Warning: Permanently added '[localhost]:41093' (ECDSA) to the list of known hosts. 2023/02/27 03:38:03 fuzzer started 2023/02/27 03:38:04 dialing manager at localhost:41417 syzkaller login: [ 36.702974] cgroup: Unknown subsys name 'net' [ 36.788663] cgroup: Unknown subsys name 'rlimit' 2023/02/27 03:38:20 syscalls: 200 2023/02/27 03:38:20 code coverage: enabled 2023/02/27 03:38:20 comparison tracing: enabled 2023/02/27 03:38:20 extra coverage: enabled 2023/02/27 03:38:20 setuid sandbox: enabled 2023/02/27 03:38:20 namespace sandbox: enabled 2023/02/27 03:38:20 Android sandbox: enabled 2023/02/27 03:38:20 fault injection: enabled 2023/02/27 03:38:20 leak checking: enabled 2023/02/27 03:38:20 net packet injection: enabled 2023/02/27 03:38:20 net device setup: enabled 2023/02/27 03:38:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/27 03:38:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/27 03:38:20 USB emulation: enabled 2023/02/27 03:38:20 hci packet injection: enabled 2023/02/27 03:38:20 wifi device emulation: enabled 2023/02/27 03:38:20 802.15.4 emulation: enabled 2023/02/27 03:38:20 fetching corpus: 0, signal 0/0 (executing program) 2023/02/27 03:38:21 starting 8 fuzzer processes 03:38:21 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_complete(0x0) socketpair(0x2a, 0x1, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_complete(0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x22e, 0x1010c0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10010, r1, 0x10000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x40040) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r2) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x17c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb5a6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9608}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbf}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0x17c}}, 0x10) write$P9_RWALK(r1, &(0x7f00000005c0)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x0, 0x4}]}}, 0x16) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r11, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0xc840}, 0x80) r12 = socket(0x8, 0x80000, 0xffff) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r13, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) 03:38:21 executing program 1: r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="638a006b5f76"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="62248fec1f4d"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) socketpair(0xa, 0x1, 0x1320, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f709c6ce358"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f00000004c0)=0x7, 0x0, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x30}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000010) mknodat(r0, &(0x7f0000000640)='./file0\x00', 0x400, 0x2e5) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) socketpair(0x9, 0x2, 0x2, &(0x7f00000008c0)) syz_io_uring_setup(0x3741, &(0x7f0000000900)={0x0, 0x8990, 0x1, 0x2, 0x350, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000980), &(0x7f00000009c0)) r9 = socket(0x10, 0x1, 0x2a7) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80160000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 03:38:21 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x515}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x12}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc084}, 0x20000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x202, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040000) r1 = syz_io_uring_complete(0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x802, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000380)={0x2, 'wlan1\x00', {0x3}, 0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x100, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xb00}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x78, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x100}}, 0x4000000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000580)={0x0, 0x1, r2, 0xfffffffc, 0x80000}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x801) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RUNLINKAT(r5, &(0x7f0000000700)={0x7, 0x4d, 0x2}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000740)="3f0e9e65c9dfb96388d6d1ae2588099d0759ea11b0d1c05397b6022981d167e7984501", 0x23, r4}, 0x68) r6 = syz_io_uring_setup(0xe7, &(0x7f0000000800)={0x0, 0x6b01, 0x2, 0x3, 0xb0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x6000, @fd=r6, 0x800, &(0x7f0000000900), 0x0, 0x7}, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000980)={@id, 0x10, 0x0, '\x00', @d}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x720}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x96}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x88) r7 = io_uring_setup(0x19a7, &(0x7f0000000b40)={0x0, 0x48f7, 0x20, 0x80, 0x179, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x30, r7, 0x10000000) 03:38:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x800}, 0xff) r1 = socket(0x9, 0x6, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48805}, 0x40041) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x4142, 0x88) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x200448c0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x4000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) r4 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x1800, 0x4200) readlinkat(r4, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=""/224, 0xe0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000640)={0x1f, @none}, 0x8) r5 = syz_open_dev$vcsa(&(0x7f0000000680), 0x45643a9a, 0x2) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c800}, 0x8000) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x8c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffff801}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r6 = syz_mount_image$msdos(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x5bf, 0x2, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="c070715f672575320a07dd44a131d1b65a4ea09fdb18e267b7f2349e498cd2f3025f5c8aef14ef6a4eff2b45940258f619fa39e20c5630989b90c153ed9495ce8b112002e6aa91925d5a2fa3512a56351acf7f71da18dbe9abb041beabde2ee927d4eb2536a70e3b6d", 0x69, 0x2220}, {&(0x7f0000000b40)="1f579a31c9c3bf622a8bbcbb260e18a88bc396a141564d268a1d4d886f3b81d58d1a37efc3062bd3189c4000732602b3ba258256c96379840a0c98e77b226e3ec9d2e86428707a71cf59d9e20c74feb7a7bb18cd33d2a7dd7ca510aa23153f0c16b74f50c60bc12156b5ed9a87cdf87f952a0f360cc1889f9f87741f57eccb190386644e9ecd4d9a1f90d1ac653cafe77463c4798e67dcd2d4eefd9616c8362adeb665ee1eb1db0ebbdd4d1b262199df732b8989f01da8a7cb4f54644996b5dea1093855086d3dc2ee12580cecbdf6045573bb97a0c45e1be8507dcf8c0dad0c0ee73a19b9", 0xe5, 0x80000000}], 0x80000, &(0x7f0000000c80)={[{@fat=@quiet}, {@fat=@tz_utc}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '.log\x00'}}]}) r7 = openat$incfs(r6, &(0x7f0000000d00)='.log\x00', 0x30002, 0x20) r8 = syz_open_dev$vcsa(&(0x7f0000000d40), 0x4, 0x40000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004030}, 0x4040851) 03:38:21 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/4096, 0x1000, &(0x7f0000002080)={&(0x7f0000001040)={'crct10dif-arm64-ce\x00'}, &(0x7f0000001080)="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", 0x1000}) keyctl$link(0x8, 0x0, 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f00000020c0), &(0x7f0000002100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) keyctl$negate(0xd, r0, 0x2, r0) r1 = request_key(&(0x7f00000021c0)='.dead\x00', &(0x7f0000002200)={'syz', 0x1}, &(0x7f0000002240)='crct10dif-arm64-ce\x00', r0) r2 = add_key$keyring(&(0x7f0000002140), &(0x7f0000002180)={'syz', 0x3}, 0x0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000002280)={@id={0x2, 0x0, @a}, 0x6, r1, '\x00', @auto=[0x37, 0x19, 0x31, 0x13, 0x20, 0x2c]}) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000002300)='rxrpc\x00', &(0x7f0000002340)='\x00') r3 = request_key(&(0x7f0000002380)='asymmetric\x00', &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000002400)='/&+@{\x00', 0x0) add_key$user(&(0x7f0000002440), &(0x7f0000002480)={'syz', 0x1}, &(0x7f00000024c0)="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", 0x1000, r3) add_key$user(&(0x7f00000034c0), &(0x7f0000003500)={'syz', 0x3}, &(0x7f0000003540)="0597831f6a3c15a85ea388489463fab67652c113a55b07590102b96e96241e4441324fd1e1a10e80ec1bfa1453d3c2f1ea952dc9ae179f59fe9704fd99252956ac099edcb7297bed2d87b2f9051d6421267430d8a2cd4710b0276fbaa1b8558dba6ba96acc66cb0eb4624e5e79b180341608ce256c37f2177a65ba55be866bebfcda8fa2eef6a7d1e4ece9bf5d48d1a10c5285dde8219e18bfe3b23b", 0x9c, r0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000003600)='./file0\x00', &(0x7f0000003640)=@reiserfs_6={0x18, 0x6, {0x4, 0x5, 0x26, 0x8, 0x0, 0x2}}, &(0x7f0000003680), 0x0) keyctl$get_persistent(0x16, 0xee01, r1) r4 = request_key(&(0x7f00000036c0)='ceph\x00', &(0x7f0000003700)={'syz', 0x0}, &(0x7f0000003740)='rxrpc\x00', 0x0) keyctl$reject(0x13, r4, 0xf622, 0xffffffffffff0000, r0) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000003780)='ceph\x00') r5 = request_key(&(0x7f00000037c0)='asymmetric\x00', &(0x7f0000003800)={'syz', 0x3}, &(0x7f0000003840)='%!\x00', 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, r2, r5, 0x0) keyctl$clear(0x7, 0x0) 03:38:21 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x10, 0x0, 0x4}, 0x6}}, 0x18) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x40, 0x3, 0x7}, 0x2}}, 0x18) write$9p(r0, &(0x7f0000000100)="e669cac4cb5be4ecf5fa73bf791134a521ddb9528c40813e91f246d262b6d05ce72f16334363c4a23dc5da45f935bde778b053a94398f014916c442fe7b4a07f63ab4cac70fb7435a3c11d51781d91a367d051b1c4f2de439d83eb9e532533a430064d058ca87ead9a1fc725cd6640bbec18321c0c37867002", 0x79) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0xe00) r3 = syz_io_uring_complete(0x0) write$P9_RREMOVE(r3, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) r4 = syz_open_dev$vcsa(&(0x7f0000000200), 0x2, 0x109000) write$P9_RWRITE(r4, &(0x7f0000000240)={0xb, 0x77, 0x2, 0xfffffff7}, 0xb) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x74}}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000480)={r6, 0x1, r2, 0x1, 0x80000}) write$P9_RMKNOD(r3, &(0x7f00000004c0)={0x14, 0x13, 0x2, {0x80, 0x3, 0x3}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000500)={r6, 0x0, r1, 0x6, 0x80000}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000085) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000700)=r8) 03:38:21 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x0) r2 = syz_io_uring_setup(0x312c, &(0x7f0000000000)={0x0, 0x5362, 0x10, 0x3, 0x121}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4010, r2, 0x93fb5000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r2, 0x8000000) r5 = syz_io_uring_complete(r4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x11010, r5, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) faccessat2(r5, &(0x7f00000004c0)='./file0\x00', 0x43, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r5, 0x0) syz_io_uring_complete(r6) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}}, 0x20004040) 03:38:21 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x40000, 0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x50) r1 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x5fad87e826e82d55, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_io_uring_setup(0x50d, &(0x7f0000000240)={0x0, 0xa60a, 0x1, 0x0, 0x1f8, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7a8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2c0}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r5 = syz_io_uring_complete(r2) renameat(r1, &(0x7f0000000500)='./file0\x00', r5, &(0x7f0000000540)='./file0\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc800}, 0x8040) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f00000006c0)=0x1, 0x0, 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r6) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81c8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7247}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x801) r8 = syz_io_uring_setup(0x8d8, &(0x7f0000000980)={0x0, 0xbf41, 0x8, 0x0, 0x13c, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) io_uring_setup(0x57ed, &(0x7f0000000a80)={0x0, 0x2bb9, 0x4, 0x0, 0x19d, 0x0, r8}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b00), 0x301042, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) [ 52.593998] audit: type=1400 audit(1677469101.760:6): avc: denied { execmem } for pid=261 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 53.853469] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.855409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.857038] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.857998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.859220] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.860192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.864255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.865216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.867154] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.868218] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.869603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.870630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.914201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.916029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.918060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.920400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.929033] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.930308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.982674] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 53.984762] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 53.987141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.003573] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.014444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.015541] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.017655] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.020310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.021581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.059415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.062455] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.066643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.072630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.075166] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.079138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.083106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.089613] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.094031] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.094148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.097450] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.097513] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.105190] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.105275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.109365] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 55.932409] Bluetooth: hci0: command 0x0409 tx timeout [ 55.933226] Bluetooth: hci1: command 0x0409 tx timeout [ 55.996028] Bluetooth: hci2: command 0x0409 tx timeout [ 55.996056] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 55.999025] [ 55.999255] ====================================================== [ 56.000017] WARNING: possible circular locking dependency detected [ 56.000755] 6.2.0-next-20230224 #1 Not tainted [ 56.001304] ------------------------------------------------------ [ 56.005754] syz-executor.0/273 is trying to acquire lock: [ 56.006441] ffff8880158b0880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 56.007738] [ 56.007738] but task is already holding lock: [ 56.008447] ffff8880158b0920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 56.009606] [ 56.009606] which lock already depends on the new lock. [ 56.009606] [ 56.010588] [ 56.010588] the existing dependency chain (in reverse order) is: [ 56.011464] [ 56.011464] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 56.012309] __mutex_lock+0x133/0x14a0 [ 56.012872] hci_cmd_sync_work+0x1e6/0x320 [ 56.013457] process_one_work+0xa0f/0x1790 [ 56.014059] worker_thread+0x63b/0x1260 [ 56.014637] kthread+0x2e9/0x3a0 [ 56.015115] ret_from_fork+0x2c/0x50 [ 56.015641] [ 56.015641] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 56.016635] __lock_acquire+0x2d56/0x6380 [ 56.017240] lock_acquire.part.0+0xea/0x320 [ 56.017878] __flush_work+0x109/0xd80 [ 56.018423] __cancel_work_timer+0x39c/0x4e0 [ 56.019044] hci_cmd_sync_clear+0x52/0x250 [ 56.019632] hci_unregister_dev+0xf9/0x410 [ 56.020223] vhci_release+0x80/0x100 [ 56.020762] __fput+0x263/0xa40 [ 56.021244] task_work_run+0x174/0x280 [ 56.021807] do_exit+0xad8/0x2800 [ 56.022310] do_group_exit+0xd4/0x2a0 [ 56.022842] __x64_sys_exit_group+0x3e/0x50 [ 56.023444] do_syscall_64+0x3f/0x90 [ 56.023966] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 56.024652] [ 56.024652] other info that might help us debug this: [ 56.024652] [ 56.025576] Possible unsafe locking scenario: [ 56.025576] [ 56.026299] CPU0 CPU1 [ 56.026839] ---- ---- [ 56.027385] lock(&hdev->cmd_sync_work_lock); [ 56.027932] lock((work_completion)(&hdev->cmd_sync_work)); [ 56.028888] lock(&hdev->cmd_sync_work_lock); [ 56.029701] lock((work_completion)(&hdev->cmd_sync_work)); [ 56.030408] [ 56.030408] *** DEADLOCK *** [ 56.030408] [ 56.031121] 1 lock held by syz-executor.0/273: [ 56.031670] #0: ffff8880158b0920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 56.032880] [ 56.032880] stack backtrace: [ 56.033412] CPU: 0 PID: 273 Comm: syz-executor.0 Not tainted 6.2.0-next-20230224 #1 [ 56.034333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 56.035300] Call Trace: [ 56.035617] [ 56.035900] dump_stack_lvl+0x91/0xf0 [ 56.036371] check_noncircular+0x263/0x2e0 [ 56.036903] ? __pfx_check_noncircular+0x10/0x10 [ 56.037491] ? __pfx_mark_lock.part.0+0x10/0x10 [ 56.038107] __lock_acquire+0x2d56/0x6380 [ 56.038645] ? __pfx___lock_acquire+0x10/0x10 [ 56.039222] ? __pfx_register_lock_class+0x10/0x10 [ 56.039850] lock_acquire.part.0+0xea/0x320 [ 56.040401] ? __flush_work+0xdd/0xd80 [ 56.040909] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 56.041524] ? __flush_work+0xdd/0xd80 [ 56.042047] ? rcu_read_lock_sched_held+0x42/0x80 [ 56.042634] ? trace_lock_acquire+0x170/0x1e0 [ 56.043208] ? __flush_work+0xdd/0xd80 [ 56.043706] ? lock_acquire+0x32/0xc0 [ 56.044192] ? __flush_work+0xdd/0xd80 [ 56.044694] __flush_work+0x109/0xd80 [ 56.045188] ? __flush_work+0xdd/0xd80 [ 56.045686] ? __pfx_mark_lock.part.0+0x10/0x10 [ 56.046292] ? __pfx___flush_work+0x10/0x10 [ 56.046834] ? lock_acquire.part.0+0xea/0x320 [ 56.047416] ? hci_cmd_sync_clear+0x45/0x250 [ 56.047968] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 56.048588] ? hci_cmd_sync_clear+0x45/0x250 [ 56.049140] ? rcu_read_lock_sched_held+0x42/0x80 [ 56.049739] ? trace_lock_acquire+0x170/0x1e0 [ 56.050340] ? lock_is_held_type+0x9f/0x120 [ 56.050888] ? mark_held_locks+0x9e/0xe0 [ 56.051417] __cancel_work_timer+0x39c/0x4e0 [ 56.051960] ? __pfx___cancel_work_timer+0x10/0x10 [ 56.052553] ? __cancel_work_timer+0x2aa/0x4e0 [ 56.053111] ? __pfx___cancel_work_timer+0x10/0x10 [ 56.053699] ? lock_release+0x1e3/0x710 [ 56.054210] ? __pfx_lock_release+0x10/0x10 [ 56.054751] ? do_raw_write_lock+0x11e/0x3b0 [ 56.055301] ? __pfx_vhci_release+0x10/0x10 [ 56.055837] hci_cmd_sync_clear+0x52/0x250 [ 56.056362] ? __pfx_vhci_release+0x10/0x10 [ 56.056899] hci_unregister_dev+0xf9/0x410 [ 56.057425] vhci_release+0x80/0x100 [ 56.057917] __fput+0x263/0xa40 [ 56.058344] task_work_run+0x174/0x280 [ 56.058832] ? __pfx_task_work_run+0x10/0x10 [ 56.059380] ? do_raw_spin_unlock+0x53/0x220 [ 56.059931] do_exit+0xad8/0x2800 [ 56.060370] ? lock_release+0x1e3/0x710 [ 56.060871] ? __pfx_lock_release+0x10/0x10 [ 56.061423] ? do_raw_spin_lock+0x125/0x270 [ 56.061968] ? __pfx_do_exit+0x10/0x10 [ 56.062463] do_group_exit+0xd4/0x2a0 [ 56.062945] __x64_sys_exit_group+0x3e/0x50 [ 56.063479] do_syscall_64+0x3f/0x90 [ 56.063946] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 56.064578] RIP: 0033:0x7fcefcc90b19 [ 56.065037] Code: Unable to access opcode bytes at 0x7fcefcc90aef. [ 56.065783] RSP: 002b:00007ffea99d8478 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.066704] RAX: ffffffffffffffda RBX: 00007ffea99d8c58 RCX: 00007fcefcc90b19 [ 56.067555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 56.068404] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007ffea99d8c58 [ 56.069256] R10: 0000000000000020 R11: 0000000000000246 R12: 00007fcefccea233 [ 56.070105] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 56.070961] [ 56.071593] Bluetooth: hci7: command 0x0409 tx timeout [ 56.124178] Bluetooth: hci6: command 0x0409 tx timeout [ 56.124198] Bluetooth: hci5: command 0x0409 tx timeout [ 56.187971] Bluetooth: hci3: command 0x0409 tx timeout [ 57.979978] Bluetooth: hci1: command 0x041b tx timeout [ 57.980722] Bluetooth: hci0: command 0x041b tx timeout [ 58.044052] Bluetooth: hci2: command 0x041b tx timeout [ 58.109015] Bluetooth: hci7: command 0x041b tx timeout [ 58.172150] Bluetooth: hci5: command 0x041b tx timeout [ 58.172895] Bluetooth: hci6: command 0x041b tx timeout [ 58.235973] Bluetooth: hci3: command 0x041b tx timeout [ 60.028160] Bluetooth: hci0: command 0x040f tx timeout [ 60.028175] Bluetooth: hci1: command 0x040f tx timeout [ 60.092055] Bluetooth: hci2: command 0x040f tx timeout [ 60.156005] Bluetooth: hci7: command 0x040f tx timeout [ 60.220029] Bluetooth: hci6: command 0x040f tx timeout [ 60.220038] Bluetooth: hci5: command 0x040f tx timeout [ 60.283972] Bluetooth: hci3: command 0x040f tx timeout [ 60.731958] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 62.075951] Bluetooth: hci0: command 0x0419 tx timeout [ 62.076953] Bluetooth: hci1: command 0x0419 tx timeout [ 62.139942] Bluetooth: hci2: command 0x0419 tx timeout [ 62.203949] Bluetooth: hci7: command 0x0419 tx timeout [ 62.267955] Bluetooth: hci6: command 0x0419 tx timeout [ 62.268995] Bluetooth: hci5: command 0x0419 tx timeout [ 62.331995] Bluetooth: hci3: command 0x0419 tx timeout [ 62.973549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.974503] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.975700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.977008] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.977778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.978545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.020026] Bluetooth: hci4: command 0x0409 tx timeout VM DIAGNOSIS: 03:38:25 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff888029aff190 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe19935bd000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe19935bb000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5082b31620 CR3=0000000014662000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ff00ff00ff00ff00ff00ffffff00 XMM01=010001000100010001000100010100ff XMM02=61305f315f315f4c53534e45504f0030 XMM03=000000000000000000000000004f0030 XMM04=504f0061305f315f315f4c53534e4550 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff88800df55040 RSI=ffffffff814bf26a RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888016cf7690 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85651808 R15=ffff8880346d6e00 RIP=ffffffff81367e66 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe12ece25000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe12ece23000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0633274310 CR3=0000000018a84000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000