Warning: Permanently added '[localhost]:13243' (ECDSA) to the list of known hosts. 2022/09/18 11:52:16 fuzzer started 2022/09/18 11:52:17 dialing manager at localhost:36051 syzkaller login: [ 40.170268] cgroup: Unknown subsys name 'net' [ 40.256282] cgroup: Unknown subsys name 'rlimit' 2022/09/18 11:52:30 syscalls: 2215 2022/09/18 11:52:30 code coverage: enabled 2022/09/18 11:52:30 comparison tracing: enabled 2022/09/18 11:52:30 extra coverage: enabled 2022/09/18 11:52:30 setuid sandbox: enabled 2022/09/18 11:52:30 namespace sandbox: enabled 2022/09/18 11:52:30 Android sandbox: enabled 2022/09/18 11:52:30 fault injection: enabled 2022/09/18 11:52:30 leak checking: enabled 2022/09/18 11:52:30 net packet injection: enabled 2022/09/18 11:52:30 net device setup: enabled 2022/09/18 11:52:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/18 11:52:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/18 11:52:30 USB emulation: enabled 2022/09/18 11:52:30 hci packet injection: enabled 2022/09/18 11:52:30 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/18 11:52:30 802.15.4 emulation: enabled 2022/09/18 11:52:30 fetching corpus: 50, signal 25488/27291 (executing program) 2022/09/18 11:52:31 fetching corpus: 100, signal 36615/40089 (executing program) 2022/09/18 11:52:31 fetching corpus: 150, signal 53003/57876 (executing program) 2022/09/18 11:52:31 fetching corpus: 200, signal 58829/65119 (executing program) 2022/09/18 11:52:31 fetching corpus: 250, signal 64706/72367 (executing program) 2022/09/18 11:52:31 fetching corpus: 300, signal 67878/76928 (executing program) 2022/09/18 11:52:31 fetching corpus: 350, signal 72992/83300 (executing program) 2022/09/18 11:52:31 fetching corpus: 400, signal 78367/89864 (executing program) 2022/09/18 11:52:31 fetching corpus: 450, signal 82117/94791 (executing program) 2022/09/18 11:52:32 fetching corpus: 500, signal 87235/101006 (executing program) 2022/09/18 11:52:32 fetching corpus: 550, signal 89651/104571 (executing program) 2022/09/18 11:52:32 fetching corpus: 600, signal 91750/107845 (executing program) 2022/09/18 11:52:32 fetching corpus: 650, signal 94640/111856 (executing program) 2022/09/18 11:52:32 fetching corpus: 700, signal 96817/115147 (executing program) 2022/09/18 11:52:32 fetching corpus: 750, signal 99748/119097 (executing program) 2022/09/18 11:52:32 fetching corpus: 800, signal 102552/122877 (executing program) 2022/09/18 11:52:32 fetching corpus: 850, signal 104735/126053 (executing program) 2022/09/18 11:52:33 fetching corpus: 900, signal 107052/129364 (executing program) 2022/09/18 11:52:33 fetching corpus: 950, signal 112611/135411 (executing program) 2022/09/18 11:52:33 fetching corpus: 1000, signal 115322/138946 (executing program) 2022/09/18 11:52:33 fetching corpus: 1050, signal 118592/142901 (executing program) 2022/09/18 11:52:33 fetching corpus: 1100, signal 120095/145343 (executing program) 2022/09/18 11:52:33 fetching corpus: 1150, signal 122195/148230 (executing program) 2022/09/18 11:52:33 fetching corpus: 1200, signal 125052/151773 (executing program) 2022/09/18 11:52:33 fetching corpus: 1250, signal 127956/155309 (executing program) 2022/09/18 11:52:34 fetching corpus: 1300, signal 131127/158954 (executing program) 2022/09/18 11:52:34 fetching corpus: 1350, signal 134377/162626 (executing program) 2022/09/18 11:52:34 fetching corpus: 1400, signal 136772/165570 (executing program) 2022/09/18 11:52:34 fetching corpus: 1450, signal 139092/168466 (executing program) 2022/09/18 11:52:34 fetching corpus: 1500, signal 140202/170354 (executing program) 2022/09/18 11:52:34 fetching corpus: 1550, signal 141417/172294 (executing program) 2022/09/18 11:52:34 fetching corpus: 1600, signal 143319/174744 (executing program) 2022/09/18 11:52:34 fetching corpus: 1650, signal 144467/176596 (executing program) 2022/09/18 11:52:35 fetching corpus: 1700, signal 145830/178673 (executing program) 2022/09/18 11:52:35 fetching corpus: 1750, signal 147626/180984 (executing program) 2022/09/18 11:52:35 fetching corpus: 1800, signal 150066/183733 (executing program) 2022/09/18 11:52:35 fetching corpus: 1850, signal 152601/186511 (executing program) 2022/09/18 11:52:35 fetching corpus: 1900, signal 153559/188121 (executing program) 2022/09/18 11:52:35 fetching corpus: 1950, signal 155215/190193 (executing program) 2022/09/18 11:52:35 fetching corpus: 2000, signal 156260/191791 (executing program) 2022/09/18 11:52:35 fetching corpus: 2050, signal 157723/193700 (executing program) 2022/09/18 11:52:36 fetching corpus: 2100, signal 158917/195349 (executing program) 2022/09/18 11:52:36 fetching corpus: 2150, signal 160271/197199 (executing program) 2022/09/18 11:52:36 fetching corpus: 2200, signal 162662/199639 (executing program) 2022/09/18 11:52:36 fetching corpus: 2250, signal 163818/201239 (executing program) 2022/09/18 11:52:36 fetching corpus: 2300, signal 165289/203069 (executing program) 2022/09/18 11:52:36 fetching corpus: 2350, signal 166408/204571 (executing program) 2022/09/18 11:52:36 fetching corpus: 2400, signal 167042/205796 (executing program) 2022/09/18 11:52:36 fetching corpus: 2450, signal 167975/207193 (executing program) 2022/09/18 11:52:37 fetching corpus: 2500, signal 168879/208594 (executing program) 2022/09/18 11:52:37 fetching corpus: 2550, signal 169759/209997 (executing program) 2022/09/18 11:52:37 fetching corpus: 2600, signal 170849/211481 (executing program) 2022/09/18 11:52:37 fetching corpus: 2650, signal 171534/212683 (executing program) 2022/09/18 11:52:37 fetching corpus: 2700, signal 172503/214060 (executing program) 2022/09/18 11:52:37 fetching corpus: 2750, signal 173989/215700 (executing program) 2022/09/18 11:52:37 fetching corpus: 2800, signal 175115/217143 (executing program) 2022/09/18 11:52:37 fetching corpus: 2850, signal 175898/218403 (executing program) 2022/09/18 11:52:37 fetching corpus: 2900, signal 176549/219521 (executing program) 2022/09/18 11:52:38 fetching corpus: 2950, signal 177954/221097 (executing program) 2022/09/18 11:52:38 fetching corpus: 3000, signal 178713/222246 (executing program) 2022/09/18 11:52:38 fetching corpus: 3050, signal 180198/223815 (executing program) 2022/09/18 11:52:38 fetching corpus: 3100, signal 181107/224983 (executing program) 2022/09/18 11:52:38 fetching corpus: 3150, signal 182122/226245 (executing program) 2022/09/18 11:52:38 fetching corpus: 3200, signal 182752/227280 (executing program) 2022/09/18 11:52:38 fetching corpus: 3250, signal 184049/228696 (executing program) 2022/09/18 11:52:39 fetching corpus: 3300, signal 184923/229845 (executing program) 2022/09/18 11:52:39 fetching corpus: 3350, signal 186071/231117 (executing program) 2022/09/18 11:52:39 fetching corpus: 3400, signal 186965/232248 (executing program) 2022/09/18 11:52:39 fetching corpus: 3450, signal 188337/233650 (executing program) 2022/09/18 11:52:39 fetching corpus: 3500, signal 189673/234989 (executing program) 2022/09/18 11:52:39 fetching corpus: 3550, signal 190552/236015 (executing program) 2022/09/18 11:52:39 fetching corpus: 3600, signal 191208/236935 (executing program) 2022/09/18 11:52:39 fetching corpus: 3650, signal 191755/237854 (executing program) 2022/09/18 11:52:40 fetching corpus: 3700, signal 192832/238988 (executing program) 2022/09/18 11:52:40 fetching corpus: 3750, signal 193923/240147 (executing program) 2022/09/18 11:52:40 fetching corpus: 3800, signal 195009/241247 (executing program) 2022/09/18 11:52:40 fetching corpus: 3850, signal 195653/242170 (executing program) 2022/09/18 11:52:40 fetching corpus: 3900, signal 196236/243029 (executing program) 2022/09/18 11:52:40 fetching corpus: 3950, signal 197058/244029 (executing program) 2022/09/18 11:52:40 fetching corpus: 4000, signal 197939/245037 (executing program) 2022/09/18 11:52:41 fetching corpus: 4050, signal 198381/245814 (executing program) 2022/09/18 11:52:41 fetching corpus: 4100, signal 199086/246681 (executing program) 2022/09/18 11:52:41 fetching corpus: 4150, signal 199836/247578 (executing program) 2022/09/18 11:52:41 fetching corpus: 4200, signal 200853/248597 (executing program) 2022/09/18 11:52:41 fetching corpus: 4250, signal 201382/249400 (executing program) 2022/09/18 11:52:41 fetching corpus: 4300, signal 202031/250214 (executing program) 2022/09/18 11:52:41 fetching corpus: 4350, signal 203068/251203 (executing program) 2022/09/18 11:52:41 fetching corpus: 4400, signal 203500/251931 (executing program) 2022/09/18 11:52:41 fetching corpus: 4450, signal 204098/252718 (executing program) 2022/09/18 11:52:42 fetching corpus: 4500, signal 204950/253564 (executing program) 2022/09/18 11:52:42 fetching corpus: 4550, signal 205766/254423 (executing program) 2022/09/18 11:52:42 fetching corpus: 4600, signal 206939/255360 (executing program) 2022/09/18 11:52:42 fetching corpus: 4650, signal 207508/256094 (executing program) 2022/09/18 11:52:42 fetching corpus: 4700, signal 208174/256886 (executing program) 2022/09/18 11:52:42 fetching corpus: 4750, signal 209147/257748 (executing program) 2022/09/18 11:52:42 fetching corpus: 4800, signal 209644/258447 (executing program) 2022/09/18 11:52:43 fetching corpus: 4850, signal 210135/259106 (executing program) 2022/09/18 11:52:43 fetching corpus: 4900, signal 210859/259835 (executing program) 2022/09/18 11:52:43 fetching corpus: 4950, signal 211776/260686 (executing program) 2022/09/18 11:52:43 fetching corpus: 5000, signal 212464/261356 (executing program) 2022/09/18 11:52:43 fetching corpus: 5050, signal 213145/262019 (executing program) 2022/09/18 11:52:43 fetching corpus: 5100, signal 213725/262659 (executing program) 2022/09/18 11:52:43 fetching corpus: 5150, signal 214624/263318 (executing program) 2022/09/18 11:52:44 fetching corpus: 5200, signal 215289/263957 (executing program) 2022/09/18 11:52:44 fetching corpus: 5250, signal 215690/264554 (executing program) 2022/09/18 11:52:44 fetching corpus: 5300, signal 216281/265167 (executing program) 2022/09/18 11:52:44 fetching corpus: 5350, signal 216769/265735 (executing program) 2022/09/18 11:52:44 fetching corpus: 5400, signal 218287/266627 (executing program) 2022/09/18 11:52:44 fetching corpus: 5450, signal 218816/267204 (executing program) 2022/09/18 11:52:44 fetching corpus: 5500, signal 219588/267804 (executing program) 2022/09/18 11:52:44 fetching corpus: 5550, signal 220261/268357 (executing program) 2022/09/18 11:52:45 fetching corpus: 5600, signal 220955/268921 (executing program) 2022/09/18 11:52:45 fetching corpus: 5650, signal 221607/269460 (executing program) 2022/09/18 11:52:45 fetching corpus: 5700, signal 222742/270100 (executing program) 2022/09/18 11:52:45 fetching corpus: 5750, signal 223456/270641 (executing program) 2022/09/18 11:52:45 fetching corpus: 5800, signal 223901/271136 (executing program) 2022/09/18 11:52:45 fetching corpus: 5850, signal 224431/271644 (executing program) 2022/09/18 11:52:45 fetching corpus: 5900, signal 225095/272140 (executing program) 2022/09/18 11:52:46 fetching corpus: 5950, signal 225609/272603 (executing program) 2022/09/18 11:52:46 fetching corpus: 6000, signal 226332/273108 (executing program) 2022/09/18 11:52:46 fetching corpus: 6050, signal 227183/273807 (executing program) 2022/09/18 11:52:46 fetching corpus: 6100, signal 227644/274251 (executing program) 2022/09/18 11:52:46 fetching corpus: 6150, signal 228846/274763 (executing program) 2022/09/18 11:52:46 fetching corpus: 6200, signal 229408/275218 (executing program) 2022/09/18 11:52:46 fetching corpus: 6250, signal 230235/275682 (executing program) 2022/09/18 11:52:46 fetching corpus: 6300, signal 230879/276094 (executing program) 2022/09/18 11:52:47 fetching corpus: 6350, signal 231167/276485 (executing program) 2022/09/18 11:52:47 fetching corpus: 6400, signal 231505/276940 (executing program) 2022/09/18 11:52:47 fetching corpus: 6450, signal 232124/277452 (executing program) 2022/09/18 11:52:47 fetching corpus: 6500, signal 232568/277835 (executing program) 2022/09/18 11:52:47 fetching corpus: 6550, signal 233415/278244 (executing program) 2022/09/18 11:52:47 fetching corpus: 6600, signal 234111/278635 (executing program) 2022/09/18 11:52:47 fetching corpus: 6650, signal 234650/278998 (executing program) 2022/09/18 11:52:47 fetching corpus: 6700, signal 235215/279399 (executing program) 2022/09/18 11:52:48 fetching corpus: 6750, signal 235614/279775 (executing program) 2022/09/18 11:52:48 fetching corpus: 6800, signal 236288/280086 (executing program) 2022/09/18 11:52:48 fetching corpus: 6850, signal 237028/280439 (executing program) 2022/09/18 11:52:48 fetching corpus: 6900, signal 237549/280657 (executing program) 2022/09/18 11:52:48 fetching corpus: 6950, signal 237984/280680 (executing program) 2022/09/18 11:52:48 fetching corpus: 7000, signal 238597/280682 (executing program) 2022/09/18 11:52:48 fetching corpus: 7050, signal 239190/280687 (executing program) 2022/09/18 11:52:48 fetching corpus: 7100, signal 239804/280687 (executing program) 2022/09/18 11:52:49 fetching corpus: 7150, signal 240211/280687 (executing program) 2022/09/18 11:52:49 fetching corpus: 7200, signal 240566/280687 (executing program) 2022/09/18 11:52:49 fetching corpus: 7250, signal 241321/280687 (executing program) 2022/09/18 11:52:49 fetching corpus: 7300, signal 241907/280697 (executing program) 2022/09/18 11:52:49 fetching corpus: 7350, signal 242297/280697 (executing program) 2022/09/18 11:52:49 fetching corpus: 7400, signal 242639/280706 (executing program) 2022/09/18 11:52:49 fetching corpus: 7450, signal 243441/280706 (executing program) 2022/09/18 11:52:49 fetching corpus: 7500, signal 244024/280709 (executing program) 2022/09/18 11:52:50 fetching corpus: 7550, signal 244657/280718 (executing program) 2022/09/18 11:52:50 fetching corpus: 7600, signal 244994/280742 (executing program) 2022/09/18 11:52:50 fetching corpus: 7646, signal 245533/280742 (executing program) 2022/09/18 11:52:50 fetching corpus: 7646, signal 245533/280742 (executing program) 2022/09/18 11:52:52 starting 8 fuzzer processes 11:52:52 executing program 0: sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x4048001) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1a8, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x154, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xc0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc6}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xb47b8401d215861c}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x81) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000}, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c040) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r5 = open$dir(&(0x7f00000007c0)='./file0\x00', 0x40000, 0x24) dup2(r4, r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20008000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000000) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2010, r2, 0x49da7000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40001) 11:52:52 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x3}, @clear_death={0x400c630f, 0x2}, @decrefs, @free_buffer, @acquire_done={0x40106309, 0x2}, @register_looper], 0xbe, 0x0, &(0x7f0000000080)="79f6e1e101e98a39fafb9500464d043e0f4851a01a180137a6136f2d47978701b566e3b208180a2bae25cbf67677475def1ca9441f7edd596bed4d5052a26b24939d14da5b03c68f5cb1a28e25ccfc41dd9c5a3afe7d63a0aafc7a1ddf57c020b936d3934a47c46dbb117b8c35c5c6fdd2839711830e139f4718c3a331c2762a6d5c5480754c4ae76c0a02673161e96bcd7a86c05afe8ce247ba6700f4da4847ade577c1a45450177739c11b0ea111aa0791d6f20559c74170736fc22a01"}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x21040010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf7}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x7, 0xfffb, 0x622a, 0x1ff]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x40088c0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3d}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008800}, 0x20040005) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/118, 0x76}, {&(0x7f0000000580)=""/131, 0x83}], 0x3, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x2002) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) setxattr$trusted_overlay_opaque(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940), &(0x7f0000000980), 0x2, 0x0) mkdirat$cgroup(r10, &(0x7f00000009c0)='syz1\x00', 0x1ff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'macsec0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r13, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4040800) openat$cgroup_type(r8, &(0x7f0000000cc0), 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000d00)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000d40), 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c8, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xeea}, {0x8, 0x15, 0x8000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1ff}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xd1}, {0x8, 0x15, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40f0}, 0x4041) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x200, 0x24}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40040) syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r9) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r15, 0xc50, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r16}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) [ 75.629382] audit: type=1400 audit(1663501972.707:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:52:52 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x80000000}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000080)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100)=0x46ab675e, 0xfffffffffffffff9) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000180)={0x800, 0x38, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = epoll_create(0x7f) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r3, 0xb9, 0x2, 0xfffffffffffffffc}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$802154_raw(r5, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000300)={0x0, 0xfffffffffffff800, 0x1, [0x0, 0x6, 0x75, 0xfe4, 0x3], [0x3, 0x1ff, 0x800, 0x1000, 0x19, 0x43, 0x6, 0x7fff, 0x7, 0x7ff, 0x7, 0x8, 0x0, 0x4491, 0x8, 0x7, 0x2, 0x100000000, 0x3, 0x523, 0x3, 0x3, 0xc6c, 0x1, 0x101, 0x1a5, 0xfffffffffffffff8, 0x7, 0x59b, 0x200, 0x3f, 0x8, 0x1, 0x968, 0x7, 0x8, 0x1f5, 0xffffffff, 0x7, 0x4e97, 0x1, 0x8, 0x5, 0x1, 0x893, 0x78, 0x401, 0xff, 0x8d9e, 0x200, 0x1, 0xcd, 0x20, 0x5, 0x504b, 0x3, 0x7, 0x0, 0x7890, 0xda1c38c, 0x7, 0x0, 0xffff, 0x4, 0x20, 0x0, 0x6, 0x2, 0x9, 0x400, 0x9, 0x4, 0x4, 0x7ff, 0x788, 0x0, 0x1, 0xfffffffffffffc00, 0x4, 0x7f, 0x0, 0x0, 0x6, 0x9, 0x7, 0x40, 0x40, 0x3, 0x0, 0xffffffff, 0x6, 0x3, 0xa56, 0x2, 0x7, 0x7ff, 0xe30, 0x5, 0x1ff, 0x4, 0x5, 0x1, 0xcf3d, 0x101, 0x1f, 0xffffffffffffff00, 0x3, 0x0, 0x8001, 0xb9, 0x4, 0xd, 0x8, 0x7, 0x5, 0x1ff, 0x8, 0x4, 0xebf3, 0x4f3, 0x100000000]}) ioctl$int_out(r5, 0x67f5622c230cb80e, &(0x7f0000000740)) ioctl$int_in(r1, 0x5421, &(0x7f0000000780)=0x200) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f00000007c0)={0x1, 0x400}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) 11:52:52 executing program 2: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0x20, 0xa, 0x52, 0x0, 0x100000001, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x6}, 0x220, 0x5, 0x1, 0x8, 0x1, 0x4b1a, 0x3, 0x0, 0x4ac5, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) fgetxattr(r0, &(0x7f00000000c0)=@random={'system.', 'com.apple.FinderInfo\x00'}, &(0x7f0000000100)=""/7, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4480, 0x0) r2 = fcntl$getown(r1, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21050008}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4000100) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000003c0)='bond_slave_1\x00') ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000000440)={0x3, 0x40, 0x2, 0x4, 0x3f, 0xa8}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000480)={'tunl0\x00', @broadcast}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000004c0)) ioctl$sock_netdev_private(r3, 0x89fd, &(0x7f0000000500)="e22aa1e7a7c16d") ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000540)={0x89b, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$TCXONC(r3, 0x540a, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f000000d400)) perf_event_open(&(0x7f000000d480)={0x5, 0x80, 0x2, 0x1, 0x7, 0x23, 0x0, 0x99a, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f000000d440), 0x4}, 0x8000, 0x6, 0xe68, 0x9, 0xd48e, 0x9, 0x4, 0x0, 0x0, 0x0, 0x6}, r2, 0xd, r3, 0x3) 11:52:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = openat2(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/uts\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x63}}, './file1\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000340)={0xbc, 0x10, [0x8, 0x6, 0x0, 0x7], &(0x7f0000000300)=[0x0, 0x0]}) lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.impure\x00') sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2e}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000640)={0x0, 0x80000000, 0x7}) getsockname$unix(r3, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e) setxattr$incfs_id(&(0x7f0000000740)='./file1/file0\x00', &(0x7f0000000780), &(0x7f00000007c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 11:52:52 executing program 5: setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0xe7, @private=0xa010101, 0x4e23, 0x1, 'ovf\x00', 0x27, 0x8000, 0x2f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 0xfffffffa, 0x10000, 0xffff365a}}, 0x44) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)=0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x80000001]}, 0x8, 0x80000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x5, 0x1000, 0x400, 0x4, 0x18, 0x7a}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1, @broadcast}, 0xc) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4c0c1) r2 = fsmount(0xffffffffffffffff, 0x0, 0x71) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000600)={0x6, 0xfffffffd, 0x20, 0x5, 0xf, "998408ebab15590010ee8ae98b9b6603030117"}) r3 = openat$cgroup_ro(r2, &(0x7f0000000640)='cgroup.freeze\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = openat$incfs(r1, &(0x7f0000000980)='.log\x00', 0x402002, 0x93) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000b00), 0xc0000, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x8000, 0x0) io_submit(0x0, 0x5, &(0x7f0000000d00)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000000680)="25eba8fdc33b65d4dbfacca69cf5981d480ccfeb18a2eacd2337b3d591e737e5a19b492a653f3a3a3de439ef57eb2eff3ff9b07a471e405f725ac4bd8683044f9722c6b240ff29dcd21e134d56c2c10e0b0030ba433d69e5855bc8ade35656758f570bed1a28f3e27112a8410417b30df9df112bb85655aff1c93189db985c3436f4ce4c8ea8ef5a2c358944a995ef675d77a074dcb0b8123e38d23169e4c1c14ede4d6eeb058d32704058740c09f17ad1db980102dc158c10db393ddddb85499a24e10d0d3f55a7fd2b201bb8c7722aaf876f70cdc918d8e1cd9f8b3750a26b6684c8333458069c", 0xe8, 0xd8c4, 0x0, 0x7, r4}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x5, r5, &(0x7f0000000840)="29b1bce6f4a4e5b4f0f34c974a7f580efdd5df480ca0910eac8e85ad8442785280dfb8281b8a0d4c903f698b1bc7c63483c6571c12a7d46b14a20102516bd8f3b24a0575995d81b16b12964c3ca438eeef1df0cefba6f8a3e14fbb3523cf121faaad566a0d92ceaa2253f515054a7e56669b8077b020922dcca008ae96573e031580d13594335f6e49574afa82838eb3eb98dcc495d5a42a341c12c0656baaacbcb36bba55a73ae772af46bbb2dba3485973a349883fdf71ca08ee77e86d7388f9ee8c9eaa3b80ad17340cd1e4a03a7e4a9e46b46e987840ffb9df785158563674af4406c7437b7ecb98df2ee6d355477341f5", 0xf3, 0x0, 0x0, 0x1}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x5, 0x5, r6, &(0x7f00000009c0)="48322744753ecd733337383d2cc6819ca22f4f6df311aac41c78e48d19a43c38fc2a651f975dd143224db43cfc8c77df76d2290c47b92aa6379d92c90254642e847a6f6bdcee12e166cde80635142e26517579e8d73a722e9d2efc5a4cebff3cc35edd2eb48beba9eec5544564237665ffc693d9e1dc48e39d094648ca16bb1b9b75ed3c4752b1dc70dc40fcd463a135d07ee2b74ddf77a73ce96a7dca28a080b2c1cc20f5836cfdcf8b65a3f7d772d2aabea21253be60134a1b98bae25567e46712aeed22e14c", 0xc7, 0x2a, 0x0, 0x0, r0}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0xb515, r7, &(0x7f0000000b40)="85fd1deb2c90ea5c50a60b20e5868f00f4b498e59e5620e6bcd47e0c564fc3fe4cd68fdfe8a2e444deafb0e4c5168083668ed353c7ff2f61ade74c133c42863315994c877ce585dd4cb27119e74a3853c6233f4e45ccb6ae6432", 0x5a, 0x9, 0x0, 0x3}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x3, 0x5, r8, &(0x7f0000000c40)="1cb661d587d4ecc4ecc57b6c9a28dbc549cc584ada215cfec4d156011fe1f89b6bff5a686e71a573dcf119142266a495339301b529e2da4627d660267a6525be429a67a729628a47672d58204dff14a11a7e6943ca", 0x55, 0x9}]) 11:52:52 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000080)={0x11, "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"}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) sendmsg$nl_netfilter(r0, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x4a4, 0xa, 0x1, 0x201, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x8}, [@generic="1784504275fb1bb5116cc8bf0ba5eda56f31d4bf8ae298183095922d53c9b072d9e8cb22f21e7a1a4b6ae2285d0798290581e4a6fb4e20bb3613e6b6e3998cfc5309cc15adb559d4633e429a64c3695a0462b844f005d772795c262409c2cdedd2896851a318d49bb5140a4a6f022dc0b6804289ecf765eb1642dcbe73685f63af655e95f2926c407b1747d83550eb0545c8c541727db9a8b561b3fc7e7c46b2443a08f5fe701ad15df7dabcb72e4c9969e589048e9bac8c179d2c6fa623381bb4180d11db96db32b8cb6dd78570e24ad724e2c3e323e8ee2bce04851e1e37f612259e2557f32a86", @generic="b8a1804709bf2b9eadd4e2951aea1c5d564d09953fd9e00309b3cdc2f54efb2eabfece3053e72f1fdfd064622e8cdf4bce3e03a11892c26128eb2ab619cde7977b834b90a768aea1ac259149c1422a6eae8c51b20ff11d2928f9b098e53a326c25b8dd589aa9dd6b70867d347c56df818738608b3cdaee1d35ce0412016788591bdc670b7db4dbf79137223cc231f128b7a6044b8bbcd44afa54a8ba2f61f8554994fa093bad4902034a19a79568faa56c0acc122abe939909d6b0f8de848478f1", @nested={0xc, 0x51, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}]}, @nested={0x2d8, 0x54, 0x0, 0x1, [@generic="cf4af321cdf5981f6ab0959c455cb20f6a944e666ade2d00764c0ed256d7942a5d2a5a16bdab62d638965a1aa9888425d80ef4f5cb7478b56ae445735cf968a5045fb37a9bb242b3a2c31d9c0e051606b32a14fdb8ebb5431e1c0bf182de1ba7af7d268dad34d5294f8fb05ccba8820e2dd4bbd21915fd82274a526fca87e8f7af7be89d84c6701ef920e16ba13346e81e9f8c2d2505fa6daeaea718661c4296f9b5ade58cdae46680fdeab0b13d882d131a86bf3e2e510ca17b45487564f14348af39e321f75d447a5fafb8a4ed0ad3aa95092f7427168c76d7890ead23713aaaa881b347e08cb6808fd24b56768a2b", @typed={0x81, 0x50, 0x0, 0x0, @binary="948a17b9e19f43bf375ac2e93e2ca5f61f6f44d449aa37a87f440dd23a60e4ac231355ed1214c26612cbad1c2367096c4a7eed27358c0419e28962561548603d25f6c636a0225147b4172ee62891c37bc0db4f8eb13412dbe4235de68a679665a74184fc31e40b38483234aefedae14474ff1c08d7bd68671fa6d5b7f3"}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x15, 0x0, 0x0, @uid=0xee00}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="206e36c974f6e15a9e24af6e68163cbca03bafeae52ced2043ea5532cd69bbb10105a9aba58d21af8af994c584e9bec49567ae12c7f48818a87b533ef7811b58c5f20215d23d45471adaf58d5332", @generic="882fa9403817d93d444fa3b24c573790cdf9ee83d40b3471978cb3e00685db3462963bee265204a43c9ad1b92af09a2e09eff3eef3c1239da0e643aa3aa6f52e89bda05355a9e17e817f06fdb119f505f5182c02ec9e370b9b795a9eb21162af7427ef17cad7b13335e8c37edd51378e2c9822170d1b760b6aad6179ec39df0d59c3cba45a199a65d943d9d5166a118b50635b74fe4be3", @generic="48ea967c8381b6d9dac81cb0ea279aa75402e62c4b5d9222b788ef247c81ad875794bfee6fd048b989383e7dca524da0980becddacda995b9055865f3408628ae15ff26fb61eafb450c40ca9634584"]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x8000}, 0x4044801) socketpair(0x10, 0x80000, 0xff, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(r1, &(0x7f0000000900), &(0x7f0000000940)=@md5={0x1, "a582fd31f87c6f1c3f0d6627e71191b5"}, 0x11, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000b80)={&(0x7f0000000980), 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x104, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:chkpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:depmod_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg2\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:urandom_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x20004015) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8880) r6 = syz_open_dev$vcsa(&(0x7f0000000d00), 0xd407, 0x101900) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x20, 0xda0e, 0x32, @local, @remote, 0x7, 0x700, 0x1, 0x5}}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r4) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000f80), 0x101001, 0x0) preadv2(r9, &(0x7f00000012c0)=[{&(0x7f0000000fc0)=""/234, 0xea}, {&(0x7f00000010c0)=""/56, 0x38}, {&(0x7f0000001100)=""/95, 0x5f}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/224, 0xe0}], 0x5, 0x6, 0x4, 0x1) 11:52:52 executing program 7: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x19}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044080}, 0x6) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x3, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffff8, 0xff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x20044800) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x90400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r0, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x900040}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x1, 0x8, 0x101, 0x0, 0x0, {0xdd7caaa6b0e8b67c, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4004084) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r3, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r1, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0xa, 0xa, 0x503, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x1c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x387}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) pipe2(&(0x7f0000000d00)={0xffffffffffffffff}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000000d80)={0x484, 0x0, 0x500, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbb, 0x3, "6a6e7a0aaab3f2f14a20a5afb249a5a12a3c3fd105b400bc62e86727f19f432775f3109ec5bd3f4d9a73fb665f5fcbe1e190cbc6a1c8b5f32bd9e5e2304b6dfc51d8e99c7f2de15e6ca363031474f75629a47488b18a3849bf9a14d1ef4dc08e80a20610da398393aafd3a756eeb89a906e1fa36baffedf2be3f72ca9437f793b7a81c7b42378ee509a69d35221fbf3b696ebd0b2947e24e05c56298b075e1f5c142e07ea49b644b0fe9477d3be16054350d84c3ad3ae8"}, @TIPC_NLA_NODE_ID={0x4f, 0x3, "bc9a441b947ae526c11377328d537e8b7d62ac1653d8c3f61ecc4689a70cf8a81a183efcdef9ffb0c352f7619b66a96ed6de3047ad2dab5f5392eb41bf521e49b42581d76cc559f0296609"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "73731db1b52e8cf0ec1bdd61d26a5c25ed0733f0fe250c09"}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff7de}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x23b}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x18}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "15aef5f8a4fd711da98c027d2d7b87e2944ec96321a2099a230f396f"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8de16e3a8fd5cefa1f2ec83a50354cbf31f392170fce70871e7374d4a5150e9c22"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8ce82916b6baca8dd07a1a17f9feafae16cabe95d0e5032d23320dce8a2460c2"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "12ff9d9948f0ba36a54e626330ed686f8da85e5a6f36c0ad77868f6aa8b31e0806"}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbd76}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x484}}, 0x1) [ 77.038234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.040558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.042388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.046070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.048747] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.050060] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.055176] Bluetooth: hci0: HCI_REQ-0x0c1a [ 77.086326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.089340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.090666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.092875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.094076] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.097208] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.098928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.100227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.104389] Bluetooth: hci2: HCI_REQ-0x0c1a [ 77.116877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.118250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.121197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.122908] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.124113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.129504] Bluetooth: hci1: HCI_REQ-0x0c1a [ 77.130674] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.134718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.155022] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.157069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.158034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.158811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.162936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.163753] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.165413] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.166793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.168102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.170883] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.176260] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 77.177319] Bluetooth: hci5: HCI_REQ-0x0c1a [ 77.181763] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 77.183189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 77.190312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 77.191957] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 77.193334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 77.197782] Bluetooth: hci7: HCI_REQ-0x0c1a [ 77.226211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 77.234584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 77.241941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 77.266701] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 77.283680] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 77.286095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 77.312253] Bluetooth: hci6: HCI_REQ-0x0c1a [ 79.120835] Bluetooth: hci0: command 0x0409 tx timeout [ 79.122593] Bluetooth: hci2: command 0x0409 tx timeout [ 79.184633] Bluetooth: hci3: command 0x0409 tx timeout [ 79.185324] Bluetooth: hci1: command 0x0409 tx timeout [ 79.185540] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 79.249665] Bluetooth: hci7: command 0x0409 tx timeout [ 79.250382] Bluetooth: hci5: command 0x0409 tx timeout [ 79.379502] Bluetooth: hci6: command 0x0409 tx timeout [ 81.168564] Bluetooth: hci2: command 0x041b tx timeout [ 81.169511] Bluetooth: hci0: command 0x041b tx timeout [ 81.232578] Bluetooth: hci1: command 0x041b tx timeout [ 81.233583] Bluetooth: hci3: command 0x041b tx timeout [ 81.296536] Bluetooth: hci5: command 0x041b tx timeout [ 81.297412] Bluetooth: hci7: command 0x041b tx timeout [ 81.424710] Bluetooth: hci6: command 0x041b tx timeout [ 82.213623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.221285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.223299] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.233657] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.249678] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.251043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.276485] Bluetooth: hci4: HCI_REQ-0x0c1a [ 83.217498] Bluetooth: hci0: command 0x040f tx timeout [ 83.218034] Bluetooth: hci2: command 0x040f tx timeout [ 83.281526] Bluetooth: hci3: command 0x040f tx timeout [ 83.282000] Bluetooth: hci1: command 0x040f tx timeout [ 83.344538] Bluetooth: hci7: command 0x040f tx timeout [ 83.345292] Bluetooth: hci5: command 0x040f tx timeout [ 83.473522] Bluetooth: hci6: command 0x040f tx timeout [ 84.304538] Bluetooth: hci4: command 0x0409 tx timeout [ 85.264507] Bluetooth: hci2: command 0x0419 tx timeout [ 85.265018] Bluetooth: hci0: command 0x0419 tx timeout [ 85.328531] Bluetooth: hci1: command 0x0419 tx timeout [ 85.329523] Bluetooth: hci3: command 0x0419 tx timeout [ 85.393523] Bluetooth: hci5: command 0x0419 tx timeout [ 85.393953] Bluetooth: hci7: command 0x0419 tx timeout [ 85.520552] Bluetooth: hci6: command 0x0419 tx timeout [ 86.353517] Bluetooth: hci4: command 0x041b tx timeout [ 88.400585] Bluetooth: hci4: command 0x040f tx timeout [ 90.448523] Bluetooth: hci4: command 0x0419 tx timeout 11:53:45 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1eda, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000040", @ANYRES16=0x0, @ANYBLOB="000029bd709efed2df25c25d080005002d0000290000c1596c324f25390baa813548380082e674b9877f32247a56f3f34d9f53e04bc93356a722c49debbb7b058e9edc844bcf84df69e88c4a6f457ab44f253bd403746bc5bae3ed2a5a4763da2d9f31a75351a4491d4319e966862d8208e5055d6a77a8a253eead9e63c639506d2be7abb98783e3d14f63bd69ffb29bb8425d057a75205ff9097f375e6892436d98cd8e7abd6dc2589b417b"], 0x1c}, 0x1, 0x0, 0x0, 0x20004801}, 0x20000000) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r6, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x7fffffe, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r7, 0xff, 0x0, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000008c0)) [ 128.283110] audit: type=1400 audit(1663502025.361:7): avc: denied { open } for pid=3802 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.284647] audit: type=1400 audit(1663502025.361:8): avc: denied { kernel } for pid=3802 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.291453] ------------[ cut here ]------------ [ 128.291474] [ 128.291479] ====================================================== [ 128.291482] WARNING: possible circular locking dependency detected [ 128.291486] 6.0.0-rc5-next-20220916 #1 Not tainted [ 128.291493] ------------------------------------------------------ [ 128.291496] syz-executor.1/3806 is trying to acquire lock: [ 128.291502] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.291538] [ 128.291538] but task is already holding lock: [ 128.291541] ffff88800e013820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.291567] [ 128.291567] which lock already depends on the new lock. [ 128.291567] [ 128.291570] [ 128.291570] the existing dependency chain (in reverse order) is: [ 128.291573] [ 128.291573] -> #3 (&ctx->lock){....}-{2:2}: [ 128.291587] _raw_spin_lock+0x2a/0x40 [ 128.291603] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.291616] __schedule+0xedd/0x2470 [ 128.291626] schedule+0xda/0x1b0 [ 128.291635] futex_wait_queue+0xf5/0x1e0 [ 128.291646] futex_wait+0x28e/0x690 [ 128.291656] do_futex+0x2ff/0x380 [ 128.291665] __x64_sys_futex+0x1c6/0x4d0 [ 128.291674] do_syscall_64+0x3b/0x90 [ 128.291688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.291705] [ 128.291705] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.291719] _raw_spin_lock_nested+0x30/0x40 [ 128.291734] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.291746] task_fork_fair+0x63/0x4d0 [ 128.291763] sched_cgroup_fork+0x3d0/0x540 [ 128.291776] copy_process+0x4183/0x6e20 [ 128.291787] kernel_clone+0xe7/0x890 [ 128.291796] user_mode_thread+0xad/0xf0 [ 128.291806] rest_init+0x24/0x250 [ 128.291822] arch_call_rest_init+0xf/0x14 [ 128.291834] start_kernel+0x4c1/0x4e6 [ 128.291843] secondary_startup_64_no_verify+0xe0/0xeb [ 128.291857] [ 128.291857] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.291870] _raw_spin_lock_irqsave+0x39/0x60 [ 128.291885] try_to_wake_up+0xab/0x1920 [ 128.291898] up+0x75/0xb0 [ 128.291909] __up_console_sem+0x6e/0x80 [ 128.291924] console_unlock+0x46a/0x590 [ 128.291939] do_con_write+0xc05/0x1d50 [ 128.291951] con_write+0x21/0x40 [ 128.291960] n_tty_write+0x4d4/0xfe0 [ 128.291973] file_tty_write.constprop.0+0x49c/0x8f0 [ 128.291985] vfs_write+0x9c3/0xd90 [ 128.292002] ksys_write+0x127/0x250 [ 128.292018] do_syscall_64+0x3b/0x90 [ 128.292031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.292048] [ 128.292048] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.292061] __lock_acquire+0x2a02/0x5e70 [ 128.292080] lock_acquire+0x1a2/0x530 [ 128.292095] _raw_spin_lock_irqsave+0x39/0x60 [ 128.292110] down_trylock+0xe/0x70 [ 128.292122] __down_trylock_console_sem+0x3b/0xd0 [ 128.292138] vprintk_emit+0x16b/0x560 [ 128.292153] vprintk+0x84/0xa0 [ 128.292169] _printk+0xba/0xf1 [ 128.292186] report_bug.cold+0x72/0xab [ 128.292198] handle_bug+0x3c/0x70 [ 128.292211] exc_invalid_op+0x14/0x50 [ 128.292224] asm_exc_invalid_op+0x16/0x20 [ 128.292240] group_sched_out.part.0+0x2c7/0x460 [ 128.292251] ctx_sched_out+0x8f1/0xc10 [ 128.292260] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.292272] __schedule+0xedd/0x2470 [ 128.292282] schedule+0xda/0x1b0 [ 128.292292] futex_wait_queue+0xf5/0x1e0 [ 128.292302] futex_wait+0x28e/0x690 [ 128.292311] do_futex+0x2ff/0x380 [ 128.292320] __x64_sys_futex+0x1c6/0x4d0 [ 128.292330] do_syscall_64+0x3b/0x90 [ 128.292343] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.292360] [ 128.292360] other info that might help us debug this: [ 128.292360] [ 128.292362] Chain exists of: [ 128.292362] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.292362] [ 128.292377] Possible unsafe locking scenario: [ 128.292377] [ 128.292379] CPU0 CPU1 [ 128.292381] ---- ---- [ 128.292383] lock(&ctx->lock); [ 128.292389] lock(&rq->__lock); [ 128.292395] lock(&ctx->lock); [ 128.292401] lock((console_sem).lock); [ 128.292407] [ 128.292407] *** DEADLOCK *** [ 128.292407] [ 128.292409] 2 locks held by syz-executor.1/3806: [ 128.292415] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.292441] #1: ffff88800e013820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.292468] [ 128.292468] stack backtrace: [ 128.292471] CPU: 0 PID: 3806 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220916 #1 [ 128.292483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.292491] Call Trace: [ 128.292495] [ 128.292499] dump_stack_lvl+0x8b/0xb3 [ 128.292514] check_noncircular+0x263/0x2e0 [ 128.292530] ? format_decode+0x26c/0xb50 [ 128.292545] ? print_circular_bug+0x450/0x450 [ 128.292561] ? enable_ptr_key_workfn+0x20/0x20 [ 128.292575] ? __lockdep_reset_lock+0x180/0x180 [ 128.292592] ? format_decode+0x26c/0xb50 [ 128.292607] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.292625] __lock_acquire+0x2a02/0x5e70 [ 128.292646] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.292668] lock_acquire+0x1a2/0x530 [ 128.292684] ? down_trylock+0xe/0x70 [ 128.292698] ? rcu_read_unlock+0x40/0x40 [ 128.292715] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.292736] ? vprintk+0x84/0xa0 [ 128.292753] _raw_spin_lock_irqsave+0x39/0x60 [ 128.292769] ? down_trylock+0xe/0x70 [ 128.292782] down_trylock+0xe/0x70 [ 128.292795] ? vprintk+0x84/0xa0 [ 128.292811] __down_trylock_console_sem+0x3b/0xd0 [ 128.292828] vprintk_emit+0x16b/0x560 [ 128.292845] ? lock_downgrade+0x6d0/0x6d0 [ 128.292862] vprintk+0x84/0xa0 [ 128.292880] _printk+0xba/0xf1 [ 128.292897] ? record_print_text.cold+0x16/0x16 [ 128.292917] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 128.292930] ? lock_downgrade+0x6d0/0x6d0 [ 128.292947] ? report_bug.cold+0x66/0xab [ 128.292961] ? group_sched_out.part.0+0x2c7/0x460 [ 128.292973] report_bug.cold+0x72/0xab [ 128.292993] handle_bug+0x3c/0x70 [ 128.293020] exc_invalid_op+0x14/0x50 [ 128.293039] asm_exc_invalid_op+0x16/0x20 [ 128.293061] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.293077] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.293088] RSP: 0018:ffff888041ad78f8 EFLAGS: 00010006 [ 128.293097] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.293104] RDX: ffff88801d165040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.293112] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.293119] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e013800 [ 128.293127] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 128.293138] ? group_sched_out.part.0+0x2c7/0x460 [ 128.293151] ? group_sched_out.part.0+0x2c7/0x460 [ 128.293163] ctx_sched_out+0x8f1/0xc10 [ 128.293176] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.293191] ? lock_is_held_type+0xd7/0x130 [ 128.293209] ? __perf_cgroup_move+0x160/0x160 [ 128.293221] ? set_next_entity+0x304/0x550 [ 128.293240] ? lock_is_held_type+0xd7/0x130 [ 128.293259] __schedule+0xedd/0x2470 [ 128.293272] ? io_schedule_timeout+0x150/0x150 [ 128.293284] ? futex_wait_setup+0x166/0x230 [ 128.293298] schedule+0xda/0x1b0 [ 128.293310] futex_wait_queue+0xf5/0x1e0 [ 128.293322] futex_wait+0x28e/0x690 [ 128.293334] ? futex_wait_setup+0x230/0x230 [ 128.293347] ? wake_up_q+0x8b/0xf0 [ 128.293359] ? do_raw_spin_unlock+0x4f/0x220 [ 128.293378] ? futex_wake+0x158/0x490 [ 128.293393] ? lock_downgrade+0x6d0/0x6d0 [ 128.293409] ? lock_is_held_type+0xd7/0x130 [ 128.293428] do_futex+0x2ff/0x380 [ 128.293439] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 128.293451] ? ktime_get+0x153/0x1f0 [ 128.293467] __x64_sys_futex+0x1c6/0x4d0 [ 128.293479] ? hrtimer_interrupt+0x5b0/0x770 [ 128.293492] ? __x64_sys_futex_time32+0x480/0x480 [ 128.293504] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.293523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.293543] do_syscall_64+0x3b/0x90 [ 128.293557] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.293574] RIP: 0033:0x7f7025105b19 [ 128.293583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.293593] RSP: 002b:00007f702267b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.293604] RAX: ffffffffffffffda RBX: 00007f7025218f68 RCX: 00007f7025105b19 [ 128.293612] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7025218f68 [ 128.293619] RBP: 00007f7025218f60 R08: 0000000000000000 R09: 0000000000000000 [ 128.293626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7025218f6c [ 128.293634] R13: 00007ffe9e1b143f R14: 00007f702267b300 R15: 0000000000022000 [ 128.293647] [ 128.357242] WARNING: CPU: 0 PID: 3806 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.357921] Modules linked in: [ 128.358165] CPU: 0 PID: 3806 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220916 #1 [ 128.358751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.359557] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.359950] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.361241] RSP: 0018:ffff888041ad78f8 EFLAGS: 00010006 [ 128.361631] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.362149] RDX: ffff88801d165040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.362649] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.363153] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800e013800 [ 128.363678] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 128.364200] FS: 00007f702267b700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.364778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.365193] CR2: 00007f7533981570 CR3: 000000004107e000 CR4: 0000000000350ef0 [ 128.365715] Call Trace: [ 128.365906] [ 128.366077] ctx_sched_out+0x8f1/0xc10 [ 128.366374] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.366762] ? lock_is_held_type+0xd7/0x130 [ 128.367076] ? __perf_cgroup_move+0x160/0x160 [ 128.367406] ? set_next_entity+0x304/0x550 [ 128.367728] ? lock_is_held_type+0xd7/0x130 [ 128.368053] __schedule+0xedd/0x2470 [ 128.368335] ? io_schedule_timeout+0x150/0x150 [ 128.368666] ? futex_wait_setup+0x166/0x230 [ 128.368986] schedule+0xda/0x1b0 [ 128.369247] futex_wait_queue+0xf5/0x1e0 [ 128.369536] futex_wait+0x28e/0x690 [ 128.369805] ? futex_wait_setup+0x230/0x230 [ 128.370125] ? wake_up_q+0x8b/0xf0 [ 128.370389] ? do_raw_spin_unlock+0x4f/0x220 [ 128.370729] ? futex_wake+0x158/0x490 [ 128.371010] ? lock_downgrade+0x6d0/0x6d0 [ 128.371323] ? lock_is_held_type+0xd7/0x130 [ 128.371656] do_futex+0x2ff/0x380 [ 128.371917] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 128.372344] ? ktime_get+0x153/0x1f0 [ 128.372630] __x64_sys_futex+0x1c6/0x4d0 [ 128.372936] ? hrtimer_interrupt+0x5b0/0x770 [ 128.373279] ? __x64_sys_futex_time32+0x480/0x480 [ 128.373641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.374035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.374426] do_syscall_64+0x3b/0x90 [ 128.374707] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.375080] RIP: 0033:0x7f7025105b19 [ 128.375354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.376649] RSP: 002b:00007f702267b218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.377193] RAX: ffffffffffffffda RBX: 00007f7025218f68 RCX: 00007f7025105b19 [ 128.377715] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7025218f68 [ 128.378213] RBP: 00007f7025218f60 R08: 0000000000000000 R09: 0000000000000000 [ 128.378725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7025218f6c [ 128.379248] R13: 00007ffe9e1b143f R14: 00007f702267b300 R15: 0000000000022000 [ 128.379775] [ 128.379952] irq event stamp: 724 [ 128.380198] hardirqs last enabled at (723): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 128.380889] hardirqs last disabled at (724): [] __schedule+0x1225/0x2470 [ 128.381504] softirqs last enabled at (294): [] __irq_exit_rcu+0x11b/0x180 [ 128.382130] softirqs last disabled at (37): [] __irq_exit_rcu+0x11b/0x180 [ 128.382715] ---[ end trace 0000000000000000 ]--- 11:53:45 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r3 = openat2(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/uts\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x63}}, './file1\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000340)={0xbc, 0x10, [0x8, 0x6, 0x0, 0x7], &(0x7f0000000300)=[0x0, 0x0]}) lremovexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.impure\x00') sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2e}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000640)={0x0, 0x80000000, 0x7}) getsockname$unix(r3, &(0x7f0000000680)=@abs, &(0x7f0000000700)=0x6e) setxattr$incfs_id(&(0x7f0000000740)='./file1/file0\x00', &(0x7f0000000780), &(0x7f00000007c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) 11:53:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) 11:53:45 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) llistxattr(0x0, &(0x7f0000000180)=""/33, 0x21) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1300001b9b526a8484a398", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="240202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000008080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400d692000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005001f0709000000070003810100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x358}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0) r3 = inotify_init1(0x0) dup2(r3, r2) 11:53:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x212}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={0x0, 0x4}) syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x2, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) pidfd_open(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x5, 0x80, 0x7f, 0x7, 0x0, 0x1f, 0x21000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x2, @perf_config_ext={0x81, 0x10001}, 0x10000, 0x6, 0x3, 0xd, 0x53f2, 0xfffffff8, 0x4, 0x0, 0x7, 0x0, 0x401}, r4, 0xa, r2, 0x1) r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) syz_io_uring_setup(0x32fb, &(0x7f0000000200)={0x0, 0xe580, 0x0, 0x1, 0x346}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) fallocate(r0, 0x64, 0xffffffff, 0x8) [ 128.535050] audit: type=1400 audit(1663502025.613:9): avc: denied { write } for pid=3822 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.590166] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 128.591040] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 128.591599] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 128.592104] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 128.592721] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 128.594153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.594823] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.595461] Buffer I/O error on dev sr0, logical block 0, async page read [ 128.596127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.596559] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.597187] Buffer I/O error on dev sr0, logical block 1, async page read [ 128.598093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.598516] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.599128] Buffer I/O error on dev sr0, logical block 2, async page read [ 128.600038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.600463] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.601089] Buffer I/O error on dev sr0, logical block 3, async page read [ 128.601808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.602211] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.602836] Buffer I/O error on dev sr0, logical block 4, async page read [ 128.603868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.604274] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.604895] Buffer I/O error on dev sr0, logical block 5, async page read [ 128.605643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.606049] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.606666] Buffer I/O error on dev sr0, logical block 6, async page read [ 128.607386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.607818] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.608450] Buffer I/O error on dev sr0, logical block 7, async page read [ 128.609334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.609765] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.610384] Buffer I/O error on dev sr0, logical block 0, async page read [ 128.611084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.611510] Buffer I/O error on dev sr0, logical block 1, async page read [ 128.612222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.614462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.615624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.634836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:53:45 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) llistxattr(0x0, &(0x7f0000000180)=""/33, 0x21) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1300001b9b526a8484a398", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="240202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000008080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400d692000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005001f0709000000070003810100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x358}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0) r3 = inotify_init1(0x0) dup2(r3, r2) [ 128.639639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.640693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.643232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.659689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.660260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.661277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.662235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.662828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.666624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.667218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.679666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.680223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.680809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.681410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.682169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.682769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.683350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.684369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.685713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.688930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.693720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.694287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.695296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.696257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.696852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.697463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.788455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.789078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.790144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.792300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.793402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.793968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.796709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.797306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.825203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.825807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.826388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.827885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.828448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.829042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.829660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.830238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:53:45 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) llistxattr(0x0, &(0x7f0000000180)=""/33, 0x21) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1300001b9b526a8484a398", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="240202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000008080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400d692000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005001f0709000000070003810100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x358}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0) r3 = inotify_init1(0x0) dup2(r3, r2) [ 128.871877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.873164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.873781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.874358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.874985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.875841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.876456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.877059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.877891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.878516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.879115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.879744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.880364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.880958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.881707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.882296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.882934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.887424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.889436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.890037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.896351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.896972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.897926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.898773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.899442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.900476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.901100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.902769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.907849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.908481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.909551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.910829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.911563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.916554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.926586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.928318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.929364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.930274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.937377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 128.943619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:53:46 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7969, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000240)) llistxattr(0x0, &(0x7f0000000180)=""/33, 0x21) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1300001b9b526a8484a398", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="240202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000008080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400d692000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="780002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040005001f0709000000070003810100000008000100", @ANYRES32=r1, @ANYBLOB="400002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d0000"], 0x358}}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x531081, 0x0) r3 = inotify_init1(0x0) dup2(r3, r2) [ 129.027761] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! VM DIAGNOSIS: 11:53:45 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822b31cc RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff888041ad72f0 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ec83c3 R15=dffffc0000000000 RIP=ffffffff822b3221 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f702267b700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7533981570 CR3=000000004107e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f70251ec7c0 00007f70251ec7c8 YMM02=0000000000000000 0000000000000000 00007f70251ec7e0 00007f70251ec7c0 YMM03=0000000000000000 0000000000000000 00007f70251ec7c8 00007f70251ec7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3eda0 RCX=0000000000000000 RDX=ffff88801d0e9ac0 RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801b587960 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d9c7db5 R13=ffff88806ce3eda8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff813bccdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555742e400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f702520e6dc CR3=000000004107e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f70251ec7c0 00007f70251ec7c8 YMM02=0000000000000000 0000000000000000 00007f70251ec7e0 00007f70251ec7c0 YMM03=0000000000000000 0000000000000000 00007f70251ec7c8 00007f70251ec7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000