0b97235a63735f8fe0ea785b651768728e5b80929bab21a5d53e44adfec4a39422c53551068bcfa1cc87bb10408a4feeb3c87f90de1535b7c1f444ac86443508290e749c43409593f45ac2c8233cdb883f4c8e8c87aec5dc4f18640f864c3601f60ca37ec7bd491a19028dc1cf12053bbed865f63ae7321a111e1eb44d23045abb434b157897ca0da04662f6d3536", 0xed}, {&(0x7f0000001180)="859af0c617b1e6867e313d7a146519c789ba9a1dee42d5cfde8fe0ec4c13da127de529ca9111995abd8bb40adbef2272359163c3ffda03b99bde1fbd4ce587b0551e2e06ad94eb117bb42fbdb1b5febf54e453c417f361ad97fbaba4b9b2d34e3a83b9305e664e7f3b046b1dd938e84a5a6dab420adb34847d051e809271d7e638d066530bed5d5eb6a420a938a0a38b687b8dcb2228a1c2a3710e036cb594d863f988cad103d237dcfee103cc9847a42d8096836086fb", 0xb7}], 0x3, 0x0, 0x0, 0x4000880}, 0x8040)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0x4}, {0x8, 0x81, 0x3, 0xd019}, {0x34, 0x2d, 0x0, 0x7}]})
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)

08:42:19 executing program 0:
fallocate(0xffffffffffffffff, 0x1, 0x0, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x22cc}, {r0, 0x400}, {r0, 0xa}], 0x3, 0x7fff)
mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e7463702c706f724a023078303030302c00"/35])

08:42:19 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001})
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x400})
syz_open_dev$hiddev(&(0x7f0000000040), 0x2, 0xa00)
r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r1, 0x0, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r2, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r3, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x580, 0x0)
close_range(r4, r5, 0x2)
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x0)
read$usbmon(r7, 0x0, 0x0)
read$usbmon(r7, &(0x7f00000001c0)=""/55, 0x37)
read$usbmon(r6, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x9, 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)="9adbf3b50f3a39537f81858fcd190d6f6bce78f645a24190e7e549fe3c177d278dc8aab344ee9006f50f0eeb48c29805a1377963c8114c516688b6ae2ce847afb4ce9f68807d6f26985dff4598548a0d65d7cfdf660ccbd03acf2a868b8b39e9c6eafff2a04f6c250822f9876852425b", 0x70, 0x5cf}, {&(0x7f0000000340)="7854ed0308e3d09e5ad64c6ea9f90cfd2b628dda175070bedfacf855bc843bfbc6b576aabef44b22c08814768690d5c5752ca2d751eec08cd80913b51b76", 0x3e, 0x8}], 0x144020, &(0x7f00000003c0)=ANY=[@ANYBLOB='huge=always,size=gepA-p41%,mpol=default,mpol=prefer=static:4,,nr_blocks=45p3m\t,gid=', @ANYRESHEX, @ANYBLOB=',huge=never,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c687567653d6e657665722c736d69636b6673666c6f6f723d2f64656b2f70747030002c736d61636b6673726f6f743d2f6465762f7573626d6f6e23002c736d61546b6673666c6f6f723d2c66736d616769633d3078303030303030303030303030303030372c61756469742c6d61736b3d5e4d41595f455845432c6673636f6e746578743d73797374656d5f752c66736e616d653d2f6465762f7573636b66736465663d2cff252c00"])
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000540))

[  285.219420] kworker/u4:3: attempt to access beyond end of device
[  285.219420] loop2: rw=1, sector=92, nr_sectors = 32 limit=40
08:42:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000340)=0xe8)
mount$cgroup2(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x100000, &(0x7f0000000380)={[{@subsystem='net_prio'}, {}, {@subsystem='cpuset'}, {}], [{@euid_eq={'euid', 0x3d, r1}}, {@obj_role={'obj_role', 0x3d, '].c^*%'}}, {@uid_eq}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}]})
r2 = dup2(r0, r0)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', r0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
pwrite64(r3, &(0x7f0000000140)="c0", 0x1, 0x75d6)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)

[  285.225128] kworker/u4:3: attempt to access beyond end of device
[  285.225128] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[  285.225985] Buffer I/O error on dev loop2, logical block 31, lost async page write
08:42:19 executing program 1:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000))
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r5}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r6, r7], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000440), 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r8, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@xdp={0x2c, 0x10, 0x0, 0x3b}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))

[  285.270573] 9pnet_virtio: no channels available for device 127.0.0.1
[  285.276871] loop5: detected capacity change from 0 to 5
[  285.280972] loop2: detected capacity change from 0 to 40
[  285.316493] syz-executor.2: attempt to access beyond end of device
[  285.316493] loop2: rw=2049, sector=88, nr_sectors = 4 limit=40
[  285.610588] loop3: detected capacity change from 0 to 27
[  285.611366] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  285.704641] loop3: detected capacity change from 0 to 27
[  285.705400] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22

VM DIAGNOSIS:
08:42:20  Registers:
info registers vcpu 0
RAX=0000000000000003 RBX=ffff88806cf3d5e0 RCX=0000000000000003 RDX=ffff88803b18d040
RSI=ffffffff813bcaa7 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88803deef950
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000003 R13=ffffed100d9e7abd R14=ffff88806cf3d5e8 R15=0000000000000001
RIP=ffffffff81461c1d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555555943400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f75273a5ddc CR3=000000003de54000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f75273807c000007f75273807c8
XMM02=00007f75273807e000007f75273807c0 XMM03=00007f75273807c800007f75273807c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff888034a0f340
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000005 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80
RIP=ffffffff823bdae9 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f752480f700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb3f6bbc018 CR3=000000003de54000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f75273807c000007f75273807c8
XMM02=00007f75273807e000007f75273807c0 XMM03=00007f75273807c800007f75273807c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000