Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:45790' (ECDSA) to the list of known hosts. 2025/01/18 12:20:01 fuzzer started 2025/01/18 12:20:02 dialing manager at localhost:44245 syzkaller login: [ 62.897450] cgroup: Unknown subsys name 'net' [ 63.014841] cgroup: Unknown subsys name 'cpuset' [ 63.048030] cgroup: Unknown subsys name 'rlimit' [ 68.751374] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.253282] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 12:20:20 syscalls: 2217 2025/01/18 12:20:20 code coverage: enabled 2025/01/18 12:20:20 comparison tracing: enabled 2025/01/18 12:20:20 extra coverage: enabled 2025/01/18 12:20:20 setuid sandbox: enabled 2025/01/18 12:20:20 namespace sandbox: enabled 2025/01/18 12:20:20 Android sandbox: enabled 2025/01/18 12:20:20 fault injection: enabled 2025/01/18 12:20:20 leak checking: enabled 2025/01/18 12:20:20 net packet injection: enabled 2025/01/18 12:20:20 net device setup: enabled 2025/01/18 12:20:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 12:20:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 12:20:20 USB emulation: enabled 2025/01/18 12:20:20 hci packet injection: enabled 2025/01/18 12:20:20 wifi device emulation: enabled 2025/01/18 12:20:20 802.15.4 emulation: enabled 2025/01/18 12:20:20 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 12:20:20 fetching corpus: 50, signal 23806/26882 (executing program) 2025/01/18 12:20:20 fetching corpus: 100, signal 32165/36332 (executing program) 2025/01/18 12:20:20 fetching corpus: 150, signal 42317/47143 (executing program) 2025/01/18 12:20:20 fetching corpus: 200, signal 47013/52569 (executing program) 2025/01/18 12:20:21 fetching corpus: 250, signal 53128/59088 (executing program) 2025/01/18 12:20:21 fetching corpus: 300, signal 59260/65423 (executing program) 2025/01/18 12:20:21 fetching corpus: 350, signal 62688/69237 (executing program) 2025/01/18 12:20:21 fetching corpus: 400, signal 66187/72971 (executing program) 2025/01/18 12:20:21 fetching corpus: 450, signal 72740/79078 (executing program) 2025/01/18 12:20:21 fetching corpus: 500, signal 75094/81580 (executing program) 2025/01/18 12:20:21 fetching corpus: 550, signal 78180/84607 (executing program) 2025/01/18 12:20:22 fetching corpus: 600, signal 81497/87658 (executing program) 2025/01/18 12:20:22 fetching corpus: 650, signal 83300/89406 (executing program) 2025/01/18 12:20:22 fetching corpus: 700, signal 85648/91533 (executing program) 2025/01/18 12:20:22 fetching corpus: 750, signal 88197/93692 (executing program) 2025/01/18 12:20:22 fetching corpus: 800, signal 90555/95635 (executing program) 2025/01/18 12:20:23 fetching corpus: 850, signal 92464/97236 (executing program) 2025/01/18 12:20:23 fetching corpus: 900, signal 93866/98396 (executing program) 2025/01/18 12:20:23 fetching corpus: 950, signal 95131/99455 (executing program) 2025/01/18 12:20:23 fetching corpus: 1000, signal 96977/100737 (executing program) 2025/01/18 12:20:23 fetching corpus: 1050, signal 98113/101611 (executing program) 2025/01/18 12:20:23 fetching corpus: 1100, signal 99889/102793 (executing program) 2025/01/18 12:20:23 fetching corpus: 1150, signal 101242/103663 (executing program) 2025/01/18 12:20:24 fetching corpus: 1200, signal 103061/104734 (executing program) 2025/01/18 12:20:24 fetching corpus: 1250, signal 104785/105694 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/105778 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/105819 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/105844 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/105876 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/105907 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/105939 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/105977 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106010 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106053 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106082 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106119 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106157 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106189 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106214 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106244 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106284 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106308 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106339 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106364 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106403 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106437 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106463 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106491 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106522 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106556 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106588 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106613 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106624 (executing program) 2025/01/18 12:20:24 fetching corpus: 1262, signal 104892/106624 (executing program) 2025/01/18 12:20:28 starting 8 fuzzer processes 12:20:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) io_setup(0x3ff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) 12:20:28 executing program 4: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 12:20:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x2, @perf_bp={0x0, 0x8}, 0x30, 0x200, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:20:28 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006b80), 0x0, 0x0) readv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/149, 0x95}], 0x1) 12:20:28 executing program 3: futex(&(0x7f0000000080), 0x10d, 0x0, &(0x7f0000000100), 0x0, 0x0) 12:20:28 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700c, 0x6) 12:20:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8982, 0x0) 12:20:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4041, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 88.927385] audit: type=1400 audit(1737202828.697:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 90.273068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.275870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.277108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.282753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.284840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.285936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.337376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.341524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.345979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.347190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.350730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.351904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.353594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.356898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.359669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.360065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.360410] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.363062] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.366151] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.367756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.370541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.375469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.391793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.393602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.395068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.396181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.400117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.401782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.403063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.408158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.408737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.410568] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.410963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.415963] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.416441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.420284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.420738] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.423402] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.423816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.427634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.430951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.455485] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.460594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.461823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.466256] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.468591] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.470743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.480959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.355728] Bluetooth: hci0: command tx timeout [ 92.420380] Bluetooth: hci2: command tx timeout [ 92.483616] Bluetooth: hci6: command tx timeout [ 92.484101] Bluetooth: hci4: command tx timeout [ 92.484223] Bluetooth: hci7: command tx timeout [ 92.547854] Bluetooth: hci1: command tx timeout [ 92.547897] Bluetooth: hci3: command tx timeout [ 92.548498] Bluetooth: hci5: command tx timeout [ 94.404370] Bluetooth: hci0: command tx timeout [ 94.470355] Bluetooth: hci2: command tx timeout [ 94.532554] Bluetooth: hci6: command tx timeout [ 94.532690] Bluetooth: hci7: command tx timeout [ 94.532832] Bluetooth: hci4: command tx timeout [ 94.595502] Bluetooth: hci1: command tx timeout [ 94.596867] Bluetooth: hci3: command tx timeout [ 94.596960] Bluetooth: hci5: command tx timeout [ 96.453445] Bluetooth: hci0: command tx timeout [ 96.516387] Bluetooth: hci2: command tx timeout [ 96.580418] Bluetooth: hci4: command tx timeout [ 96.580521] Bluetooth: hci7: command tx timeout [ 96.581048] Bluetooth: hci6: command tx timeout [ 96.643682] Bluetooth: hci1: command tx timeout [ 96.643926] Bluetooth: hci5: command tx timeout [ 96.643988] Bluetooth: hci3: command tx timeout [ 98.499434] Bluetooth: hci0: command tx timeout [ 98.563394] Bluetooth: hci2: command tx timeout [ 98.629403] Bluetooth: hci6: command tx timeout [ 98.629441] Bluetooth: hci7: command tx timeout [ 98.629850] Bluetooth: hci4: command tx timeout [ 98.694540] Bluetooth: hci3: command tx timeout [ 98.694803] Bluetooth: hci5: command tx timeout [ 98.694891] Bluetooth: hci1: command tx timeout [ 152.990447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.993935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.995100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.003682] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.005535] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.007238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.042019] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.044638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.045793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.051056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.053159] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.054261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.064560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.069644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.078904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.094139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.102325] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.107079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.121599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.126608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.129120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.131396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.144816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.146198] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.148758] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.156717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.157068] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.159678] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.160782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.164511] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.283952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.285810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.287014] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.293481] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.294681] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.296944] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.343163] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.350635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.353514] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.354419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.359683] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.365479] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.370464] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.373727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.406147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.478011] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.503773] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.512587] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.077126] Bluetooth: hci0: command tx timeout [ 155.139368] Bluetooth: hci1: command tx timeout [ 155.203485] Bluetooth: hci2: command tx timeout [ 155.204464] Bluetooth: hci4: command tx timeout [ 155.268432] Bluetooth: hci3: command tx timeout [ 155.459416] Bluetooth: hci5: command tx timeout [ 155.460353] Bluetooth: hci6: command tx timeout [ 155.590354] Bluetooth: hci7: command tx timeout [ 157.124367] Bluetooth: hci0: command tx timeout [ 157.188462] Bluetooth: hci1: command tx timeout [ 157.251352] Bluetooth: hci4: command tx timeout [ 157.252618] Bluetooth: hci2: command tx timeout [ 157.315480] Bluetooth: hci3: command tx timeout [ 157.507529] Bluetooth: hci6: command tx timeout [ 157.508473] Bluetooth: hci5: command tx timeout [ 157.636442] Bluetooth: hci7: command tx timeout [ 159.171357] Bluetooth: hci0: command tx timeout [ 159.235354] Bluetooth: hci1: command tx timeout [ 159.300678] Bluetooth: hci2: command tx timeout [ 159.300717] Bluetooth: hci4: command tx timeout [ 159.363401] Bluetooth: hci3: command tx timeout [ 159.555456] Bluetooth: hci5: command tx timeout [ 159.557034] Bluetooth: hci6: command tx timeout [ 159.683417] Bluetooth: hci7: command tx timeout [ 161.219413] Bluetooth: hci0: command tx timeout [ 161.283961] Bluetooth: hci1: command tx timeout [ 161.347424] Bluetooth: hci2: command tx timeout [ 161.347474] Bluetooth: hci4: command tx timeout [ 161.411602] Bluetooth: hci3: command tx timeout [ 161.603554] Bluetooth: hci5: command tx timeout [ 161.604573] Bluetooth: hci6: command tx timeout [ 161.731539] Bluetooth: hci7: command tx timeout [ 214.929828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.931868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.933163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.937881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.942128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.943554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.055940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.071662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.074947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.079195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.083710] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.085138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.242504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.252580] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.253825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.258975] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.266502] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.269374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.312951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.331523] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.347399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.358231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.373386] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.382104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.382939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.395592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.396962] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.405458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.405699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.407156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.413504] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.419636] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.420803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.436897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.442518] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.444858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.574063] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.576087] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.577115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.580086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.581634] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.582624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.614626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.616422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.617918] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.620637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.622504] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.623692] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.964437] Bluetooth: hci0: command tx timeout [ 217.158336] Bluetooth: hci1: command tx timeout [ 217.347439] Bluetooth: hci2: command tx timeout [ 217.475367] Bluetooth: hci3: command tx timeout [ 217.542365] Bluetooth: hci4: command tx timeout [ 217.604395] Bluetooth: hci5: command tx timeout [ 217.731609] Bluetooth: hci7: command tx timeout [ 217.860712] Bluetooth: hci6: command tx timeout [ 219.012521] Bluetooth: hci0: command tx timeout [ 219.206301] Bluetooth: hci1: command tx timeout [ 219.396369] Bluetooth: hci2: command tx timeout [ 219.525445] Bluetooth: hci3: command tx timeout [ 219.588372] Bluetooth: hci4: command tx timeout [ 219.651364] Bluetooth: hci5: command tx timeout [ 219.779444] Bluetooth: hci7: command tx timeout [ 219.908391] Bluetooth: hci6: command tx timeout [ 221.060791] Bluetooth: hci0: command tx timeout [ 221.252381] Bluetooth: hci1: command tx timeout [ 221.444323] Bluetooth: hci2: command tx timeout [ 221.572367] Bluetooth: hci3: command tx timeout [ 221.636361] Bluetooth: hci4: command tx timeout [ 221.701195] Bluetooth: hci5: command tx timeout [ 221.829313] Bluetooth: hci7: command tx timeout [ 221.956333] Bluetooth: hci6: command tx timeout [ 223.108363] Bluetooth: hci0: command tx timeout [ 223.299629] Bluetooth: hci1: command tx timeout [ 223.492351] Bluetooth: hci2: command tx timeout [ 223.620331] Bluetooth: hci3: command tx timeout [ 223.683370] Bluetooth: hci4: command tx timeout [ 223.747318] Bluetooth: hci5: command tx timeout [ 223.875343] Bluetooth: hci7: command tx timeout [ 224.004407] Bluetooth: hci6: command tx timeout [ 277.590079] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.593798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.596184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.602904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.607759] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.610892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.727019] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.731842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.733860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.740974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.742721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.744919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.751054] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.756687] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.757566] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.770647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.772546] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.773585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.804627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.833861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.849762] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.851656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.859053] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.868656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.873688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.879742] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.882301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.890726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.906094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.912198] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.981091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.015473] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.039341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.043525] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.054796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.077993] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.078464] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.106705] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.111209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.112065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.121864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.148809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.191008] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.238622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.265130] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.309884] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.321476] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.334099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.684540] Bluetooth: hci0: command tx timeout [ 279.876424] Bluetooth: hci1: command tx timeout [ 279.876445] Bluetooth: hci2: command tx timeout [ 280.004576] Bluetooth: hci4: command tx timeout [ 280.004596] Bluetooth: hci3: command tx timeout [ 280.260549] Bluetooth: hci6: command tx timeout [ 280.260583] Bluetooth: hci5: command tx timeout [ 280.387361] Bluetooth: hci7: command tx timeout [ 281.731647] Bluetooth: hci0: command tx timeout [ 281.923443] Bluetooth: hci1: command tx timeout [ 281.924334] Bluetooth: hci2: command tx timeout [ 282.051369] Bluetooth: hci3: command tx timeout [ 282.051471] Bluetooth: hci4: command tx timeout [ 282.307466] Bluetooth: hci5: command tx timeout [ 282.307491] Bluetooth: hci6: command tx timeout [ 282.435524] Bluetooth: hci7: command tx timeout [ 283.780226] Bluetooth: hci0: command tx timeout [ 283.971381] Bluetooth: hci2: command tx timeout [ 283.971592] Bluetooth: hci1: command tx timeout [ 284.100633] Bluetooth: hci4: command tx timeout [ 284.100720] Bluetooth: hci3: command tx timeout [ 284.355357] Bluetooth: hci6: command tx timeout [ 284.355454] Bluetooth: hci5: command tx timeout [ 284.483317] Bluetooth: hci7: command tx timeout [ 285.827548] Bluetooth: hci0: command tx timeout [ 286.020337] Bluetooth: hci2: command tx timeout [ 286.020438] Bluetooth: hci1: command tx timeout [ 286.147495] Bluetooth: hci3: command tx timeout [ 286.147728] Bluetooth: hci4: command tx timeout [ 286.404035] Bluetooth: hci5: command tx timeout [ 286.404137] Bluetooth: hci6: command tx timeout [ 286.532315] Bluetooth: hci7: command tx timeout [ 335.283417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.283541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.626165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.626293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.056953] [ 337.057192] ====================================================== [ 337.057778] WARNING: possible circular locking dependency detected [ 337.058363] 6.13.0-rc7-next-20250117 #1 Not tainted [ 337.058847] ------------------------------------------------------ [ 337.060489] kworker/u8:0/11 is trying to acquire lock: [ 337.061439] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.063265] [ 337.063265] but task is already holding lock: [ 337.064875] ffff88800e208768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.066701] [ 337.066701] which lock already depends on the new lock. [ 337.066701] [ 337.068161] [ 337.068161] the existing dependency chain (in reverse order) is: [ 337.068868] [ 337.068868] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 337.069528] __mutex_lock+0x13d/0xb50 [ 337.069991] wiphy_register+0x1b2e/0x25d0 [ 337.070484] ieee80211_register_hw+0x23a4/0x3d60 [ 337.071026] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 337.071589] init_mac80211_hwsim+0x389/0x870 [ 337.072119] do_one_initcall+0xf9/0x640 [ 337.072594] kernel_init_freeable+0x53d/0x7a0 [ 337.073120] kernel_init+0x1e/0x2d0 [ 337.073548] ret_from_fork+0x48/0x80 [ 337.073982] ret_from_fork_asm+0x1a/0x30 [ 337.074472] [ 337.074472] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 337.075094] __lock_acquire+0x29fd/0x4580 [ 337.075582] lock_acquire+0x19b/0x520 [ 337.076039] __mutex_lock+0x13d/0xb50 [ 337.076495] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.077101] unregister_netdevice_queue+0x224/0x2e0 [ 337.077645] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.078196] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.078749] ieee80211_unregister_hw+0x55/0x3a0 [ 337.079265] hwsim_exit_net+0x3a0/0x730 [ 337.079736] ops_exit_list+0xb3/0x180 [ 337.080188] cleanup_net+0x546/0xad0 [ 337.080631] process_one_work+0x8ee/0x1a10 [ 337.081137] worker_thread+0x674/0xe70 [ 337.081614] kthread+0x3ab/0x720 [ 337.082041] ret_from_fork+0x48/0x80 [ 337.082484] ret_from_fork_asm+0x1a/0x30 [ 337.082982] [ 337.082982] other info that might help us debug this: [ 337.082982] [ 337.083736] Possible unsafe locking scenario: [ 337.083736] [ 337.084311] CPU0 CPU1 [ 337.084771] ---- ---- [ 337.085240] lock(&rdev->wiphy.mtx); [ 337.085641] lock(rtnl_mutex); [ 337.086229] lock(&rdev->wiphy.mtx); [ 337.086853] lock(rtnl_mutex); [ 337.087230] [ 337.087230] *** DEADLOCK *** [ 337.087230] [ 337.087800] 4 locks held by kworker/u8:0/11: [ 337.088232] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 337.089250] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 337.090252] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 337.091169] #3: ffff88800e208768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 337.092207] [ 337.092207] stack backtrace: [ 337.092649] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 337.093478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 337.094246] Workqueue: netns cleanup_net [ 337.094659] Call Trace: [ 337.094910] [ 337.095137] dump_stack_lvl+0xca/0x120 [ 337.095554] print_circular_bug+0x47b/0x750 [ 337.096009] check_noncircular+0x2e9/0x3c0 [ 337.096446] ? __pfx_check_noncircular+0x10/0x10 [ 337.096943] ? hlock_class+0x4e/0x130 [ 337.097334] ? mark_lock+0xac/0xed0 [ 337.097719] ? srso_return_thunk+0x5/0x5f [ 337.098165] ? lockdep_lock+0xba/0x1b0 [ 337.098579] ? __pfx_lockdep_lock+0x10/0x10 [ 337.099028] __lock_acquire+0x29fd/0x4580 [ 337.099460] ? __pfx___lock_acquire+0x10/0x10 [ 337.099916] ? lock_release+0x20f/0x6f0 [ 337.100331] ? __pfx_lock_release+0x10/0x10 [ 337.100765] lock_acquire+0x19b/0x520 [ 337.101154] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.101732] ? __pfx_lock_acquire+0x10/0x10 [ 337.102164] ? srso_return_thunk+0x5/0x5f [ 337.102593] ? lock_release+0x20f/0x6f0 [ 337.102996] ? srso_return_thunk+0x5/0x5f [ 337.103425] ? lock_is_held_type+0x9e/0x120 [ 337.103876] ? srso_return_thunk+0x5/0x5f [ 337.104309] __mutex_lock+0x13d/0xb50 [ 337.104706] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.105284] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.105855] ? srso_return_thunk+0x5/0x5f [ 337.106302] ? synchronize_rcu_expedited+0x38a/0x420 [ 337.106821] ? __pfx___mutex_lock+0x10/0x10 [ 337.107262] ? __pfx_autoremove_wake_function+0x10/0x10 [ 337.107825] ? srso_return_thunk+0x5/0x5f [ 337.108252] ? kasan_quarantine_put+0x84/0x1e0 [ 337.108731] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 337.109193] ? srso_return_thunk+0x5/0x5f [ 337.109638] unregister_netdevice_many_notify+0x1612/0x1c80 [ 337.110190] ? __virt_addr_valid+0x2e8/0x5d0 [ 337.110640] ? __pfx_lock_release+0x10/0x10 [ 337.111085] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 337.111689] ? find_held_lock+0x2c/0x110 [ 337.112141] ? srso_return_thunk+0x5/0x5f [ 337.112588] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 337.113099] ? srso_return_thunk+0x5/0x5f [ 337.113525] ? lock_release+0x20f/0x6f0 [ 337.113931] ? __pfx_lock_release+0x10/0x10 [ 337.114380] ? srso_return_thunk+0x5/0x5f [ 337.114805] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.115335] ? srso_return_thunk+0x5/0x5f [ 337.115779] unregister_netdevice_queue+0x224/0x2e0 [ 337.116284] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 337.116845] ? up_write+0x195/0x520 [ 337.117244] _cfg80211_unregister_wdev+0x57b/0x700 [ 337.117738] ? srso_return_thunk+0x5/0x5f [ 337.118176] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 337.118679] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 337.119223] ? srso_return_thunk+0x5/0x5f [ 337.119662] ? srso_return_thunk+0x5/0x5f [ 337.120108] ? synchronize_rcu+0x1ff/0x260 [ 337.120551] ieee80211_unregister_hw+0x55/0x3a0 [ 337.121023] hwsim_exit_net+0x3a0/0x730 [ 337.121435] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.121897] ? srso_return_thunk+0x5/0x5f [ 337.122333] ? netdev_run_todo+0x788/0x1040 [ 337.122776] ? __pfx_hwsim_exit_net+0x10/0x10 [ 337.123235] ops_exit_list+0xb3/0x180 [ 337.123624] cleanup_net+0x546/0xad0 [ 337.124024] ? __pfx_cleanup_net+0x10/0x10 [ 337.124474] process_one_work+0x8ee/0x1a10 [ 337.124934] ? __pfx_lock_acquire+0x10/0x10 [ 337.125368] ? __pfx_process_one_work+0x10/0x10 [ 337.125870] ? srso_return_thunk+0x5/0x5f [ 337.126304] ? move_linked_works+0x172/0x270 [ 337.126768] ? srso_return_thunk+0x5/0x5f [ 337.127203] ? assign_work+0x196/0x240 [ 337.127622] worker_thread+0x674/0xe70 [ 337.128049] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 337.128593] ? __pfx_worker_thread+0x10/0x10 [ 337.129079] kthread+0x3ab/0x720 [ 337.129454] ? __pfx_kthread+0x10/0x10 [ 337.129862] ? srso_return_thunk+0x5/0x5f [ 337.130294] ? finish_task_switch.isra.0+0x206/0x840 [ 337.130817] ? __pfx_kthread+0x10/0x10 [ 337.131225] ret_from_fork+0x48/0x80 [ 337.131606] ? __pfx_kthread+0x10/0x10 [ 337.132022] ret_from_fork_asm+0x1a/0x30 [ 337.132458] [ 339.404121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.407152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.409842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.414103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.417184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.419395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.919352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.921733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.924413] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.927958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.930839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.932686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.992185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.996141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.003968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.011808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.013818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.016115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.019307] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.025893] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.031869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.034123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.042460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.044995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.058892] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.066821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.072661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.078597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.088218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.093369] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.095216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.101761] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.102413] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.109110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.115203] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.119847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.125481] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.134413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.146527] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.147976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.153607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.164542] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.174982] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.178820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.180086] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.180968] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.202558] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.226677] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.444445] Bluetooth: hci0: command tx timeout [ 341.956417] Bluetooth: hci1: command tx timeout [ 342.148279] Bluetooth: hci3: command tx timeout [ 342.148302] Bluetooth: hci2: command tx timeout [ 342.211416] Bluetooth: hci4: command tx timeout [ 342.211819] Bluetooth: hci5: command tx timeout [ 342.275310] Bluetooth: hci7: command tx timeout [ 342.339528] Bluetooth: hci6: command tx timeout [ 343.493255] Bluetooth: hci0: command tx timeout [ 344.003594] Bluetooth: hci1: command tx timeout [ 344.195654] Bluetooth: hci2: command tx timeout [ 344.195806] Bluetooth: hci3: command tx timeout [ 344.259376] Bluetooth: hci5: command tx timeout [ 344.259511] Bluetooth: hci4: command tx timeout [ 344.323371] Bluetooth: hci7: command tx timeout [ 344.387274] Bluetooth: hci6: command tx timeout [ 345.539314] Bluetooth: hci0: command tx timeout [ 346.051909] Bluetooth: hci1: command tx timeout [ 346.243329] Bluetooth: hci3: command tx timeout [ 346.243409] Bluetooth: hci2: command tx timeout [ 346.307340] Bluetooth: hci4: command tx timeout [ 346.307370] Bluetooth: hci5: command tx timeout [ 346.371402] Bluetooth: hci7: command tx timeout [ 346.435344] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 12:24:37 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff815ec430 RCX=0000000000000001 RDX=1ffff11007124e53 RSI=ffffffff81a225a4 RDI=ffff8880389271ec RBP=ffff8880389271b0 RSP=ffff888038927118 R8 =0000000000000001 R9 =ffff888038927158 R10=000000000003ab4d R11=0000000000021f7b R12=ffff8880389271e0 R13=0000000000000000 R14=ffff8880315d5340 R15=0000000000092cc0 RIP=ffffffff812d1b19 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563c6c1a4080 CR3=0000000015a16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000077 R11=6f6c206863696877 R12=0000000000000077 R13=0000000000000001 R14=ffff888008fea020 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa4edff0710 CR3=000000003953e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000