Warning: Permanently added '[localhost]:15343' (ECDSA) to the list of known hosts. 2023/02/27 00:17:17 fuzzer started 2023/02/27 00:17:17 dialing manager at localhost:41417 syzkaller login: [ 37.901669] cgroup: Unknown subsys name 'net' [ 37.992125] cgroup: Unknown subsys name 'rlimit' 2023/02/27 00:17:34 syscalls: 207 2023/02/27 00:17:34 code coverage: enabled 2023/02/27 00:17:34 comparison tracing: enabled 2023/02/27 00:17:34 extra coverage: enabled 2023/02/27 00:17:34 setuid sandbox: enabled 2023/02/27 00:17:34 namespace sandbox: enabled 2023/02/27 00:17:34 Android sandbox: enabled 2023/02/27 00:17:34 fault injection: enabled 2023/02/27 00:17:34 leak checking: enabled 2023/02/27 00:17:34 net packet injection: enabled 2023/02/27 00:17:34 net device setup: enabled 2023/02/27 00:17:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/27 00:17:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/27 00:17:34 USB emulation: enabled 2023/02/27 00:17:34 hci packet injection: enabled 2023/02/27 00:17:34 wifi device emulation: enabled 2023/02/27 00:17:34 802.15.4 emulation: enabled 2023/02/27 00:17:34 fetching corpus: 0, signal 0/0 (executing program) 2023/02/27 00:17:35 starting 8 fuzzer processes 00:17:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x73a}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x20048800) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18819}, 0x4000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {r0}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004800) r7 = openat$cgroup_freezer_state(r5, &(0x7f0000000540), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000580)) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) socketpair(0x1a, 0x5, 0x7fffffff, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r9}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8) getgroups(0x3, &(0x7f0000000940)=[0xee00, 0xee00, 0xffffffffffffffff]) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040000) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000ac0)) 00:17:35 executing program 2: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/1) shmat(r0, &(0x7f0000ff5000/0xa000)=nil, 0x5000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ff7000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/214) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf) r2 = shmget$private(0x0, 0xd000, 0x80, &(0x7f0000ff1000/0xd000)=nil) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x3, 0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0x16, 0x355}, 0x5, 0x9, 0xff, 0x3, 0x0, 0xffffffffffffffff, 0x4bd}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xf}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x20}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x102000}]}]}, 0xf0}}, 0x500c1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000014c0)={&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, &(0x7f0000001400)=""/153, 0x99}, &(0x7f0000001500)=0x40) r4 = shmget(0x1, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000001540)=""/252) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) get_mempolicy(&(0x7f0000001780), &(0x7f00000017c0), 0x8, &(0x7f0000ffe000/0x2000)=nil, 0xc) [ 54.279883] audit: type=1400 audit(1677457055.667:6): avc: denied { execmem } for pid=260 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:17:35 executing program 3: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000c, 0x101, 0x20) mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x3, 0x1) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x3000) r1 = shmget(0x1, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ff9000/0x3000)=nil, 0x2000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/147, 0x93, 0x0, &(0x7f00000000c0)=""/157, 0x9d}, &(0x7f00000001c0)=0x40) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/60) r2 = shmget(0x3, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) sched_rr_get_interval(0x0, &(0x7f0000000240)) shmat(r2, &(0x7f0000ffa000/0x2000)=nil, 0x1000) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0xc3354ce87e263a6b, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000500)=""/77) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @empty}, &(0x7f0000000600)=0xc) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="cf64ec803186"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffd}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040844}, 0x0) mremap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) 00:17:35 executing program 7: keyctl$get_keyring_id(0x0, 0x0, 0x8001) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @auto=[0x24, 0x1b, 0x36, 0x1a]}, 0xc, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r0, 0xef, 0xbf}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000180)="577971913777b03950f68ef9e8f327e3ad0b134dd2becbcaaf8b87bea6d295402dbe16dc573b1a5b8a55e3cd5ff9ac2fbf7117b0e764a70c0593740a12f1aa58dd0b506b9deac98941bc057a74588f3ea33536f9aef6d46ab66c7b310652ba8572596e4685ca7fa04ede6818c838ace1376d00169d33e74ac1bae540f2cb18febc5dd1827455801af96a1919b05b5e8243b53b016cdfc9be0f1f26876b99d036ace7364aa0e28e74f72568e30a1deaeda23e02995a2a8bd76270b10cba3a0283ab70c9d93cb87e5d5c17e7f556b710a5a862e6e295920274911924f4dc9b3c551c2d0fd7f5cfb554fbbad1e35e3bb1", &(0x7f0000000280)="930d2d19b69f67b366f9e89d6d72542f23c27fa5a57d598e554245e8dc7b2d99fa229032160782d386398f711288a390f638cbda3860065d0fb975102ecfbe2499c013ec9c4f3fed3fd1e2756abec9ea1ac0bf9be8400fc75d97ac0c4b812f9f09d5b0405d769982af57b757b6f59e25f3f4ec6072548f9c6c9a152b77b882e55f8d1f066485479bd94ece3b7d3a059a04f257b7423587ed56d746d1ffdf5ee252d0e98a548a22137642019d12bb1b26be6dcedd08cdadf8e1c6a97a7aa23e") r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={r1, 0xa0, 0x28}, 0x0, &(0x7f0000000400)="00791f8aec3ce97819dca4e2362abf23db4ef390250b6088a167667ad13ae09c097b05daf8b749b4f792c9db577b2fd19e884981854743bc619f50ddc1f4e272b3c5d6051ad3fb9e2e9137247436053c6ec07fe12cbdfc436ad9f4e2650a38dcf3893d4083f043d917d05b4006eb11a3cd82026a9ea5c53fea923ad1ffe7b3362b129837d1cdc0878ff7b07917a3e436c4ddd54c003ca4fca3fba130414c617a", &(0x7f00000004c0)=""/40) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000500)='.dead\x00', 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xd4, 0x3a, &(0x7f0000000540)=""/58) keyctl$invalidate(0x15, r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000580)='\x00', &(0x7f00000005c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000640)={r1, 0x8d, 0x31}, 0x0, &(0x7f0000000680)="ea9a90dbb6f0521f6d64a347bf3a2929e71864ffecfcac9eb2c4b9f641ace018ecf64ddff96b22b699e9667f62bb5e5f7cb855e73477ae27578caada1c46680c408069e2cb57a268e7b1049fab28a18c4591878060dec8147c3a0aa3c9c4f02c8ca231315fa0a1ea38ec7fb9d52477e2c054d57e4a9e5a11602cb5629886a77438e3cda1eccdc0d777f70dac6d", &(0x7f0000000740)=""/49) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)={[{0x2d, 'devices'}, {0x2b, 'freezer'}, {0x2d, 'perf_event'}]}, 0x1e) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000007c0)='user\x00', &(0x7f0000000800)) r2 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$link(0x8, r2, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000008c0)={r0, 0xd0, 0xb8}, 0x0, &(0x7f0000000900)="239b7a2aca1059d4a3658aa0db1afc4aadb2393527c6de0a87403fd3102693a47515725a7cf584ff2f1829ae18f77f454251857adbe4460ccdd7f7d75ba6c43f13901c82d25b39beb9283e3ddd852ee7277488e4946f150d502c9b074f1136a54eb7344517c97e11e1e035fc30bdaa0dde9325fef2160f36c4bad24da40a6836c00b2abeb90bc24ed22dd81bc9e8aecd8a642f53ff9b57696d8d8032f4af631fa9cdef5bef81913b205091b08c16cd80986b6f09524891125893162872e7a6e966d3232bbf2138ad64a73feee809d82c", &(0x7f0000000a00)="2e5f87e73ce18c511774e494641a0d69c414e38fa9fef8b8210f345fd58d2c83f91f1f5acef94f56f23ac177524fe274393935fdd64f43b79c33e98d759662860d659c104187da909d3912ecc90b344231e5a0dd81eebe041da95c26d04872b86dfbad37d161a9c596d7958fc9257db6862c4ea9f9c5f7f9d7eeb6ba31ea8036931c931202f81a16196945be766293b13401df5b6c0d13746403477aff9679941ff466b839c4f6767c24bea8459eb9491651128374da0c79") connect$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @desc3}, &(0x7f0000000c00)={0x0, "574eea7b37c6abba2f4316f83f3fcaff2d3870e73401f4d39d72b7087004de15967b5e3df658cf4abfd4bc9b61768f56a4e93a9958081f2544bc5e60913ec984", 0x3b}, 0x48, r1) add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$invalidate(0x15, r0) 00:17:35 executing program 4: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x60}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3000000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x9c}}, 0x200c0) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000780)={@empty, @private=0xa010101}, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x5000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c050}, 0x4004000) connect$inet(r5, &(0x7f00000008c0)={0x2, 0x4e22, @local}, 0x10) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8044) 00:17:35 executing program 6: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x3, 0x0, @d}, 0x18, 0xfffffffffffffff8) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "77256d2353bc4ec82386c8c0d97e5fd7ae80db33ce7230605a84cd9d4be9c4a5a0956188c8d7bd539e04c9cde29278b9b8fe954e6a7364ab746c9af1b3d339f6", 0x35}, 0x48, 0xfffffffffffffffc) keyctl$unlink(0x9, r1, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "0e264bd2698ba7135990824bb58a4d9c87c255f8569a9947d76fc3baab93e0eb07ffd0fe3c1c57358dd4a902260855f5c97878195c05d50b8c90bd876a74e329", 0x14}, 0x48, r1) keyctl$unlink(0x9, r2, r1) keyctl$invalidate(0x15, r2) keyctl$negate(0xd, r0, 0x5, r1) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000340)={0x0, "e71581529bc51ee7986150b0285f72986cae8b5865b048eeed8c99de16715e8cfaa1029ded912ae0a44301163b681e46750766fd265ed7bba472273abd833b5a", 0x3f}, 0x48, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f00000003c0)='(\x89\\]!\x00', &(0x7f0000000400)) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)={0x9, {{0x2, 0x4e23, @private=0xa010101}}, 0x1, 0x5, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x310) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000780)={'HL\x00'}, &(0x7f00000007c0)=0x1e) keyctl$update(0x2, r2, &(0x7f0000000800)="cce5313c0932e0e35977cec76ab4eee9925ab308f01b8730cde82911cfc1df8ceef92aeecbf95b3124115350863ff5a744769d38f94c214f7ae7eadeff1ac3fb4eba867a353ae65b5ae4cf14a602a150bc8dbd70a06f315bed10e5faed3ed90fb88470aadde7704f4ea4a79b4de1919905cc4e792ddde09ab00e23b19fe5a72fa6be0189b37503fcfe956064ac1fa792e73e50f553548399bd75ae9ce52a88c95282c358ded308f6a66a5370161e566e2ea299c3ce071a98fdd0c6e592a15b7c81f649de152da3f6c1be73418ab146782ead89e40b2d58d94b9f628e962b5f61ead6e2c3a3c518", 0xe7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000900)="8c4557da37f1a9de66d68fc167891d79", 0x10) r3 = add_key$fscrypt_provisioning(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)={0x3}, 0x8, 0xfffffffffffffffe) keyctl$link(0x8, r3, r1) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc2}, &(0x7f0000000a80)={0x0, "c9de5ded35474500862fda26385ba57b096d205dd3a30d05d9b10d01515ec1292519cd9012c2e5900efc8d17cdfe9418db41cabf9e30634804561992a4e12762", 0x16}, 0x48, r3) accept$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x0, @empty}, &(0x7f0000000b40)=0x10) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000b80)=""/50) keyctl$setperm(0x5, r2, 0x41000) keyctl$link(0x8, r1, r2) 00:17:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x16, @loopback, 0x4e22, 0x2, 'none\x00', 0x1, 0x81, 0x7c}, 0x2c) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200)="70fac2e56d8c436c449b861f0f2ca7f773afde83a25872b11118437186e7e3e980a24d179d8d9173b89f763595d044acac6852c61fb3ec1a", 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2f}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x78c792cc6fa2b58c}, 0x40) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000400)=""/148, 0x94, 0x61, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x260, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3ff, 0x0, 0x8, 0x6}, {0x4, 0x2, 0x81, 0x1}, {0x1f, 0x5, 0x6, 0x1ff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x24040010}, 0x10000004) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000008c0)={{0x2, 0x4e24, @private=0xa010101}, {0x306, @random="c4ffcbd067d0"}, 0x4, {0x2, 0x4e22, @multicast1}}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000980), r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a00)={0x0, @rand_addr, @initdev}, &(0x7f0000000a40)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a80)={0x0, @multicast2, @initdev}, &(0x7f0000000ac0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b00)={@local, @remote, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b80)={0x55c, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa495}}}]}}, {{0x8, 0x1, r6}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r7}, {0x14c, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x7f, 0xf8, 0x7fffffff}, {0xffff, 0x1a, 0x0, 0x3}, {0xf1, 0x4, 0x6, 0xffff}, {0x3, 0x9, 0x20, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0xff, 0x9b, 0xfffffffa}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 00:17:36 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2b, 'cpuacct'}, {0x2b, 'pids'}, {0x8705f48bc2b53dc0, 'cpuset'}, {0x2b, 'net_cls'}, {0x2b, 'freezer'}, {0x2b, 'net'}]}, 0x34) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000300)={0xcc4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "d5348bd10f6099"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001500)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2a, "723fde6bd8f3f5"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002500)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000002700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002900)={0x401, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "f171e78f8e2769"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000003b00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "19634240e8c01f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000004b00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x77, "4e79a513054594"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000005b00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005d00)={0xa000000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "62c870d2df9e30"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000006d00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "042878b69076d4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000007d00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000007f00)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "c2d243725bc81e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005dd00)={0x81, [{r4, r5}, {}, {0x0, r6}, {r7}, {r8}, {0x0, r9}, {r10, r11}, {r12}, {}, {r13}, {0x0, r14}, {}, {}, {}, {r15, r16}, {}, {0x0, r17}, {}, {}, {r18}], 0xef, "944a7b305b5e64"}) [ 55.459528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.461116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.465679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.468977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.471720] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.472865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.577114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.578793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.582425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.584071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.589919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.591133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.593913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.596558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.598001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.600016] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.601050] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.601179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.699609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 55.701951] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 55.703114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 55.704871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.710027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.714967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.722034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.724352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.726153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.849845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 55.851881] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 55.853021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 56.015771] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 56.038423] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 56.050955] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 56.084131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 56.105255] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 56.116932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 57.542021] Bluetooth: hci0: command 0x0409 tx timeout [ 57.668430] Bluetooth: hci2: command 0x0409 tx timeout [ 57.668815] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 57.670109] Bluetooth: hci1: command 0x0409 tx timeout [ 57.671934] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 57.673978] [ 57.674309] ====================================================== [ 57.675169] WARNING: possible circular locking dependency detected [ 57.676212] 6.2.0-next-20230224 #1 Not tainted [ 57.677361] ------------------------------------------------------ [ 57.680134] syz-executor.5/271 is trying to acquire lock: [ 57.681043] ffff8880197ec880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 57.682805] [ 57.682805] but task is already holding lock: [ 57.683825] ffff8880197ec920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 57.685453] [ 57.685453] which lock already depends on the new lock. [ 57.685453] [ 57.686754] [ 57.686754] the existing dependency chain (in reverse order) is: [ 57.687761] [ 57.687761] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 57.688753] __mutex_lock+0x133/0x14a0 [ 57.689408] hci_cmd_sync_work+0x1e6/0x320 [ 57.690103] process_one_work+0xa0f/0x1790 [ 57.690799] worker_thread+0x63b/0x1260 [ 57.691482] kthread+0x2e9/0x3a0 [ 57.692052] ret_from_fork+0x2c/0x50 [ 57.692671] [ 57.692671] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 57.693819] __lock_acquire+0x2d56/0x6380 [ 57.694498] lock_acquire.part.0+0xea/0x320 [ 57.695241] __flush_work+0x109/0xd80 [ 57.695886] __cancel_work_timer+0x39c/0x4e0 [ 57.696593] hci_cmd_sync_clear+0x52/0x250 [ 57.697276] hci_unregister_dev+0xf9/0x410 [ 57.697962] vhci_release+0x80/0x100 [ 57.698592] __fput+0x263/0xa40 [ 57.699166] task_work_run+0x174/0x280 [ 57.699810] do_exit+0xad8/0x2800 [ 57.700399] do_group_exit+0xd4/0x2a0 [ 57.701032] __x64_sys_exit_group+0x3e/0x50 [ 57.701726] do_syscall_64+0x3f/0x90 [ 57.702336] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 57.703147] [ 57.703147] other info that might help us debug this: [ 57.703147] [ 57.704421] Possible unsafe locking scenario: [ 57.704421] [ 57.705304] CPU0 CPU1 [ 57.706094] ---- ---- [ 57.706887] lock(&hdev->cmd_sync_work_lock); [ 57.707707] lock((work_completion)(&hdev->cmd_sync_work)); [ 57.709132] lock(&hdev->cmd_sync_work_lock); [ 57.710374] lock((work_completion)(&hdev->cmd_sync_work)); [ 57.711402] [ 57.711402] *** DEADLOCK *** [ 57.711402] [ 57.712301] 1 lock held by syz-executor.5/271: [ 57.712973] #0: ffff8880197ec920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 57.714422] [ 57.714422] stack backtrace: [ 57.715067] CPU: 1 PID: 271 Comm: syz-executor.5 Not tainted 6.2.0-next-20230224 #1 [ 57.716224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 57.717444] Call Trace: [ 57.717846] [ 57.718196] dump_stack_lvl+0x91/0xf0 [ 57.718793] check_noncircular+0x263/0x2e0 [ 57.719467] ? __pfx_check_noncircular+0x10/0x10 [ 57.720228] __lock_acquire+0x2d56/0x6380 [ 57.720910] ? lock_is_held_type+0x9f/0x120 [ 57.721583] ? __pfx___lock_acquire+0x10/0x10 [ 57.722259] ? __pfx_register_lock_class+0x10/0x10 [ 57.722970] ? __wait_for_common+0x394/0x550 [ 57.723676] ? __pfx_lock_release+0x10/0x10 [ 57.724307] lock_acquire.part.0+0xea/0x320 [ 57.724878] ? __flush_work+0xdd/0xd80 [ 57.725408] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.726052] ? __flush_work+0xdd/0xd80 [ 57.726577] ? rcu_read_lock_sched_held+0x42/0x80 [ 57.727213] ? trace_lock_acquire+0x170/0x1e0 [ 57.727813] ? __flush_work+0xdd/0xd80 [ 57.728333] ? lock_acquire+0x32/0xc0 [ 57.728841] ? __flush_work+0xdd/0xd80 [ 57.729370] __flush_work+0x109/0xd80 [ 57.729888] ? __flush_work+0xdd/0xd80 [ 57.730411] ? __pfx_mark_lock.part.0+0x10/0x10 [ 57.731034] ? __pfx___flush_work+0x10/0x10 [ 57.731615] ? lock_acquire.part.0+0xea/0x320 [ 57.732219] ? hci_cmd_sync_clear+0x45/0x250 [ 57.732863] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.733652] ? hci_cmd_sync_clear+0x45/0x250 [ 57.734356] ? rcu_read_lock_sched_held+0x42/0x80 [ 57.735144] ? trace_lock_acquire+0x170/0x1e0 [ 57.735870] ? lock_is_held_type+0x9f/0x120 [ 57.736587] ? mark_held_locks+0x9e/0xe0 [ 57.737202] __cancel_work_timer+0x39c/0x4e0 [ 57.737772] ? __pfx___cancel_work_timer+0x10/0x10 [ 57.738405] ? __cancel_work_timer+0x2aa/0x4e0 [ 57.738989] ? __pfx___cancel_work_timer+0x10/0x10 [ 57.739608] ? lock_release+0x1e3/0x710 [ 57.740091] ? __pfx_lock_release+0x10/0x10 [ 57.740606] ? do_raw_write_lock+0x11e/0x3b0 [ 57.741126] ? __pfx_vhci_release+0x10/0x10 [ 57.741643] hci_cmd_sync_clear+0x52/0x250 [ 57.742145] ? __pfx_vhci_release+0x10/0x10 [ 57.742812] hci_unregister_dev+0xf9/0x410 [ 57.743485] vhci_release+0x80/0x100 [ 57.744095] __fput+0x263/0xa40 [ 57.744649] task_work_run+0x174/0x280 [ 57.745251] ? __pfx_task_work_run+0x10/0x10 [ 57.745957] ? do_raw_spin_unlock+0x53/0x220 [ 57.746664] do_exit+0xad8/0x2800 [ 57.747234] ? lock_release+0x1e3/0x710 [ 57.747865] ? __pfx_lock_release+0x10/0x10 [ 57.748563] ? do_raw_spin_lock+0x125/0x270 [ 57.749256] ? __pfx_do_exit+0x10/0x10 [ 57.749883] do_group_exit+0xd4/0x2a0 [ 57.750489] __x64_sys_exit_group+0x3e/0x50 [ 57.751163] do_syscall_64+0x3f/0x90 [ 57.751756] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 57.752537] RIP: 0033:0x7fd0a71deb19 [ 57.753105] Code: Unable to access opcode bytes at 0x7fd0a71deaef. [ 57.754024] RSP: 002b:00007fffbb29ee78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 57.755166] RAX: ffffffffffffffda RBX: 00007fffbb29f658 RCX: 00007fd0a71deb19 [ 57.756216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 57.757282] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007fffbb29f658 [ 57.758338] R10: 0000000000000020 R11: 0000000000000246 R12: 00007fd0a7238233 [ 57.759408] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 57.760414] [ 57.796269] Bluetooth: hci3: command 0x0409 tx timeout [ 57.924449] Bluetooth: hci6: command 0x0409 tx timeout [ 58.180344] Bluetooth: hci7: command 0x0409 tx timeout [ 59.589240] Bluetooth: hci0: command 0x041b tx timeout [ 59.717262] Bluetooth: hci1: command 0x041b tx timeout [ 59.717276] Bluetooth: hci2: command 0x041b tx timeout [ 59.845236] Bluetooth: hci3: command 0x041b tx timeout [ 59.972242] Bluetooth: hci6: command 0x041b tx timeout [ 60.228291] Bluetooth: hci7: command 0x041b tx timeout [ 60.682384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.683033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.684101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.685501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.686880] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.687500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.636239] Bluetooth: hci0: command 0x040f tx timeout [ 61.764330] Bluetooth: hci1: command 0x040f tx timeout [ 61.764366] Bluetooth: hci2: command 0x040f tx timeout [ 61.892260] Bluetooth: hci3: command 0x040f tx timeout [ 62.020287] Bluetooth: hci6: command 0x040f tx timeout [ 62.276229] Bluetooth: hci7: command 0x040f tx timeout [ 62.724265] Bluetooth: hci4: command 0x0409 tx timeout [ 62.788255] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 63.684242] Bluetooth: hci0: command 0x0419 tx timeout [ 63.812284] Bluetooth: hci2: command 0x0419 tx timeout [ 63.812295] Bluetooth: hci1: command 0x0419 tx timeout [ 63.940272] Bluetooth: hci3: command 0x0419 tx timeout [ 64.068258] Bluetooth: hci6: command 0x0419 tx timeout [ 64.324268] Bluetooth: hci7: command 0x0419 tx timeout [ 64.772237] Bluetooth: hci4: command 0x041b tx timeout [ 66.820244] Bluetooth: hci4: command 0x040f tx timeout [ 67.140266] Bluetooth: hci5: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 00:17:39 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888035c87d80 RCX=ffffffff81706712 RDX=ffff888035f2d040 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea00001b8200 RSP=ffff888035c87b78 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=8000000006e08025 R13=ffff8880147e9d00 R14=ffffea00001b81c8 R15=0000000000000000 RIP=ffffffff814b6ffc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f66f04f8540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0c36ab9000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0c36ab7000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f33edabc620 CR3=0000000009864000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff88802f097190 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe204b99c000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe204b99a000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f599e553820 CR3=000000000ec56000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=7465756c42205d3233393631312e3635 XMM04=636f72703d7373616c63742030733a74 XMM05=3a755f6d65747379733d747865746e6f XMM06=5f6d65747379733a755f6d6574737973 XMM07=00000000000000000000000000000000 XMM08=3a64656c696166203330632078302065 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000