Warning: Permanently added '[localhost]:10350' (ECDSA) to the list of known hosts. 2025/01/29 16:14:34 fuzzer started 2025/01/29 16:14:34 dialing manager at localhost:36977 syzkaller login: [ 77.624290] cgroup: Unknown subsys name 'net' [ 77.757134] cgroup: Unknown subsys name 'cpuset' [ 77.811150] cgroup: Unknown subsys name 'rlimit' 2025/01/29 16:14:52 syscalls: 2217 2025/01/29 16:14:52 code coverage: enabled 2025/01/29 16:14:52 comparison tracing: enabled 2025/01/29 16:14:52 extra coverage: enabled 2025/01/29 16:14:52 setuid sandbox: enabled 2025/01/29 16:14:52 namespace sandbox: enabled 2025/01/29 16:14:52 Android sandbox: enabled 2025/01/29 16:14:52 fault injection: enabled 2025/01/29 16:14:52 leak checking: enabled 2025/01/29 16:14:52 net packet injection: enabled 2025/01/29 16:14:52 net device setup: enabled 2025/01/29 16:14:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 16:14:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 16:14:52 USB emulation: enabled 2025/01/29 16:14:52 hci packet injection: enabled 2025/01/29 16:14:52 wifi device emulation: enabled 2025/01/29 16:14:52 802.15.4 emulation: enabled 2025/01/29 16:14:52 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 16:14:52 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 16:14:54 starting 8 fuzzer processes 16:14:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x19, 0x0, &(0x7f0000000140)=0x47) 16:14:54 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), &(0x7f0000001140), 0x18, 0x0) 16:14:54 executing program 2: fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) 16:14:54 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') 16:14:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373131373433303500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="200000004c7ddc8f4c7ddc8f00000000d3f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b65c7bf3000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000d3f4655fd3f4655fd3f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000005a0e0125000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237313137343330352f66696c65302f66696c653000000000000000000000000000000000000000000000b8e8b49f000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b63b3ec000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f00000000000002004000000000000800010000000af30100040000000000000000000000050000007000000000000000000000000000000000000000000000000000000000000000000000000000000044cd9848000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c4794644c000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) [ 97.261026] audit: type=1400 audit(1738167294.764:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:14:54 executing program 5: mount_setattr(0xffffffffffffffff, 0x0, 0x9900, &(0x7f00000000c0)={0x0, 0x100000}, 0x20) 16:14:54 executing program 6: r0 = memfd_create(&(0x7f0000000200)='}-\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x1}) 16:14:54 executing program 7: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) [ 98.623704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.626542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.628788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.633318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.636607] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.638629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.742570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.746255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.750249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.752446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.754951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.756980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.758233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.759455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.762538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.766654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.768566] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.771108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.773511] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.775874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.777143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.778912] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.780658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.782529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.811162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.821271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.824903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.854575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.874682] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.883919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.888482] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.888805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.892929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.895787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.896077] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.898608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.900583] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.903607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.908171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.913073] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.916680] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.917236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.959087] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.961085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.964721] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.967045] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.976155] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.978535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.751683] Bluetooth: hci0: command tx timeout [ 100.879116] Bluetooth: hci1: command tx timeout [ 100.880455] Bluetooth: hci3: command tx timeout [ 100.882102] Bluetooth: hci2: command tx timeout [ 101.007508] Bluetooth: hci7: command tx timeout [ 101.071074] Bluetooth: hci6: command tx timeout [ 101.072497] Bluetooth: hci5: command tx timeout [ 101.074127] Bluetooth: hci4: command tx timeout [ 102.799897] Bluetooth: hci0: command tx timeout [ 102.927081] Bluetooth: hci1: command tx timeout [ 102.927647] Bluetooth: hci3: command tx timeout [ 102.928324] Bluetooth: hci2: command tx timeout [ 103.054971] Bluetooth: hci7: command tx timeout [ 103.118982] Bluetooth: hci4: command tx timeout [ 103.119444] Bluetooth: hci5: command tx timeout [ 103.120667] Bluetooth: hci6: command tx timeout [ 104.847878] Bluetooth: hci0: command tx timeout [ 104.975020] Bluetooth: hci2: command tx timeout [ 104.975648] Bluetooth: hci3: command tx timeout [ 104.976267] Bluetooth: hci1: command tx timeout [ 105.103165] Bluetooth: hci7: command tx timeout [ 105.166933] Bluetooth: hci6: command tx timeout [ 105.167510] Bluetooth: hci5: command tx timeout [ 105.168071] Bluetooth: hci4: command tx timeout [ 106.894939] Bluetooth: hci0: command tx timeout [ 107.023905] Bluetooth: hci2: command tx timeout [ 107.024410] Bluetooth: hci1: command tx timeout [ 107.025180] Bluetooth: hci3: command tx timeout [ 107.151898] Bluetooth: hci7: command tx timeout [ 107.214972] Bluetooth: hci6: command tx timeout [ 107.215452] Bluetooth: hci4: command tx timeout [ 107.216237] Bluetooth: hci5: command tx timeout [ 158.795228] syz-executor.4 (282) used greatest stack depth: 24288 bytes left [ 161.240867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.242274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.245204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.249535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.251344] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.252527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.304293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.307280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.309648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.314093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.317750] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.319233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.457355] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 161.458714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.464181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 161.464511] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.468199] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.468910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 161.473135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.482128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 161.482937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.486877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 161.487684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.500153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.511500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.514377] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.514961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 161.515704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.516906] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.518713] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.519191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 161.519634] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.520930] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 161.522473] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 161.523329] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.524361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.525561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.528656] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.529772] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.538557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.547988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.549178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.551976] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.558030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.558710] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.561174] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.571873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.571914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.279987] Bluetooth: hci0: command tx timeout [ 163.343847] Bluetooth: hci1: command tx timeout [ 163.600977] Bluetooth: hci6: command tx timeout [ 163.601901] Bluetooth: hci2: command tx timeout [ 163.602435] Bluetooth: hci7: command tx timeout [ 163.602871] Bluetooth: hci3: command tx timeout [ 163.663610] Bluetooth: hci5: command tx timeout [ 163.663923] Bluetooth: hci4: command tx timeout [ 165.326920] Bluetooth: hci0: command tx timeout [ 165.390917] Bluetooth: hci1: command tx timeout [ 165.647005] Bluetooth: hci3: command tx timeout [ 165.647613] Bluetooth: hci7: command tx timeout [ 165.648100] Bluetooth: hci2: command tx timeout [ 165.648528] Bluetooth: hci6: command tx timeout [ 165.711278] Bluetooth: hci4: command tx timeout [ 165.711313] Bluetooth: hci5: command tx timeout [ 167.374919] Bluetooth: hci0: command tx timeout [ 167.439054] Bluetooth: hci1: command tx timeout [ 167.694933] Bluetooth: hci2: command tx timeout [ 167.695416] Bluetooth: hci6: command tx timeout [ 167.696596] Bluetooth: hci3: command tx timeout [ 167.696980] Bluetooth: hci7: command tx timeout [ 167.758960] Bluetooth: hci4: command tx timeout [ 167.759945] Bluetooth: hci5: command tx timeout [ 169.422930] Bluetooth: hci0: command tx timeout [ 169.486898] Bluetooth: hci1: command tx timeout [ 169.742886] Bluetooth: hci3: command tx timeout [ 169.743024] Bluetooth: hci7: command tx timeout [ 169.743312] Bluetooth: hci6: command tx timeout [ 169.744168] Bluetooth: hci2: command tx timeout [ 169.807104] Bluetooth: hci5: command tx timeout [ 169.808057] Bluetooth: hci4: command tx timeout [ 223.396902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.399943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.405410] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.412126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.418060] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.422270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.534104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.539164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.540987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.554385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.575146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.582058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.589255] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.594970] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.609477] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.624284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.632125] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 223.637079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.658193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.681091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.683119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.703707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.710179] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.715071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.721848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.727444] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.758193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.825208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.833921] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.837079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.838200] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.839706] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.844340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.845730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.849236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.854114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.904169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.918042] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.923995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.934614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.947490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.965057] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.969336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.971305] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.977946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.985973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.990098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.993469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.488911] Bluetooth: hci0: command tx timeout [ 225.614993] Bluetooth: hci1: command tx timeout [ 225.680019] Bluetooth: hci2: command tx timeout [ 225.806908] Bluetooth: hci3: command tx timeout [ 225.934890] Bluetooth: hci5: command tx timeout [ 225.935748] Bluetooth: hci4: command tx timeout [ 226.063911] Bluetooth: hci6: command tx timeout [ 226.128085] Bluetooth: hci7: command tx timeout [ 227.536111] Bluetooth: hci0: command tx timeout [ 227.665856] Bluetooth: hci1: command tx timeout [ 227.727095] Bluetooth: hci2: command tx timeout [ 227.855859] Bluetooth: hci3: command tx timeout [ 227.982895] Bluetooth: hci4: command tx timeout [ 227.983386] Bluetooth: hci5: command tx timeout [ 228.111912] Bluetooth: hci6: command tx timeout [ 228.175880] Bluetooth: hci7: command tx timeout [ 229.582940] Bluetooth: hci0: command tx timeout [ 229.711046] Bluetooth: hci1: command tx timeout [ 229.776896] Bluetooth: hci2: command tx timeout [ 229.903874] Bluetooth: hci3: command tx timeout [ 230.030947] Bluetooth: hci4: command tx timeout [ 230.031593] Bluetooth: hci5: command tx timeout [ 230.158887] Bluetooth: hci6: command tx timeout [ 230.223037] Bluetooth: hci7: command tx timeout [ 231.632820] Bluetooth: hci0: command tx timeout [ 231.759003] Bluetooth: hci1: command tx timeout [ 231.823866] Bluetooth: hci2: command tx timeout [ 231.951808] Bluetooth: hci3: command tx timeout [ 232.079897] Bluetooth: hci5: command tx timeout [ 232.080406] Bluetooth: hci4: command tx timeout [ 232.206857] Bluetooth: hci6: command tx timeout [ 232.272057] Bluetooth: hci7: command tx timeout [ 285.788172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.792298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.794507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.801884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.805568] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.808464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.857462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.861149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.863478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.867670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.870742] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 285.873324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.061186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.078035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.087297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.094970] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.108302] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.120225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.133290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.137504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.141988] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.149144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.163131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.168418] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.189337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.191570] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.193483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.216919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.224045] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.226519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.236109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.245293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.255322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.310417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.321279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.323583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.348237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.370182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.382534] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.399704] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 286.432651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 286.449357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.456239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 286.458491] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 286.462262] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 286.473667] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 286.483183] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 286.486619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 287.887904] Bluetooth: hci1: command tx timeout [ 287.888041] Bluetooth: hci0: command tx timeout [ 288.207877] Bluetooth: hci2: command tx timeout [ 288.271900] Bluetooth: hci3: command tx timeout [ 288.335350] Bluetooth: hci4: command tx timeout [ 288.463911] Bluetooth: hci5: command tx timeout [ 288.527441] Bluetooth: hci6: command tx timeout [ 288.527535] Bluetooth: hci7: command tx timeout [ 289.934871] Bluetooth: hci1: command tx timeout [ 289.934948] Bluetooth: hci0: command tx timeout [ 290.255048] Bluetooth: hci2: command tx timeout [ 290.319859] Bluetooth: hci3: command tx timeout [ 290.383510] Bluetooth: hci4: command tx timeout [ 290.511081] Bluetooth: hci5: command tx timeout [ 290.574956] Bluetooth: hci7: command tx timeout [ 290.575347] Bluetooth: hci6: command tx timeout [ 291.982856] Bluetooth: hci1: command tx timeout [ 291.983354] Bluetooth: hci0: command tx timeout [ 292.302858] Bluetooth: hci2: command tx timeout [ 292.368302] Bluetooth: hci3: command tx timeout [ 292.430895] Bluetooth: hci4: command tx timeout [ 292.558844] Bluetooth: hci5: command tx timeout [ 292.622872] Bluetooth: hci6: command tx timeout [ 292.624340] Bluetooth: hci7: command tx timeout [ 294.032804] Bluetooth: hci0: command tx timeout [ 294.033284] Bluetooth: hci1: command tx timeout [ 294.353849] Bluetooth: hci2: command tx timeout [ 294.414899] Bluetooth: hci3: command tx timeout [ 294.479914] Bluetooth: hci4: command tx timeout [ 294.607990] Bluetooth: hci5: command tx timeout [ 294.670954] Bluetooth: hci7: command tx timeout [ 294.671131] Bluetooth: hci6: command tx timeout [ 344.058439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.059396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.406579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.407500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.373326] [ 345.373556] ====================================================== [ 345.374111] WARNING: possible circular locking dependency detected [ 345.374620] 6.13.0-next-20250129 #1 Not tainted [ 345.375040] ------------------------------------------------------ [ 345.375580] kworker/u8:1/65 is trying to acquire lock: [ 345.376674] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.378773] [ 345.378773] but task is already holding lock: [ 345.380110] ffff88802d130768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 345.382075] [ 345.382075] which lock already depends on the new lock. [ 345.382075] [ 345.383748] [ 345.383748] the existing dependency chain (in reverse order) is: [ 345.384589] [ 345.384589] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 345.385168] __mutex_lock+0x13d/0xb50 [ 345.385575] wiphy_register+0x1b2e/0x25d0 [ 345.386033] ieee80211_register_hw+0x23a4/0x3d60 [ 345.386503] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 345.387014] init_mac80211_hwsim+0x389/0x870 [ 345.387495] do_one_initcall+0xf9/0x640 [ 345.387946] kernel_init_freeable+0x53d/0x7a0 [ 345.388434] kernel_init+0x1e/0x2d0 [ 345.388822] ret_from_fork+0x48/0x80 [ 345.389218] ret_from_fork_asm+0x1a/0x30 [ 345.389664] [ 345.389664] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 345.390217] __lock_acquire+0x29fd/0x4580 [ 345.390658] lock_acquire+0x19b/0x520 [ 345.391079] __mutex_lock+0x13d/0xb50 [ 345.391495] unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.392064] unregister_netdevice_queue+0x224/0x2e0 [ 345.392542] _cfg80211_unregister_wdev+0x57b/0x700 [ 345.393056] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 345.393572] ieee80211_unregister_hw+0x55/0x3a0 [ 345.394037] hwsim_exit_net+0x3a0/0x730 [ 345.394467] ops_exit_list+0xb3/0x180 [ 345.394860] cleanup_net+0x546/0xad0 [ 345.395290] process_one_work+0x8ee/0x1a10 [ 345.395729] worker_thread+0x674/0xe70 [ 345.396143] kthread+0x3ab/0x720 [ 345.396510] ret_from_fork+0x48/0x80 [ 345.396885] ret_from_fork_asm+0x1a/0x30 [ 345.397326] [ 345.397326] other info that might help us debug this: [ 345.397326] [ 345.398001] Possible unsafe locking scenario: [ 345.398001] [ 345.398492] CPU0 CPU1 [ 345.398874] ---- ---- [ 345.399259] lock(&rdev->wiphy.mtx); [ 345.399604] lock(rtnl_mutex); [ 345.400101] lock(&rdev->wiphy.mtx); [ 345.400634] lock(rtnl_mutex); [ 345.400941] [ 345.400941] *** DEADLOCK *** [ 345.400941] [ 345.401440] 4 locks held by kworker/u8:1/65: [ 345.401827] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 345.402697] #1: ffff88800eb7fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 345.403536] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 345.404325] #3: ffff88802d130768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 345.405206] [ 345.405206] stack backtrace: [ 345.405583] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250129 #1 [ 345.405620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 345.405642] Workqueue: netns cleanup_net [ 345.405683] Call Trace: [ 345.405692] <TASK> [ 345.405704] dump_stack_lvl+0xca/0x120 [ 345.405771] print_circular_bug+0x47b/0x750 [ 345.405817] check_noncircular+0x2e9/0x3c0 [ 345.405860] ? __pfx_check_noncircular+0x10/0x10 [ 345.405902] ? hlock_class+0x4e/0x130 [ 345.405933] ? mark_lock+0xac/0xed0 [ 345.405973] ? srso_return_thunk+0x5/0x5f [ 345.406028] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 345.406075] ? lockdep_lock+0xba/0x1b0 [ 345.406132] ? __pfx_lockdep_lock+0x10/0x10 [ 345.406195] __lock_acquire+0x29fd/0x4580 [ 345.406250] ? __pfx___lock_acquire+0x10/0x10 [ 345.406294] ? lock_release+0x20f/0x6f0 [ 345.406338] ? __pfx_lock_release+0x10/0x10 [ 345.406386] lock_acquire+0x19b/0x520 [ 345.406430] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.406478] ? __pfx_lock_acquire+0x10/0x10 [ 345.406524] ? srso_return_thunk+0x5/0x5f [ 345.406578] ? lock_release+0x20f/0x6f0 [ 345.406622] ? srso_return_thunk+0x5/0x5f [ 345.406677] ? lock_is_held_type+0x9e/0x120 [ 345.406731] ? srso_return_thunk+0x5/0x5f [ 345.406790] __mutex_lock+0x13d/0xb50 [ 345.406841] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.406886] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.406932] ? srso_return_thunk+0x5/0x5f [ 345.406986] ? synchronize_rcu_expedited+0x38a/0x420 [ 345.407031] ? __pfx___mutex_lock+0x10/0x10 [ 345.407084] ? __pfx_autoremove_wake_function+0x10/0x10 [ 345.407139] ? srso_return_thunk+0x5/0x5f [ 345.407193] ? kasan_quarantine_put+0x84/0x1e0 [ 345.407255] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 345.407291] ? srso_return_thunk+0x5/0x5f [ 345.407349] unregister_netdevice_many_notify+0x1612/0x1c80 [ 345.407395] ? __virt_addr_valid+0x2e8/0x5d0 [ 345.407448] ? __pfx_lock_release+0x10/0x10 [ 345.407493] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 345.407539] ? find_held_lock+0x2c/0x110 [ 345.407598] ? srso_return_thunk+0x5/0x5f [ 345.407654] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 345.407714] ? srso_return_thunk+0x5/0x5f [ 345.407769] ? lock_release+0x20f/0x6f0 [ 345.407813] ? __pfx_lock_release+0x10/0x10 [ 345.407857] ? srso_return_thunk+0x5/0x5f [ 345.407911] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 345.407959] ? srso_return_thunk+0x5/0x5f [ 345.408019] unregister_netdevice_queue+0x224/0x2e0 [ 345.408062] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 345.408105] ? up_write+0x195/0x520 [ 345.408161] _cfg80211_unregister_wdev+0x57b/0x700 [ 345.408212] ? srso_return_thunk+0x5/0x5f [ 345.408270] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 345.408308] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 345.408374] ? srso_return_thunk+0x5/0x5f [ 345.408428] ? srso_return_thunk+0x5/0x5f [ 345.408483] ? synchronize_rcu+0x1ff/0x260 [ 345.408526] ieee80211_unregister_hw+0x55/0x3a0 [ 345.408570] hwsim_exit_net+0x3a0/0x730 [ 345.408611] ? __pfx_hwsim_exit_net+0x10/0x10 [ 345.408651] ? srso_return_thunk+0x5/0x5f [ 345.408706] ? netdev_run_todo+0x788/0x1040 [ 345.408755] ? __pfx_hwsim_exit_net+0x10/0x10 [ 345.408797] ops_exit_list+0xb3/0x180 [ 345.408839] cleanup_net+0x546/0xad0 [ 345.408884] ? __pfx_cleanup_net+0x10/0x10 [ 345.408937] process_one_work+0x8ee/0x1a10 [ 345.409003] ? __pfx_lock_acquire+0x10/0x10 [ 345.409048] ? __pfx_process_one_work+0x10/0x10 [ 345.409107] ? srso_return_thunk+0x5/0x5f [ 345.409161] ? move_linked_works+0x172/0x270 [ 345.409206] ? srso_return_thunk+0x5/0x5f [ 345.409261] ? assign_work+0x196/0x240 [ 345.409319] worker_thread+0x674/0xe70 [ 345.409377] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 345.409430] ? srso_return_thunk+0x5/0x5f [ 345.409484] ? __pfx_worker_thread+0x10/0x10 [ 345.409545] kthread+0x3ab/0x720 [ 345.409597] ? __pfx_kthread+0x10/0x10 [ 345.409649] ? srso_return_thunk+0x5/0x5f [ 345.409704] ? finish_task_switch.isra.0+0x206/0x840 [ 345.409765] ? __pfx_kthread+0x10/0x10 [ 345.409819] ret_from_fork+0x48/0x80 [ 345.409850] ? __pfx_kthread+0x10/0x10 [ 345.409904] ret_from_fork_asm+0x1a/0x30 [ 345.409971] </TASK> [ 347.611666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.617579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.625020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.633253] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.637475] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.639527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.068279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.072139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.078467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.083383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.086914] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 348.088655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.089639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.096914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.099082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.106087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.109568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.114129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.117623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.119811] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.121290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.137547] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.144557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.151991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.186433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.204926] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.210182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.218067] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.221437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.227384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.230583] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.259137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.267617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.270342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.273620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.277313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.278277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.282490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.287298] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.289525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.291563] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 348.299566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.312066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.315562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.330413] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 348.337658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.353075] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.371519] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.710807] Bluetooth: hci0: command tx timeout [ 350.158815] Bluetooth: hci1: command tx timeout [ 350.159921] Bluetooth: hci2: command tx timeout [ 350.222861] Bluetooth: hci3: command tx timeout [ 350.350880] Bluetooth: hci4: command tx timeout [ 350.414863] Bluetooth: hci7: command tx timeout [ 350.415429] Bluetooth: hci6: command tx timeout [ 350.415978] Bluetooth: hci5: command tx timeout [ 351.758887] Bluetooth: hci0: command tx timeout [ 352.207010] Bluetooth: hci2: command tx timeout [ 352.208952] Bluetooth: hci1: command tx timeout [ 352.272051] Bluetooth: hci3: command tx timeout [ 352.400119] Bluetooth: hci4: command tx timeout [ 352.463917] Bluetooth: hci5: command tx timeout [ 352.465102] Bluetooth: hci7: command tx timeout [ 352.465155] Bluetooth: hci6: command tx timeout [ 353.807814] Bluetooth: hci0: command tx timeout [ 354.255800] Bluetooth: hci2: command tx timeout [ 354.256333] Bluetooth: hci1: command tx timeout [ 354.319965] Bluetooth: hci3: command tx timeout [ 354.447808] Bluetooth: hci4: command tx timeout [ 354.510882] Bluetooth: hci7: command tx timeout [ 354.512240] Bluetooth: hci6: command tx timeout [ 354.512729] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 16:19:03 Registers: info registers vcpu 0 RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8c9d7 RDX=ffffed100d9c6c53 RSI=0000000000000004 RDI=ffffffff814b1dba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000000 R9 =ffffed100d9c6c52 R10=ffff88806ce36293 R11=00000000fa83b2da R12=ffffffff864043d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8d97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005645678358e0 CR3=0000000016126000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=682e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283c595 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800eb7ed20 R8 =0000000000000000 R9 =ffffed1001346046 R10=0000000000000000 R11=6f6c206863696877 R12=0000000000000005 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283c580 RIP=ffffffff8283c5ed RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd5096ec028 CR3=0000000016126000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000412a035000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000