Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:27271' (ECDSA) to the list of known hosts. 2025/01/18 16:02:02 fuzzer started 2025/01/18 16:02:03 dialing manager at localhost:44245 syzkaller login: [ 76.519125] cgroup: Unknown subsys name 'net' [ 76.611754] cgroup: Unknown subsys name 'cpuset' [ 76.654654] cgroup: Unknown subsys name 'rlimit' [ 82.393156] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 16:02:18 syscalls: 2217 2025/01/18 16:02:18 code coverage: enabled 2025/01/18 16:02:18 comparison tracing: enabled 2025/01/18 16:02:18 extra coverage: enabled 2025/01/18 16:02:18 setuid sandbox: enabled 2025/01/18 16:02:18 namespace sandbox: enabled 2025/01/18 16:02:18 Android sandbox: enabled 2025/01/18 16:02:18 fault injection: enabled 2025/01/18 16:02:18 leak checking: enabled 2025/01/18 16:02:18 net packet injection: enabled 2025/01/18 16:02:18 net device setup: enabled 2025/01/18 16:02:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 16:02:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 16:02:18 USB emulation: enabled 2025/01/18 16:02:18 hci packet injection: enabled 2025/01/18 16:02:18 wifi device emulation: enabled 2025/01/18 16:02:18 802.15.4 emulation: enabled 2025/01/18 16:02:18 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 16:02:18 fetching corpus: 50, signal 24602/27666 (executing program) 2025/01/18 16:02:19 fetching corpus: 100, signal 36002/39936 (executing program) 2025/01/18 16:02:19 fetching corpus: 150, signal 42117/46950 (executing program) 2025/01/18 16:02:19 fetching corpus: 200, signal 48113/53574 (executing program) 2025/01/18 16:02:19 fetching corpus: 250, signal 56654/62270 (executing program) 2025/01/18 16:02:19 fetching corpus: 300, signal 59265/65482 (executing program) 2025/01/18 16:02:20 fetching corpus: 350, signal 63208/69777 (executing program) 2025/01/18 16:02:20 fetching corpus: 400, signal 68059/74659 (executing program) 2025/01/18 16:02:20 fetching corpus: 450, signal 72577/79035 (executing program) 2025/01/18 16:02:20 fetching corpus: 500, signal 75606/82050 (executing program) 2025/01/18 16:02:20 fetching corpus: 550, signal 79944/85970 (executing program) 2025/01/18 16:02:20 fetching corpus: 600, signal 81870/87908 (executing program) 2025/01/18 16:02:21 fetching corpus: 650, signal 83621/89663 (executing program) 2025/01/18 16:02:21 fetching corpus: 700, signal 85795/91630 (executing program) 2025/01/18 16:02:21 fetching corpus: 750, signal 88857/94184 (executing program) 2025/01/18 16:02:21 fetching corpus: 800, signal 90652/95751 (executing program) 2025/01/18 16:02:21 fetching corpus: 850, signal 92387/97173 (executing program) 2025/01/18 16:02:21 fetching corpus: 900, signal 94226/98579 (executing program) 2025/01/18 16:02:21 fetching corpus: 950, signal 95337/99502 (executing program) 2025/01/18 16:02:22 fetching corpus: 1000, signal 97110/100785 (executing program) 2025/01/18 16:02:22 fetching corpus: 1050, signal 98294/101676 (executing program) 2025/01/18 16:02:22 fetching corpus: 1100, signal 100404/103031 (executing program) 2025/01/18 16:02:22 fetching corpus: 1150, signal 101728/103902 (executing program) 2025/01/18 16:02:22 fetching corpus: 1200, signal 103542/104972 (executing program) 2025/01/18 16:02:22 fetching corpus: 1250, signal 104549/105590 (executing program) 2025/01/18 16:02:22 fetching corpus: 1266, signal 104934/105805 (executing program) 2025/01/18 16:02:22 fetching corpus: 1266, signal 104934/105856 (executing program) 2025/01/18 16:02:22 fetching corpus: 1266, signal 104934/105892 (executing program) 2025/01/18 16:02:22 fetching corpus: 1266, signal 104934/105929 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/105960 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/105993 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106016 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106052 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106082 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106108 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106139 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106171 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106208 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106234 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106276 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106305 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106331 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106367 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106402 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106425 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106458 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106496 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106531 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106553 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106582 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106618 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106655 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 16:02:23 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 16:02:27 starting 8 fuzzer processes 16:02:27 executing program 0: syz_mount_image$nfs4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 16:02:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) 16:02:27 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpgid(0x0, 0x0) 16:02:27 executing program 3: timer_settime(0x0, 0x0, 0xffffffffffffffff, 0x0) [ 101.026501] audit: type=1400 audit(1737216147.862:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:02:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 16:02:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_gfeatures={0xe}}) 16:02:27 executing program 5: r0 = memfd_create(&(0x7f0000000140)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5\\\'K\xf9E\'\aP\x04fG\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1e\"\x81\x8f\x04\x9fNw\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb62!p\xaf[\x99\" 1\xeb\xc7)\xd2%\v\x91\x0es\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZc\xb3Y\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq\'\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xc6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfa\x04\\3j~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x83W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00\x00\x00\x00', 0xe) fallocate(r0, 0x0, 0x0, 0x9) 16:02:27 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="ee", 0x1, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r2}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'sha256-mb\x00'}}, 0x0, 0x0) [ 102.579676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.582339] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.584192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.589237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.594262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.597289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.637865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.641088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.643665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.647327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.655669] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.662016] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.665377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.665732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.666263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.670710] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.671578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.674250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.687028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.703983] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.704372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.705429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.708890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.721556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.724831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.726621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.727224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.748171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.758670] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 102.762741] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.763401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 102.768819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 102.777588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.780112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 102.793115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 102.796059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 102.810196] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 102.812198] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 102.829399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 102.831116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 102.840608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 102.840710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 102.850878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 102.859256] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 102.895035] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 102.914937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 102.916782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 102.917795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.656296] Bluetooth: hci0: command tx timeout [ 104.720086] Bluetooth: hci1: command tx timeout [ 104.784258] Bluetooth: hci2: command tx timeout [ 104.848294] Bluetooth: hci4: command tx timeout [ 104.849489] Bluetooth: hci3: command tx timeout [ 104.913526] Bluetooth: hci5: command tx timeout [ 104.977012] Bluetooth: hci6: command tx timeout [ 105.040057] Bluetooth: hci7: command tx timeout [ 106.705960] Bluetooth: hci0: command tx timeout [ 106.768978] Bluetooth: hci1: command tx timeout [ 106.833187] Bluetooth: hci2: command tx timeout [ 106.895983] Bluetooth: hci3: command tx timeout [ 106.896052] Bluetooth: hci4: command tx timeout [ 106.961946] Bluetooth: hci5: command tx timeout [ 107.025375] Bluetooth: hci6: command tx timeout [ 107.089962] Bluetooth: hci7: command tx timeout [ 108.752996] Bluetooth: hci0: command tx timeout [ 108.816975] Bluetooth: hci1: command tx timeout [ 108.879975] Bluetooth: hci2: command tx timeout [ 108.944072] Bluetooth: hci3: command tx timeout [ 108.944793] Bluetooth: hci4: command tx timeout [ 109.008174] Bluetooth: hci5: command tx timeout [ 109.073032] Bluetooth: hci6: command tx timeout [ 109.135959] Bluetooth: hci7: command tx timeout [ 110.801041] Bluetooth: hci0: command tx timeout [ 110.863964] Bluetooth: hci1: command tx timeout [ 110.929091] Bluetooth: hci2: command tx timeout [ 110.993022] Bluetooth: hci3: command tx timeout [ 110.993107] Bluetooth: hci4: command tx timeout [ 111.056020] Bluetooth: hci5: command tx timeout [ 111.121005] Bluetooth: hci6: command tx timeout [ 111.183999] Bluetooth: hci7: command tx timeout [ 162.467001] syz-executor.1 (288) used greatest stack depth: 23504 bytes left [ 165.173300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.183088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.185628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.208810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.213668] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.219045] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.276357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.291841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.294857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.296639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.305566] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.311107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.311492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.320388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 165.325430] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.327091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.331586] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.335284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.393856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.408203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.412599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.437737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.439555] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.444877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.448466] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.454610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.461121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.467019] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.473282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.476412] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.540422] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.543244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.546625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 165.555438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.555494] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.564228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.571313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 165.577332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.586826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 165.592555] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.594862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 165.597042] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.601392] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 165.607104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.627321] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 165.628336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.661077] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 165.667552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.312076] Bluetooth: hci0: command tx timeout [ 167.440712] Bluetooth: hci2: command tx timeout [ 167.441004] Bluetooth: hci1: command tx timeout [ 167.504262] Bluetooth: hci3: command tx timeout [ 167.568170] Bluetooth: hci4: command tx timeout [ 167.700072] Bluetooth: hci6: command tx timeout [ 167.761977] Bluetooth: hci5: command tx timeout [ 167.824099] Bluetooth: hci7: command tx timeout [ 169.359956] Bluetooth: hci0: command tx timeout [ 169.487987] Bluetooth: hci2: command tx timeout [ 169.488033] Bluetooth: hci1: command tx timeout [ 169.551994] Bluetooth: hci3: command tx timeout [ 169.616489] Bluetooth: hci4: command tx timeout [ 169.744051] Bluetooth: hci6: command tx timeout [ 169.808009] Bluetooth: hci5: command tx timeout [ 169.872136] Bluetooth: hci7: command tx timeout [ 171.408228] Bluetooth: hci0: command tx timeout [ 171.536219] Bluetooth: hci2: command tx timeout [ 171.537020] Bluetooth: hci1: command tx timeout [ 171.600037] Bluetooth: hci3: command tx timeout [ 171.665469] Bluetooth: hci4: command tx timeout [ 171.792038] Bluetooth: hci6: command tx timeout [ 171.856118] Bluetooth: hci5: command tx timeout [ 171.922323] Bluetooth: hci7: command tx timeout [ 173.455963] Bluetooth: hci0: command tx timeout [ 173.583968] Bluetooth: hci2: command tx timeout [ 173.584955] Bluetooth: hci1: command tx timeout [ 173.648183] Bluetooth: hci3: command tx timeout [ 173.711992] Bluetooth: hci4: command tx timeout [ 173.839975] Bluetooth: hci6: command tx timeout [ 173.904922] Bluetooth: hci5: command tx timeout [ 173.969945] Bluetooth: hci7: command tx timeout [ 227.934752] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.937948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.948225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.960325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.963563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.967340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.075531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.079560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.081937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.087844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.090723] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.093473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.144946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.159730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.171595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.190298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.205486] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.214317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.235736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.295365] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.296608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.318331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.321825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.328263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.331439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.338571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.341284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.358686] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.365764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.379853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.383492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.385649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.386131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.423852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.437626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 228.444104] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 228.447356] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.450990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.454201] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 228.469980] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 228.473677] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 228.476820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.522499] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.557666] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.564452] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.653633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.662484] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 228.672550] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.032063] Bluetooth: hci0: command tx timeout [ 230.160345] Bluetooth: hci1: command tx timeout [ 230.288359] Bluetooth: hci2: command tx timeout [ 230.416042] Bluetooth: hci3: command tx timeout [ 230.609010] Bluetooth: hci4: command tx timeout [ 230.672171] Bluetooth: hci5: command tx timeout [ 230.865294] Bluetooth: hci7: command tx timeout [ 230.929299] Bluetooth: hci6: command tx timeout [ 232.079977] Bluetooth: hci0: command tx timeout [ 232.209941] Bluetooth: hci1: command tx timeout [ 232.336048] Bluetooth: hci2: command tx timeout [ 232.464737] Bluetooth: hci3: command tx timeout [ 232.657920] Bluetooth: hci4: command tx timeout [ 232.720143] Bluetooth: hci5: command tx timeout [ 232.913957] Bluetooth: hci7: command tx timeout [ 232.977145] Bluetooth: hci6: command tx timeout [ 234.128054] Bluetooth: hci0: command tx timeout [ 234.257763] Bluetooth: hci1: command tx timeout [ 234.384967] Bluetooth: hci2: command tx timeout [ 234.512004] Bluetooth: hci3: command tx timeout [ 234.705751] Bluetooth: hci4: command tx timeout [ 234.768474] Bluetooth: hci5: command tx timeout [ 234.961323] Bluetooth: hci7: command tx timeout [ 235.026119] Bluetooth: hci6: command tx timeout [ 236.175942] Bluetooth: hci0: command tx timeout [ 236.304077] Bluetooth: hci1: command tx timeout [ 236.432030] Bluetooth: hci2: command tx timeout [ 236.560090] Bluetooth: hci3: command tx timeout [ 236.753279] Bluetooth: hci4: command tx timeout [ 236.816259] Bluetooth: hci5: command tx timeout [ 237.008948] Bluetooth: hci7: command tx timeout [ 237.072011] Bluetooth: hci6: command tx timeout [ 289.888524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.897448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.900203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.912246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.916544] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.921374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.954357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.959378] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.961431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.977230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.987722] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.989953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.221181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.223711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.229224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.242057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.252480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 290.258123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.289411] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.292531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.322705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.333183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.353668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.356261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.363149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 290.372528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.375163] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.385063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.388362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.394451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.396337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 290.411141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.413971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.420154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.446690] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 290.447334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.457944] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.465803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 290.467383] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.470194] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 290.492408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.536481] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.556081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.565010] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 290.565267] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 290.567584] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.576709] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 290.584670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 291.985055] Bluetooth: hci0: command tx timeout [ 292.048954] Bluetooth: hci1: command tx timeout [ 292.303978] Bluetooth: hci2: command tx timeout [ 292.495991] Bluetooth: hci3: command tx timeout [ 292.497056] Bluetooth: hci4: command tx timeout [ 292.561136] Bluetooth: hci5: command tx timeout [ 292.624167] Bluetooth: hci6: command tx timeout [ 292.625247] Bluetooth: hci7: command tx timeout [ 294.032184] Bluetooth: hci0: command tx timeout [ 294.095922] Bluetooth: hci1: command tx timeout [ 294.353915] Bluetooth: hci2: command tx timeout [ 294.544040] Bluetooth: hci4: command tx timeout [ 294.544157] Bluetooth: hci3: command tx timeout [ 294.607944] Bluetooth: hci5: command tx timeout [ 294.672077] Bluetooth: hci6: command tx timeout [ 294.673259] Bluetooth: hci7: command tx timeout [ 296.080027] Bluetooth: hci0: command tx timeout [ 296.144078] Bluetooth: hci1: command tx timeout [ 296.400020] Bluetooth: hci2: command tx timeout [ 296.592239] Bluetooth: hci3: command tx timeout [ 296.592545] Bluetooth: hci4: command tx timeout [ 296.656320] Bluetooth: hci5: command tx timeout [ 296.720045] Bluetooth: hci6: command tx timeout [ 296.720207] Bluetooth: hci7: command tx timeout [ 298.128480] Bluetooth: hci0: command tx timeout [ 298.191975] Bluetooth: hci1: command tx timeout [ 298.447965] Bluetooth: hci2: command tx timeout [ 298.640009] Bluetooth: hci3: command tx timeout [ 298.640109] Bluetooth: hci4: command tx timeout [ 298.703955] Bluetooth: hci5: command tx timeout [ 298.768095] Bluetooth: hci7: command tx timeout [ 298.768652] Bluetooth: hci6: command tx timeout [ 348.105256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.105385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.442265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.442359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.830470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.830553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.317277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.317369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.461897] [ 349.462148] ====================================================== [ 349.462736] WARNING: possible circular locking dependency detected [ 349.462913] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 349.463960] 6.13.0-rc7-next-20250117 #1 Not tainted [ 349.465074] ------------------------------------------------------ [ 349.466181] kworker/u8:2/13592 is trying to acquire lock: [ 349.466993] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 349.468418] [ 349.468418] but task is already holding lock: [ 349.469267] ffff888015190768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 349.470667] [ 349.470667] which lock already depends on the new lock. [ 349.470667] [ 349.472182] [ 349.472182] the existing dependency chain (in reverse order) is: [ 349.473281] [ 349.473281] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 349.474244] __mutex_lock+0x13d/0xb50 [ 349.474922] wiphy_register+0x1b2e/0x25d0 [ 349.475619] ieee80211_register_hw+0x23a4/0x3d60 [ 349.476712] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 349.477285] init_mac80211_hwsim+0x389/0x870 [ 349.477802] do_one_initcall+0xf9/0x640 [ 349.478281] kernel_init_freeable+0x53d/0x7a0 [ 349.478798] kernel_init+0x1e/0x2d0 [ 349.479213] ret_from_fork+0x48/0x80 [ 349.479637] ret_from_fork_asm+0x1a/0x30 [ 349.480118] [ 349.480118] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 349.480726] __lock_acquire+0x29fd/0x4580 [ 349.481210] lock_acquire+0x19b/0x520 [ 349.481656] __mutex_lock+0x13d/0xb50 [ 349.482107] unregister_netdevice_many_notify+0x1612/0x1c80 [ 349.482726] unregister_netdevice_queue+0x224/0x2e0 [ 349.483269] _cfg80211_unregister_wdev+0x57b/0x700 [ 349.483813] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 349.484363] ieee80211_unregister_hw+0x55/0x3a0 [ 349.484877] hwsim_exit_net+0x3a0/0x730 [ 349.485346] ops_exit_list+0xb3/0x180 [ 349.485795] cleanup_net+0x546/0xad0 [ 349.486236] process_one_work+0x8ee/0x1a10 [ 349.486735] worker_thread+0x674/0xe70 [ 349.487204] kthread+0x3ab/0x720 [ 349.487620] ret_from_fork+0x48/0x80 [ 349.488045] ret_from_fork_asm+0x1a/0x30 [ 349.488529] [ 349.488529] other info that might help us debug this: [ 349.488529] [ 349.489271] Possible unsafe locking scenario: [ 349.489271] [ 349.489831] CPU0 CPU1 [ 349.490267] ---- ---- [ 349.490728] lock(&rdev->wiphy.mtx); [ 349.491126] lock(rtnl_mutex); [ 349.491693] lock(&rdev->wiphy.mtx); [ 349.492308] lock(rtnl_mutex); [ 349.492668] [ 349.492668] *** DEADLOCK *** [ 349.492668] [ 349.493239] 4 locks held by kworker/u8:2/13592: [ 349.493693] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 349.494701] #1: ffff88802cc07d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 349.495663] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 349.496563] #3: ffff888015190768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 349.497577] [ 349.497577] stack backtrace: [ 349.498011] CPU: 1 UID: 0 PID: 13592 Comm: kworker/u8:2 Not tainted 6.13.0-rc7-next-20250117 #1 [ 349.498829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 349.499600] Workqueue: netns cleanup_net [ 349.500010] Call Trace: [ 349.500259] [ 349.500481] dump_stack_lvl+0xca/0x120 [ 349.500891] print_circular_bug+0x47b/0x750 [ 349.501341] check_noncircular+0x2e9/0x3c0 [ 349.501762] ? __pfx_check_noncircular+0x10/0x10 [ 349.502230] ? hlock_class+0x4e/0x130 [ 349.502605] ? mark_lock+0xac/0xed0 [ 349.502974] ? srso_return_thunk+0x5/0x5f [ 349.503404] ? sched_clock+0x37/0x60 [ 349.503798] ? lockdep_lock+0xba/0x1b0 [ 349.504213] ? __pfx_lockdep_lock+0x10/0x10 [ 349.504661] __lock_acquire+0x29fd/0x4580 [ 349.505097] ? __pfx___lock_acquire+0x10/0x10 [ 349.505547] ? lock_release+0x20f/0x6f0 [ 349.505949] ? __pfx_lock_release+0x10/0x10 [ 349.506390] lock_acquire+0x19b/0x520 [ 349.506785] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 349.507368] ? __pfx_lock_acquire+0x10/0x10 [ 349.507801] ? srso_return_thunk+0x5/0x5f [ 349.508227] ? lock_release+0x20f/0x6f0 [ 349.508629] ? srso_return_thunk+0x5/0x5f [ 349.509065] ? lock_is_held_type+0x9e/0x120 [ 349.509510] ? srso_return_thunk+0x5/0x5f [ 349.509937] __mutex_lock+0x13d/0xb50 [ 349.510331] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 349.510897] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 349.511506] ? srso_return_thunk+0x5/0x5f [ 349.511944] ? synchronize_rcu_expedited+0x38a/0x420 [ 349.512458] ? __pfx___mutex_lock+0x10/0x10 [ 349.512914] ? __pfx_autoremove_wake_function+0x10/0x10 [ 349.513471] ? srso_return_thunk+0x5/0x5f [ 349.513899] ? kasan_quarantine_put+0x84/0x1e0 [ 349.514398] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 349.514883] ? srso_return_thunk+0x5/0x5f [ 349.515320] unregister_netdevice_many_notify+0x1612/0x1c80 [ 349.515883] ? __virt_addr_valid+0x2e8/0x5d0 [ 349.516350] ? __pfx_lock_release+0x10/0x10 [ 349.516787] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 349.517377] ? find_held_lock+0x2c/0x110 [ 349.517833] ? srso_return_thunk+0x5/0x5f [ 349.518269] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 349.518795] ? srso_return_thunk+0x5/0x5f [ 349.519222] ? lock_release+0x20f/0x6f0 [ 349.519642] ? __pfx_lock_release+0x10/0x10 [ 349.520094] ? srso_return_thunk+0x5/0x5f [ 349.520544] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 349.521074] ? srso_return_thunk+0x5/0x5f [ 349.521511] unregister_netdevice_queue+0x224/0x2e0 [ 349.522012] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 349.522554] ? up_write+0x195/0x520 [ 349.522943] _cfg80211_unregister_wdev+0x57b/0x700 [ 349.523450] ? srso_return_thunk+0x5/0x5f [ 349.523894] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 349.524398] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 349.524944] ? srso_return_thunk+0x5/0x5f [ 349.525418] ? srso_return_thunk+0x5/0x5f [ 349.525862] ? synchronize_rcu+0x1ff/0x260 [ 349.526291] ieee80211_unregister_hw+0x55/0x3a0 [ 349.526778] hwsim_exit_net+0x3a0/0x730 [ 349.527188] ? __pfx_hwsim_exit_net+0x10/0x10 [ 349.527659] ? srso_return_thunk+0x5/0x5f [ 349.528094] ? netdev_run_todo+0x788/0x1040 [ 349.528551] ? __pfx_hwsim_exit_net+0x10/0x10 [ 349.529025] ops_exit_list+0xb3/0x180 [ 349.529417] cleanup_net+0x546/0xad0 [ 349.529797] ? __pfx_cleanup_net+0x10/0x10 [ 349.530228] process_one_work+0x8ee/0x1a10 [ 349.530690] ? __pfx_lock_acquire+0x10/0x10 [ 349.531131] ? __pfx_process_one_work+0x10/0x10 [ 349.531621] ? srso_return_thunk+0x5/0x5f [ 349.532050] ? move_linked_works+0x172/0x270 [ 349.532498] ? srso_return_thunk+0x5/0x5f [ 349.532930] ? assign_work+0x196/0x240 [ 349.533348] worker_thread+0x674/0xe70 [ 349.533768] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 349.534301] ? srso_return_thunk+0x5/0x5f [ 349.534728] ? __pfx_worker_thread+0x10/0x10 [ 349.535183] kthread+0x3ab/0x720 [ 349.535544] ? __pfx_kthread+0x10/0x10 [ 349.535946] ? srso_return_thunk+0x5/0x5f [ 349.536369] ? finish_task_switch.isra.0+0x206/0x840 [ 349.536872] ? __pfx_kthread+0x10/0x10 [ 349.537287] ret_from_fork+0x48/0x80 [ 349.537654] ? __pfx_kthread+0x10/0x10 [ 349.538055] ret_from_fork_asm+0x1a/0x30 [ 349.538489] [ 351.644411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.646449] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.648449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.653615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.656784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 351.659237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.680087] Bluetooth: hci0: command tx timeout [ 355.728027] Bluetooth: hci0: command tx timeout [ 357.776073] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 16:06:37 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819fcc20 RDX=1ffffd40000e5b1e RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea000072d8c0 RSP=ffff88802c1079d8 R8 =0000000000000000 R9 =fffffbfff0c8043a R10=0000000000000000 R11=00000000000007e0 R12=00000000ffffffff R13=00000000000000ff R14=0000000000000000 R15=ffff888009be2600 RIP=ffffffff81719c78 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056221574b000 CR3=0000000031390000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=3a6d697377685f313132303863616d2b XMM03=00376d697377683a6d697377685f3131 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000056221578cfa00000562215743780 XMM06=000056221571f2400000000200000004 XMM07=00000000000000000000000000000000 XMM08=20202020203a657a697320656c696600 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88802cc06b38 R8 =0000000000000001 R9 =ffffed1005980d57 R10=0000000000000061 R11=6920202020202020 R12=0000000000000061 R13=0000000000000001 R14=ffff888008fea031 R15=ffff88802cc06e38 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fecddfd2368 CR3=000000003cd98000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=77685f313132303863616d2f6c617574 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000400000003000056221575caa0 XMM06=00005622157439900000000300000009 XMM07=00000000000000000000000000000000 XMM08=00000000000000500000000000000600 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000