Debian GNU/Linux 11 syzkaller ttyS0
Warning: Permanently added '[localhost]:9038' (ECDSA) to the list of known hosts.
2025/01/20 23:48:35 fuzzer started
2025/01/20 23:48:35 dialing manager at localhost:44833
syzkaller login: [ 69.828449] cgroup: Unknown subsys name 'net'
[ 69.946763] cgroup: Unknown subsys name 'cpuset'
[ 69.980500] cgroup: Unknown subsys name 'rlimit'
[ 86.874742] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/20 23:48:53 syscalls: 210
2025/01/20 23:48:53 code coverage: enabled
2025/01/20 23:48:53 comparison tracing: enabled
2025/01/20 23:48:53 extra coverage: enabled
2025/01/20 23:48:53 setuid sandbox: enabled
2025/01/20 23:48:53 namespace sandbox: enabled
2025/01/20 23:48:53 Android sandbox: enabled
2025/01/20 23:48:53 fault injection: enabled
2025/01/20 23:48:53 leak checking: enabled
2025/01/20 23:48:53 net packet injection: enabled
2025/01/20 23:48:53 net device setup: enabled
2025/01/20 23:48:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/20 23:48:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/20 23:48:53 USB emulation: enabled
2025/01/20 23:48:53 hci packet injection: enabled
2025/01/20 23:48:53 wifi device emulation: enabled
2025/01/20 23:48:53 802.15.4 emulation: enabled
2025/01/20 23:48:53 fetching corpus: 0, signal 0/0 (executing program)
2025/01/20 23:48:55 starting 8 fuzzer processes
23:48:55 executing program 1:
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x64, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={<r1=>0x0, 0x0, 0x1, [0x4, 0x5, 0x1, 0xcb, 0x4], [0x7b7e7f05, 0x4, 0x8, 0xff, 0x1, 0x3ff, 0x2, 0x1, 0x3, 0x437e, 0x87fa, 0x771, 0x3, 0x1, 0x8, 0x80000001, 0x6, 0x9, 0x8, 0x25, 0xffffffffffffffe1, 0x0, 0x1, 0x1, 0x81, 0x20, 0xf30, 0xffff, 0x9, 0x3, 0x100000001, 0x4, 0x6, 0xffff, 0x4, 0x3, 0xfffffffffffffff9, 0x9, 0x80, 0x8000, 0x200000, 0x8, 0x4, 0xfffffffffffffffb, 0xb2c, 0x9, 0x2, 0x7f, 0x8001, 0x3, 0x9, 0x5, 0xfffffffffffffffc, 0x10001, 0x7fffffff, 0x8, 0x81, 0x219, 0xff, 0x401, 0x7f, 0xc57, 0x3, 0xcbd, 0x8c, 0xfffffffffffffffe, 0x6, 0xfff, 0xdf, 0x7, 0x0, 0x100000000, 0x4, 0x8a4, 0x4, 0x7, 0x3, 0x400, 0x3, 0x7, 0x8, 0x4f14, 0x4, 0x2, 0xff, 0x9, 0xd4, 0x1, 0xbd4, 0x1, 0xfff, 0x3, 0x7a, 0x8, 0x7, 0xf384, 0x9, 0xffffffffffffffff, 0x630, 0x9, 0x6, 0x80000001, 0x3ff, 0x6, 0x400, 0x7, 0x9, 0x9, 0x4, 0xac3, 0x7f4, 0x3, 0xffffffffffffff81, 0xfffffffffffffbff, 0x49, 0x2, 0x286, 0x6, 0x8, 0xfffffffffffffffe, 0x401]})
socketpair(0xa, 0x4, 0x1000, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000540)=""/10)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={0x0, @phonet={0x23, 0x8, 0x4}, @generic={0x26, "765d855e3854f5f4ef6c16ef4223"}, @nfc={0x27, 0x1, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)='ip6_vti0\x00', 0x8, 0x81, 0x1})
r4 = syz_open_dev$evdev(&(0x7f0000000640), 0x6, 0x349d00)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000700)={{r4}, 0x0, 0x12, @inherit={0x58, &(0x7f0000000680)={0x1, 0x2, 0x9, 0x7fffffff, {0x2, 0x7, 0xff, 0x9, 0x50f}, [0x1, 0xffff]}}, @name="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"})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001700)={{r5}, 0x0, 0x20, @unused=[0x3, 0x80000000, 0x2, 0x9], @devid=r1})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000003800)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002700)=""/4096, 0x1000, 0x1, &(0x7f0000003700)=""/200, 0xc8}, &(0x7f0000003840)=0x40)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000003880)=0x1, 0x4)
ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000038c0))
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000003900)=<r7=>0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000003a00)={<r8=>r1, 0x0, 0x1, [0x7, 0x50d, 0x100000001, 0x2, 0x3], [0x9, 0xfa, 0x9, 0x101, 0x5, 0x5, 0x0, 0x10001, 0x1f, 0x8, 0x7fffffff, 0xf7, 0x9, 0x3ff, 0x2, 0x9c8, 0x66af6663, 0x5, 0xeb, 0x5, 0x80000000, 0x9, 0xf21, 0x4, 0x6, 0x6, 0x7ff8000, 0xe2b, 0x85b0, 0xffffffff93dbbe3d, 0x0, 0x3f, 0x3, 0x5, 0x7, 0x3, 0x9, 0xbbe5, 0x25f4bd6a, 0x2, 0x9, 0x9, 0x4, 0x100000000, 0x9, 0x400000000000000, 0x8, 0x2, 0x21, 0x271, 0x8001, 0x7ff, 0x4, 0x1, 0x7, 0x5b7, 0x9, 0xff, 0x9, 0x3, 0x0, 0x6, 0x6, 0x61, 0x101, 0xc5a7, 0x10000, 0x191, 0x8d5, 0x3bc, 0x1, 0x7, 0x3, 0x9, 0x6, 0x1, 0x9, 0x0, 0x911e, 0x4, 0x10000, 0xff, 0x2, 0x80000001, 0x2, 0x9, 0x3f, 0x6, 0x20, 0x2b, 0x1, 0x3ff, 0x8000, 0x0, 0x1000, 0x6, 0x4, 0x7, 0x4, 0x400, 0x401, 0x2, 0x10000, 0x2, 0x6, 0xf17, 0x8, 0x7fffffff, 0x5, 0x3, 0x0, 0x7f, 0x38e, 0x8, 0x3, 0x3f, 0x4, 0x3, 0x5, 0x1000, 0x3f]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000003e40)={{r2}, r7, 0x16, @inherit={0x88, &(0x7f0000003940)={0x0, 0x8, 0x17de000000, 0x5d4a, {0x4, 0x8, 0x1, 0x55d1, 0x3ff}, [0xfff, 0x4, 0x7fffffff, 0x80, 0x4, 0x663f6e0a, 0x3ff, 0x4]}}, @devid=r8})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000004e40)={r1, 0x200, 0x9, 0x1})
23:48:55 executing program 0:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x240cc080)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000140)={<r1=>0x0, 0x4, 0x56a2})
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000540))
write$cgroup_subtree(r0, &(0x7f0000000580)={[{0x16, 'perf_event'}, {0x2b, 'rdma'}, {0x2b, 'net_cls'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2b, 'rlimit'}, {0x2b, 'net_prio'}, {0x2b, 'perf_event'}, {0x2b, 'freezer'}, {0x2b, 'memory'}]}, 0x5b)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000600)={<r2=>r1, 0x1ff, 0x7, 0x1})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a00)={0x20, 0x0, {0x1ff, @struct={0x1ff}, <r3=>r2, 0x9, 0x101, 0x80000001, 0x3, 0x9, 0x288, @usage=0x7, 0x3, 0xff, [0x6, 0x7, 0x400, 0x7f, 0x6, 0x7]}, {0x2, @struct={0x7, 0x5}, r2, 0x3f, 0x4c, 0x0, 0xffffffff, 0x80000001, 0x1, @usage=0x101, 0x100, 0x1, [0x8, 0x5, 0x0, 0x80, 0x1, 0x5a]}, {0x8c, @struct={0x1, 0xfffffffc}, r2, 0x20, 0x80000000, 0x3ff, 0x1ff, 0x9, 0x26, @struct={0x1, 0x2}, 0x3, 0x5, [0x7f, 0x6, 0x1, 0x30000000, 0x7e, 0xd9]}, {0x5, 0x7f, 0x34ba}})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000e00)={r3, 0x401, 0x3})
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001200))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000001240)={@in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x0, 0x3, 0x0, "3070adb05757dc04a9da178438abe3a278285a6ca4af95824256b3ef175411edb453f8ee1496f05ce51ad7ab9de51c51a4c82c011d5ff6ae32203bfebafff877523b4994a986deb16896a76c8e3a60dc"}, 0xd8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000001340)=0x3f, 0x4)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001380), 0x201, 0x0)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000013c0)={0x54, 0x7fff, 0x8b, {0xf171, 0x1}, {0x2, 0x1}, @cond=[{0x82e2, 0x6, 0xf7, 0x20, 0xff, 0x3c}, {0x800, 0x81, 0x8, 0x5, 0xff}]})
getpeername(r4, &(0x7f0000001400)=@pppol2tpin6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001480)=0x80)
sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3b}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc095)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000015c0)="b313b515ad3d1d3c8cd44149d55b9553cac35902712828272f22116f2019fab98424907c515831f4d8ad55a5fcf7cbf0962448cdee96eb98e2e894265c468a6e1b8c722deeb232771c887559ad25c15df3", 0x51)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r6)
io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1)
23:48:55 executing program 2:
rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0x989680}, 0x8)
rt_sigtimedwait(&(0x7f0000000100)={[0x7]}, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, 0x8)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000280)="3c4546df28007b458d0e4549fbd3f57f", 0x10)
clock_getres(0x1, &(0x7f00000002c0))
clock_gettime(0x0, &(0x7f00000003c0)={<r1=>0x0, <r2=>0x0})
rt_sigtimedwait(&(0x7f0000000300)={[0x6]}, &(0x7f0000000340), &(0x7f0000000400)={r1, r2+60000000}, 0x8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000440)=0x1, 0x4)
getpeername(r3, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000500)=0x80)
pselect6(0x40, &(0x7f0000000540)={0xd5e, 0x74, 0x9, 0x4, 0x3, 0x2, 0xffffffffffff8175, 0x8001}, &(0x7f0000000580)={0x1000, 0x200, 0x9, 0x4, 0xf80000, 0x6, 0x5, 0x80000000}, &(0x7f00000005c0)={0xfffffffffffffffd, 0x1, 0x2, 0x944, 0x8, 0x5, 0x100000001, 0xf3}, &(0x7f0000000600), &(0x7f0000000680)={&(0x7f0000000640)={[0xffffffffffffff86]}, 0x8})
clock_getres(0x5, &(0x7f00000006c0))
clock_gettime(0x0, &(0x7f00000007c0)={<r4=>0x0, <r5=>0x0})
pselect6(0x40, &(0x7f0000000700)={0x2, 0xffffffffffffff80, 0x5, 0x7, 0x6, 0x5, 0x101, 0x5}, &(0x7f0000000740)={0x80000001, 0x6, 0xfffffffffffffffb, 0x81, 0x0, 0x6, 0x4, 0x5}, &(0x7f0000000780)={0x4, 0x2, 0x8, 0x4, 0x3, 0x0, 0x7, 0x3}, &(0x7f0000000800)={r4, r5+60000000}, &(0x7f0000000880)={&(0x7f0000000840)={[0x86e]}, 0x8})
getpeername(r3, &(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000940)=0x80)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x80000)
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000009c0)={0x0, 0xf6b, 0x1})
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000dc0)=""/150)
io_uring_enter(r0, 0x3c1f, 0x3a14, 0x1, &(0x7f0000000e80)={[0x9]}, 0x8)
[ 89.399878] audit: type=1400 audit(1737416935.539:7): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:48:55 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @qipcrtr={0x2a, 0x0, 0x4001}, @l2={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x401, 0x2}, @llc={0x1a, 0x20, 0x9c, 0x4, 0x20, 0x9, @local}, 0x7, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='ipvlan0\x00', 0x2, 0xdab1})
semctl$GETNCNT(0xffffffffffffffff, 0x1, 0xe, &(0x7f0000000100)=""/202)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, @sco={0x1f, @none}, @phonet={0x23, 0x7, 0x40, 0xff}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x1f, 0x0, 0x0, 0x0, 0x6a, &(0x7f0000000200)='batadv_slave_1\x00', 0xfffffffffffffffd, 0x9, 0x101})
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair(0x1d, 0x6, 0x9, &(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r5=>0xffffffffffffffff})
socketpair(0x1, 0x6, 0x2, &(0x7f0000000500)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x2000805)
io_uring_setup(0x4e01, &(0x7f0000000640)={0x0, 0xae75, 0x4, 0x3, 0xbf})
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000700)={0x0, @in={0x2, 0x4e22, @loopback}, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4}}, @nfc={0x27, 0x1, 0x1, 0x1}, 0x73, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)='bridge_slave_1\x00', 0x6, 0x10000, 0x3})
r8 = fsmount(0xffffffffffffffff, 0x0, 0x70)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000780)={0x1, 0x1, 0x3, 0x3, 0x6})
socketpair(0x0, 0x1, 0x200, &(0x7f00000007c0))
r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x10000, 0x0)
ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000840)={0x1, 0x12, 0x100, 0x3, "0587505f46c199d385205f713af02afb262ef370872df06f7e2c3546b5181d7e"})
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x4004000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000001140)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000dc0)={0x31c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4ae}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x9, 0x0, 0x1}, {0xfff, 0xdc, 0x4, 0x8000}, {0x641b, 0x4, 0x82, 0xffffffff}, {0x2, 0x8, 0x9, 0x1ff}, {0x3, 0x77}, {0x1, 0x34, 0x2, 0x8001}, {0x3, 0x81, 0xd2, 0x7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x712d}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3ff, 0x8, 0x8, 0x17fe}, {0x1bf5, 0xf7, 0xff, 0x9}, {0x9, 0x5, 0x9, 0x5}]}}}]}}, {{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x8000}, 0x48087)
23:48:55 executing program 4:
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={<r0=>0x0, 0x4, 0x0, [0x100000001, 0x100000001, 0x1ff, 0x855, 0x9], [0x2, 0x6, 0x54, 0x1, 0x81, 0xfffffffffffffff7, 0x0, 0x2d, 0x7, 0x7, 0x4, 0x400, 0x80000001, 0x0, 0xec4, 0x0, 0x1, 0x101, 0x924, 0x3fb, 0x0, 0xfffffffffffffffa, 0x7, 0x7f, 0x9, 0x9, 0x100000000, 0x5ad, 0xff, 0x0, 0x100000001, 0x9, 0x5, 0xb9, 0x8001, 0x2, 0x2, 0x200, 0x3, 0x800, 0x100, 0x1, 0x1, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x7, 0x8000, 0x8, 0x81, 0x81, 0x9a6, 0x4, 0x7, 0x9, 0x200, 0x5, 0x9, 0xfff, 0x800, 0x1000, 0x4, 0x9, 0x1, 0x0, 0x5, 0x7, 0x4, 0x6a1, 0xca, 0x5, 0x100, 0x1ff, 0x1, 0x3, 0x5, 0x101, 0x100000000, 0x7, 0x0, 0x31c07d0f, 0x2, 0xfffffffffffffffb, 0x4, 0x4, 0x6, 0x5a5bea27, 0x35c3, 0x4, 0x7, 0x9, 0xa290, 0x2, 0x6, 0x100000000, 0x6, 0x8, 0x20, 0x3c3b, 0x2, 0x6, 0xfffffffffffffffd, 0x4, 0x4, 0x8, 0x10000, 0x7, 0xfffffffffffff001, 0x8, 0x7, 0x80000001, 0x567, 0x6, 0x4, 0x401, 0xfffffffffffffffb, 0x6, 0x7, 0x9]})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000440)={0x10, 0x5, {0x7, @usage=0x3c, 0x0, 0x0, 0x7, 0x7, 0x0, 0xffffffff, 0x80, @struct={0x3, 0x1}, 0x8e, 0x5, [0x0, 0x5, 0x7, 0x2, 0x8000, 0xfffffffffffffffd]}, {0x10000, @usage=0x100000001, r0, 0x40, 0x3, 0x6, 0x101, 0x6, 0x0, @usage=0x9, 0xffff4506, 0x3, [0x20, 0xffffffffffffff17, 0x9, 0x0, 0x8000, 0x1]}, {0xfff, @struct={0xdc9, 0x9}, 0x0, 0x80, 0x200, 0x1, 0x0, 0x5, 0x0, @struct={0x3, 0x4}, 0x2, 0xffff, [0xffffffff, 0x4, 0x4, 0x3, 0x7, 0x7f]}, {0x400, 0x3f, 0x7}})
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000840)={0x0, 0xabe, @status={[0xf583, 0xca, 0xc74, 0x0, 0x7, 0x40]}, [0x3, 0x10000, 0x0, 0xff, 0x81, 0x2, 0xd5, 0x62, 0x4b, 0x7ff, 0x0, 0x28, 0x5a7c656a, 0x9, 0x9, 0x456, 0x7, 0x100000001, 0xb800000000000000, 0x1, 0x6, 0x8fb, 0x0, 0x1ff, 0xffff, 0x81, 0x200, 0x8, 0x8, 0x8, 0x6, 0x9, 0x5, 0x4, 0xe39, 0xffffffffffffffc3, 0x4, 0x9, 0xfffffffffffffffe, 0x5f3d, 0x7f, 0x7, 0x9, 0x5, 0x9, 0x8a3d, 0x101, 0x9, 0x7f, 0xffffffff, 0x5, 0xcb, 0x8, 0x40, 0x3, 0x14000000000000, 0x80000000, 0x10000, 0x0, 0x2, 0xff, 0x8001, 0x7fffffff]})
socketpair(0x23, 0x6, 0x9bc7, &(0x7f0000001280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000012c0)=0x9, 0x4)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001300)="92c7580db5b8b28c35318cbaba69c370", 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @struct, <r3=>0x0}, {0x0, @usage, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000001740))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r5=>r1, {<r6=>0xee00, <r7=>0xffffffffffffffff}}, './file0\x00'})
io_uring_enter(r5, 0x6673, 0xfa42, 0x3, &(0x7f00000017c0)={[0x2]}, 0x8)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000001840)=0x1, 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001880)={{0x1, 0x1, 0x18, <r9=>r5, {r6, r7}}, './file0\x00'})
ioctl$EVIOCSABS2F(r9, 0x401845ef, &(0x7f00000018c0)={0x1, 0x3, 0x1, 0x50859e3f, 0x800, 0xaf6})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001900)={<r10=>r4, 0x3b6d, 0x0, 0x1})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000001d00)={r10, 0x1000, 0x24a0, 0x1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r8, 0x0)
r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000002100), 0x125042, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r11, 0x50009417, &(0x7f00000021c0)={{r5}, 0x0, 0x16, @inherit={0x68, &(0x7f0000002140)={0x0, 0x4, 0x4, 0x5, {0x2, 0x2, 0x4, 0x28, 0xffffffffffffffc0}, [0x7, 0x3, 0x200, 0x8000]}}, @devid=r3})
stat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200))
23:48:55 executing program 6:
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x18b000, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x62142, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x141c00, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000280)={{r4}, {@void, @actul_num={@val, 0x3ff, 0x5e}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x14000}, 0x8000)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000440)={<r5=>0x0, 0x410, 0x0, [0x4, 0x9, 0x61707754, 0x6, 0x1000], [0x3, 0x10001, 0x8, 0x8, 0x7, 0x7, 0x0, 0x9, 0x8, 0x7, 0x2, 0x10000, 0xc145, 0x6, 0x4, 0x0, 0x9, 0x7fff, 0x1f, 0x8000, 0x8001, 0x8001, 0x6, 0x4, 0x2, 0x4, 0x0, 0xea, 0xf2, 0x1f, 0xff, 0x5, 0x1, 0x5, 0x1, 0x10001, 0xfffffffffffffffa, 0xff, 0x7fffffff, 0x467, 0xfffffffffffffff7, 0xffffffff, 0x8, 0x1, 0x8, 0x3, 0x6, 0x2, 0x100000000, 0x15, 0x10000, 0xb, 0x69c7, 0x2, 0x14, 0x8, 0xabe, 0x1, 0x6, 0xffffffffffffffff, 0x2, 0x100000001, 0x5, 0xfffffffffffffff8, 0x3, 0x3, 0x6, 0x100000000, 0x2484, 0x8, 0x400000000000000, 0x4, 0x100000000, 0x7f, 0x8, 0x4, 0x9, 0x7, 0xab, 0x1, 0x10001, 0x1000, 0x0, 0x3, 0x9, 0x19, 0xdaf, 0x5, 0x80000001, 0x2, 0x100000000, 0x80, 0x7ff, 0x8, 0x2, 0xffff, 0x8000, 0x3, 0x8, 0x2, 0x6, 0x8, 0xfa, 0x80, 0x5, 0x1000, 0x40, 0x7fff, 0x40, 0x5, 0x7ff, 0x9, 0x80000000, 0x3ff, 0x4, 0x3, 0x4, 0x5, 0x6, 0x0, 0x80000001]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000880)={r5, 0xffffffff, 0x6})
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x90)
r6 = io_uring_setup(0x502c, &(0x7f0000000dc0)={0x0, 0xacab, 0x4, 0x2, 0x370})
io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000e40), r2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, <r7=>r2, {<r8=>0xee00, <r9=>0x0}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, r7, {r8, r9}}, './file0\x00'})
r10 = inotify_init()
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000f80)={{r10}, 0x0, 0x14, @inherit={0x70, &(0x7f0000000f00)={0x0, 0x5, 0x6, 0x0, {0x1, 0x302, 0x1, 0x10000, 0x7}, [0x3, 0x8, 0x4, 0x0, 0x6dd]}}, @devid=r5})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x30, r0, 0x500, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x140c0)
23:48:55 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000040)={<r1=>0x0, 0x200, 0x0, [0x3ff, 0xff, 0x20, 0xfdeb, 0xe000000000000000], [0x1, 0x3b, 0xfff, 0x6, 0x7fff, 0x7fffffff, 0x57e, 0x3, 0xffffffffffff8000, 0x4, 0xb1, 0x6, 0x6, 0xf3af, 0x80000001, 0xa4, 0x9, 0x5, 0x0, 0x6, 0x4, 0x100, 0x1a67, 0x0, 0x0, 0x9, 0x3f, 0x7fffffff, 0x1, 0x800, 0x5453, 0x0, 0x5, 0x0, 0x2, 0x9, 0x7fffffff, 0x8001, 0x81, 0xff, 0x1, 0x1, 0x8, 0x0, 0x4, 0x55d, 0xfffffffffffffffb, 0x1000, 0x2, 0x1000, 0x4c, 0x36e, 0x0, 0x6, 0x1, 0x7, 0x10001, 0x9, 0x3, 0x8, 0xfe6, 0x8, 0x3, 0x8, 0xbf4, 0xc4, 0x200, 0x3f, 0x100, 0x1f, 0x9, 0x1, 0x3, 0x86cd, 0x7, 0x7f, 0x0, 0x400, 0x80, 0x8, 0x5, 0x9, 0x5b1, 0x8001, 0x0, 0x0, 0x5, 0xff, 0x1, 0x3, 0x2, 0x724, 0x9, 0x6, 0x193, 0x4, 0x2, 0x40, 0x3, 0x5, 0x8, 0x100000000, 0x80, 0x80, 0xfffffffffffffffa, 0x1000, 0x1109, 0x1, 0x8001, 0x6, 0x2352, 0x8, 0x7fffffff, 0x0, 0x2, 0x5a, 0x4, 0x3, 0x8, 0xfffffffffffffff8, 0x4]})
r2 = semget$private(0x0, 0x6, 0x600)
semctl$SEM_STAT_ANY(r2, 0x1, 0x14, &(0x7f0000000480)=""/212)
semctl$SEM_STAT_ANY(r2, 0x4, 0x14, &(0x7f0000000580)=""/71)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000600)={0x9, 0x6, {0x20, @usage=0x1000, r1, 0x4b, 0x1, 0x9, 0xa2b, 0x4, 0x442, @struct={0x7fffffff, 0x3}, 0x101, 0x7f, [0xffff, 0x5c134ccd, 0x8, 0x2, 0x1, 0x4]}, {0x5, @struct={0x200, 0x7fffffff}, <r3=>r1, 0x0, 0x80000000, 0x0, 0x3, 0x896, 0x40, @struct={0x7fffffff, 0x6}, 0xfffffffc, 0x2, [0xa7, 0xf76, 0x100000000, 0x6, 0x20, 0x3]}, {0x1b, @usage=0x8, r1, 0x5, 0x3, 0x0, 0x22b, 0x7, 0x84, @struct={0x1, 0x20}, 0x1, 0x80000001, [0x5, 0x6, 0x0, 0x8, 0x4, 0x9]}, {0x6, 0x8, 0x9}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a00)={r3, 0x64d0a169, 0x9})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000e00)={0x7, 0x5, 0x6, 0x1, 0x7}, 0x14)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000e40), 0x80800, 0x0)
semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000e80)=""/89)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x74, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6c00000000000000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)
write$nbd(r4, &(0x7f0000001080)={0x67446698, 0x0, 0x1, 0x0, 0x2, "63431a8ffcf29661582d2776a81d0be58a353089f954c8233de10252433ddb4399b592c8000442ab257fefd95bededaa34d428098198ba54a5447e95da45601e343eef414ff80bb51c9afb6402d61f2abfadc074a1274a9d44f89727f1b0a77f3ac8e4b8f86bfe2dbdfb2e34bb50ea18993995092cef0ff11952799bcc"}, 0x8d)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3)
sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r6 = semget(0x1, 0x3, 0x100)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000001240)=[0x6d2, 0x7ff, 0x8453, 0x1c1])
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001280), 0x200000)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f00000012c0))
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000001300)=""/194)
23:48:55 executing program 7:
r0 = gettid()
sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x5)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x400)
r2 = gettid()
migrate_pages(r2, 0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffffffffc, &(0x7f0000000140)=0x4)
r3 = fork()
wait4(r3, &(0x7f0000000180), 0x8, &(0x7f00000001c0))
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x800)
r4 = fork()
wait4(r4, &(0x7f00000002c0), 0x8, &(0x7f0000000300))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {r1, 0xffffffffffffffff}}, './file0\x00'})
r6 = gettid()
r7 = perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x3, 0x6, 0x6, 0x4, 0x0, 0x1, 0x5, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x400, 0xb2}, 0x24, 0x7, 0x8, 0x2, 0x3, 0x800, 0x7, 0x0, 0x20, 0x0, 0x4190}, r6, 0x10, r5, 0x1)
r8 = fork()
migrate_pages(r8, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x9)
migrate_pages(r3, 0x5, &(0x7f0000000500)=0x1, &(0x7f0000000540)=0x8a)
perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x4, 0x34, 0x2, 0x1, 0x0, 0x8f, 0x80100, 0x19, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000580), 0xc}, 0x40080, 0x10001, 0x3, 0x2, 0x8, 0x44, 0x8, 0x0, 0xa57f, 0x0, 0x1}, r4, 0xa, r7, 0x0)
fspick(r5, &(0x7f0000000640)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x6, 0x81, 0x40, 0x6, 0x0, 0x0, 0x2040, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x4e2}, 0x4d08, 0x7ff, 0x7b7, 0x2, 0x5, 0x80000001, 0x200, 0x0, 0x0, 0x0, 0x2}, r4, 0xa, r7, 0x9)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
[ 90.823639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.828053] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.830664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.837082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.840807] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 90.843015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.896221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 90.899253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 90.901395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 90.909077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 90.912248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 90.915951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 90.933861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 90.945022] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 90.950661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 90.967453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 90.972069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 90.985054] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 91.001983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 91.011186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 91.011678] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 91.019768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 91.019886] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 91.039482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 91.050327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 91.050783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 91.064904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 91.069991] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 91.073066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 91.075380] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 91.075607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 91.093772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 91.094302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 91.097168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 91.102735] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 91.105988] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 91.109481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 91.115049] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 91.128203] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 91.143264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 91.143624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 91.164000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 91.166973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 91.168104] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 91.182278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 91.193924] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 91.200721] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 91.203180] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 92.906482] Bluetooth: hci0: command tx timeout
[ 93.033848] Bluetooth: hci1: command tx timeout
[ 93.161716] Bluetooth: hci5: command tx timeout
[ 93.161749] Bluetooth: hci2: command tx timeout
[ 93.162396] Bluetooth: hci4: command tx timeout
[ 93.225975] Bluetooth: hci3: command tx timeout
[ 93.290144] Bluetooth: hci6: command tx timeout
[ 93.290171] Bluetooth: hci7: command tx timeout
[ 94.955026] Bluetooth: hci0: command tx timeout
[ 95.082600] Bluetooth: hci1: command tx timeout
[ 95.209703] Bluetooth: hci5: command tx timeout
[ 95.209754] Bluetooth: hci2: command tx timeout
[ 95.209838] Bluetooth: hci4: command tx timeout
[ 95.273661] Bluetooth: hci3: command tx timeout
[ 95.339651] Bluetooth: hci7: command tx timeout
[ 95.339743] Bluetooth: hci6: command tx timeout
[ 97.001660] Bluetooth: hci0: command tx timeout
[ 97.129669] Bluetooth: hci1: command tx timeout
[ 97.257680] Bluetooth: hci2: command tx timeout
[ 97.257786] Bluetooth: hci5: command tx timeout
[ 97.257853] Bluetooth: hci4: command tx timeout
[ 97.321747] Bluetooth: hci3: command tx timeout
[ 97.385706] Bluetooth: hci6: command tx timeout
[ 97.386625] Bluetooth: hci7: command tx timeout
[ 99.050764] Bluetooth: hci0: command tx timeout
[ 99.179789] Bluetooth: hci1: command tx timeout
[ 99.305917] Bluetooth: hci4: command tx timeout
[ 99.306760] Bluetooth: hci5: command tx timeout
[ 99.306905] Bluetooth: hci2: command tx timeout
[ 99.370452] Bluetooth: hci3: command tx timeout
[ 99.433714] Bluetooth: hci7: command tx timeout
[ 99.433870] Bluetooth: hci6: command tx timeout
[ 150.660485]
[ 150.660733] ======================================================
[ 150.661329] WARNING: possible circular locking dependency detected
[ 150.661917] 6.13.0-rc7-next-20250120 #1 Not tainted
[ 150.662396] ------------------------------------------------------
[ 150.663615] kworker/u8:1/66 is trying to acquire lock:
[ 150.664669] ffffffff8621eb28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[ 150.666580]
[ 150.666580] but task is already holding lock:
[ 150.668022] ffff88800be90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 150.669794]
[ 150.669794] which lock already depends on the new lock.
[ 150.669794]
[ 150.671264]
[ 150.671264] the existing dependency chain (in reverse order) is:
[ 150.672344]
[ 150.672344] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 150.673007] __mutex_lock+0x13d/0xb50
[ 150.673471] wiphy_register+0x1b2e/0x25d0
[ 150.673963] ieee80211_register_hw+0x23a4/0x3d60
[ 150.674501] mac80211_hwsim_new_radio+0x2759/0x4d60
[ 150.675072] init_mac80211_hwsim+0x389/0x870
[ 150.675600] do_one_initcall+0xf9/0x640
[ 150.676084] kernel_init_freeable+0x53d/0x7a0
[ 150.676603] kernel_init+0x1e/0x2d0
[ 150.677028] ret_from_fork+0x48/0x80
[ 150.677456] ret_from_fork_asm+0x1a/0x30
[ 150.677941]
[ 150.677941] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 150.678562] __lock_acquire+0x29fd/0x4580
[ 150.679044] lock_acquire+0x19b/0x520
[ 150.679491] __mutex_lock+0x13d/0xb50
[ 150.679951] unregister_netdevice_many_notify+0x1612/0x1c80
[ 150.680558] unregister_netdevice_queue+0x224/0x2e0
[ 150.681107] _cfg80211_unregister_wdev+0x57b/0x700
[ 150.681658] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 150.682205] ieee80211_unregister_hw+0x55/0x3a0
[ 150.682722] hwsim_exit_net+0x3a0/0x730
[ 150.683178] ops_exit_list+0xb3/0x180
[ 150.683630] cleanup_net+0x546/0xad0
[ 150.684068] process_one_work+0x8ee/0x1a10
[ 150.684568] worker_thread+0x674/0xe70
[ 150.685042] kthread+0x3ab/0x720
[ 150.685453] ret_from_fork+0x48/0x80
[ 150.685872] ret_from_fork_asm+0x1a/0x30
[ 150.686346]
[ 150.686346] other info that might help us debug this:
[ 150.686346]
[ 150.687089] Possible unsafe locking scenario:
[ 150.687089]
[ 150.687653] CPU0 CPU1
[ 150.688089] ---- ----
[ 150.688526] lock(&rdev->wiphy.mtx);
[ 150.688926] lock(rtnl_mutex);
[ 150.689506] lock(&rdev->wiphy.mtx);
[ 150.690134] lock(rtnl_mutex);
[ 150.690486]
[ 150.690486] *** DEADLOCK ***
[ 150.690486]
[ 150.691047] 4 locks held by kworker/u8:1/66:
[ 150.691476] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[ 150.692491] #1: ffff88800ba37d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[ 150.693454] #2: ffffffff86212b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[ 150.694365] #3: ffff88800be90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 150.695385]
[ 150.695385] stack backtrace:
[ 150.695825] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250120 #1
[ 150.696624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 150.697393] Workqueue: netns cleanup_net
[ 150.697811] Call Trace:
[ 150.698063] <TASK>
[ 150.698289] dump_stack_lvl+0xca/0x120
[ 150.698708] print_circular_bug+0x47b/0x750
[ 150.699147] check_noncircular+0x2e9/0x3c0
[ 150.699571] ? lock_repin_lock+0x207/0x320
[ 150.700022] ? __pfx_check_noncircular+0x10/0x10
[ 150.700490] ? hlock_class+0x4e/0x130
[ 150.700863] ? mark_lock+0xac/0xed0
[ 150.701232] ? __pfx_lock_repin_lock+0x10/0x10
[ 150.701712] ? lockdep_lock+0xba/0x1b0
[ 150.702121] ? __pfx_lockdep_lock+0x10/0x10
[ 150.702577] __lock_acquire+0x29fd/0x4580
[ 150.703001] ? __pfx___lock_acquire+0x10/0x10
[ 150.703446] ? lock_release+0x20f/0x6f0
[ 150.703862] ? __pfx_lock_release+0x10/0x10
[ 150.704294] lock_acquire+0x19b/0x520
[ 150.704683] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 150.705253] ? __pfx_lock_acquire+0x10/0x10
[ 150.705689] ? srso_return_thunk+0x5/0x5f
[ 150.706131] ? lock_release+0x20f/0x6f0
[ 150.706541] ? srso_return_thunk+0x5/0x5f
[ 150.706977] ? lock_is_held_type+0x9e/0x120
[ 150.707425] ? srso_return_thunk+0x5/0x5f
[ 150.707881] __mutex_lock+0x13d/0xb50
[ 150.708281] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 150.708867] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 150.709457] ? srso_return_thunk+0x5/0x5f
[ 150.709893] ? synchronize_rcu_expedited+0x38a/0x420
[ 150.710402] ? __pfx___mutex_lock+0x10/0x10
[ 150.710850] ? __pfx_autoremove_wake_function+0x10/0x10
[ 150.711387] ? srso_return_thunk+0x5/0x5f
[ 150.711838] ? kasan_quarantine_put+0x84/0x1e0
[ 150.712314] ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 150.712770] ? srso_return_thunk+0x5/0x5f
[ 150.713208] unregister_netdevice_many_notify+0x1612/0x1c80
[ 150.713763] ? __virt_addr_valid+0x2e8/0x5d0
[ 150.714222] ? __pfx_lock_release+0x10/0x10
[ 150.714658] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 150.715253] ? find_held_lock+0x2c/0x110
[ 150.715686] ? srso_return_thunk+0x5/0x5f
[ 150.716124] ? kernfs_remove_by_name_ns+0xc7/0x130
[ 150.716633] ? srso_return_thunk+0x5/0x5f
[ 150.717068] ? lock_release+0x20f/0x6f0
[ 150.717475] ? __pfx_lock_release+0x10/0x10
[ 150.717918] ? srso_return_thunk+0x5/0x5f
[ 150.718353] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 150.718875] ? srso_return_thunk+0x5/0x5f
[ 150.719315] unregister_netdevice_queue+0x224/0x2e0
[ 150.719830] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 150.720371] ? up_write+0x195/0x520
[ 150.720760] _cfg80211_unregister_wdev+0x57b/0x700
[ 150.721268] ? srso_return_thunk+0x5/0x5f
[ 150.721704] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 150.722205] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 150.722749] ? srso_return_thunk+0x5/0x5f
[ 150.723180] ? srso_return_thunk+0x5/0x5f
[ 150.723624] ? synchronize_rcu+0x1ff/0x260
[ 150.724054] ieee80211_unregister_hw+0x55/0x3a0
[ 150.724530] hwsim_exit_net+0x3a0/0x730
[ 150.724948] ? __pfx_hwsim_exit_net+0x10/0x10
[ 150.725402] ? srso_return_thunk+0x5/0x5f
[ 150.725835] ? netdev_run_todo+0x788/0x1040
[ 150.726286] ? srso_return_thunk+0x5/0x5f
[ 150.726722] ? __pfx_hwsim_exit_net+0x10/0x10
[ 150.727180] ops_exit_list+0xb3/0x180
[ 150.727585] cleanup_net+0x546/0xad0
[ 150.727977] ? __pfx_cleanup_net+0x10/0x10
[ 150.728428] process_one_work+0x8ee/0x1a10
[ 150.728852] ? __pfx_lock_acquire+0x10/0x10
[ 150.729259] ? __pfx_process_one_work+0x10/0x10
[ 150.729713] ? srso_return_thunk+0x5/0x5f
[ 150.730119] ? move_linked_works+0x172/0x270
[ 150.730537] ? srso_return_thunk+0x5/0x5f
[ 150.730943] ? assign_work+0x196/0x240
[ 150.731336] worker_thread+0x674/0xe70
[ 150.731734] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 150.732230] ? srso_return_thunk+0x5/0x5f
[ 150.732638] ? __pfx_worker_thread+0x10/0x10
[ 150.733071] kthread+0x3ab/0x720
[ 150.733413] ? __pfx_kthread+0x10/0x10
[ 150.733801] ? srso_return_thunk+0x5/0x5f
[ 150.734208] ? finish_task_switch.isra.0+0x206/0x840
[ 150.734690] ? __pfx_kthread+0x10/0x10
[ 150.735073] ret_from_fork+0x48/0x80
[ 150.735420] ? __pfx_kthread+0x10/0x10
[ 150.735833] ret_from_fork_asm+0x1a/0x30
[ 150.736274] </TASK>
[ 152.906502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 152.907722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 152.910336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 152.911580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 152.914904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 152.916050] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 152.917101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 152.920276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 152.921436] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 152.940759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 152.947869] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 152.951487] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 152.952376] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 152.953256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 152.958045] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 152.958828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 152.960907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 152.961357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 152.964812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 152.971965] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 152.973153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 152.974244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 152.975917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 152.977225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 152.980763] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 152.982081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 152.985817] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 152.986447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 153.001720] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 153.005964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 153.022647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 153.042321] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 153.046677] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 153.046951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 153.048373] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 153.053001] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 153.053400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 153.055105] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 153.056308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 153.064506] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 153.067741] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 153.069043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 153.072815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 153.075742] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 153.077472] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 153.079256] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 153.084373] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 153.088898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 154.985833] Bluetooth: hci0: command tx timeout
[ 154.985851] Bluetooth: hci1: command tx timeout
[ 155.049627] Bluetooth: hci3: command tx timeout
[ 155.049725] Bluetooth: hci2: command tx timeout
[ 155.049729] Bluetooth: hci4: command tx timeout
[ 155.113863] Bluetooth: hci5: command tx timeout
[ 155.113927] Bluetooth: hci6: command tx timeout
[ 155.178563] Bluetooth: hci7: command tx timeout
[ 157.033685] Bluetooth: hci1: command tx timeout
[ 157.034260] Bluetooth: hci0: command tx timeout
[ 157.097573] Bluetooth: hci4: command tx timeout
[ 157.100546] Bluetooth: hci3: command tx timeout
[ 157.100602] Bluetooth: hci2: command tx timeout
[ 157.161804] Bluetooth: hci6: command tx timeout
[ 157.162347] Bluetooth: hci5: command tx timeout
[ 157.225690] Bluetooth: hci7: command tx timeout
[ 159.081612] Bluetooth: hci0: command tx timeout
[ 159.082589] Bluetooth: hci1: command tx timeout
[ 159.146677] Bluetooth: hci2: command tx timeout
[ 159.147280] Bluetooth: hci3: command tx timeout
[ 159.148294] Bluetooth: hci4: command tx timeout
[ 159.209652] Bluetooth: hci6: command tx timeout
[ 159.209664] Bluetooth: hci5: command tx timeout
[ 159.275659] Bluetooth: hci7: command tx timeout
VM DIAGNOSIS:
23:49:57 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88800ba23780 RCX=ffffffff81429a0f RDX=ffff88800ba23780
RSI=ffffffff81429a18 RDI=0000000000000005 RBP=0000000000200000 RSP=ffff88800f2cfdb8
R8 =0000000000000000 R9 =ffffed100173f980 R10=0000000000200000 R11=ffff88800ba23c38
R12=ffff88807c1fdff9 R13=ffffffff88654570 R14=ffff88800ba23780 R15=0000000000000086
RIP=ffffffff81429a18 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000000c005755000 CR3=0000000009fa2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=000000000000000041660e9600000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8283e250 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800ba36bc0
R8 =0000000000000001 R9 =ffffed1001746d67 R10=0000000000000001 R11=7369786520656874
R12=ffffffff886990b0 R13=ffff88800ba36eb8 R14=ffffffff88699320 R15=0000000000000000
RIP=ffffffff8283e2a5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000000c00574b000 CR3=0000000009fa2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000c0000a8140000000c0000a8100
XMM02=000000c00007e300000000c00004e230 XMM03=000000c00007eb10000000c00004e370
XMM04=287469617764656d69746769735f7472 XMM05=307228444e5354494247434f49564524
XMM06=2826202c32333534303430387830202c XMM07=3d293063643030303030303066377830
XMM08=676e6972755f6f690a293035312f2222 XMM09=3163337830202c3072287265746e655f
XMM10=202c317830202c343161337830202c66 XMM11=30386530303030303030663778302826
XMM12=0a29387830202c7d5d3978305b7b3d29 XMM13=64656d69746769735f74720a29387830
XMM14=30303030306637783028262874696177 XMM15=202c7d5d3778305b7b3d293030313030