Warning: Permanently added '[localhost]:55463' (ECDSA) to the list of known hosts. 2023/08/23 21:31:13 fuzzer started 2023/08/23 21:31:14 dialing manager at localhost:42587 syzkaller login: [ 109.109853] cgroup: Unknown subsys name 'net' [ 109.275144] cgroup: Unknown subsys name 'rlimit' [ 120.657576] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/23 21:31:27 syscalls: 216 2023/08/23 21:31:27 code coverage: enabled 2023/08/23 21:31:27 comparison tracing: enabled 2023/08/23 21:31:27 extra coverage: enabled 2023/08/23 21:31:27 setuid sandbox: enabled 2023/08/23 21:31:27 namespace sandbox: enabled 2023/08/23 21:31:27 Android sandbox: enabled 2023/08/23 21:31:27 fault injection: enabled 2023/08/23 21:31:27 leak checking: enabled 2023/08/23 21:31:27 net packet injection: enabled 2023/08/23 21:31:27 net device setup: enabled 2023/08/23 21:31:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/23 21:31:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/23 21:31:27 USB emulation: enabled 2023/08/23 21:31:27 hci packet injection: enabled 2023/08/23 21:31:27 wifi device emulation: enabled 2023/08/23 21:31:27 802.15.4 emulation: enabled 2023/08/23 21:31:27 fetching corpus: 0, signal 0/0 (executing program) 2023/08/23 21:31:27 starting 8 fuzzer processes 21:31:27 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x40, 0x9, 0x0, 0x401, 0x2, 0x1b48000000000000, 0xffff, 0x3}, &(0x7f0000000040)={0x10000, 0x776, 0x3ff, 0x3, 0x7ff, 0x7, 0x2, 0x8}, &(0x7f0000000080)={0xfffffffffffffff7, 0x1, 0x1, 0x10000, 0x0, 0x1, 0x0, 0x100000001}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x115240, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000240)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400402, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000300)=0x80) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000340)={0x10000, 0x90d, 0x8, 0x2, 0x6, 0x9, 0x0, 0x1c580000000}, &(0x7f0000000380)={0xb69, 0x1ff, 0x0, 0x5, 0xffffffffffffffff, 0x4e2f9307, 0x20, 0x101}, &(0x7f00000003c0)={0x80000000, 0x400, 0x1, 0x80, 0x9, 0x101, 0xff, 0x9}, &(0x7f0000000440)={r3, r4+60000000}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x44f]}, 0x8}) socketpair(0x8, 0x5, 0x8, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000540)=0x1, 0x4) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000580)=0x6) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) getgroups(0x5, &(0x7f00000005c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee01, 0x0]) ioctl$TUNSETGROUP(r0, 0x400454ce, r6) clock_gettime(0x0, &(0x7f0000000600)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000640)={'geneve0\x00'}) 21:31:27 executing program 0: sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffe1, 0x5d}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa9a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffc00}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40200248}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x88c1) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0x7, 0x0, 0x1}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000740)={{}, {@val={r1}, @actul_num={@val=0x2d, 0x0, 0x6b}}}) r2 = socket$inet6(0xa, 0x3, 0x7) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{r2}, 0x0, 0x2, @inherit={0x78, &(0x7f0000000780)={0x1, 0x6, 0xfffffffffffffffa, 0x9, {0x0, 0x1, 0x10000, 0x40fc, 0x81}, [0x7f, 0x9, 0x20, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffa]}}, @devid=r1}) socketpair(0x6, 0x80000, 0x8, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001b00)={&(0x7f0000001840), 0xc, &(0x7f0000001ac0)={&(0x7f0000001880)={0x210, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7a4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x44, 0xb}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd6de}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001b80), r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001c00)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001d00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001d40)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000001e40)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001f00)={'ip6_vti0\x00', &(0x7f0000001e80)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x80, 0x5, 0x8, @empty, @private0, 0x10, 0x1, 0xee0f, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001f40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002040)={'syztnl0\x00', &(0x7f0000001f80)={'gretap0\x00', 0x0, 0x700, 0x0, 0x2, 0x4, {{0x28, 0x4, 0x3, 0x6, 0xa0, 0x68, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0xc, 0x54, 0x0, 0x5, [0x0, 0x4]}, @rr={0x7, 0xf, 0xa0, [@broadcast, @private=0xa010102, @remote]}, @timestamp_prespec={0x44, 0x34, 0xa8, 0x3, 0xe, [{@rand_addr=0x64010100, 0x1000}, {@private=0xa010102, 0x80000000}, {@multicast2, 0x2}, {@local, 0x7f}, {@multicast2, 0x2}, {@empty, 0xcbc6}]}, @timestamp_prespec={0x44, 0x3c, 0x4b, 0x3, 0xf, [{@loopback, 0x3f}, {@rand_addr=0x64010101, 0x7}, {@empty, 0x9}, {@broadcast, 0x18}, {@broadcast, 0x5}, {@empty, 0x1}, {@loopback, 0x29}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000002500)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002080)={0x438, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x2, 0x6, 0x5, 0x12}, {0x400, 0x89, 0x80, 0x2}, {0x1, 0x7f, 0xac, 0x6519}, {0x1, 0x1, 0x3f, 0x7}, {0x9, 0x8, 0x69, 0x9}, {0x200, 0x80, 0x4, 0x7}, {0x6, 0x4, 0x0, 0x7}, {0x2, 0x7, 0x2, 0x8}, {0x8, 0x3, 0x7, 0x7}, {0x4, 0x0, 0x8, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x234c6b42}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r12, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40000090}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x70, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x596}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x489}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002680), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040090}, 0x8004) 21:31:27 executing program 2: r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getegid() setregid(0xee00, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x9, 0x1}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x6082, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, r1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000100), 0x2, 0x0) getgroups(0x3, &(0x7f0000000140)=[r1, 0x0, r1]) getgroups(0x2, &(0x7f0000000180)=[r1, r1]) r8 = getegid() setresgid(r6, r7, r8) prctl$PR_GET_KEEPCAPS(0x7) pkey_alloc(0x0, 0x3) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x9, 0x302d, 0x7, 0x0, 0x8}, 0x14) [ 121.789500] audit: type=1400 audit(1692826287.950:6): avc: denied { execmem } for pid=269 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:31:28 executing program 3: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4044404) socketpair(0x2a, 0x0, 0x7, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc4, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe68a}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x14}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x12400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000400)={0x590, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x48}}}}, [@NL80211_ATTR_TID_CONFIG={0x3d0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x330, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x30, 0x4, 0x36, 0x25, 0xc, 0x48, 0x1, 0x6c, 0xb, 0xc, 0x0, 0xc, 0x0, 0x30, 0x30, 0x18, 0x36, 0x9, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x9, 0x4, 0xfbbe, 0x8, 0x6fc1, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x81, 0x1, 0x5, 0x9, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x400, 0x9b9d, 0x50, 0x7fff, 0x2, 0xffff, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x96, 0x400, 0x3ff, 0x400, 0x9, 0xc71f]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0xc, 0x30, 0x1, 0x48, 0x2, 0x5, 0x3, 0x9, 0x1, 0x4, 0x5, 0x60, 0x16, 0x9, 0x4, 0x2, 0x4, 0x60]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x42, 0x24, 0x24, 0x9, 0x60, 0x12, 0x16, 0x30, 0x16, 0x5, 0x36, 0x6, 0x6c, 0x1, 0x60, 0x0, 0x1b, 0x30, 0x60, 0x36]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x7, 0x9}, {0x6, 0x2}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x2}, {0x4, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0xa}, {0x2, 0x9}, {0x2, 0x7}, {0x3, 0x6}, {0x5, 0xa}, {0x2, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x1}, {0x2, 0x1}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xb, 0x2, 0x1b, 0x5, 0x2, 0x24, 0x6, 0x60, 0x0, 0x9, 0x18, 0x60, 0x16, 0x60, 0xb, 0x5, 0x9caa37d4640431d2, 0x12, 0x6, 0xa20a4ac252c356b, 0x4, 0x24, 0x6c, 0x12, 0x60, 0x1b, 0x12, 0x1a, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xffff, 0x0, 0x9, 0x800, 0x4, 0x0, 0xeaae]}}]}, @NL80211_BAND_2GHZ={0xf4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x0, 0x2, 0x1b, 0x60, 0x2, 0x2, 0x60, 0xc, 0x12, 0x18, 0x3, 0xc, 0x16, 0x24, 0x36, 0x2, 0x5, 0x16, 0x36, 0xc, 0xb, 0x24]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0x5}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x7}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x8}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x3, 0x1}, {0x4, 0x9}, {0x3, 0xa}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x13}, {0x4, 0x3}, {0x3, 0x5}, {0x3, 0x3}, {0x3, 0x5}, {0x4, 0x4}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x4}, {0x4, 0xa}, {0x5, 0x1}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x60, 0x60, 0xc, 0x12, 0xc, 0x6c, 0x1, 0x48, 0x3, 0x9, 0x12, 0x6c, 0x3, 0x1, 0x1, 0x16, 0xc, 0xb, 0x5, 0x5, 0x3b, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0x7}, {0x7, 0x6}, {0x7, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x6, 0x6}, {0x1}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x5}, {0x2, 0x1}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x2}, {0x4}, {0x0, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x1}, {0x5, 0x9}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x0, 0x9}, {0x3}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x4}, {0x5, 0x3}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x29, 0x12, 0x3, 0x16, 0xc, 0x4, 0x2, 0x4, 0x70, 0xc, 0x9, 0x5]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0x8, 0x9]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x5}, {0x3}, {0x7, 0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x24, 0x5, 0x24, 0x0, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x9}, {0x5, 0x3}, {}, {0x3}, {0x6, 0x7}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x7, 0x3}, {0x3, 0x3}, {0x2}, {0x7, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x3, 0x5}, {0x0, 0x2}, {0x1, 0x1}, {0x4, 0xa}, {0x3, 0x9}, {0x1, 0xa}, {0x5, 0x8}, {0x4}, {0x3, 0x5}, {0x5, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x5, 0x2}, {0x6, 0x5}, {0x4, 0x8}, {0x4, 0x7}, {0x0, 0x3}, {0x5, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x36, 0x6c, 0xb, 0x16, 0x60, 0x18, 0x5, 0x2, 0x1b, 0x72, 0x2, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x3e3, 0x3e7d, 0x5, 0x8, 0x1, 0xfffa, 0x5]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x5}, {0x3, 0x9}, {0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x6}, {0x3, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x4, 0x8}, {0x2, 0x5}, {0x5, 0xa}, {0x7, 0xa}, {0x7, 0x3}, {0x0, 0x2}, {0x6, 0x8}, {0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x8}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x3}, {0x0, 0x8}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x3, 0x6, 0x60, 0x4, 0x36, 0x9, 0x2, 0x48, 0x48, 0xb, 0x48, 0x5, 0x4, 0x19, 0x0, 0x1, 0x6, 0x9, 0xc, 0x3, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x21}]}]}, @NL80211_ATTR_TID_CONFIG={0x198, 0x11d, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x34}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x7, 0x5832, 0x9, 0x0, 0x1ff, 0x3f]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x5}, {0x1}, {0x0, 0x1}, {0x6}, {0x6}, {0x0, 0x7}, {0x6}, {0x5, 0x7}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x3}, {0x3, 0x9}, {0x1, 0x2}, {0x5, 0x3}, {0x5}, {0x5, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x6, 0x4}, {0x4, 0x1}, {0x5, 0x5}, {0x5, 0x8}, {0x4, 0x6}, {0x2, 0x2}, {0x1}, {0x3, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x7, 0x2}, {0x3, 0xa}, {0x2, 0x1}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x5}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {}, {0x4, 0x3}, {0x4}, {0x4}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x4, 0x7}, {0x5, 0x1}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x4, 0xa}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x7, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x1b, 0x16, 0x6c, 0x6, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4c, 0x39, 0x0, 0x36, 0x6c, 0x24, 0x3, 0x9, 0x18, 0x5d, 0x30, 0x16, 0x2]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x4, 0x12, 0x3, 0x1b, 0x60, 0x30, 0x4d, 0x1b, 0x1, 0x30, 0x1b, 0x3, 0x1, 0x30, 0x1, 0x9, 0xd, 0x1a, 0x6c, 0x6c, 0x6c, 0x36, 0x12, 0x60, 0x16, 0x18, 0x1b]}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbf}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}]}]}]}, 0x590}}, 0x4020081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1416, 0x7f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x28, 0xa, 0x7, &(0x7f0000000e00)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x6, 0xfffffe01, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80, 0x40, 0xffff8000, 0xffffffff}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000f40)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000001040)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001280)={&(0x7f0000000e40), 0xc, &(0x7f0000001240)={&(0x7f0000001080)={0x18c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff3d}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2c, 0x20, 0x3f, 0x3}]}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000860}, 0x8001) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x12c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xb014922c62160725}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c810}, 0x3) shmctl$SHM_UNLOCK(0x0, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, r4, 0x401, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x54) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x138, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd1b0}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff01}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x748}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1d5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x1a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x85}, 0x58810) 21:31:28 executing program 4: getrandom(&(0x7f0000000000)=""/158, 0x9e, 0x3) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x1c1540) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0xfffffffffffffffe, 0xe1, 0x1f, @scatter={0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/226, 0xe2}]}, &(0x7f00000003c0)="e6c34990febf080866298660adbcffd8d813646e1421e9807893a6d0f1da543ec5d43ab2808ac62f53d53a4b5a0df56a26074a0468ddc8d3a17c1d7956378c2a6b93566261d6c325ffc2dd5e09f1b83bb0c9c6981b25c73079521eccfab607d5902413595b5ce721206f4af827e54ef5959967f6b594b09e69d45eb9c629383579108ffcc32a983f41cb009ce83695efe13ba94312eb236ec76308324280d5cc7ee02dc55b642ab182b3b73afb6b207dd3c493287861b5d93f9d142c2b37d4cf380620d66cbe84c04ce51e081f5b7d230a897e7c09d314aa95c77521b62df8abc2", &(0x7f00000004c0)=""/3, 0xc000, 0x4, 0x3, &(0x7f0000000500)}) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000005c0)=0x4, 0x2) getrandom(&(0x7f0000000600)=""/4096, 0x1000, 0x2) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000001600)=0x3ff) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000001640), &(0x7f0000001680)=0x2) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000016c0)=0x5, &(0x7f0000001700)=0x4) personality(0x5000004) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000001740)) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) time(&(0x7f0000001780)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000017c0), 0x40c000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000001800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xe0, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x2b, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0xeae002e4a1f19dd, 0x3, 0xfb, 0x2}}]}}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x201, 0x4, 0xc6, 0x1f, 0xff, 0x40}, 0xe3, &(0x7f0000001880)={0x5, 0xf, 0xe3, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "58c0db4021e6d51d915d60927119f059"}, @ptm_cap={0x3}, @generic={0xa9, 0x10, 0x3, "f0435c82182fec53c69f98fefd7e02553ff6d7e50338d7b2f5e1b13d257915950254cdb1c0b98ccb06d2aaae60212b13a7c7402729da213d27f8bda448d558ea50dabce1f2b0b1658720d21242be0cc7128845c4e1af21b644c245c1852d7fca6b69e0d0198a0a2b9e28fd1d54e79f5ace67f17433b2f683b277f7c6c8ca846f3bf936e2040ec7d9dafa9ccea75e46eb5a24ea6efe5526d616683f9ecde9dde49b2fa6c7f1a9"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x57, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xc3, "cb56e54ef0d5dc64fdf023f70d221a8b"}]}, 0x3, [{0x63, &(0x7f0000001980)=@string={0x63, 0x3, "d3191163851a6f916fb47a13b87600d746d09b8b84a9fd9d7a2f2c99c4e133bb3c997cbc0f94247ad7f3d2c962fba970ce10a771542edaa52756b1d95ef6bf2c90cd46191c615f7e7667fe0b4e0ade3e4ed4f406eb6496a3f9c4a8aaea861abc6f"}}, {0x5a, &(0x7f0000001a00)=@string={0x5a, 0x3, "023249d06fa493f5f80b4a8331c03db6a9869ab36df50a2289ef5a4b286a83b391757098caa58465dd3c1953d5df5ed966680452bcfa09014cae844a19afe5d2274af0824eb866f52bb9b16f1c130e7f0526d38903bce247"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x441}}]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001b00)={0x10, 0x5, {0x2, @struct={0x3, 0x200}, 0x0, 0x1, 0x7, 0x8, 0xffffffff, 0x1, 0x0, @struct={0x4, 0x6}, 0x3ff, 0x2, [0x5, 0x1, 0x7, 0x80000000, 0x8, 0x8ae]}, {0x7, @usage=0x6, 0x0, 0x9, 0x8001, 0x5, 0x5, 0x3ff, 0x82, @usage=0x9, 0x2, 0x101, [0x9, 0x2, 0x7, 0x9, 0x80000001, 0x28]}, {0x1fb4, @struct={0x4f, 0x3f8}, 0x0, 0x2, 0x9, 0x2, 0x1f, 0x3f, 0x88, @struct={0x6}, 0x84, 0xaf9, [0xa37a, 0x9, 0x200, 0x0, 0x1000, 0xd6]}, {0x3ff, 0xfff, 0x800}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001f00)={0xf, 0x1, {0x20, @struct={0x100000, 0x5cc}, 0x0, 0x4, 0x20, 0x8474, 0xefb, 0x0, 0x410, @usage=0x14e8c7fc, 0x1, 0x5, [0x81, 0x1, 0xd4, 0x3ff, 0xff, 0x101]}, {0xc34, @struct={0x9, 0x20}, r2, 0x227, 0x5, 0x6, 0x4, 0x9e09, 0x20, @usage=0x5b4, 0x0, 0x101000, [0x0, 0x2, 0xa000000, 0x1, 0xbe5, 0x401]}, {0x6, @usage=0x9, 0x0, 0x200, 0x0, 0x29, 0x6, 0x80, 0x20, @usage, 0x7ff, 0x4, [0x91b, 0x6, 0x8, 0x3, 0xfffffffffffffe00]}, {0x1, 0xe9, 0x5}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002300)={r3, "1455ee7c52a2461035e143277aef25d6"}) clock_gettime(0x6, &(0x7f0000003300)) 21:31:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x2000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc, 0x3e, 0x4, @buffer={0x0, 0xd4, &(0x7f0000000040)=""/212}, &(0x7f0000000140)="607362180546f4b4bb2e133a757135cb2e62999c7299d2ffe65a26926a64db6823f70e922fb4c992b5459913df5c9a637549a823143259e5fe72fc38ff7e", &(0x7f0000000180)=""/245, 0x7f, 0x30, 0x0, &(0x7f0000000280)}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000340)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000380)={0x0, 0x4, 0x0, [0x9, 0xfffffffffffffff7, 0x8, 0x4, 0x400], [0x179, 0x0, 0x70357761, 0x3, 0x7, 0x100000000, 0x2, 0x3, 0x0, 0x0, 0x20, 0xa300, 0xffffffffffffff00, 0x100, 0x8f61, 0xaca, 0x40, 0x20, 0xcc, 0x2, 0x9, 0x5, 0x4, 0x9, 0x6, 0x0, 0x18bfc0, 0xfffffffeffffffff, 0xffffffff, 0x8, 0x1, 0x8, 0x0, 0x200, 0x7f, 0x1, 0x7ff, 0x1000, 0x7ff, 0x4, 0x3f, 0x7fff, 0xfffffffffffff0f3, 0x2, 0x1ff, 0x0, 0x8001, 0x0, 0x6, 0x9, 0x4, 0xfb, 0x3, 0x7ff, 0xffffffff7fffffff, 0x3, 0x10000, 0x5, 0x3, 0x1000, 0xf44, 0x0, 0x7, 0x100000000, 0x5, 0x6, 0xc85, 0xc0, 0x3, 0x3, 0x2, 0x0, 0x58, 0x7, 0x0, 0x0, 0x8, 0x10000, 0x6, 0x1, 0x6582960a, 0x80000000, 0xffffffffffffff80, 0x5395, 0xdd8, 0x3, 0x5, 0x5, 0x100000001, 0x0, 0x879, 0x3, 0x3, 0x5, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x7, 0x4, 0x3, 0x8000, 0x7f, 0x7c72, 0x4, 0x48, 0x1ff, 0x0, 0xbed, 0x8, 0x9, 0x53, 0xffffffff80000000, 0xfff, 0x5bb, 0x6c2, 0x6, 0x9, 0x4, 0x3ff, 0x3fc00]}) perf_event_open$cgroup(&(0x7f0000000800)={0x3, 0x80, 0x3, 0x4, 0xe8, 0x9, 0x0, 0xc28, 0x800, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f00000007c0), 0x1}, 0x10, 0x20, 0xd7, 0x2, 0x5, 0x2, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000940)={{r0}, 0x0, 0x14, @inherit={0x90, &(0x7f0000000880)={0x0, 0x9, 0x0, 0x4, {0x10, 0xfffffffffffff800, 0xc000000, 0x100000000, 0x5}, [0x6, 0x7, 0xc974, 0x100000001, 0x5, 0xff, 0x7, 0x7f, 0x2]}}, @subvolid=0x76}) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x680480) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001ec0)={0x53, 0xffffffffffffffff, 0xf5, 0x70, @scatter={0x5, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001980)=""/8, 0x8}, {&(0x7f00000019c0)=""/22, 0x16}, {&(0x7f0000001a00)=""/144, 0x90}, {&(0x7f0000001ac0)=""/94, 0x5e}, {&(0x7f0000001b40)=""/245, 0xf5}]}, &(0x7f0000001cc0)="834de5e805e8f271f5fc14a4a018fbcede496cdff58d5cce2e7b4714a346ee4e3488735bc45ab9da64999ad55d78aabae4a5776ae63936c51c33e78bf9b0ddd5ecb388d3bac044d172a97186932e865233008d81172e85a31bf8bae721e6f831f957352639454b45d81a3ebe8a061523259bbc023af9d54291842d3ba65c356c39f97f17e2f3fc73a62711a3e24217f2c7d171eb219d25525b0fd358585f58cb0f8dc82bcad5037596b2e0e913cac13abe12e7a65b3fc676abc24d40955abc028f442966d527b0246d82443651deefed0951532117b072856e51506aec1586a7c750d327686f784cf5b751481954b57dddfd44d63a", &(0x7f0000001dc0)=""/166, 0x496, 0x20, 0x0, &(0x7f0000001e80)}) r3 = syz_open_dev$sg(&(0x7f0000001f40), 0x0, 0x13d000) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000001f80)) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002040)={'syztnl0\x00', &(0x7f0000001fc0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x40, 0x7, 0x52, @empty, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80, 0x8, 0xfffffffd, 0xd536}}) r4 = syz_open_dev$sg(&(0x7f0000002080), 0x100000001, 0x4000) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002280)={0x53, 0xffffffffffffffff, 0x89, 0x2, @buffer={0x0, 0x62, &(0x7f00000020c0)=""/98}, &(0x7f0000002140)="ddf8b9da5c32c8471a0931c085b3c8d1d8195a77c6ff3e9b2805cf7cce9d68da003044571af2a21f71f68ab3bcfe5689e6ff3aaee28f105d06468c1d901fa3663d6520c848940b36870256fafe82716d2c42c149a8503b67732cc61bca391aaef2afa27e1dd1849f4b553cdf54f7c3fca3e03833b11268510a822bfd385babb6816bbe6301d4114065", &(0x7f0000002200)=""/59, 0x800, 0x6, 0xffffffffffffffff, &(0x7f0000002240)}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000002300)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000002340)=0x3, &(0x7f0000002380)=0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002600)={0x0, 0xfffffffffffffffb, 0xbc, 0x1, @buffer={0x0, 0xdf, &(0x7f00000023c0)=""/223}, &(0x7f00000024c0)="38ccff03f4537627b2363094ab2b9902fc28144b9c355b3f4289f8107c82c9677af90b8a3fab627a3f83b4e5212b5d9e011d55975e6cc21d5c9ab5eec05a2507455253f6dde232989bacf78d727faaf1f2f816c805133f45c3519a861556b6e2b10fc7760e59e6617bdc3efe7a336e27782432b0eff04afcfdad18483e18cc292ed105730f2562179899485f008af89ee0b9f3d13fe83512d0c48e30bee4d9824ba88906d87ad8ca5777e24e8174006bfe49bba7d70f06b90b1a2023", &(0x7f0000002580)=""/5, 0x1, 0x0, 0x1, &(0x7f00000025c0)}) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000002680)) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000026c0)) 21:31:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7d}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf7e}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000145}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044015}, 0x20002888) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2024000}, 0x4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc5}, 0x4000000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000000d00)={0x0, "0723eef599e60e4cec0e3bdb85b1f93f"}) 21:31:28 executing program 5: prctl$PR_SET_TIMERSLACK(0x1d, 0x0) mq_unlink(&(0x7f0000000000)=',\x00') prctl$PR_SET_TIMERSLACK(0x1d, 0x73c3) mq_unlink(&(0x7f0000000040)=',\x00') prctl$PR_SET_TIMERSLACK(0x1d, 0x9) prctl$PR_SET_TIMERSLACK(0x1d, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0xc0, 0x5, 0x0, 0x0, 0x7, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1, 0xbb08}, 0x25, 0xff, 0x1, 0x3, 0x8, 0x80, 0x9f1b, 0x0, 0x3f, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{r2}, r3, 0x12, @unused=[0xec, 0x7fff, 0xfffffffffffffffd, 0x2], @name="334bcfe6509b81b2f7d137ac0724917198145fb7b86263909a41630d4d63a108fcdb573cb2e9720ff596022504323d1b62f616136139b7881b7ad187738179e807dd42043f4653b0e5f2a916d2949f2efd9bb7d2fce9f71afedc4aa687a1497e7fb3e73f462c997fb99673b37f60d9d25f113ffec6d2ccf7f47b94062062d91dfe2e6ba45ec31c4759bf2db6051d74c0ad0b22a8714d4be8c0f2a8a006fdebf8315e6542b931531e2291030d3b38ba9bdb2b0ccf9355217053317175e1e317f6b6230e3f194f12a3da11c6d00321d5ade447162aabec0046f640a0a915d659003a0c5bc19f8875acaea5d4f190d2c1273b007e76556895c3404769a32aecbef588344a50b943f0c9198b7db5474f11badbc123ec5edc451903d9ba94fce2c70b6680205487e4cc08edc54f7c87168c9a3eec59e3f86f484c391e4af5e50a36b5499458e0770939d8d5d5f98848eb97b2e388a705e9bc2b50fda061a0d6cebbde2f5d767025e1d268dc00cd2357438cd7addecbe42599eb7aef07fbf91781e96a22cf84ee055d7364740b59312068410550b1f192a5f34c8c2aa5bf7f01f2d9c0aaecca7258b8bcb31d742ad875fe03bccb292e5b831c892b5d1c9908083c8862ddcc5edab67257ee56aa59cb9a521cf9f626869eed7930faded53f14626499275bc1794516953472ea041dcd3dd1150cdea84b021f0081a21a2f62be7a0dfb5e30c508c758672d8f34f0dfbde079ffc5aa8b8a4aa538e3859ca4b1943875d753b4e564d7c6d9ee9471dca123bc90e920c2b1ff9be75c35c74a08009d80552507da5f2ef413d6fc26f6dc88f4b58476e87bd15fdddfd82664c765f7459ce7b3cbfeb36ef7a06b6e2321344d69c4684053f38e152fd388716caa3f0e1a87f94c88b2051b7dcd97a8e110f12c002c549d4b6038e2e628bce58ede4692ccb29a5149e392b631d9f8a3327fd4bb9214a021d75b62bfc65b4fd2bb90681ab17abf7d8270b26975881d9b43c1d1cf1868e20ee7731dca25ad826a4b6aeab0792e73701b2761cae56209c08ab90c8b4531d72547337e6aea92617df46592a524cb28ca476a44eb0534721ea4331e3d9df635a9d78a3d959c1c7ad780c0a566c0a0f86fb5e8b9cba499b7dbbd976374b4b50d23bc9aca100fc4c720e5d41285b6fa1591232d1d739e235d09e46c1ffa9070427d610758d5845ca8993c6d6080b2e1737afe1cc6221921cfa23ff0441b3e95ada28e8c22a0cdd3e68472fcdcc9494c8c73a6d413e29c139f915f32fabc963113948b750ce813ed15e4e1ff5ae7120a620ae6e0b91959ef6194bb64d7cfdbb7494d34d18a979fed0448a1d2e0749260cf7f5035d2d2e4a82db8afbc5e8b72f506972b613b978e0e74978a4abccbe79a514c30b7f70bcf8220e6de57c31cd1e17079c0cd19f36fd8ae95eb2f798c8c380b97d033fdf0c2a24f159b688f6b1b23cee5957199a06f21be9e7cc0cd2646d97f9786a4e8184b0f73682e2a19700013bdf266dc6e58b81dc9b2ba92d778d7194f357f7d140f26a5f8390aeaf2e0c38810216fcc7920929fa4ff2313cedd749e6ca0ae26101f2eeb8a38ce2c4d1e612be039258aa610c75105553fe4a1d953b46c015773f1f966a6c27af64e9e0085da35ac3558d4aecaf94967dc6732973ceb571b6feaa301fbeae93cdabe874e9c97814b86b83f97f83115c55c215b1d6bc36a144ce84082380b5c286ad5204a39faa12372de4a01a66d199a62efca78136c418f4a307cb96525b755a87c77bdf73b379dad6899dd338c68afc525ea8fce6b32b95c53834acc687ce114c0ea0ba02d59e2f232f3c44b12750aa6038341e5dba0515548da0e298cbd015f4d8fe58e28e7670aa36e0ec5ce79bfd319db939f7483d91ac7a754bac1de546cc61e1ca9ae3e9669fde7fea28723ec9e9d9017abec53588bb4b77e5405be493341506cd4aa47442bebbcac3ca9c30bf973930dbe599b9621de554baa7f2dc3eca259568f61d8289c218400be2dc7a74f09d455fa9a6b59da53cb73d127022dd3fb62c3087f68b823c8c0285ea48425aa3b3e3930101180674dda58b8c8d455b5a03c9ab21965f9a16e880d551e8fce25469e6996c66d47f785c0e71445fe79cc5dab60aa2701cd04571890a67a099954026389c85a461e7d6681f2cd942023149df4c64718b8678be7ea2337d1b11db3f5347c6c6fada918c504d76c79ca24c6048ff537eb72cbb391e0691c9d24474c1b187680e074181e01af3e90e6b458169635ad740fed44a633bb172d6957c983e652ab54b4450eca66eea9a1f29dbe552e09ab3a7ad1e9c92555269f12a33a09006796465441cde8140408bbaf12f23613e493207c4b017290360d687431e756c31a306fde9757a5b031aaa6b767d19242e998de0abcda2553745d1276272540a2d9d661742016df33e7ee14e9dc5252f7599f651049360a0e5ea2aabe1d133a5679904f1f1abc6d9368efb41899861dc3462443cc73a39fcc348be05dacdae1fff4e84c014270b7a858137a8fb7e457dc51ff2049a5cdd6bdfd7a24e35a7c4470ba5f89b12d0450cc69232e94f91bf3d33f6e760e921f8862c6aa4586132d13917da261787bbcfb2f4a458ed3f2ccc3c3d910b2b77d2281b7dfe2caf996797d01260318a7c94a972a7d877faa4a6b896ef1f2d9ae973841bd2a39bb16fc44c1d870ee86dbcc2732a4337eb35d14028798e6f6be2ebb4c715722c9d6356fe50b12a68307a45565c91ae4f1ce46c89dae74dfc4deae7500548daed432c9a4066f225994843263488fdcd1c863d0bf5b67910fad81a9b84b029ce02397d7f4d6c6e50518f901a66a1560590821d88109b593ac09f12747b6def194261c7bc0e98ff11941beae254df66b3f06b3e38b80d643c2fc67b4ba653878d1b6b8feb561209616811031c90c1ab116b642f838101d810b6c78eeabce73d8dabf41be621e62913dd634e4558aa5494adbf044ffdf8abff228c963467f1314c0f1c0986c47ce274ca16af9d5fb8903aaac77eb1cab1772c76d1bd10f5431824eb55930c8fe61beeb5e628657b0fd469597b2863bc34850cea7daf8a77fb8120e501bd7a4601ea00f66d63346da4e2095b2b08b8d857b40bf1b93f5e8fc998431125b25104c840020347924bd3f6642364fc6cf87f93578ce940f551c2c6de40371db070ac85cce285601c276a05f06a49cd3aaca2be9aa792694450319fa4c6dc27c53c0d7cdd0c31ce7897eed66109b3add844d522b7989f84c7b894aa06ac9517cda08cb23af1a247188cb99982066e59f9451085979367c925968d41b7953c1755f0c726697115b8b93ab1862dbc78ed7db457fe2a8b681a2a887f556d9d42b399d1fe1df7fa83e290bd3fd286b283b81777dc42420276cea0fc6acb9877dce8fd268611bd1d2501e48d65f219aa57c4a524cbbd2a12d626cf4a6e013c4f1db1dc5b34f55c6f3302055b5a2af03589c240ea36823f7b0c11e5455c7922d035fab46040b86a144d8c35c3f8027170cb0bca6919aba75f2f9e2105dfefd917cf266c31349d2a567546fdb7d4ed1a163b6cef009926143c4e784bd0fe8f881cf7ad1428fd53e8f2e80caeaabcc33df3d3c0945f16e4cad94a2ca5d89d37a15e4cd03828bbd75850e0e2aafc3192772332c223c36705d325c9bcd29d4cd367944febd946b17ee5e92307e38c47d3475817599f669c20513a00382d3498909f601e40a98c4d571fbea7430c8f57e6096df870ec41df524a27b0ff2e4710c75f921e03937d99d5b3aa1379eb41ce15dcf3ebfc7c8e285e2273e4a3fc9174938fb5ae73bac71ae4d0f776146c27f4c295d9fe11f1da53e0e47eebc9366d5c8b76ff518359155729070981abaf450dfca3cda7b4bc8f11b7d4e0e60a9d2b1700275cd66e184a4f359a5d455803ac05b4493282f78a2875c9aa04c424d175a3661dff17f8e7350283270aa9b1acb975d088d3480055fc80b16fdabc276b3e6445165f299621991756e6de10dc7879df016b165aa9d8a7bc035431a1d6446dc31fe2be30f332c05923f85885e5e44ca33d3da1518a887bf54c2678426758152bfc9a237fec959ce3692c930888c01c0b09aa530df6858ebf04efaf336f0b91396e92ae75c62179040a43ec6ec98bd7e092cdcdec1748a3f321792b733910788375ab190b31fd33b491df482cadeeae27924ff8932c2802b535703901a0aceb8d625fd88d87e3eff84bdb78518c86663fe34dfaa768fb2557a92b7dc832981a00966480b6a4db32a0ded4f9e2da97f32d20ba8f217b92d40769486074149271ad31f356e46f52cf1dc238dd06c9703b9093aba7c158d31dc7420e332c8ef7093298a0bede0c60a6a4fac5ad56e1eb5340e5c5d16af3ff4b44ceb6166c41e24869a8193a3cb6db1d44e659d988af9e195add261e1b2003dbf67d6036c0d1b6d2cc2b5a355e75a385cfee4f1e84f11204e869e07de4044bbc71ae3276bfae615d53bc67e733361f31560755c091ee5b4d33a081d5609999887ed7301da94166c8bb48370db9c55e0a22d90a9c2356c5584bdaddc272aa98895415dbef7059d2874eb7026e394ca86569d4f4178c0e3ff4d196c0585969c9c33232638c678fd3972d9f755bfe4ad6850b1b433ee7b384662fdd9a408d3332f390d352b9addf7c1c96acd658f2dc32adb8d860ce84e04c9734331bf168d649a6a0023114964d26dcb71792fd2b2a6e3a36ce4b9feedbc3f4f5e66658638a8b826e79dbbbb7f40d026378329c3f733e4e70df2c0b6e7ffdf80ca2daac21c6ef50e6eeeb1dfe6a15317f78dc4e16f255066f2d7809f87d8b3ca354fea245b46234373fb8fb35e03f8659feb91a1415ad6303687c53533828306ebec2b2910beddb44ba48f7a6d64c1e5d166ec2d8a369e2bc673fc6038d9e0a05f8f998884231534649514d037b6bf144e5fe5dbf08477bf280a8d4683065ed80e91a0054cecb576a4984377687af69636435462e7ad2cddd862ed255f357b439fb6d617346fed9b67436b677f82c17dbdaf6a5727a66e795601b8f578c8da3bed69579852aeef7e32911627f21dbc9f9941b99895cb631f28b7a92a12ca366bff5023a66265fc5d3523c13c286f5c49b5a671cfd4ebd3c614363ce964ff73a231df76417c25745a7b93fa02000e19b3a0009bf1b7495fd131fbbf1e77e95b5d51b10ad96ea101c586d50a488ef76cdd55403dcaea66b073f0cdd1fed2143706c1fd0240e0350e231c97ee895458091e887e90f797c2922b19e83d1a734efa6fb833479f2dc8f60601cae0097ca506a35602e480e3bc801319557d64e1580445b3553e251fab4c92a35076882c99dc999f8d04d467400116ec01a1615c1d4e319e549a5efc80351a50da3c823bcbc12fc61091726c14111b2b1106a0d4d5077e2b99d69400b03cb0d614f8bd93a03cc6ab134deb62d8048cce7409d70af26ad50b9fc6503431ff8746607e21274b3d1063550f0854cbb5ae1269123d756ed15a2259ae44020424e0fb40d019e125c8dd6f976fa305a70002e0877c4906c9815de55f17295652b360f5434523f0e4b5ccd68183bc8052446ea940d3f805ce47ca43bac77573a38d9811ac88503fa23a6e8aebc1f974c41c1c15dc4ed68834d8d44c3341ac658cd00019cbc823bbc666f1fc7c14b7c47e2ee8de816967e22f703bf340263fc70700f30fa9"}) mq_unlink(&(0x7f0000001180)=':(%(%#\\#]\'\\\x00') prctl$PR_GET_SECUREBITS(0x1b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001200)={0x0, 0x6, 0x100000000, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000001600)={r5, 0x400000000000000, 0x7e9, 0x1}) r6 = shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) socketpair(0x29, 0x6, 0x6, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000001a40), 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002b40)={{r1}, 0x0, 0x10, @inherit={0x68, &(0x7f0000001ac0)={0x1, 0x4, 0x10000, 0x5, {0x3, 0xffffffff, 0xed7, 0xfffffffffffffffb, 0x5}, [0x37, 0x80, 0x6, 0x81]}}, @devid}) [ 123.033845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.038964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.041282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.046959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.055856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.057613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.249030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.253831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.255863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.257249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.259281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.264098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.266357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.268297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.272683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.275642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.287112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.294316] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.298185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.300054] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.302047] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.310340] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.312847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.322910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.329174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.330923] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.335959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.342254] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 123.344520] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.346217] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 123.354202] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.361212] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.381114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 123.393140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 123.422145] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 123.426308] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.119070] Bluetooth: hci0: command 0x0409 tx timeout [ 125.181505] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 125.182517] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 125.373925] Bluetooth: hci3: command 0x0409 tx timeout [ 125.374144] Bluetooth: hci5: command 0x0409 tx timeout [ 125.437891] Bluetooth: hci4: command 0x0409 tx timeout [ 125.503539] Bluetooth: hci7: command 0x0409 tx timeout [ 125.503613] Bluetooth: hci6: command 0x0409 tx timeout [ 127.166494] Bluetooth: hci0: command 0x041b tx timeout [ 127.422154] Bluetooth: hci3: command 0x041b tx timeout [ 127.423018] Bluetooth: hci5: command 0x041b tx timeout [ 127.485735] Bluetooth: hci4: command 0x041b tx timeout [ 127.550475] Bluetooth: hci6: command 0x041b tx timeout [ 127.550524] Bluetooth: hci7: command 0x041b tx timeout [ 128.729602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.746712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.755180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.768011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.793053] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.797615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.810218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.813033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.819057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.826882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.831329] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.867676] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.214118] Bluetooth: hci0: command 0x040f tx timeout [ 129.470336] Bluetooth: hci5: command 0x040f tx timeout [ 129.470772] Bluetooth: hci3: command 0x040f tx timeout [ 129.533530] Bluetooth: hci4: command 0x040f tx timeout [ 129.597657] Bluetooth: hci6: command 0x040f tx timeout [ 129.598499] Bluetooth: hci7: command 0x040f tx timeout [ 130.878855] Bluetooth: hci1: command 0x0409 tx timeout [ 131.007501] Bluetooth: hci2: command 0x0409 tx timeout [ 131.261981] Bluetooth: hci0: command 0x0419 tx timeout [ 131.518950] Bluetooth: hci3: command 0x0419 tx timeout [ 131.518971] Bluetooth: hci5: command 0x0419 tx timeout [ 131.581476] Bluetooth: hci4: command 0x0419 tx timeout [ 131.646530] Bluetooth: hci7: command 0x0419 tx timeout [ 131.646556] Bluetooth: hci6: command 0x0419 tx timeout [ 132.928711] Bluetooth: hci1: command 0x041b tx timeout [ 133.054755] Bluetooth: hci2: command 0x041b tx timeout [ 134.974803] Bluetooth: hci1: command 0x040f tx timeout [ 135.102513] Bluetooth: hci2: command 0x040f tx timeout [ 137.022489] Bluetooth: hci1: command 0x0419 tx timeout [ 137.149502] Bluetooth: hci2: command 0x0419 tx timeout [ 183.453825] syz-executor.5 (282) used greatest stack depth: 24112 bytes left [ 185.547323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.549207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.550176] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.553057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.555255] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.556272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.125427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.125870] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.131420] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.132479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.134882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.136522] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 186.137371] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.167411] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.170816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.180169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.188740] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 186.190275] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.646620] Bluetooth: hci0: command 0x0409 tx timeout [ 187.901495] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 187.966123] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 188.093542] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 188.157604] Bluetooth: hci7: command 0x0409 tx timeout [ 188.222160] Bluetooth: hci6: command 0x0409 tx timeout [ 189.693504] Bluetooth: hci0: command 0x041b tx timeout [ 190.123185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.128023] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.131187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.138318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.163721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 190.166113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.205540] Bluetooth: hci7: command 0x041b tx timeout [ 190.270941] Bluetooth: hci6: command 0x041b tx timeout [ 191.326959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.331020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.332214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.340916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.371213] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 191.372240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.743471] Bluetooth: hci0: command 0x040f tx timeout [ 192.189537] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 192.253534] Bluetooth: hci7: command 0x040f tx timeout [ 192.254148] Bluetooth: hci1: command 0x0409 tx timeout [ 192.318670] Bluetooth: hci6: command 0x040f tx timeout [ 192.638492] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 193.342700] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 193.469535] Bluetooth: hci4: command 0x0409 tx timeout [ 193.789656] Bluetooth: hci0: command 0x0419 tx timeout [ 194.301781] Bluetooth: hci1: command 0x041b tx timeout [ 194.302209] Bluetooth: hci7: command 0x0419 tx timeout [ 194.365502] Bluetooth: hci6: command 0x0419 tx timeout [ 195.519490] Bluetooth: hci4: command 0x041b tx timeout [ 196.350525] Bluetooth: hci1: command 0x040f tx timeout [ 196.926767] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 197.246759] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 197.565526] Bluetooth: hci4: command 0x040f tx timeout [ 198.142508] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 198.397897] Bluetooth: hci1: command 0x0419 tx timeout [ 199.614550] Bluetooth: hci4: command 0x0419 tx timeout [ 199.849125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.854704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.859110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.874709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.879200] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 199.880741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.917995] Bluetooth: hci2: command 0x0409 tx timeout [ 202.045632] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 203.005739] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 203.965902] Bluetooth: hci2: command 0x041b tx timeout [ 206.013518] Bluetooth: hci2: command 0x040f tx timeout [ 206.909648] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 207.805499] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 208.061764] Bluetooth: hci2: command 0x0419 tx timeout [ 210.495825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.525115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.527961] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.555348] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.563538] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.565793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.646698] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 212.672061] Bluetooth: hci5: command 0x0409 tx timeout [ 214.451975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.455249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.460391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.469206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.477689] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.484728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.717482] Bluetooth: hci5: command 0x041b tx timeout [ 216.573524] Bluetooth: hci3: command 0x0409 tx timeout [ 216.765513] Bluetooth: hci5: command 0x040f tx timeout [ 218.622201] Bluetooth: hci3: command 0x041b tx timeout [ 218.813782] Bluetooth: hci5: command 0x0419 tx timeout [ 220.669507] Bluetooth: hci3: command 0x040f tx timeout [ 222.717492] Bluetooth: hci3: command 0x0419 tx timeout [ 249.533521] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 249.919550] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 250.109657] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 251.298091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.303841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.309210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.329090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.335702] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.337802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.765205] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.767308] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.768867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.781597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.783854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.787696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.870977] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.874175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.881990] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.896806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.910240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 252.945774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.374531] Bluetooth: hci0: command 0x0409 tx timeout [ 253.949794] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 254.846599] Bluetooth: hci4: command 0x0409 tx timeout [ 254.911536] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 255.038153] Bluetooth: hci6: command 0x0409 tx timeout [ 255.422283] Bluetooth: hci0: command 0x041b tx timeout [ 256.802701] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.807573] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.811584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.867910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.881179] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.893979] Bluetooth: hci4: command 0x041b tx timeout [ 256.901863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.085674] Bluetooth: hci6: command 0x041b tx timeout [ 257.469539] Bluetooth: hci0: command 0x040f tx timeout [ 257.753927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.756114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.756998] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.760382] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.766694] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 257.768098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.941606] Bluetooth: hci4: command 0x040f tx timeout [ 259.007497] Bluetooth: hci1: command 0x0409 tx timeout [ 259.137486] Bluetooth: hci6: command 0x040f tx timeout [ 259.519471] Bluetooth: hci0: command 0x0419 tx timeout [ 259.837517] Bluetooth: hci7: command 0x0409 tx timeout [ 260.989632] Bluetooth: hci4: command 0x0419 tx timeout [ 261.053536] Bluetooth: hci1: command 0x041b tx timeout [ 261.181514] Bluetooth: hci6: command 0x0419 tx timeout [ 261.885536] Bluetooth: hci7: command 0x041b tx timeout [ 263.103498] Bluetooth: hci1: command 0x040f tx timeout [ 263.293821] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 263.933655] Bluetooth: hci7: command 0x040f tx timeout [ 265.149869] Bluetooth: hci1: command 0x0419 tx timeout [ 265.981816] Bluetooth: hci7: command 0x0419 tx timeout [ 266.085203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.096131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.122367] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.161730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.185718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.187484] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.287581] Bluetooth: hci2: command 0x0409 tx timeout [ 270.333517] Bluetooth: hci2: command 0x041b tx timeout [ 272.251386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.254552] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.256485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.278419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.284539] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.288938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.381500] Bluetooth: hci2: command 0x040f tx timeout [ 274.365890] Bluetooth: hci5: command 0x0409 tx timeout [ 274.430583] Bluetooth: hci2: command 0x0419 tx timeout [ 276.062873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.066828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.081017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.126372] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.137082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.143630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.415591] Bluetooth: hci5: command 0x041b tx timeout [ 278.205532] Bluetooth: hci3: command 0x0409 tx timeout [ 278.463517] Bluetooth: hci5: command 0x040f tx timeout [ 280.253577] Bluetooth: hci3: command 0x041b tx timeout [ 280.509541] Bluetooth: hci5: command 0x0419 tx timeout [ 282.301532] Bluetooth: hci3: command 0x040f tx timeout [ 284.349611] Bluetooth: hci3: command 0x0419 tx timeout [ 313.833808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.864725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.867863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.907852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.921868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.926711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.975412] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.991815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.993609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.013705] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.035839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 315.039826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.030273] Bluetooth: hci0: command 0x0409 tx timeout [ 317.118186] Bluetooth: hci4: command 0x0409 tx timeout [ 317.309618] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 318.078245] Bluetooth: hci0: command 0x041b tx timeout [ 319.166544] Bluetooth: hci4: command 0x041b tx timeout [ 319.614247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.616391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.619353] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.625217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.628325] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 319.630139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.125560] Bluetooth: hci0: command 0x040f tx timeout [ 320.957509] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 321.213926] Bluetooth: hci4: command 0x040f tx timeout [ 321.725552] Bluetooth: hci6: command 0x0409 tx timeout [ 322.173978] Bluetooth: hci0: command 0x0419 tx timeout [ 322.814513] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 323.261520] Bluetooth: hci4: command 0x0419 tx timeout [ 323.773727] Bluetooth: hci6: command 0x041b tx timeout [ 323.875102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.883345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.894823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.927411] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.934013] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.939782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.822964] Bluetooth: hci6: command 0x040f tx timeout [ 326.013534] Bluetooth: hci1: command 0x0409 tx timeout [ 327.869771] Bluetooth: hci6: command 0x0419 tx timeout [ 327.934207] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 328.062224] Bluetooth: hci1: command 0x041b tx timeout [ 328.177363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.181589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.204214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.261147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.281085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.288110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 330.109518] Bluetooth: hci1: command 0x040f tx timeout [ 330.366586] Bluetooth: hci2: command 0x0409 tx timeout [ 332.157508] Bluetooth: hci1: command 0x0419 tx timeout [ 332.413767] Bluetooth: hci2: command 0x041b tx timeout [ 333.053597] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 334.367264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.372807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.377718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.395706] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.402874] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.404560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.462476] Bluetooth: hci2: command 0x040f tx timeout [ 336.344603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.353982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.366014] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.369093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.370436] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.371316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 336.509572] Bluetooth: hci5: command 0x0409 tx timeout [ 336.509625] Bluetooth: hci2: command 0x0419 tx timeout [ 338.078898] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.085731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.087113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.117638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.140714] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.142423] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.493690] Bluetooth: hci3: command 0x0409 tx timeout [ 338.557667] Bluetooth: hci5: command 0x041b tx timeout [ 340.223845] Bluetooth: hci7: command 0x0409 tx timeout [ 340.542556] Bluetooth: hci3: command 0x041b tx timeout [ 340.605471] Bluetooth: hci5: command 0x040f tx timeout [ 342.269490] Bluetooth: hci7: command 0x041b tx timeout [ 342.590512] Bluetooth: hci3: command 0x040f tx timeout [ 342.653673] Bluetooth: hci5: command 0x0419 tx timeout [ 344.317703] Bluetooth: hci7: command 0x040f tx timeout [ 344.638722] Bluetooth: hci3: command 0x0419 tx timeout [ 346.366493] Bluetooth: hci7: command 0x0419 tx timeout [ 375.593257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.600577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.603738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.618407] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.620194] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 375.621313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.663554] Bluetooth: hci0: command 0x0409 tx timeout [ 379.133719] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 379.710127] Bluetooth: hci0: command 0x041b tx timeout [ 381.757612] Bluetooth: hci0: command 0x040f tx timeout [ 383.101652] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 383.806495] Bluetooth: hci0: command 0x0419 tx timeout [ 383.998754] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 385.444350] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.447795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.450140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.480619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.487196] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.488479] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.170151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 387.193980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 387.211572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 387.236186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 387.253598] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 387.255814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 387.582616] Bluetooth: hci1: command 0x0409 tx timeout [ 387.773500] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 389.311085] Bluetooth: hci2: command 0x0409 tx timeout [ 389.630682] Bluetooth: hci1: command 0x041b tx timeout [ 390.694868] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 390.696074] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 390.699158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 390.701292] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 390.703522] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 390.704353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 391.357797] Bluetooth: hci2: command 0x041b tx timeout [ 391.677513] Bluetooth: hci1: command 0x040f tx timeout [ 391.741745] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 392.765548] Bluetooth: hci6: command 0x0409 tx timeout [ 393.405702] Bluetooth: hci2: command 0x040f tx timeout [ 393.726598] Bluetooth: hci1: command 0x0419 tx timeout [ 394.813924] Bluetooth: hci6: command 0x041b tx timeout [ 395.453872] Bluetooth: hci2: command 0x0419 tx timeout [ 396.733861] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 396.862510] Bluetooth: hci6: command 0x040f tx timeout [ 397.527070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.531777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.532800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.540754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.543687] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 397.544646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.630902] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 398.912144] Bluetooth: hci6: command 0x0419 tx timeout [ 399.613602] Bluetooth: hci4: command 0x0409 tx timeout [ 399.754079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.772955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 399.785253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.809972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.845674] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 399.860890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.416219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 400.420000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 400.437806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 400.448800] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 400.461721] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 400.472996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 401.662500] Bluetooth: hci4: command 0x041b tx timeout [ 401.790716] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 401.981523] Bluetooth: hci3: command 0x0409 tx timeout [ 402.557545] Bluetooth: hci7: command 0x0409 tx timeout [ 403.710480] Bluetooth: hci4: command 0x040f tx timeout [ 404.032141] Bluetooth: hci3: command 0x041b tx timeout [ 404.605560] Bluetooth: hci7: command 0x041b tx timeout [ 405.758602] Bluetooth: hci4: command 0x0419 tx timeout [ 406.078474] Bluetooth: hci3: command 0x040f tx timeout [ 406.654685] Bluetooth: hci7: command 0x040f tx timeout [ 406.718752] Bluetooth: hci5: Opcode 0x c03 failed: -110 2023/08/23 21:36:13 executor 0 failed 11 times: executor 0: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 21:36:13 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff86076184 RCX=0000000000000000 RDX=ffff8880323fd1c0 RSI=ffffffff8113ab5a RDI=0000000000000006 RBP=ffffffff86076184 RSP=ffff888015737768 R8 =0000000000000006 R9 =ffffffff846000e9 R10=ffffffff84600040 R11=0000000000000001 R12=ffffffff846000e9 R13=ffffffff84600040 R14=dffffc0000000000 R15=ffffffff86076180 RIP=ffffffff814d90bb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4b1644310 CR3=0000000015848000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080010000 RBX=1ffff1100d9e13a8 RCX=ffffffff81284aac RDX=fffffbfff0e07452 RSI=0000000000000004 RDI=ffffffff8703a288 RBP=ffff88802eff1b40 RSP=ffff88806cf09d30 R8 =0000000000000000 R9 =fffffbfff0e07451 R10=ffffffff8703a28b R11=0000000000000001 R12=dffffc0000000000 R13=ffff88806cf2c280 R14=ffff88802a697a18 R15=dffffc0000000000 RIP=ffffffff814d908b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a8adf13080 CR3=0000000027f90000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff00000000000000ff XMM02=000000ff0000000000ff0000000000ff XMM03=000000ff000000000000000000000000 XMM04=00000000000000ff0000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000