Warning: Permanently added '[localhost]:23346' (ECDSA) to the list of known hosts. 2023/02/25 20:38:18 fuzzer started 2023/02/25 20:38:18 dialing manager at localhost:41417 syzkaller login: [ 45.890054] cgroup: Unknown subsys name 'net' [ 45.993209] cgroup: Unknown subsys name 'rlimit' 2023/02/25 20:38:34 syscalls: 201 2023/02/25 20:38:34 code coverage: enabled 2023/02/25 20:38:34 comparison tracing: enabled 2023/02/25 20:38:34 extra coverage: enabled 2023/02/25 20:38:34 setuid sandbox: enabled 2023/02/25 20:38:34 namespace sandbox: enabled 2023/02/25 20:38:34 Android sandbox: enabled 2023/02/25 20:38:34 fault injection: enabled 2023/02/25 20:38:34 leak checking: enabled 2023/02/25 20:38:34 net packet injection: enabled 2023/02/25 20:38:34 net device setup: enabled 2023/02/25 20:38:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/25 20:38:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/25 20:38:34 USB emulation: enabled 2023/02/25 20:38:34 hci packet injection: enabled 2023/02/25 20:38:34 wifi device emulation: enabled 2023/02/25 20:38:34 802.15.4 emulation: enabled 2023/02/25 20:38:34 fetching corpus: 0, signal 0/0 (executing program) 2023/02/25 20:38:35 starting 8 fuzzer processes 20:38:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040840) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40814) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40096) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x880) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc46f}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x20e9}, {0x6, 0x11, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc010}, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000780)) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9c}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8080) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c014) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = fsmount(r4, 0x1, 0x2) syz_genetlink_get_family_id$batadv(0x0, r7) 20:38:35 executing program 2: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x55bd}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xff7708fd5e397c8a, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x6e4f3667a7bd8266}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xea2e31e0ab07360}, 0x4040) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/99) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x84) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x1d10aef170b760e3) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000006c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000700)={"3e9a12bc856b4d0bec60f890c627dd66", r1, 0x0, {0x1, 0x744}, {0xfffffffffffffff9, 0x7}, 0x8, [0x0, 0x8001, 0xfffffffffffffffc, 0x6, 0x9, 0x2, 0x4, 0x6, 0x4, 0x401, 0x5, 0xf, 0x7, 0x17c1, 0xa94, 0x100000000]}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0) fsmount(r3, 0x1, 0x7c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000c40)={{r0}, r2, 0x2, @unused=[0x8000, 0x2, 0x2, 0x7], @devid=r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001d80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1c1ac}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xda}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004044}, 0x8001) 20:38:35 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000080)={r0, r1+10000000}, &(0x7f00000000c0)={[0x9]}, 0x8) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x40000c1) epoll_wait(r2, &(0x7f0000000300)=[{}, {}], 0x2, 0x9) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000020}, 0x10) r5 = gettid() sched_setaffinity(r5, 0x8, &(0x7f0000000580)=0x9) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x58f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r6, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x3f, 0x80}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000840)) r7 = fsmount(r2, 0x1, 0x70) epoll_pwait2(r7, &(0x7f00000008c0)=[{}], 0x1, &(0x7f0000000900)={0x0, 0x989680}, &(0x7f0000000940)={[0x80]}, 0x8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:38:35 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0xb5, 0x2, 0x4}]}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3800004, 0x4010, r0, 0x84e7e000) r1 = socket$inet(0x2, 0x1, 0xfffff001) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x0, 0x1000}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000480)={0x8, 0x4, {0x3f, @usage=0xcb1b, 0x0, 0x100, 0x4, 0xff, 0x1, 0x7fff, 0x418, @struct={0x7, 0x1}, 0x81, 0x6, [0x4a3ea0a6, 0x7, 0xeae4051]}, {0xfffffffffffffffc, @usage=0x8, r2, 0x80000001, 0x81, 0xd6c, 0x1, 0x0, 0x5, @usage=0x2, 0x9, 0xde, [0x80000000, 0xffff, 0x5, 0x7f, 0x20, 0x7]}, {0x20, @struct={0x7fff, 0x6}, 0x0, 0x1f, 0x4539, 0x9, 0x1f, 0x0, 0x8, @struct={0x7ff, 0xff}, 0x7ff, 0x7f, [0xfffffffffffffff9, 0x0, 0x3, 0x9, 0x8, 0xebe4]}, {0x5, 0xc971, 0x1f}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfb2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x2005d811}, 0x4000801) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0xa00, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=0x6) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a80), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000ac0)={0x0}) r6 = fsopen(&(0x7f0000000b40)='erofs\x00', 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000b80)={r5, 0x2, r6, 0x9, 0x80000}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x200, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}, {0x6}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x2f56}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfaa6}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x400}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x80000001}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0x8000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x411}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x800}, {0x5, 0x14, 0x1}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000e80)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) syz_io_uring_setup(0x37dc, &(0x7f0000001040)={0x0, 0xf938, 0x1, 0x1, 0x30}, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000010c0), &(0x7f0000001100)=0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000002600)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r10, 0x0, &(0x7f00000025c0)={&(0x7f0000001140)=@in={0x2, 0x4e22, @loopback}, 0x80, &(0x7f00000022c0)=[{&(0x7f00000011c0)="97064188404dea0b1e5f69fe8891a89c7cce0ca9a960314cf5966a5ee160082a26d18e33958800002370a3e098c08efd067d3ff92b5c60d0c625e278f3627f040eacbd372512f633b4c2cd556f1d2341435b615c998b4c2d488f9160cb3137fdfb297ff91c5974ca62efd28c25aea6e80a", 0x71}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="f12c21ed176fe6c2dc500faa894e71eb8e6d4f33360b6e83e8f4f79d9c7f8056c7afef93d8d256030c35e666c83c9ec48da2a479", 0x34}, {&(0x7f0000002280)="3381963a783f24a07e86a4fcdc42e5cb1e8afe6b2e58edd287df40d1795291c2d18b1acb9bf62659a76b5ffe0c43e6a8e901c9", 0x33}], 0x4, &(0x7f0000002300)=[{0xe8, 0x108, 0x6, "78b022c9a299d65963063d3280bb6bfd9e61a60d6ed339055a751ac927372cd6479bd69cedbbeaa2753f70176a67da33e7b0f89d5a6ec2f017f2bda32fdbc5183aa09b363418bd55d5bc4c43ad694f9eb4d6cc183032cd9ee1d92311b020004230d81820de4a1d426e70f5719657ca3f29d1322f90986ad31d602b78d97d086bf8432a0bf0649a8751b4e00f3f4922fdee2bae31a08113ca61507394cf469fdd2a2a2e324851b80572aa143e6e4edd7dc50365a1694df624f55ee7e9a0ccd0f88b1c4532538941b807feaaa22542fe59c93a"}, {0xc8, 0x10a, 0x4, "5644d296412122d0d5072fefa3b81a5cae93a9757dca0583f3bb5e14daaf5bee339b8c1480d52bc4251aa15befbca4e3cbb540f85a9fc46de541322f15eef2def5445959d939952fc261fc61e4e6794235147b02f1cae302f8cb77e0f3265823226065b492c8c244556ceb6d614174f9289fd7ba41abbea1b417839919aebbbe925a8ab645f903b382fedd9fa0b24fc34b7ed94569bbbab484c155ac2086ae8e530702eaf8638111ae89cb9b1fec10902300582b386baa"}, {0xe8, 0x29, 0x1, "45692d64080557166c14e7d9a98930c3726b2de6cbc0c5b39997f78de26bffc4cc3de832fdd655de3d1738d0702a7c45b0d5b72d61bdea3377f1e261294a341ddd619d19c6a6e5c339365745942f6dcfc52a95739130cc5a23781b7e11084e92ba012d5d72c1a21f723cb4db8a9fefc706f29020b5bb918d62b966e892611d3c57e8737af0d93cad09e1b1b5b9eace20da1077e3d7a4c487b033844025b8f295c7d64d8e0c967ff91f251e4c5325646608084eb55b10ea400a37d66a8fb00b35be724f6b6474603b8b70e7a057e03b79fd582818"}], 0x298}, 0x0, 0x8080, 0x1}, 0x1000) 20:38:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x10, 0x4, {0x6, @usage=0x75aa3dfb, r1, 0xffffffff, 0x7fff, 0x3, 0x40, 0x4, 0x1, @usage=0x400000000000000, 0x40, 0x7c000000, [0xdd, 0x6, 0x20, 0x0, 0x101, 0x10001]}, {0x9, @struct={0x1, 0x800}, r1, 0x8, 0x1, 0x401, 0x1ff, 0x0, 0x41, @struct={0x7, 0x67}, 0x40, 0x0, [0x5, 0x9bb4, 0x80000000, 0x4, 0x3db2, 0x2]}, {0x4, @struct={0x0, 0xfff}, r1, 0x6, 0x8001, 0x304, 0x6, 0x6, 0x80, @usage=0xf, 0x401, 0x80, [0x0, 0x5, 0x4, 0x6, 0x20, 0x9]}, {0x5, 0x2}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000800)={0x1a, 0x1, {0x9, @struct={0x9, 0x5}, r1, 0xa412, 0x8, 0x1, 0x258, 0x2, 0x20, @usage=0x7, 0x81, 0x7ff, [0x1, 0x401, 0x400080000000, 0x3f, 0x0, 0x1000000000000]}, {0x0, @usage=0x8001, r1, 0x1, 0x200, 0x7, 0x0, 0x80000000, 0x32, @struct={0x1e, 0xfffff001}, 0x81, 0x4, [0xffff, 0x8001, 0x0, 0x200, 0xfbb7]}, {0x1000, @struct={0x8, 0x7fffffff}, r2, 0xfff, 0x1, 0x7ff, 0x3, 0x2, 0x442, @struct={0x1ff, 0x7}, 0x0, 0x3, [0x2, 0xe6, 0xcff, 0xfffffffffffffffb, 0x8, 0x5]}, {0x1, 0x6, 0x20}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/custom1\x00', 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000c40)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000d00)={{}, r5, 0x8, @inherit={0x68, &(0x7f0000000c80)={0x1, 0x4, 0x5, 0x3, {0x0, 0x2a, 0xf45d, 0x62ac}, [0x6, 0x1000, 0x1, 0x7]}}, @devid=r3}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000001d80)={{r0}, r5, 0x14, @inherit={0x50, &(0x7f0000001d00)={0x1, 0x1, 0xfffffffffffffff8, 0xa000, {0x3, 0xfffffffffffffffa, 0x1, 0x7, 0x80000001}, [0x4]}}, @subvolid=0x535e6be5}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x28, r7, 0x400, 0x1, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8b7f, 0xf}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4880) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000002ec0)={r1, 0xffff, 0x100000000, 0x1}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000032c0)={r8, 0x4, 0x4}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000038c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd_index=0x2, 0x3, &(0x7f0000003880)=[{&(0x7f00000036c0)="f7a1c4ac6235633dcf72947d9a73e0d9d102d50eea3ef360f426a988bbf52e5ea0809beaa609e56a98bcfa54ec8fb6192b1a9920eb555f4c4023e23952ec27f5ba14b7895709f28a323ea52fd5f7b37dbd49b5bf03a291885a21fdea4acdc3ad604a1e3401f3ef530b84b549fb5196b377be90c58b9d98", 0x77}, {&(0x7f0000003740)="a4f5d13ac7d2864fde154e548491e8fbb29b6d9ac8edc0e367020c9e2af73f892687355aa50c7aed31e63736f9d8e1e3a130f14ed8dc5dc1545c8cb620dc31857b343e0c8b", 0x45}, {&(0x7f00000037c0)="3e7a8049214dfba0fd49e164f0eed61c669da266b65341ccde9af94d5969845885df4a637b8faf24ec39645dbdb33a14baf7dad343cd1638dd85b85b9051b29ff0ec9d66ad356c1be2ce72789ba562fcbe35cdf0e9b815634c4ee7a0d601f32378b7d1f142992c672a30f919781b6f92efd39f475229f7b5314ca84bb59d63631a35c0a7f90562d3789afcbb7356c7ab101276c60f94dda93aa0e0fda54a18dd16429e535b7959f9574a398d7c", 0xad}], 0x3, 0x10, 0x0, {0x3}}, 0x81) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003900)={0x0, @dev, @private}, &(0x7f0000003940)=0xc) r9 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r9, &(0x7f0000003980)={0x1}) r10 = pidfd_getfd(r9, r4, 0x0) bind$bt_l2cap(r10, &(0x7f00000039c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x1}, 0xe) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) [ 61.630490] audit: type=1400 audit(1677357515.922:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:38:35 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, r0, 0x3, 0x80000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000080)="b6780be56a2fce33f6243078321ff9dfb38542be888b66ff39ad99d40517fd297f4c85f48e5ed385", 0x28, r0}, 0x68) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='&$(@\x00', 0x0, r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x10800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x256fc46f498c1d07}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x12, r3, 0x3818c000) r4 = pidfd_getfd(r1, r0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) r5 = socket$inet(0x2, 0x6, 0x7) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r6}, 0x0, 0x10, @unused=[0x23, 0xfffffffffffffff7, 0xfffffffffffffff9, 0x1], @name="9e929e2b705744e651e6128c6cc151ecb923327a23b19f72785c17d4732a2b918ff99b6df7b142c493ff932138cb25679bf04dc704d00b40ccf3036afe00354d887b8666eada06826dd59cdf8828386ed789fe87f67ae17767e2e995fa615d682bdc1602e9bce63351a685699725381e8899d210c1b7d4fda2617c466cc1a41ba0ec68b20c7f6cff88a04747776e3ae736b8916b33d4b87afacdaa3b810aaafab05e2ce222470753e6de394b3421a73ee76fe78c3e991dc240e21722599eb022895cd5ae829c8ede4683238032bbe6bf32431548c4f402bebe715ca0e7e3f0b0cd2ececdcf681d06506107e98325c03def30c40612cbd83073636efe1137b99dadd6d3d83854fd7c3db1f0ab1690c63745d0769e820e9c31ee0e3be8cc5b41875c28773c9a5b20a1e7b3c375c57e6ceb755ebc76ddd49b6f490c25b8bc3cc76a500043d537f9a39ef964b68a7512252dced698333401c84924e68c59bc0e1d6fead0717d1adfb20b7c03d879a069c8f8b4ef8c60c8343bfe9cc6227220c0c85a585715768306a69b1238fb18e1f600eb627bea04598d14568c81fc32d86d726cf028c32c9694ad4a978268381cf67d7525e0018690021dfcff3f47552825e30375f92d3fd2ffc1e078e9f0875863d36c1e407b036db488e342f2e0944916fd4760d844a89e8ee7a393c840d1dbad3a2343cd989469d65c5963c6fc526bfe6dc876b5e64c3518976c28e0f3f964af5e62ab0c22cd852f72ca27b2fe4162078f13285d1c378147ec5a074c36964d172936a89023db41a483015c4b425bd62fe8080c0abdb69c37c359dbe76269080444bfb0b70d995d3e6a9c40648fa86463b1c3c06d01088b78e7192f3673f81a0dfbd7921c4b942eba512a6794d84ba3ccfb57f14f5d83120bf8cefe2fe75b3d4527644aa51e1a468e46728f15a2f91917448866e8e2d4df6010822c2960855b11db4af6efb0b9a7770c152d8118629a795fa8523be2ea4276366ea384a8de7b60446b9d4709eff6a7fc6341f5305c48fc7f735886f38883d9b410838a39570283fd3400f143777d5708e1713d03c1dc86a8eb826fafbbdc712a42379d123074123d55385d4125e652dbd74e3f024d9814d2e7bf81bba56a130eb94d4a3331fc49c6c1573ea5e02b8406aacc63ed1e7a3dc7f765765ef2435fabd4626434c581976dd838d010d081746737bd4ae573a1c1a2f195838f46ed5abba84e310fa6382b9bf694360b841727aad5286a1f40545c9458ff0a58e5f04e5b39dd2b099dca10b870b6adc63a58ad7b41da23e8a39705af77648e7b5513e92d40d645a0180c3e44125fff1c16d6a7a93568b9821d947881c61a686cca985983891805fab9cb62711398de9caa1e7d74d234c5f6c99e44ba9cc2b3be8cf59c430f9c3c0d115349e7e1ee438b4c16973040927fbc12c574f0ee5cc31eda0c2ba2a064d9751fb859fccdcb83f640bef96d29827ef33a555816b24e669c1424a73254c13fc75bb16c80f1283a84285af3f751ab2edf7c48fa91279a9be6446e122899730c35c9cbb4610bc4fe0ac7c9a0b80e9a5eb7a0c4ef5fe38d1f1c46e919e18f17b0444923ff244efeb85115766025e35b4c7272adc73ec354b06d8dcb0382b1225e016d577d933ce823e59a8a7350b8842087e0cdb218c47b746462711c0756283c8df0a8dbc4602f7227d8947e866da466ed057cbd02047f6008a78fbdc1d96cdcb19c2a8f5014e265fc9a84ea83ea1df0519d85c6b96363f562aeb5174b73021c20340fc6a80541e0cd051b3c0fd2253f36262898d24ecad1186bad261a5d6af3051824a1bfe6dd0c7cc5521940cf217c3c0f9918024e09ae6d38b6f46810ad2b5d6e9a99c3b3fa585593bb210a7449f29c105730dfd9771bc207020e047adbe585e1ff452e9119de12649c77f499d676ce114f74a0e37a74bae638f3e2f0abac8e2cb201449841cf440298c4f12fcf1afedd5df6e6e3cfb95ebb288419722e8e7e6fbc74899501f9909911d1ae4e150f7d7bab1e74f8b3471529f93547b21db8e509773b8b51948c44e6d7d953c4a10eb02eb14acd5ae3bfb815335026d49eb40d263017b4963b8be41fcf3993e9438b1c05f9bfe74f1e3b4bede9e0236116278e1bae3d3770112930bb5c30592696eac0b739bf3d0c93bd36e0ef487ce618c65842656daa314ee7e7ee13575c8316ec109991a567d94e49d6141fd5a259d51b3508720a2b9a2ca5598cb62bc69dd6a4f4fcb255368666b9e54a30ff30a7b15703f0593f12ce1d0368d89f334f96fa98f84b56f0338a5437b81f903e1758734c96876b4b416b6770b478e0a61d656f9ee6e484c9b493fedde368a9cb18b36f9775af49dee70f1e53e2b8ae1fd6c5a10d0ac6694d9b2430e83dffac396b225b4bd849300d2a38f7bd0edfc9b244e211d559a9f8d71e1871b0d22d00b8696b75e557d42ed698cb1334d42f75583381211127baee6edb0847a818b02351ebb64845f873838cfcd07204d5d6603999a7819e075ccdc701b2e4758ca1d76487826324da6893fe1f6d7eba95cb5e75b5214d06cbd50067712a91568f76acd430c85fc8893b28e1b9493f4be45bffa3c0c04a26b9bace2b6d8f908e540fa4029ec9b9f6d803c25b5a786633be008740d155e7e87e2c882b8edd9f366e15ffba90b98affb01cec15d61196d0fd0a39d10e38d4af5c2f9f6e9a4a1ad4a96b6c48b7ca91cd0d817e487daeec53719f8ab44062a50ba7cde029b85f2ae05be5c6b39ab1ab27ee0a0c97dfb402434dd976a0d341982a5d28bdd0f0a4adb1a447d2aca3f08ea0010cab3d6f5fe7b5b36bf2f1e7398574c3b5cb15ba678471f0fdb38fcb6110a080e32f7804dd01d8422a82d2a000c6c5c1a492f785af17882dcf0ba8ebb66067a77f975818953f285c637a2a29299014538cb26058022c37cfc81b854a54d65a2cfcedb5fdacb576755eaf40be74537bce82fb0f31d8858b38cd3c2304d7e7d94167f7069b7fb9c049b140fd2835b479ae12c20067ed359d14ad480427ea1c3f2be39a325ddcc48625826c5b3da7a59a9841c153ef255b6de51ce0db2ae4540ab7ce39cb08c6f073615f9633e68d6e85c9c0d6b5cee367d19ea29eba5cf2b9a9fb010df2f7d66292b9fa1816499449a37245fa402134ecba63dd188ef9468e2eb1c874ff3c5815612984eeef12138e758486d55fd16d3dcb1e5c360ba457d0fb230c94b324d8bb66299f1d8a556c6e1b67e931ca9c35c63fd7ef63edf4fb4b9e0ef1b1bc307c6d2667f7824f8afc8bb910a056b671894611555c1ce4969f0ee7e881624b2b6c37016645214e076b65fd151b6bc8bd4455ce2699b09bf607b94cef510ff7e0a4dc5b629906d5ca8675ef360f2ef9b980f445612115c77f8b598ee24110e26de6a8cb687323fe2574f0e7152c4a0b5cef3254fdd2569c249c6f2fd6c1227a9c2f713fc9e5bfa09c750a0dc486faa75a98554482056135fc9f8447898b1b302d351726d126e2701043da38d6832c9cd0970dd1a8b9b5a9cfd494f9bf5e5bd151b805e9c59cae27c6cef6ea5d51360e49562cbecc96cda5baa3e09cf603ce520dbdc1af6ba811766d496277c903354c124eb8174bf052b73b00935d257381107f9e7813194e90362f8c25a8c7ccc2a261dd2e126e3aa3263f199c8dc6bcdec515593ff97c484d041d1b13d19cb4961db3afdd27fe1ad4ecaf170ce6e045936fa6bf1c98f8a86b509bbdcc7af0814895a7f72c0a2a6d42f28c2bed1d6ecd68478ff8a851a9dc4c3ef00fa0ad1b95a269e49a1e779383f86e52fbcf1de302e148b81265a8b2ad12151077183db2d1d1535222bba90c0608c477844e4b75bc8d962613599ff5c2028a6ab11933594c8c831d62d22cd31a2a0a5a2c83061b70b68a78941e32531414f250756f2d3a81b14af7ac26ea05a578d90b1bd8aeb9971c3fd43aca8e1e63c9b3332929a95cccb89c36758f5f510a636d6927f25d79d6f62d2375e0721264069c4c85a305a220b4a3446b59dbf131dc897dbdbbd7713bcbfffa763f57965c2ab539ce8e21149b1baf3353245d56b353f25bed1736de3167baf56f1607c61ba429581e3273cf111030a46cfef4875c955f4ce75bdb6ca23d7912151e9401adbdcdee18e5febec583d9d1d60afeadc5c0e2defff7882e7ee0cdd51b9b84bdb5d200dab8f8e5384ecb9e8c0ee08c416348091ccac4078ec2c9b1f82f7d1d4312dcd34aed73845ba4b546161b59bac00b8a8216c440fc75692ef96ac52d3b9ff718507e4b149832667b1379abe81b04aab1388fc0a545ee5dfc4e7a68ecf0d0c546144e15299c34b33f77d82a7f4c938098c653b770b33578fce5d24e9b6085347a73b0435fc8e1a572c6c43046882bc70dd670e07e6363fdf2055c49551f789f58a35773a81928a849155626350bee6402e5591a6b8425e3ee296df4029006672ac13bbd65e03a147d7908ad8662f818d3e029ec7b58e651228fce1d8018421792c4ec729023a72f449e5740278ccfa5d3fde68ba5abba9c8b993210cf8646fbc9ddfef1d1943cc59b937db3429a9f91a18217e69ed92accbe715ea9a7d835adb4e4c6e945b589d75770a92439a78b860468ff380ae252c3eb453fbe6d02970c4a7b91b6715b9117d31394883dc1be98666b4c4e68f79a13ae3425df549bc917c0c2b0a7fd5716bfb14f703512f8f6d889bd999d619e59c249668a31c9740f960b03776deac900c1fc1a48a47a6f7bb03ed5a0334a7b389830eb5be3639a9d3fb95e4bdf0eb9e41548eab282345bc4f07863be2f2261b044e81e4f20b4546fb717350e82c4c850dd80259efc54549a69d493e82e1bdeb73041a1efe92098c6ffb41f65cdf11e799af467fb28f871491ea01082a749025e722e3e159698bde8f95b0dcc75adba47d64cbfed576e26399aed24cb1528afc5a47f900393bb09b643bafaa04a596eeb3afc62de5d9d2e34cb0c00cc22c4b157c6516985c7b93b554953f380e436c8a8d69cbc1b49bd1bc857ee287b893fa0d971e4a92f2f0dfa76919840234534a14665b23b43056c96fe1221dc8d75af8c19df70a97eed53560bd2acd4aa0c22bc420f085f81e4ec8a80991821c8b7695f332ebb66df76df1a679400bd21b4cc7ce2b4aba99744ff68454f78491ef124fc17e063c2529e7204200b05c778e7cc5715f0bcc148ce6c48d4087e6bec7e35f9404dc352733a5dda8815dd85d748f7fd8429f706d236724b60d4d52400e430551c6ba050b050477111a1c1f8832ac172aba88784654ba28622ebdeb42838f9d29d35ffb9b4f0e8748e645b29e231f563c4431e883e89f5b3218923e4e61ca240bf0dcacb7f5e75e046c790f9735d456ce09b65a8a9ac5388e029473a7f2690f1653370cfcdebd003169135ed1a4c1d7c657505625c72caac8c1813b026c11e5f6e04d710e5eadea143b2f7e8c6d22a3864715019ceb895dedc103bab0cb5ef747f2e54471eeee68396ca15aad83a13fa7607424fef1d379eb3cdff4c0c89ac679090e9d089ebdfc880051129f01c483bbbc82fd4f8649769ddaac89f65da8626195e5646f212437cdedf0cf6d8d74835bb3d670bf6eea9d98ac7eb7db821c43095b51552ea35d0108b193321040f9e156a655653d3e5ab0c628a058027a68c71b793c7d7a41a9f113e3a20ed36ec004ab01d5b9eb6084482de62f74358fd"}) epoll_wait(r0, &(0x7f0000001840)=[{}], 0x1, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001880), 0x4200, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001900), r0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x38, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4e3742d8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3800000}]}, 0x38}}, 0x10) 20:38:35 executing program 6: r0 = socket(0x1f, 0x0, 0x94d4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4851}, 0x4002) r1 = socket(0xb, 0x2, 0x3) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfe, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040080}, 0x800) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1f8, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x64}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4c5}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0xe2eb}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x20}, {0x5}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x240, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8d2e}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffff7f}, {0x6, 0x11, 0xfe2d}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x200}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0xffffff09}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x3f}, {0x5, 0x14, 0x1}}]}, 0x240}, 0x1, 0x0, 0x0, 0x80}, 0x20050805) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000c40)='rw\x00', 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000c80)={0x0, @empty, @multicast1}, &(0x7f0000000cc0)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa8, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4048000}, 0x4804) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20:38:35 executing program 7: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040000}, 0x4c001) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x284, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x26c4}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x990d}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb0}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5e1}, {0x8, 0x15, 0x1697}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x10001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4d6}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xfffffffb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x909}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x48}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xffffffa2}}]}, 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x42080) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x9) r1 = socket(0x2, 0x800, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000540), 0x8, &(0x7f00000005c0)) r3 = fsmount(0xffffffffffffffff, 0x1, 0x1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1b8, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}, {0x6, 0x11, 0xb593}, {0x8, 0x13, 0x5b}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x20}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xb9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x2673}, {0x8, 0x13, 0x80000000}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd1}, {0x8, 0x13, 0xfffffffd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000940)='nomand\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x184, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xf3}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x9a00000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x99e9}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x87db}, {0x8, 0x15, 0x476}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x676}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x8}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x4050) socket(0xb, 0x2, 0x3d6a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb06}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff7}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008081}, 0x80) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x118, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000040}, 0x801) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf3a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000018c0)={0x8, 0x4, {0x3, @struct={0x7, 0x2}, 0x0, 0x3, 0x10001, 0x200, 0x7, 0x0, 0x5, @struct={0x20, 0x80000000}, 0x1f, 0x200, [0x8000, 0x5739, 0x7, 0x800, 0x9, 0x3]}, {0x3, @struct={0x3, 0x1}, 0x0, 0x4, 0x1ff, 0xfffffffffffffff9, 0x3, 0x9, 0x40, @struct={0x40, 0x6}, 0x40, 0xffffffff, [0x1, 0x2, 0x200, 0x3ff, 0x4, 0x1]}, {0x4, @usage=0x6, 0x0, 0x7, 0xeb, 0x0, 0x1, 0x80, 0x11, @struct={0x0, 0x8000}, 0x9, 0x3, [0x200, 0x9, 0x9, 0x1f, 0xff, 0x2]}, {0x80800000, 0x80000000, 0x5}}) [ 62.943054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.946517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.948674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.963071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.965618] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.967170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.002638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.005421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.006638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.007917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.012760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.014636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.020948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.022113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.025625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.027281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.028512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.029568] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.059397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.076526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.087069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.096085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.098306] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.098480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.100658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.137860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.140033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.141325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.142929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.149564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.160579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.170607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.176214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.177164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.178687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.186176] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.193632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.194879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.196254] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 63.210201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.220685] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.225318] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.023918] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 65.025503] Bluetooth: hci0: command 0x0409 tx timeout [ 65.025662] [ 65.026180] ====================================================== [ 65.026579] WARNING: possible circular locking dependency detected [ 65.026985] 6.2.0-next-20230224 #1 Not tainted [ 65.027281] ------------------------------------------------------ [ 65.027679] syz-executor.5/273 is trying to acquire lock: [ 65.031601] ffff888034158880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 65.032431] [ 65.032431] but task is already holding lock: [ 65.032962] ffff888034158920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 65.033835] [ 65.033835] which lock already depends on the new lock. [ 65.033835] [ 65.034564] [ 65.034564] the existing dependency chain (in reverse order) is: [ 65.035238] [ 65.035238] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 65.035898] __mutex_lock+0x133/0x14a0 [ 65.036335] hci_cmd_sync_work+0x1e6/0x320 [ 65.036790] process_one_work+0xa0f/0x1790 [ 65.037240] worker_thread+0x63b/0x1260 [ 65.037681] kthread+0x2e9/0x3a0 [ 65.038056] ret_from_fork+0x2c/0x50 [ 65.038471] [ 65.038471] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 65.039230] __lock_acquire+0x2d56/0x6380 [ 65.039682] lock_acquire.part.0+0xea/0x320 [ 65.040156] __flush_work+0x109/0xd80 [ 65.040569] __cancel_work_timer+0x39c/0x4e0 [ 65.041032] hci_cmd_sync_clear+0x52/0x250 [ 65.041483] hci_unregister_dev+0xf9/0x410 [ 65.041944] vhci_release+0x80/0x100 [ 65.042355] __fput+0x263/0xa40 [ 65.042724] task_work_run+0x174/0x280 [ 65.043127] do_exit+0xad8/0x2800 [ 65.043404] do_group_exit+0xd4/0x2a0 [ 65.043704] __x64_sys_exit_group+0x3e/0x50 [ 65.044042] do_syscall_64+0x3f/0x90 [ 65.044335] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 65.044724] [ 65.044724] other info that might help us debug this: [ 65.044724] [ 65.045262] Possible unsafe locking scenario: [ 65.045262] [ 65.045667] CPU0 CPU1 [ 65.045964] ---- ---- [ 65.046265] lock(&hdev->cmd_sync_work_lock); [ 65.046568] lock((work_completion)(&hdev->cmd_sync_work)); [ 65.047093] lock(&hdev->cmd_sync_work_lock); [ 65.047541] lock((work_completion)(&hdev->cmd_sync_work)); [ 65.047913] [ 65.047913] *** DEADLOCK *** [ 65.047913] [ 65.048293] 1 lock held by syz-executor.5/273: [ 65.048586] #0: ffff888034158920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 65.049236] [ 65.049236] stack backtrace: [ 65.049539] CPU: 0 PID: 273 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1 [ 65.050066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 65.050636] Call Trace: [ 65.050822] [ 65.051005] dump_stack_lvl+0x91/0xf0 [ 65.051278] check_noncircular+0x263/0x2e0 [ 65.051594] ? __pfx_check_noncircular+0x10/0x10 [ 65.051938] ? queued_spin_lock_slowpath+0xd1/0xc50 [ 65.052297] __lock_acquire+0x2d56/0x6380 [ 65.052600] ? __pfx___lock_acquire+0x10/0x10 [ 65.052931] ? __pfx_queued_spin_lock_slowpath+0x10/0x10 [ 65.053324] ? __wait_for_common+0x394/0x550 [ 65.053646] ? __pfx_lock_release+0x10/0x10 [ 65.053964] lock_acquire.part.0+0xea/0x320 [ 65.054272] ? __flush_work+0xdd/0xd80 [ 65.054562] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 65.054926] ? __flush_work+0xdd/0xd80 [ 65.055215] ? rcu_read_lock_sched_held+0x42/0x80 [ 65.055570] ? trace_lock_acquire+0x170/0x1e0 [ 65.055906] ? __flush_work+0xdd/0xd80 [ 65.056193] ? lock_acquire+0x32/0xc0 [ 65.056480] ? __flush_work+0xdd/0xd80 [ 65.056777] __flush_work+0x109/0xd80 [ 65.057060] ? __flush_work+0xdd/0xd80 [ 65.057341] ? __pfx_mark_lock.part.0+0x10/0x10 [ 65.057688] ? __pfx___flush_work+0x10/0x10 [ 65.057993] ? lock_acquire.part.0+0xea/0x320 [ 65.058323] ? hci_cmd_sync_clear+0x45/0x250 [ 65.058639] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 65.058996] ? hci_cmd_sync_clear+0x45/0x250 [ 65.059322] ? rcu_read_lock_sched_held+0x42/0x80 [ 65.059663] ? trace_lock_acquire+0x170/0x1e0 [ 65.059993] ? lock_is_held_type+0x9f/0x120 [ 65.060303] ? mark_held_locks+0x9e/0xe0 [ 65.060605] __cancel_work_timer+0x39c/0x4e0 [ 65.060922] ? __pfx___cancel_work_timer+0x10/0x10 [ 65.061259] ? __cancel_work_timer+0x2aa/0x4e0 [ 65.061580] ? __pfx___cancel_work_timer+0x10/0x10 [ 65.061929] ? lock_release+0x1e3/0x710 [ 65.062231] ? __pfx_lock_release+0x10/0x10 [ 65.062549] ? do_raw_write_lock+0x11e/0x3b0 [ 65.062881] ? __pfx_vhci_release+0x10/0x10 [ 65.063188] hci_cmd_sync_clear+0x52/0x250 [ 65.063493] ? __pfx_vhci_release+0x10/0x10 [ 65.063808] hci_unregister_dev+0xf9/0x410 [ 65.064111] vhci_release+0x80/0x100 [ 65.064390] __fput+0x263/0xa40 [ 65.064637] task_work_run+0x174/0x280 [ 65.064922] ? __pfx_task_work_run+0x10/0x10 [ 65.065250] ? do_raw_spin_unlock+0x53/0x220 [ 65.065575] do_exit+0xad8/0x2800 [ 65.065831] ? lock_release+0x1e3/0x710 [ 65.066120] ? __pfx_lock_release+0x10/0x10 [ 65.066432] ? do_raw_spin_lock+0x125/0x270 [ 65.066740] ? __pfx_do_exit+0x10/0x10 [ 65.067037] do_group_exit+0xd4/0x2a0 [ 65.067307] __x64_sys_exit_group+0x3e/0x50 [ 65.067618] do_syscall_64+0x3f/0x90 [ 65.067885] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 65.068247] RIP: 0033:0x7fe8b9ac1b19 [ 65.068511] Code: Unable to access opcode bytes at 0x7fe8b9ac1aef. [ 65.068938] RSP: 002b:00007ffc0f70d868 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 65.069476] RAX: ffffffffffffffda RBX: 00007ffc0f70e048 RCX: 00007fe8b9ac1b19 [ 65.069974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 65.070475] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007ffc0f70e048 [ 65.070986] R10: 0000000000000020 R11: 0000000000000246 R12: 00007fe8b9b1b233 [ 65.071465] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 65.071951] [ 65.087847] Bluetooth: hci4: command 0x0409 tx timeout [ 65.088896] Bluetooth: hci3: command 0x0409 tx timeout [ 65.151874] Bluetooth: hci2: command 0x0409 tx timeout [ 65.279866] Bluetooth: hci5: command 0x0409 tx timeout [ 65.280016] Bluetooth: hci6: command 0x0409 tx timeout [ 65.280291] Bluetooth: hci7: command 0x0409 tx timeout [ 67.071890] Bluetooth: hci0: command 0x041b tx timeout [ 67.135876] Bluetooth: hci3: command 0x041b tx timeout [ 67.136499] Bluetooth: hci4: command 0x041b tx timeout [ 67.199865] Bluetooth: hci2: command 0x041b tx timeout [ 67.327867] Bluetooth: hci6: command 0x041b tx timeout [ 67.328418] Bluetooth: hci5: command 0x041b tx timeout [ 67.328933] Bluetooth: hci7: command 0x041b tx timeout [ 67.787617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.789515] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.792342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.797933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.801232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.802602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.120846] Bluetooth: hci0: command 0x040f tx timeout [ 69.183898] Bluetooth: hci4: command 0x040f tx timeout [ 69.184289] Bluetooth: hci3: command 0x040f tx timeout [ 69.247975] Bluetooth: hci2: command 0x040f tx timeout [ 69.376888] Bluetooth: hci7: command 0x040f tx timeout [ 69.377319] Bluetooth: hci5: command 0x040f tx timeout [ 69.377675] Bluetooth: hci6: command 0x040f tx timeout [ 69.823845] Bluetooth: hci1: command 0x0409 tx timeout [ 71.167850] Bluetooth: hci0: command 0x0419 tx timeout [ 71.232905] Bluetooth: hci3: command 0x0419 tx timeout [ 71.233353] Bluetooth: hci4: command 0x0419 tx timeout [ 71.295868] Bluetooth: hci2: command 0x0419 tx timeout [ 71.423911] Bluetooth: hci6: command 0x0419 tx timeout [ 71.424299] Bluetooth: hci5: command 0x0419 tx timeout [ 71.424643] Bluetooth: hci7: command 0x0419 tx timeout [ 71.872973] Bluetooth: hci1: command 0x041b tx timeout [ 73.920947] Bluetooth: hci1: command 0x040f tx timeout VM DIAGNOSIS: 20:38:39 Registers: info registers vcpu 0 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff8880147ef190 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002f R11=0000000000000001 R12=000000000000002f R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe453bdc7000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe453bdc5000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6db3789260 CR3=000000000f524000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=ffff888016ddfd80 RCX=ffffffff81706560 RDX=ffff8880169d1ac0 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea0001b7a680 RSP=ffff888016ddfb78 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000006de9a000 R13=ffff88800e11a1a0 R14=8000000000000025 R15=0000000000000000 RIP=ffffffff814b75bb RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe3881127000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe3881125000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f291cba7b80 CR3=000000000ebc2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000