Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:36284' (ECDSA) to the list of known hosts. 2025/01/18 03:58:51 fuzzer started 2025/01/18 03:58:51 dialing manager at localhost:44245 syzkaller login: [ 62.742694] cgroup: Unknown subsys name 'net' [ 62.843550] cgroup: Unknown subsys name 'cpuset' [ 62.881857] cgroup: Unknown subsys name 'rlimit' [ 68.050937] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 78.033646] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 03:59:07 syscalls: 2217 2025/01/18 03:59:07 code coverage: enabled 2025/01/18 03:59:07 comparison tracing: enabled 2025/01/18 03:59:07 extra coverage: enabled 2025/01/18 03:59:07 setuid sandbox: enabled 2025/01/18 03:59:07 namespace sandbox: enabled 2025/01/18 03:59:07 Android sandbox: enabled 2025/01/18 03:59:07 fault injection: enabled 2025/01/18 03:59:07 leak checking: enabled 2025/01/18 03:59:07 net packet injection: enabled 2025/01/18 03:59:07 net device setup: enabled 2025/01/18 03:59:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 03:59:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 03:59:07 USB emulation: enabled 2025/01/18 03:59:07 hci packet injection: enabled 2025/01/18 03:59:07 wifi device emulation: enabled 2025/01/18 03:59:07 802.15.4 emulation: enabled 2025/01/18 03:59:07 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 03:59:07 fetching corpus: 50, signal 25382/28137 (executing program) 2025/01/18 03:59:08 fetching corpus: 100, signal 43085/45888 (executing program) 2025/01/18 03:59:08 fetching corpus: 150, signal 50404/53486 (executing program) 2025/01/18 03:59:08 fetching corpus: 200, signal 56253/59342 (executing program) 2025/01/18 03:59:09 fetching corpus: 250, signal 62502/65230 (executing program) 2025/01/18 03:59:09 fetching corpus: 300, signal 66438/68942 (executing program) 2025/01/18 03:59:09 fetching corpus: 350, signal 69294/71619 (executing program) 2025/01/18 03:59:09 fetching corpus: 400, signal 71762/73830 (executing program) 2025/01/18 03:59:09 fetching corpus: 450, signal 74147/75804 (executing program) 2025/01/18 03:59:09 fetching corpus: 500, signal 77812/78667 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79512 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79563 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79610 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79656 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79699 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79750 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79804 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79847 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79883 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79932 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/79975 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80021 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80066 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80116 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80158 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80212 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80283 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80324 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80363 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80407 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80448 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80492 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80530 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80577 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80615 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80658 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80704 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80746 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80801 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80820 (executing program) 2025/01/18 03:59:10 fetching corpus: 528, signal 78927/80820 (executing program) 2025/01/18 03:59:13 starting 8 fuzzer processes 03:59:13 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1) 03:59:13 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4840, 0x131) setresuid(0xee00, 0xee00, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) truncate(&(0x7f0000000a40)='./file0\x00', 0x0) 03:59:13 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x8001, 0x4) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000080)={0xa, 0x0, 0xd81, @mcast1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d706", 0x2}], 0x1}}], 0x1, 0x20000010) 03:59:13 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setpriority(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001580)=ANY=[@ANYBLOB="5cf094e74227b389b315df87f716ac4b0815bab91cd6166ac00a6b25099e818c701fb1ced830e335f82928817c1a87857926b2ab686234e7e17212bed077f24fa5cd975d8de46a51abf4ba072f5636dfbc70dc32581086944b7d10dd86dc07f144cd6c4d3e3d162a9770b0a6f4e29ff16a235bad82d70561fb08ef039cf4e400db3051bd6b058da0636a6e5c9c72c17f99e1d60e85f1466337720cde67c3f9ea3f9cec9f9ee75c0bd6060a1c9f8acdb64507a32ba91fdfe0a686f8e8f57004f161fc3f91673e31762e373e281e13329238b681bd3a1dc4db63b8adaae3c29c1d27309f2b8db83a1f910254973f62981ae51e295846e2539767ce2c253f422032eb9f47d0fca30745fdac19a827e1d62c8bb7f2f79d6b69092bf5dace6927352fcfc5e76604f9b26efbe2d0932b6754a600d68ad4c2e6a53f4ba89014eb1b68f411c074d124f8bb474a324d8b50514463bc1c8c41c7f19f4d09076d977ca3c123120c31bcab71351069f43c92ad45981b2f2d10205f340885", @ANYRES32, @ANYBLOB="06000000000000002e2f66696c653100"]) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x20000000, &(0x7f0000000340)={0x0, 0x3938700}) r1 = clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tkill(r1, 0x0) 03:59:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xb0811, r1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r1, 0x8000000) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x3, 0x0, 0x4000) 03:59:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) [ 84.386375] audit: type=1400 audit(1737172753.826:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:59:13 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="2037f1375c88"}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @broadcast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @empty}}}}, 0x0) 03:59:13 executing program 7: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) acct(&(0x7f0000000040)='./file0\x00') ppoll(&(0x7f0000000300)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 85.882004] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.888704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.892453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.894687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.898746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.904795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.905327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.910641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.919296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.921662] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.925576] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.929056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.973582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.990818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.005742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.019593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.025413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.025878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.029286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.037636] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.039388] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.053113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.055914] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.063544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.066427] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.066933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.070061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.077579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.077838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.081436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.083093] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.093404] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.095603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.109753] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.116932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.118748] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.120760] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.123346] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.127485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.143389] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.152406] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.159996] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.161712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.164928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.174477] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.180008] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.182780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.183436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.962957] Bluetooth: hci0: command tx timeout [ 88.026246] Bluetooth: hci1: command tx timeout [ 88.154382] Bluetooth: hci3: command tx timeout [ 88.154410] Bluetooth: hci2: command tx timeout [ 88.155381] Bluetooth: hci7: command tx timeout [ 88.219246] Bluetooth: hci4: command tx timeout [ 88.282487] Bluetooth: hci5: command tx timeout [ 88.282618] Bluetooth: hci6: command tx timeout [ 90.012195] Bluetooth: hci0: command tx timeout [ 90.076242] Bluetooth: hci1: command tx timeout [ 90.202319] Bluetooth: hci2: command tx timeout [ 90.205291] Bluetooth: hci7: command tx timeout [ 90.205394] Bluetooth: hci3: command tx timeout [ 90.267252] Bluetooth: hci4: command tx timeout [ 90.330280] Bluetooth: hci6: command tx timeout [ 90.332346] Bluetooth: hci5: command tx timeout [ 92.058215] Bluetooth: hci0: command tx timeout [ 92.122268] Bluetooth: hci1: command tx timeout [ 92.252204] Bluetooth: hci7: command tx timeout [ 92.252297] Bluetooth: hci2: command tx timeout [ 92.252391] Bluetooth: hci3: command tx timeout [ 92.314277] Bluetooth: hci4: command tx timeout [ 92.379472] Bluetooth: hci5: command tx timeout [ 92.379685] Bluetooth: hci6: command tx timeout [ 94.108184] Bluetooth: hci0: command tx timeout [ 94.170284] Bluetooth: hci1: command tx timeout [ 94.298289] Bluetooth: hci3: command tx timeout [ 94.298331] Bluetooth: hci2: command tx timeout [ 94.298413] Bluetooth: hci7: command tx timeout [ 94.363273] Bluetooth: hci4: command tx timeout [ 94.426272] Bluetooth: hci6: command tx timeout [ 94.426311] Bluetooth: hci5: command tx timeout [ 148.389659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.391553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.393045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.398924] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.401803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.408042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.483942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.489420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.492521] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.502055] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.519600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.521418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.532896] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.540049] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.540722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.544953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.545596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.546000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.552121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.552624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.555223] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.559499] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.561397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.562794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.571406] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.574866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.575118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.581504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.585635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.589610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.589723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.591875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.595040] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.596313] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.600401] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.602316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.617694] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.627526] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.633423] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.633876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.642053] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.655762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.662446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.663947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.684995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.689404] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.691526] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.695311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.490415] Bluetooth: hci0: command tx timeout [ 150.618349] Bluetooth: hci2: command tx timeout [ 150.618890] Bluetooth: hci1: command tx timeout [ 150.682570] Bluetooth: hci5: command tx timeout [ 150.683328] Bluetooth: hci6: command tx timeout [ 150.683573] Bluetooth: hci4: command tx timeout [ 150.746508] Bluetooth: hci7: command tx timeout [ 150.874371] Bluetooth: hci3: command tx timeout [ 152.539224] Bluetooth: hci0: command tx timeout [ 152.667286] Bluetooth: hci1: command tx timeout [ 152.667393] Bluetooth: hci2: command tx timeout [ 152.730434] Bluetooth: hci4: command tx timeout [ 152.730981] Bluetooth: hci6: command tx timeout [ 152.731032] Bluetooth: hci5: command tx timeout [ 152.794234] Bluetooth: hci7: command tx timeout [ 152.923333] Bluetooth: hci3: command tx timeout [ 154.587359] Bluetooth: hci0: command tx timeout [ 154.715294] Bluetooth: hci1: command tx timeout [ 154.716031] Bluetooth: hci2: command tx timeout [ 154.779234] Bluetooth: hci5: command tx timeout [ 154.779330] Bluetooth: hci6: command tx timeout [ 154.779381] Bluetooth: hci4: command tx timeout [ 154.843218] Bluetooth: hci7: command tx timeout [ 154.971692] Bluetooth: hci3: command tx timeout [ 156.634238] Bluetooth: hci0: command tx timeout [ 156.764234] Bluetooth: hci2: command tx timeout [ 156.764270] Bluetooth: hci1: command tx timeout [ 156.827258] Bluetooth: hci5: command tx timeout [ 156.827315] Bluetooth: hci4: command tx timeout [ 156.827384] Bluetooth: hci6: command tx timeout [ 156.890409] Bluetooth: hci7: command tx timeout [ 157.018201] Bluetooth: hci3: command tx timeout [ 210.743975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.750985] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.752490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.753531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.754921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.756920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.760762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.762726] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.764045] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.764367] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.770270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.771507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.884770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.886075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.895419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.923722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.934551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.935585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.939995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.950054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.962420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.992341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.993030] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.993975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.000902] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.001249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.004500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.006574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.009319] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.011677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.012954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.026888] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.028703] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.032607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.083382] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.105055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.115649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.116901] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.118627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.120900] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.122522] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.123625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.234936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.246290] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.252343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.270548] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.272573] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.273776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.826327] Bluetooth: hci0: command tx timeout [ 212.826681] Bluetooth: hci1: command tx timeout [ 213.018243] Bluetooth: hci2: command tx timeout [ 213.082440] Bluetooth: hci3: command tx timeout [ 213.083618] Bluetooth: hci5: command tx timeout [ 213.211409] Bluetooth: hci6: command tx timeout [ 213.211863] Bluetooth: hci4: command tx timeout [ 213.402403] Bluetooth: hci7: command tx timeout [ 214.874249] Bluetooth: hci1: command tx timeout [ 214.874352] Bluetooth: hci0: command tx timeout [ 215.066316] Bluetooth: hci2: command tx timeout [ 215.130232] Bluetooth: hci3: command tx timeout [ 215.130309] Bluetooth: hci5: command tx timeout [ 215.258250] Bluetooth: hci4: command tx timeout [ 215.258351] Bluetooth: hci6: command tx timeout [ 215.450393] Bluetooth: hci7: command tx timeout [ 216.922343] Bluetooth: hci0: command tx timeout [ 216.923515] Bluetooth: hci1: command tx timeout [ 217.115221] Bluetooth: hci2: command tx timeout [ 217.178315] Bluetooth: hci5: command tx timeout [ 217.179798] Bluetooth: hci3: command tx timeout [ 217.308173] Bluetooth: hci6: command tx timeout [ 217.308296] Bluetooth: hci4: command tx timeout [ 217.498191] Bluetooth: hci7: command tx timeout [ 218.970224] Bluetooth: hci0: command tx timeout [ 218.970817] Bluetooth: hci1: command tx timeout [ 219.164246] Bluetooth: hci2: command tx timeout [ 219.227297] Bluetooth: hci3: command tx timeout [ 219.228247] Bluetooth: hci5: command tx timeout [ 219.354225] Bluetooth: hci4: command tx timeout [ 219.354308] Bluetooth: hci6: command tx timeout [ 219.547152] Bluetooth: hci7: command tx timeout [ 272.935580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.938041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.941576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.959029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.966963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.973611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 273.005225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.009460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.014663] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.019968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.023444] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.024533] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.276728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.286548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.299369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.313573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.318412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.320425] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.322347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.323536] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.325356] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.337173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.348932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.356376] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.358439] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.365565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.370473] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.371393] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.377823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.380809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.415009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.436783] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.477505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.507642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.516593] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.520520] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.807227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.817642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.823439] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.870465] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.883770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.900947] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.901404] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.911881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.912637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.984973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.021553] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.030323] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.035511] Bluetooth: hci0: command tx timeout [ 275.098592] Bluetooth: hci1: command tx timeout [ 275.354491] Bluetooth: hci3: command tx timeout [ 275.482341] Bluetooth: hci5: command tx timeout [ 275.483399] Bluetooth: hci2: command tx timeout [ 275.803636] Bluetooth: hci6: command tx timeout [ 276.059372] Bluetooth: hci4: command tx timeout [ 276.122260] Bluetooth: hci7: command tx timeout [ 277.084183] Bluetooth: hci0: command tx timeout [ 277.146306] Bluetooth: hci1: command tx timeout [ 277.402297] Bluetooth: hci3: command tx timeout [ 277.530286] Bluetooth: hci2: command tx timeout [ 277.530886] Bluetooth: hci5: command tx timeout [ 277.851147] Bluetooth: hci6: command tx timeout [ 278.108086] Bluetooth: hci4: command tx timeout [ 278.171222] Bluetooth: hci7: command tx timeout [ 279.131273] Bluetooth: hci0: command tx timeout [ 279.194182] Bluetooth: hci1: command tx timeout [ 279.451168] Bluetooth: hci3: command tx timeout [ 279.578200] Bluetooth: hci2: command tx timeout [ 279.578296] Bluetooth: hci5: command tx timeout [ 279.898791] Bluetooth: hci6: command tx timeout [ 280.155268] Bluetooth: hci4: command tx timeout [ 280.218143] Bluetooth: hci7: command tx timeout [ 281.179188] Bluetooth: hci0: command tx timeout [ 281.242184] Bluetooth: hci1: command tx timeout [ 281.498388] Bluetooth: hci3: command tx timeout [ 281.626286] Bluetooth: hci5: command tx timeout [ 281.627853] Bluetooth: hci2: command tx timeout [ 281.948185] Bluetooth: hci6: command tx timeout [ 282.202272] Bluetooth: hci4: command tx timeout [ 282.267417] Bluetooth: hci7: command tx timeout [ 330.005442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.005567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.329391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.329492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.419590] [ 332.419852] ====================================================== [ 332.420452] WARNING: possible circular locking dependency detected [ 332.421046] 6.13.0-rc7-next-20250117 #1 Not tainted [ 332.421523] ------------------------------------------------------ [ 332.422927] kworker/u8:1/66 is trying to acquire lock: [ 332.424261] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.427038] [ 332.427038] but task is already holding lock: [ 332.428398] ffff888023d50768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.430770] [ 332.430770] which lock already depends on the new lock. [ 332.430770] [ 332.431523] [ 332.431523] the existing dependency chain (in reverse order) is: [ 332.432218] [ 332.432218] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 332.432900] __mutex_lock+0x13d/0xb50 [ 332.433352] wiphy_register+0x1b2e/0x25d0 [ 332.433835] ieee80211_register_hw+0x23a4/0x3d60 [ 332.434367] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 332.434920] init_mac80211_hwsim+0x389/0x870 [ 332.435428] do_one_initcall+0xf9/0x640 [ 332.435904] kernel_init_freeable+0x53d/0x7a0 [ 332.436426] kernel_init+0x1e/0x2d0 [ 332.436847] ret_from_fork+0x48/0x80 [ 332.437274] ret_from_fork_asm+0x1a/0x30 [ 332.437786] [ 332.437786] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 332.438430] __lock_acquire+0x29fd/0x4580 [ 332.438935] lock_acquire+0x19b/0x520 [ 332.439413] __mutex_lock+0x13d/0xb50 [ 332.439895] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.440546] unregister_netdevice_queue+0x224/0x2e0 [ 332.441125] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.441705] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.442290] ieee80211_unregister_hw+0x55/0x3a0 [ 332.442839] hwsim_exit_net+0x3a0/0x730 [ 332.443327] ops_exit_list+0xb3/0x180 [ 332.443788] cleanup_net+0x546/0xad0 [ 332.444257] process_one_work+0x8ee/0x1a10 [ 332.444803] worker_thread+0x674/0xe70 [ 332.445274] kthread+0x3ab/0x720 [ 332.445694] ret_from_fork+0x48/0x80 [ 332.446119] ret_from_fork_asm+0x1a/0x30 [ 332.446596] [ 332.446596] other info that might help us debug this: [ 332.446596] [ 332.447338] Possible unsafe locking scenario: [ 332.447338] [ 332.447904] CPU0 CPU1 [ 332.448389] ---- ---- [ 332.448863] lock(&rdev->wiphy.mtx); [ 332.449266] lock(rtnl_mutex); [ 332.449834] lock(&rdev->wiphy.mtx); [ 332.450444] lock(rtnl_mutex); [ 332.450797] [ 332.450797] *** DEADLOCK *** [ 332.450797] [ 332.451355] 4 locks held by kworker/u8:1/66: [ 332.451785] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 332.452783] #1: ffff88800cd3fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 332.453766] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 332.454709] #3: ffff888023d50768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.455792] [ 332.455792] stack backtrace: [ 332.456238] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 332.457082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 332.457870] Workqueue: netns cleanup_net [ 332.458279] Call Trace: [ 332.458530] [ 332.458773] dump_stack_lvl+0xca/0x120 [ 332.459219] print_circular_bug+0x47b/0x750 [ 332.459667] check_noncircular+0x2e9/0x3c0 [ 332.460097] ? __pfx_check_noncircular+0x10/0x10 [ 332.460571] ? hlock_class+0x4e/0x130 [ 332.460942] ? mark_lock+0xac/0xed0 [ 332.461310] ? srso_return_thunk+0x5/0x5f [ 332.461742] ? lockdep_lock+0xba/0x1b0 [ 332.462178] ? __pfx_lockdep_lock+0x10/0x10 [ 332.462653] __lock_acquire+0x29fd/0x4580 [ 332.463120] ? __pfx___lock_acquire+0x10/0x10 [ 332.463593] ? lock_release+0x20f/0x6f0 [ 332.463996] ? __pfx_lock_release+0x10/0x10 [ 332.464431] lock_acquire+0x19b/0x520 [ 332.464827] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.465407] ? __pfx_lock_acquire+0x10/0x10 [ 332.465840] ? srso_return_thunk+0x5/0x5f [ 332.466272] ? lock_release+0x20f/0x6f0 [ 332.466672] ? srso_return_thunk+0x5/0x5f [ 332.467105] ? lock_is_held_type+0x9e/0x120 [ 332.467549] ? srso_return_thunk+0x5/0x5f [ 332.468004] __mutex_lock+0x13d/0xb50 [ 332.468417] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.469026] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.469618] ? srso_return_thunk+0x5/0x5f [ 332.470075] ? synchronize_rcu_expedited+0x38a/0x420 [ 332.470606] ? __pfx___mutex_lock+0x10/0x10 [ 332.471072] ? __pfx_autoremove_wake_function+0x10/0x10 [ 332.471622] ? srso_return_thunk+0x5/0x5f [ 332.472081] ? kasan_quarantine_put+0x84/0x1e0 [ 332.472577] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.473029] ? srso_return_thunk+0x5/0x5f [ 332.473483] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.474080] ? __virt_addr_valid+0x2e8/0x5d0 [ 332.474553] ? __pfx_lock_release+0x10/0x10 [ 332.475016] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 332.475636] ? find_held_lock+0x2c/0x110 [ 332.476086] ? srso_return_thunk+0x5/0x5f [ 332.476546] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 332.477084] ? srso_return_thunk+0x5/0x5f [ 332.477535] ? lock_release+0x20f/0x6f0 [ 332.477960] ? __pfx_lock_release+0x10/0x10 [ 332.478424] ? srso_return_thunk+0x5/0x5f [ 332.478858] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.479411] ? srso_return_thunk+0x5/0x5f [ 332.479884] unregister_netdevice_queue+0x224/0x2e0 [ 332.480406] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 332.480991] ? up_write+0x195/0x520 [ 332.481408] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.481942] ? srso_return_thunk+0x5/0x5f [ 332.482395] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.482886] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 332.483418] ? srso_return_thunk+0x5/0x5f [ 332.483845] ? srso_return_thunk+0x5/0x5f [ 332.484272] ? synchronize_rcu+0x1ff/0x260 [ 332.484735] ieee80211_unregister_hw+0x55/0x3a0 [ 332.485236] hwsim_exit_net+0x3a0/0x730 [ 332.485653] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.486123] ? srso_return_thunk+0x5/0x5f [ 332.486573] ? netdev_run_todo+0x788/0x1040 [ 332.487045] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.487508] ops_exit_list+0xb3/0x180 [ 332.487905] cleanup_net+0x546/0xad0 [ 332.488287] ? __pfx_cleanup_net+0x10/0x10 [ 332.488723] process_one_work+0x8ee/0x1a10 [ 332.489167] ? __pfx_lock_acquire+0x10/0x10 [ 332.489598] ? __pfx_process_one_work+0x10/0x10 [ 332.490079] ? srso_return_thunk+0x5/0x5f [ 332.490509] ? move_linked_works+0x172/0x270 [ 332.490958] ? srso_return_thunk+0x5/0x5f [ 332.491385] ? assign_work+0x196/0x240 [ 332.491795] worker_thread+0x674/0xe70 [ 332.492205] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.492730] ? srso_return_thunk+0x5/0x5f [ 332.493160] ? __pfx_worker_thread+0x10/0x10 [ 332.493618] kthread+0x3ab/0x720 [ 332.493978] ? __pfx_kthread+0x10/0x10 [ 332.494381] ? srso_return_thunk+0x5/0x5f [ 332.494810] ? finish_task_switch.isra.0+0x206/0x840 [ 332.495321] ? __pfx_kthread+0x10/0x10 [ 332.495725] ret_from_fork+0x48/0x80 [ 332.496102] ? __pfx_kthread+0x10/0x10 [ 332.496520] ret_from_fork_asm+0x1a/0x30 [ 332.496953] [ 334.820941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.825008] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.833523] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.850462] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.854714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.855535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.138881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.142408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.144095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.147624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.156611] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.160523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.339022] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.344407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.344729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.348463] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.350234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.351037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.351376] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.353460] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.354601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.360128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.362713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.363863] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.364851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.368970] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.369389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.376562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.380944] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.382306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.394768] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.398392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.399910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.413237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.414189] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.414477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.417700] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.424748] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.428307] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.454026] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.456900] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.458359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.488487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.505355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.535328] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.536293] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.536821] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.538038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.923118] Bluetooth: hci0: command tx timeout [ 337.178156] Bluetooth: hci1: command tx timeout [ 337.434288] Bluetooth: hci4: command tx timeout [ 337.434466] Bluetooth: hci3: command tx timeout [ 337.434632] Bluetooth: hci2: command tx timeout [ 337.498187] Bluetooth: hci6: command tx timeout [ 337.498272] Bluetooth: hci5: command tx timeout [ 337.562658] Bluetooth: hci7: command tx timeout [ 338.970504] Bluetooth: hci0: command tx timeout [ 339.226314] Bluetooth: hci1: command tx timeout [ 339.482357] Bluetooth: hci3: command tx timeout [ 339.482556] Bluetooth: hci4: command tx timeout [ 339.482609] Bluetooth: hci2: command tx timeout [ 339.546168] Bluetooth: hci6: command tx timeout [ 339.546179] Bluetooth: hci5: command tx timeout [ 339.611109] Bluetooth: hci7: command tx timeout [ 341.018173] Bluetooth: hci0: command tx timeout [ 341.274214] Bluetooth: hci1: command tx timeout [ 341.530295] Bluetooth: hci3: command tx timeout [ 341.530323] Bluetooth: hci2: command tx timeout [ 341.530405] Bluetooth: hci4: command tx timeout [ 341.596177] Bluetooth: hci5: command tx timeout [ 341.596194] Bluetooth: hci6: command tx timeout [ 341.658147] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:03:22 Registers: info registers vcpu 0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800cd3eb28 R8 =0000000000000001 R9 =ffffed10019a7d55 R10=0000000000000036 R11=6666666666666666 R12=0000000000000036 R13=0000000000000001 R14=ffff888008fea063 R15=ffff88800cd3ee28 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f89b130d028 CR3=000000000f77c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce42cc0 RCX=ffffffff816641b2 RDX=ffff88800f743780 RSI=ffffffff8166418c RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880366ef7c8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffffed100d9c8599 R13=ffff88806ce42cc8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8166418e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb558774269 CR3=000000000dc36000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff000000000000000000000000000000 XMM01=0000000000000000657268747062696c XMM02=00000000000000362e6f732e6362696c XMM03=00000000000000000000000000000000 XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000