Warning: Permanently added '[localhost]:13316' (ECDSA) to the list of known hosts.
2025/01/18 16:47:21 fuzzer started
2025/01/18 16:47:21 dialing manager at localhost:44245
syzkaller login: [   70.037904] cgroup: Unknown subsys name 'net'
[   70.151972] cgroup: Unknown subsys name 'cpuset'
[   70.191911] cgroup: Unknown subsys name 'rlimit'
[   75.016422] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   85.374725] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/18 16:47:37 syscalls: 2217
2025/01/18 16:47:37 code coverage: enabled
2025/01/18 16:47:37 comparison tracing: enabled
2025/01/18 16:47:37 extra coverage: enabled
2025/01/18 16:47:37 setuid sandbox: enabled
2025/01/18 16:47:37 namespace sandbox: enabled
2025/01/18 16:47:37 Android sandbox: enabled
2025/01/18 16:47:37 fault injection: enabled
2025/01/18 16:47:37 leak checking: enabled
2025/01/18 16:47:37 net packet injection: enabled
2025/01/18 16:47:37 net device setup: enabled
2025/01/18 16:47:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/18 16:47:37 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/18 16:47:37 USB emulation: enabled
2025/01/18 16:47:37 hci packet injection: enabled
2025/01/18 16:47:37 wifi device emulation: enabled
2025/01/18 16:47:37 802.15.4 emulation: enabled
2025/01/18 16:47:37 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/18 16:47:38 fetching corpus: 50, signal 29131/32014 (executing program)
2025/01/18 16:47:38 fetching corpus: 100, signal 41254/44925 (executing program)
2025/01/18 16:47:38 fetching corpus: 150, signal 46691/51198 (executing program)
2025/01/18 16:47:38 fetching corpus: 200, signal 52123/57212 (executing program)
2025/01/18 16:47:38 fetching corpus: 250, signal 58065/63503 (executing program)
2025/01/18 16:47:38 fetching corpus: 300, signal 61362/67259 (executing program)
2025/01/18 16:47:39 fetching corpus: 350, signal 66181/72204 (executing program)
2025/01/18 16:47:39 fetching corpus: 400, signal 70108/76259 (executing program)
2025/01/18 16:47:39 fetching corpus: 450, signal 73270/79538 (executing program)
2025/01/18 16:47:39 fetching corpus: 500, signal 75973/82304 (executing program)
2025/01/18 16:47:39 fetching corpus: 550, signal 79827/85949 (executing program)
2025/01/18 16:47:39 fetching corpus: 600, signal 82186/88177 (executing program)
2025/01/18 16:47:40 fetching corpus: 650, signal 84243/90159 (executing program)
2025/01/18 16:47:40 fetching corpus: 700, signal 86264/92035 (executing program)
2025/01/18 16:47:40 fetching corpus: 750, signal 88753/94168 (executing program)
2025/01/18 16:47:40 fetching corpus: 800, signal 90721/95844 (executing program)
2025/01/18 16:47:40 fetching corpus: 850, signal 91855/96861 (executing program)
2025/01/18 16:47:40 fetching corpus: 900, signal 94267/98723 (executing program)
2025/01/18 16:47:41 fetching corpus: 950, signal 95660/99819 (executing program)
2025/01/18 16:47:41 fetching corpus: 1000, signal 97610/101175 (executing program)
2025/01/18 16:47:41 fetching corpus: 1050, signal 99328/102332 (executing program)
2025/01/18 16:47:41 fetching corpus: 1100, signal 100380/103088 (executing program)
2025/01/18 16:47:41 fetching corpus: 1150, signal 101670/103907 (executing program)
2025/01/18 16:47:41 fetching corpus: 1200, signal 103138/104791 (executing program)
2025/01/18 16:47:42 fetching corpus: 1250, signal 104579/105599 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/105801 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/105845 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/105874 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/105910 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/105940 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/105967 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106005 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106037 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106068 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106101 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106138 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106172 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106205 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106232 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106260 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106297 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106324 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106353 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106378 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106421 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106451 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106495 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106523 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106552 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106584 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106623 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106652 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106667 (executing program)
2025/01/18 16:47:42 fetching corpus: 1266, signal 104934/106667 (executing program)
2025/01/18 16:47:45 starting 8 fuzzer processes
16:47:45 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x203}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000))
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x80)

16:47:45 executing program 1:
r0 = epoll_create(0x7)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300))

16:47:45 executing program 2:
vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000440)="66db2467d113ad3025f6d93f5716c852f44f02d2cde6bff96f4d10ba3259b5c9de848fdadc4698920f682d36148b7280b9263c703ee69e478b3dfd66d78ff4932bcf647c0dc5038e9baa6f15397b6211316412a7495e2a8b8d73343ceb682603ad687004d0835a5c6afa19b6e217995eb463ed45d286cfa19c8829729e3d07aeaeeca3c28b28932807fd42147c6da72540fe686e6626b672efb4abf6cdee3fba81f24e4f31f4a0542693406a4f2d9664fe05388fada7e8b274dfbb70f4d99fcbfd4588a4dc6bf9c6450799103480eeecc78daeaff7a0dcbec60cb77f44a0d6d6b0693ae61647411099865b31e24d8b34da9c7a7cb19aeecf6b83c262181191d6250a64c3f7567237778e24e9a6a07ce6bb6cd8b8b8b86dc0f09d8e9a547df105b2bbf5cb8aad77c973d39d822d8d2a826604489f406f1ee8bdbe3a9a8ae9b3c36f69ab69319e49c639d033bd70bdd5f5fc0bd71e2d2eb824fd417241950890047984b023", 0x164}, {&(0x7f00000005c0)="cc25aa3ea18958001da8ca7aeb3ab13393b15aee6008251aff82a86d7c6d7386be2ce9279374e37cc5aa5d4095e6c05b23", 0x31}], 0x2, 0x0)
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="18419cc68448de3ae8f97ea6a46d823d4f19cecbf569a58b79851d91f3da031fecf4dfebf4ac3b13988a048b4e35761cb05a5d5b28e1ca6ceebae02cbbf7e894098749d5f99cb226f14f00b6034bfb02a7a5af409f531820bd319b9d7c3405022b550d32ad368fdbbddb8ed631d1dde9a4ed", 0xff10, r1)

16:47:45 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
syslog(0x0, 0x0, 0x0)

16:47:45 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup3(r2, r1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = dup(r3)
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000200)=0xc00)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd9ce}, 0x1c)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x56348, 0x0, 0x2, 0x0, 0x4000000, 0x97, 0x1, 0x0, 0x7fff, 0x0, 0x4000000000000}, 0x0, 0xfffffbfffffffffb, 0xffffffffffffffff, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xde, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)

[   94.019104] audit: type=1400 audit(1737218865.958:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
16:47:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="feffffff000000002e2f21dd41653100"])
faccessat2(r2, &(0x7f0000000140)='./file1\x00', 0x108, 0x1200)
write(r1, &(0x7f0000000200)='E', 0x140000)
r3 = memfd_create(&(0x7f0000000240)='[\x00', 0x0)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000001c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x105042, 0x0)
pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000240)}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000300)="fd42e9cb75cf01c25948b9297d9493e48fd3d53b23d45c77815e303b0ab328f78f11e812272b275223910d2b86312d18d60c8c607e9cecca5eb026077c", 0x3d}, {&(0x7f0000000480)="72891fbe41ce2aa014009b0c12f30d07915e817d", 0x14}, {&(0x7f00000004c0)="5c264a5a346aecd82a38077a5f70591e91cf07c3e60c382b8570ff45568bd500e593d7b24364ade5f749087548a0e064420131bce7fa6f9aef6a0675bbb47cd2f2b4ce158d7fa9d6dd4621dd91a085312a33a500e788c67f7f8058df61408d449177a77ab3c1ae4ad423088ef1f568d102d059863903d0f3dae176df7f", 0x7d}, {&(0x7f0000000540)="a3", 0x1}], 0x6, 0xffff, 0xfffffffe)
r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_script(r5, &(0x7f0000000600)={'#! ', './file1', [{0x20, '[\x00'}, {0x20, '[\x00'}, {0x20, '[\x00'}, {0x20, '%(!'}, {0x20, '\xb7/--'}], 0xa, "45674f6f185d687d829e6d2dd078d1db87c181112255af4b065c945ce2e3114490e625358f0d6d"}, 0x44)
sendfile(r4, r0, 0x0, 0xfffffdef)

16:47:45 executing program 6:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ppoll(&(0x7f0000000340)=[{r0}], 0x1, &(0x7f00000003c0), 0x0, 0x0)

16:47:46 executing program 7:
ioperm(0x0, 0x7ff, 0x7)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

[   95.382083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.386494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.389777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.394571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.395461] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.396025] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.406414] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.409666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.411449] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.412282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.422810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.424791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.428481] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.429924] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   95.443373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.448653] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   95.450612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.461433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.501517] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.502532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   95.507330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   95.513685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   95.514427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   95.517604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.521589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   95.522516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.522882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.528485] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   95.531191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   95.540319] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   95.542471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.544639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.547380] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.552510] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   95.554369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.555867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   95.560467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.565015] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   95.567811] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   95.569941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.571241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   95.574109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   95.593781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   95.599478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   95.604704] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   95.607747] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   95.617561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   95.619022] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   97.509070] Bluetooth: hci2: command tx timeout
[   97.509343] Bluetooth: hci1: command tx timeout
[   97.572243] Bluetooth: hci0: command tx timeout
[   97.637243] Bluetooth: hci3: command tx timeout
[   97.637278] Bluetooth: hci7: command tx timeout
[   97.700265] Bluetooth: hci5: command tx timeout
[   97.701241] Bluetooth: hci4: command tx timeout
[   97.764443] Bluetooth: hci6: command tx timeout
[   99.557270] Bluetooth: hci2: command tx timeout
[   99.557366] Bluetooth: hci1: command tx timeout
[   99.621722] Bluetooth: hci0: command tx timeout
[   99.684437] Bluetooth: hci7: command tx timeout
[   99.685351] Bluetooth: hci3: command tx timeout
[   99.748922] Bluetooth: hci4: command tx timeout
[   99.749008] Bluetooth: hci5: command tx timeout
[   99.813355] Bluetooth: hci6: command tx timeout
[  101.607237] Bluetooth: hci1: command tx timeout
[  101.607390] Bluetooth: hci2: command tx timeout
[  101.668288] Bluetooth: hci0: command tx timeout
[  101.734209] Bluetooth: hci3: command tx timeout
[  101.734290] Bluetooth: hci7: command tx timeout
[  101.796342] Bluetooth: hci4: command tx timeout
[  101.797209] Bluetooth: hci5: command tx timeout
[  101.860221] Bluetooth: hci6: command tx timeout
[  103.653489] Bluetooth: hci2: command tx timeout
[  103.653523] Bluetooth: hci1: command tx timeout
[  103.717253] Bluetooth: hci0: command tx timeout
[  103.780260] Bluetooth: hci7: command tx timeout
[  103.781333] Bluetooth: hci3: command tx timeout
[  103.844285] Bluetooth: hci5: command tx timeout
[  103.844329] Bluetooth: hci4: command tx timeout
[  103.909343] Bluetooth: hci6: command tx timeout
[  158.005725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.010400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.011703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.015812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.018272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  158.019915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.071921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.078085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.079701] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.086592] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.090424] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  158.092257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.092536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.094783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.096744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.100524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.103046] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  158.107282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.182155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.215278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.220671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  158.233559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.241565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  158.245865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  158.267319] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  158.272480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.280658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  158.304514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  158.327668] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  158.334761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  158.344833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  158.362211] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  158.370484] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  158.402962] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  158.405434] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  158.410634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  158.411840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  158.418051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  158.431988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  158.439374] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  158.440062] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  158.446922] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  158.460740] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  158.486267] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  158.490803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  158.491217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  158.525285] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  158.529368] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  160.037394] Bluetooth: hci0: command tx timeout
[  160.165246] Bluetooth: hci2: command tx timeout
[  160.165697] Bluetooth: hci1: command tx timeout
[  160.357074] Bluetooth: hci3: command tx timeout
[  160.420209] Bluetooth: hci4: command tx timeout
[  160.549174] Bluetooth: hci5: command tx timeout
[  160.613823] Bluetooth: hci7: command tx timeout
[  160.614242] Bluetooth: hci6: command tx timeout
[  162.085222] Bluetooth: hci0: command tx timeout
[  162.213249] Bluetooth: hci1: command tx timeout
[  162.213827] Bluetooth: hci2: command tx timeout
[  162.405231] Bluetooth: hci3: command tx timeout
[  162.469287] Bluetooth: hci4: command tx timeout
[  162.597705] Bluetooth: hci5: command tx timeout
[  162.661445] Bluetooth: hci6: command tx timeout
[  162.663171] Bluetooth: hci7: command tx timeout
[  164.133773] Bluetooth: hci0: command tx timeout
[  164.262276] Bluetooth: hci2: command tx timeout
[  164.262581] Bluetooth: hci1: command tx timeout
[  164.452228] Bluetooth: hci3: command tx timeout
[  164.516206] Bluetooth: hci4: command tx timeout
[  164.646156] Bluetooth: hci5: command tx timeout
[  164.708305] Bluetooth: hci7: command tx timeout
[  164.708924] Bluetooth: hci6: command tx timeout
[  166.180277] Bluetooth: hci0: command tx timeout
[  166.309297] Bluetooth: hci1: command tx timeout
[  166.309892] Bluetooth: hci2: command tx timeout
[  166.500431] Bluetooth: hci3: command tx timeout
[  166.565233] Bluetooth: hci4: command tx timeout
[  166.694169] Bluetooth: hci5: command tx timeout
[  166.757284] Bluetooth: hci7: command tx timeout
[  166.757399] Bluetooth: hci6: command tx timeout
[  220.027278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  220.038572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  220.041006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  220.052749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  220.057031] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  220.059885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  220.205966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.212887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.215374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.222338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.228555] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  220.232462] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.347456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  220.350267] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  220.354703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  220.362418] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  220.367649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  220.370934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  220.469756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.475930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.484733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.490449] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.493300] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  220.495279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.549523] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.556912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.561581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  220.578617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.580520] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  220.646567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.675232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  220.682888] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  220.683820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.684825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  220.695748] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  220.697745] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  220.702009] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  220.706046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  220.734557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  220.736488] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  220.745768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  220.770418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  220.777790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  220.780490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  220.787378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  220.798551] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  220.817531] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  220.820438] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  222.117210] Bluetooth: hci0: command tx timeout
[  222.308276] Bluetooth: hci1: command tx timeout
[  222.437191] Bluetooth: hci2: command tx timeout
[  222.565447] Bluetooth: hci3: command tx timeout
[  222.756324] Bluetooth: hci4: command tx timeout
[  222.821228] Bluetooth: hci5: command tx timeout
[  222.886182] Bluetooth: hci6: command tx timeout
[  222.949253] Bluetooth: hci7: command tx timeout
[  224.164393] Bluetooth: hci0: command tx timeout
[  224.356351] Bluetooth: hci1: command tx timeout
[  224.485737] Bluetooth: hci2: command tx timeout
[  224.615133] Bluetooth: hci3: command tx timeout
[  224.804231] Bluetooth: hci4: command tx timeout
[  224.868371] Bluetooth: hci5: command tx timeout
[  224.932229] Bluetooth: hci6: command tx timeout
[  224.996284] Bluetooth: hci7: command tx timeout
[  226.213179] Bluetooth: hci0: command tx timeout
[  226.406159] Bluetooth: hci1: command tx timeout
[  226.533721] Bluetooth: hci2: command tx timeout
[  226.660185] Bluetooth: hci3: command tx timeout
[  226.853349] Bluetooth: hci4: command tx timeout
[  226.917207] Bluetooth: hci5: command tx timeout
[  226.981170] Bluetooth: hci6: command tx timeout
[  227.044215] Bluetooth: hci7: command tx timeout
[  228.261176] Bluetooth: hci0: command tx timeout
[  228.453157] Bluetooth: hci1: command tx timeout
[  228.581246] Bluetooth: hci2: command tx timeout
[  228.709286] Bluetooth: hci3: command tx timeout
[  228.901136] Bluetooth: hci4: command tx timeout
[  228.965146] Bluetooth: hci5: command tx timeout
[  229.030140] Bluetooth: hci6: command tx timeout
[  229.093181] Bluetooth: hci7: command tx timeout
[  283.261534] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.268832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.271704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.276285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.279692] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.284417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.287797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.296343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.300671] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  283.304273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  283.310696] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.320604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.380529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  283.384559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  283.387289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  283.396400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  283.401596] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  283.406555] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  283.484211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  283.491684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  283.495434] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  283.503930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  283.509905] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  283.515330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  283.573031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  283.621570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  283.627480] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  283.643451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  283.648700] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  283.656401] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  283.659466] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  283.662508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  283.668840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  283.673623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  283.676621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  283.679233] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  283.693806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  283.701611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  283.701963] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  283.707584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  283.707929] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  283.716490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  283.720558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  283.741723] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  283.750168] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  283.750939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  283.753717] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  283.757571] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  285.349168] Bluetooth: hci0: command tx timeout
[  285.413222] Bluetooth: hci1: command tx timeout
[  285.477289] Bluetooth: hci2: command tx timeout
[  285.669350] Bluetooth: hci3: command tx timeout
[  285.798252] Bluetooth: hci7: command tx timeout
[  285.799015] Bluetooth: hci4: command tx timeout
[  285.861149] Bluetooth: hci5: command tx timeout
[  285.861990] Bluetooth: hci6: command tx timeout
[  287.396283] Bluetooth: hci0: command tx timeout
[  287.460514] Bluetooth: hci1: command tx timeout
[  287.524145] Bluetooth: hci2: command tx timeout
[  287.716846] Bluetooth: hci3: command tx timeout
[  287.844195] Bluetooth: hci4: command tx timeout
[  287.844265] Bluetooth: hci7: command tx timeout
[  287.908142] Bluetooth: hci6: command tx timeout
[  287.908172] Bluetooth: hci5: command tx timeout
[  289.445133] Bluetooth: hci0: command tx timeout
[  289.509174] Bluetooth: hci1: command tx timeout
[  289.573132] Bluetooth: hci2: command tx timeout
[  289.765343] Bluetooth: hci3: command tx timeout
[  289.894175] Bluetooth: hci7: command tx timeout
[  289.894327] Bluetooth: hci4: command tx timeout
[  289.956318] Bluetooth: hci5: command tx timeout
[  289.956414] Bluetooth: hci6: command tx timeout
[  291.493122] Bluetooth: hci0: command tx timeout
[  291.559112] Bluetooth: hci1: command tx timeout
[  291.620125] Bluetooth: hci2: command tx timeout
[  291.813160] Bluetooth: hci3: command tx timeout
[  291.940203] Bluetooth: hci4: command tx timeout
[  291.940580] Bluetooth: hci7: command tx timeout
[  292.004242] Bluetooth: hci5: command tx timeout
[  292.004741] Bluetooth: hci6: command tx timeout
[  343.118611] 
[  343.118914] ======================================================
[  343.119510] WARNING: possible circular locking dependency detected
[  343.120098] 6.13.0-rc7-next-20250117 #1 Not tainted
[  343.120585] ------------------------------------------------------
[  343.121819] kworker/u8:1/67 is trying to acquire lock:
[  343.128065] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  343.130286] 
[  343.130286] but task is already holding lock:
[  343.131529] ffff88803c498768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  343.133668] 
[  343.133668] which lock already depends on the new lock.
[  343.133668] 
[  343.135364] 
[  343.135364] the existing dependency chain (in reverse order) is:
[  343.136908] 
[  343.136908] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  343.138371]        __mutex_lock+0x13d/0xb50
[  343.139373]        wiphy_register+0x1b2e/0x25d0
[  343.140463]        ieee80211_register_hw+0x23a4/0x3d60
[  343.141629]        mac80211_hwsim_new_radio+0x2759/0x4d50
[  343.142886]        init_mac80211_hwsim+0x389/0x870
[  343.144021]        do_one_initcall+0xf9/0x640
[  343.145065]        kernel_init_freeable+0x53d/0x7a0
[  343.146238]        kernel_init+0x1e/0x2d0
[  343.147163]        ret_from_fork+0x48/0x80
[  343.148103]        ret_from_fork_asm+0x1a/0x30
[  343.149180] 
[  343.149180] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  343.150549]        __lock_acquire+0x29fd/0x4580
[  343.151609]        lock_acquire+0x19b/0x520
[  343.152597]        __mutex_lock+0x13d/0xb50
[  343.153601]        unregister_netdevice_many_notify+0x1612/0x1c80
[  343.154988]        unregister_netdevice_queue+0x224/0x2e0
[  343.156203]        _cfg80211_unregister_wdev+0x57b/0x700
[  343.157410]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  343.158623]        ieee80211_unregister_hw+0x55/0x3a0
[  343.159778]        hwsim_exit_net+0x3a0/0x730
[  343.160795]        ops_exit_list+0xb3/0x180
[  343.161777]        cleanup_net+0x546/0xad0
[  343.162738]        process_one_work+0x8ee/0x1a10
[  343.163838]        worker_thread+0x674/0xe70
[  343.164892]        kthread+0x3ab/0x720
[  343.165820]        ret_from_fork+0x48/0x80
[  343.166755]        ret_from_fork_asm+0x1a/0x30
[  343.167817] 
[  343.167817] other info that might help us debug this:
[  343.167817] 
[  343.169445]  Possible unsafe locking scenario:
[  343.169445] 
[  343.170700]        CPU0                    CPU1
[  343.171687]        ----                    ----
[  343.172664]   lock(&rdev->wiphy.mtx);
[  343.173544]                                lock(rtnl_mutex);
[  343.174826]                                lock(&rdev->wiphy.mtx);
[  343.176191]   lock(rtnl_mutex);
[  343.176972] 
[  343.176972]  *** DEADLOCK ***
[  343.176972] 
[  343.178218] 4 locks held by kworker/u8:1/67:
[  343.179177]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  343.181417]  #1: ffff88800ec47d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  343.183239]  #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  343.184564]  #3: ffff88803c498768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  343.186045] 
[  343.186045] stack backtrace:
[  343.186474] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1
[  343.187264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  343.188029] Workqueue: netns cleanup_net
[  343.188446] Call Trace:
[  343.188704]  <TASK>
[  343.188933]  dump_stack_lvl+0xca/0x120
[  343.189345]  print_circular_bug+0x47b/0x750
[  343.189791]  check_noncircular+0x2e9/0x3c0
[  343.190218]  ? lock_repin_lock+0x207/0x320
[  343.190669]  ? __pfx_check_noncircular+0x10/0x10
[  343.191150]  ? hlock_class+0x4e/0x130
[  343.191533]  ? mark_lock+0xac/0xed0
[  343.191907]  ? __pfx_lock_repin_lock+0x10/0x10
[  343.192388]  ? timerqueue_del+0x83/0x150
[  343.192796]  ? lockdep_lock+0xba/0x1b0
[  343.193202]  ? __pfx_lockdep_lock+0x10/0x10
[  343.193660]  __lock_acquire+0x29fd/0x4580
[  343.194091]  ? __pfx___lock_acquire+0x10/0x10
[  343.194538]  ? lock_release+0x20f/0x6f0
[  343.194937]  ? __pfx_lock_release+0x10/0x10
[  343.195378]  lock_acquire+0x19b/0x520
[  343.195772]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  343.196356]  ? __pfx_lock_acquire+0x10/0x10
[  343.196799]  ? srso_return_thunk+0x5/0x5f
[  343.197242]  ? lock_release+0x20f/0x6f0
[  343.197652]  ? srso_return_thunk+0x5/0x5f
[  343.198097]  ? lock_is_held_type+0x9e/0x120
[  343.198555]  ? srso_return_thunk+0x5/0x5f
[  343.198991]  __mutex_lock+0x13d/0xb50
[  343.199389]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  343.199958]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  343.200527]  ? srso_return_thunk+0x5/0x5f
[  343.200959]  ? synchronize_rcu_expedited+0x38a/0x420
[  343.201466]  ? __pfx___mutex_lock+0x10/0x10
[  343.201923]  ? __pfx_autoremove_wake_function+0x10/0x10
[  343.202469]  ? srso_return_thunk+0x5/0x5f
[  343.202911]  ? kasan_quarantine_put+0x84/0x1e0
[  343.203383]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  343.203829]  ? srso_return_thunk+0x5/0x5f
[  343.204263]  unregister_netdevice_many_notify+0x1612/0x1c80
[  343.204812]  ? __virt_addr_valid+0x2e8/0x5d0
[  343.205273]  ? __pfx_lock_release+0x10/0x10
[  343.205718]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  343.206322]  ? find_held_lock+0x2c/0x110
[  343.206759]  ? srso_return_thunk+0x5/0x5f
[  343.207213]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  343.207713]  ? srso_return_thunk+0x5/0x5f
[  343.208139]  ? lock_release+0x20f/0x6f0
[  343.208540]  ? __pfx_lock_release+0x10/0x10
[  343.208977]  ? srso_return_thunk+0x5/0x5f
[  343.209413]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  343.209948]  ? srso_return_thunk+0x5/0x5f
[  343.210396]  unregister_netdevice_queue+0x224/0x2e0
[  343.210898]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  343.211442]  ? up_write+0x195/0x520
[  343.211838]  _cfg80211_unregister_wdev+0x57b/0x700
[  343.212338]  ? srso_return_thunk+0x5/0x5f
[  343.212768]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  343.213262]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  343.213804]  ? srso_return_thunk+0x5/0x5f
[  343.214237]  ? srso_return_thunk+0x5/0x5f
[  343.214665]  ? synchronize_rcu+0x1ff/0x260
[  343.215094]  ieee80211_unregister_hw+0x55/0x3a0
[  343.215580]  hwsim_exit_net+0x3a0/0x730
[  343.216001]  ? __pfx_hwsim_exit_net+0x10/0x10
[  343.216443]  ? srso_return_thunk+0x5/0x5f
[  343.216869]  ? netdev_run_todo+0x788/0x1040
[  343.217302]  ? srso_return_thunk+0x5/0x5f
[  343.217729]  ? __pfx_hwsim_exit_net+0x10/0x10
[  343.218179]  ops_exit_list+0xb3/0x180
[  343.218564]  cleanup_net+0x546/0xad0
[  343.218943]  ? __pfx_cleanup_net+0x10/0x10
[  343.219371]  process_one_work+0x8ee/0x1a10
[  343.219818]  ? __pfx_lock_acquire+0x10/0x10
[  343.220265]  ? __pfx_process_one_work+0x10/0x10
[  343.220759]  ? srso_return_thunk+0x5/0x5f
[  343.221194]  ? move_linked_works+0x172/0x270
[  343.221650]  ? srso_return_thunk+0x5/0x5f
[  343.222093]  ? assign_work+0x196/0x240
[  343.222511]  worker_thread+0x674/0xe70
[  343.222931]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  343.223470]  ? srso_return_thunk+0x5/0x5f
[  343.223910]  ? __pfx_worker_thread+0x10/0x10
[  343.224391]  kthread+0x3ab/0x720
[  343.224765]  ? __pfx_kthread+0x10/0x10
[  343.225182]  ? srso_return_thunk+0x5/0x5f
[  343.225619]  ? finish_task_switch.isra.0+0x206/0x840
[  343.226146]  ? __pfx_kthread+0x10/0x10
[  343.226564]  ret_from_fork+0x48/0x80
[  343.226945]  ? __pfx_kthread+0x10/0x10
[  343.227359]  ret_from_fork_asm+0x1a/0x30
[  343.227804]  </TASK>
[  344.878045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  344.879361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  344.880858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  344.885027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  344.887914] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  344.888984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  345.067520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  345.070474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  345.072552] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  345.075979] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  345.079317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  345.081469] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  345.147232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  345.153219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  345.156335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  345.160976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  345.163517] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  345.165436] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  345.209527] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  345.213101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  345.216229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  345.230680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  345.239482] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  345.260431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  345.281409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  345.294463] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  345.301605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  345.316264] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  345.335302] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  345.336321] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  345.351900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  345.352549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  345.352769] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  345.362628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  345.363108] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  345.363332] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  345.363503] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  345.401720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  345.401735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  345.406176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  345.407980] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  345.410408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  345.416356] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  345.420559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  345.434438] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  345.450225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  345.454590] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  345.456786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  346.917142] Bluetooth: hci0: command tx timeout
[  347.108114] Bluetooth: hci1: command tx timeout
[  347.236895] Bluetooth: hci2: command tx timeout
[  347.366129] Bluetooth: hci3: command tx timeout
[  347.492125] Bluetooth: hci4: command tx timeout
[  347.492198] Bluetooth: hci7: command tx timeout
[  347.493318] Bluetooth: hci6: command tx timeout
[  347.556145] Bluetooth: hci5: command tx timeout
[  348.964114] Bluetooth: hci0: command tx timeout
[  349.156108] Bluetooth: hci1: command tx timeout
[  349.284441] Bluetooth: hci2: command tx timeout
[  349.412237] Bluetooth: hci3: command tx timeout
[  349.541118] Bluetooth: hci6: command tx timeout
[  349.541264] Bluetooth: hci7: command tx timeout
[  349.541407] Bluetooth: hci4: command tx timeout
[  349.604397] Bluetooth: hci5: command tx timeout
[  351.012209] Bluetooth: hci0: command tx timeout
[  351.206107] Bluetooth: hci1: command tx timeout
[  351.334158] Bluetooth: hci2: command tx timeout
[  351.460104] Bluetooth: hci3: command tx timeout
[  351.588220] Bluetooth: hci4: command tx timeout
[  351.588933] Bluetooth: hci7: command tx timeout
[  351.589545] Bluetooth: hci6: command tx timeout
[  351.652237] Bluetooth: hci5: command tx timeout
[  353.060789] Bluetooth: hci0: command tx timeout

VM DIAGNOSIS:
16:51:55  Registers:
info registers vcpu 0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800ec46bb8
R8 =0000000000000001 R9 =ffffed1001d88d67 R10=0000000000000033 R11=2f72656b726f776b
R12=0000000000000033 R13=0000000000000001 R14=ffff888008fea006 R15=ffff88800ec46eb8
RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560772f8e780 CR3=00000000161e6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000000000425fdab9a1f20000
XMM02=00000000000000003fd43153d8444c8a XMM03=000000c000086330000000c000086300
XMM04=000000c000086360000000c00005b500 XMM05=000000c0000863c0000000c000086390
XMM06=000000c000086420000000c0000863f0 XMM07=000000c000086480000000c000086450
XMM08=000000c0000864e0000000c0000864b0 XMM09=000000c00005b530000000c000086510
XMM10=000000c000086570000000c000086540 XMM11=000000c0000865d0000000c0000865a0
XMM12=000000c000086630000000c000086600 XMM13=000000c000086690000000c000086660
XMM14=000000c0000866f0000000c0000866c0 XMM15=000000c000102160000000c00005b560
info registers vcpu 1
RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8bb27 RDX=ffffed100d9e6c4b
RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffff8880096a7e68
R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000001
R12=ffffffff864021d0 R13=1ffff110012d4fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84a8cace RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe1200000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff53eacd048 CR3=00000000161e6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004120696000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000