Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:13141' (ECDSA) to the list of known hosts. 2025/01/19 00:35:38 fuzzer started 2025/01/19 00:35:39 dialing manager at localhost:44245 syzkaller login: [ 63.337619] cgroup: Unknown subsys name 'net' [ 63.420773] cgroup: Unknown subsys name 'cpuset' [ 63.446851] cgroup: Unknown subsys name 'rlimit' [ 69.175686] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 00:35:55 syscalls: 2217 2025/01/19 00:35:55 code coverage: enabled 2025/01/19 00:35:55 comparison tracing: enabled 2025/01/19 00:35:55 extra coverage: enabled 2025/01/19 00:35:55 setuid sandbox: enabled 2025/01/19 00:35:55 namespace sandbox: enabled 2025/01/19 00:35:55 Android sandbox: enabled 2025/01/19 00:35:55 fault injection: enabled 2025/01/19 00:35:55 leak checking: enabled 2025/01/19 00:35:55 net packet injection: enabled 2025/01/19 00:35:55 net device setup: enabled 2025/01/19 00:35:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 00:35:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 00:35:55 USB emulation: enabled 2025/01/19 00:35:55 hci packet injection: enabled 2025/01/19 00:35:55 wifi device emulation: enabled 2025/01/19 00:35:55 802.15.4 emulation: enabled 2025/01/19 00:35:55 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/19 00:35:55 fetching corpus: 50, signal 28286/31207 (executing program) 2025/01/19 00:35:56 fetching corpus: 100, signal 37362/41218 (executing program) 2025/01/19 00:35:56 fetching corpus: 150, signal 44190/48830 (executing program) 2025/01/19 00:35:56 fetching corpus: 200, signal 51662/56796 (executing program) 2025/01/19 00:35:56 fetching corpus: 250, signal 56641/62253 (executing program) 2025/01/19 00:35:56 fetching corpus: 300, signal 60030/66133 (executing program) 2025/01/19 00:35:56 fetching corpus: 350, signal 62668/69289 (executing program) 2025/01/19 00:35:57 fetching corpus: 400, signal 67201/73920 (executing program) 2025/01/19 00:35:57 fetching corpus: 450, signal 71119/77803 (executing program) 2025/01/19 00:35:57 fetching corpus: 500, signal 74933/81488 (executing program) 2025/01/19 00:35:57 fetching corpus: 550, signal 76959/83658 (executing program) 2025/01/19 00:35:57 fetching corpus: 600, signal 79324/85974 (executing program) 2025/01/19 00:35:57 fetching corpus: 650, signal 80664/87483 (executing program) 2025/01/19 00:35:58 fetching corpus: 700, signal 82708/89431 (executing program) 2025/01/19 00:35:58 fetching corpus: 750, signal 84637/91210 (executing program) 2025/01/19 00:35:58 fetching corpus: 800, signal 86115/92649 (executing program) 2025/01/19 00:35:58 fetching corpus: 850, signal 89481/95265 (executing program) 2025/01/19 00:35:58 fetching corpus: 900, signal 90561/96282 (executing program) 2025/01/19 00:35:58 fetching corpus: 950, signal 93014/98102 (executing program) 2025/01/19 00:35:58 fetching corpus: 1000, signal 97226/100995 (executing program) 2025/01/19 00:35:59 fetching corpus: 1050, signal 98892/102172 (executing program) 2025/01/19 00:35:59 fetching corpus: 1100, signal 100593/103331 (executing program) 2025/01/19 00:35:59 fetching corpus: 1150, signal 101951/104168 (executing program) 2025/01/19 00:35:59 fetching corpus: 1200, signal 103057/104855 (executing program) 2025/01/19 00:35:59 fetching corpus: 1250, signal 104533/105714 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/105988 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106024 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106051 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106081 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106121 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106165 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106198 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106242 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106272 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106308 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106337 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106361 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106396 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106443 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106475 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106506 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106541 (executing program) 2025/01/19 00:35:59 fetching corpus: 1275, signal 104999/106564 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106596 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106621 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106658 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106702 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106746 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106790 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106826 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106851 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106892 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106905 (executing program) 2025/01/19 00:36:00 fetching corpus: 1275, signal 104999/106905 (executing program) 2025/01/19 00:36:04 starting 8 fuzzer processes 00:36:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="450efdffffff0000000007000000080000000000000008000300", @ANYRES64=r0], 0x4c}}, 0x0) 00:36:04 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000140)={0x2de}) 00:36:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x24, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x24}], 0x1}, 0x0) 00:36:04 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:36:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000840)='2', 0x1, 0x83b2) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x6, 0xa7, 0x7f, 0xff, 0x0, 0x0, 0x94004, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x7fff, 0x8000}, 0x80, 0x4a, 0x0, 0x3, 0x3, 0x7, 0x89, 0x0, 0xe9a, 0x0, 0x100000001}, r2, 0xe, r3, 0x1) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)=0x8) fallocate(r1, 0x0, 0x0, 0x87ffffc) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000380)=""/178) write(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r5, &(0x7f0000000080)="01", 0x292e9) sendfile(r0, r5, &(0x7f00000001c0)=0x401, 0x9) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendfile(r0, r0, 0x0, 0x100000) [ 88.569341] audit: type=1400 audit(1737246964.519:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:36:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file1'}, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x7000) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, 0x7ff, 0x0) 00:36:04 executing program 6: setitimer(0x0, &(0x7f00000000c0)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) getitimer(0x0, &(0x7f0000000180)) 00:36:04 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0xa8, 0x6, 0x3ff, 0x429, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x80811501, &(0x7f0000000000)) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f00000000c0)) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x80) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000380)="ea17a5d85048ed127745cbbd90e84408930b913c0ea1fe60748efb9daebe05b3f6519b4cfc2f60190b2732ac8d1e2f4e4de889d89f62df8ca2697d1ebb35adfea5ffa7416c6c6a98cdc260be33feb99de42572a0a88c237e87945e112d4f") ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000200)={0x7, 0x503a, 0x44c}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='s'], 0x6) [ 90.085141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.088725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.091287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.097703] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.101404] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.103354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.111570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.116793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.121398] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.134100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.143151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.147932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.156087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.166645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.167383] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.170085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.172512] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.174785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.180338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.181890] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.186628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.203043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.207915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.209593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.211667] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.213578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.215335] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.218899] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.219373] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.224404] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.224588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.228586] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.235603] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.236511] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.239752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.241943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.242597] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.248724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.251574] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.254161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.256474] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.264663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.268290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.276782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.286468] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.292496] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.301523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.303602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.163800] Bluetooth: hci0: command tx timeout [ 92.226268] Bluetooth: hci1: command tx timeout [ 92.355557] Bluetooth: hci5: command tx timeout [ 92.355575] Bluetooth: hci4: command tx timeout [ 92.355944] Bluetooth: hci3: command tx timeout [ 92.356038] Bluetooth: hci7: command tx timeout [ 92.356253] Bluetooth: hci2: command tx timeout [ 92.418274] Bluetooth: hci6: command tx timeout [ 94.210699] Bluetooth: hci0: command tx timeout [ 94.274630] Bluetooth: hci1: command tx timeout [ 94.404290] Bluetooth: hci2: command tx timeout [ 94.404769] Bluetooth: hci3: command tx timeout [ 94.404855] Bluetooth: hci5: command tx timeout [ 94.404940] Bluetooth: hci4: command tx timeout [ 94.405001] Bluetooth: hci7: command tx timeout [ 94.466245] Bluetooth: hci6: command tx timeout [ 96.258527] Bluetooth: hci0: command tx timeout [ 96.322407] Bluetooth: hci1: command tx timeout [ 96.450464] Bluetooth: hci7: command tx timeout [ 96.450661] Bluetooth: hci4: command tx timeout [ 96.450777] Bluetooth: hci5: command tx timeout [ 96.450889] Bluetooth: hci3: command tx timeout [ 96.450998] Bluetooth: hci2: command tx timeout [ 96.516251] Bluetooth: hci6: command tx timeout [ 98.306286] Bluetooth: hci0: command tx timeout [ 98.370259] Bluetooth: hci1: command tx timeout [ 98.500770] Bluetooth: hci2: command tx timeout [ 98.500829] Bluetooth: hci3: command tx timeout [ 98.500898] Bluetooth: hci5: command tx timeout [ 98.500951] Bluetooth: hci4: command tx timeout [ 98.500999] Bluetooth: hci7: command tx timeout [ 98.562346] Bluetooth: hci6: command tx timeout [ 152.466040] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.466025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.467266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.471729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.472023] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.476481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.476505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.477596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.478363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.478766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.482138] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.484930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.485655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.488943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.489835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.490090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.497341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.503211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.529929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.553075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.553936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.561505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.582850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.585037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.606942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.612410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.618442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.621376] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.621847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.626323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.630259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.657483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.659687] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.660398] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.674180] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.674808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.818519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.832990] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.837307] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.841257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.842063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.914734] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.941419] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.977441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.981681] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.981776] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.999039] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.021288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.563109] Bluetooth: hci2: command tx timeout [ 154.563738] Bluetooth: hci1: command tx timeout [ 154.626245] Bluetooth: hci0: command tx timeout [ 154.690314] Bluetooth: hci3: command tx timeout [ 154.818238] Bluetooth: hci4: command tx timeout [ 154.946555] Bluetooth: hci5: command tx timeout [ 155.077235] Bluetooth: hci7: command tx timeout [ 155.203239] Bluetooth: hci6: command tx timeout [ 156.612229] Bluetooth: hci1: command tx timeout [ 156.612248] Bluetooth: hci2: command tx timeout [ 156.674974] Bluetooth: hci0: command tx timeout [ 156.739204] Bluetooth: hci3: command tx timeout [ 156.867210] Bluetooth: hci4: command tx timeout [ 156.994444] Bluetooth: hci5: command tx timeout [ 157.123195] Bluetooth: hci7: command tx timeout [ 157.250245] Bluetooth: hci6: command tx timeout [ 158.659285] Bluetooth: hci2: command tx timeout [ 158.659318] Bluetooth: hci1: command tx timeout [ 158.724606] Bluetooth: hci0: command tx timeout [ 158.786238] Bluetooth: hci3: command tx timeout [ 158.914306] Bluetooth: hci4: command tx timeout [ 159.042226] Bluetooth: hci5: command tx timeout [ 159.170312] Bluetooth: hci7: command tx timeout [ 159.298233] Bluetooth: hci6: command tx timeout [ 160.706218] Bluetooth: hci2: command tx timeout [ 160.709223] Bluetooth: hci1: command tx timeout [ 160.770434] Bluetooth: hci0: command tx timeout [ 160.834301] Bluetooth: hci3: command tx timeout [ 160.962235] Bluetooth: hci4: command tx timeout [ 161.090240] Bluetooth: hci5: command tx timeout [ 161.218243] Bluetooth: hci7: command tx timeout [ 161.347347] Bluetooth: hci6: command tx timeout [ 214.669792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.671602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.673287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.678244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.680586] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.681969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.691943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.693691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.699504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.706077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.707584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.708609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.818547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.825359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.836301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.843069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.852746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.854719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.855952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.857580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.863670] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.864031] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.866395] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.874451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.965186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.967815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.969634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.973884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.976382] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.978332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.005087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.009086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.012515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.019466] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.023430] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.026628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.030703] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.031828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.033974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.036542] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.045515] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.058718] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.066895] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.096334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.105454] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.137312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.151600] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.159483] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.770401] Bluetooth: hci0: command tx timeout [ 216.771843] Bluetooth: hci1: command tx timeout [ 216.898247] Bluetooth: hci2: command tx timeout [ 216.898675] Bluetooth: hci3: command tx timeout [ 217.026278] Bluetooth: hci4: command tx timeout [ 217.154291] Bluetooth: hci5: command tx timeout [ 217.154644] Bluetooth: hci6: command tx timeout [ 217.218448] Bluetooth: hci7: command tx timeout [ 218.818240] Bluetooth: hci0: command tx timeout [ 218.818339] Bluetooth: hci1: command tx timeout [ 218.946266] Bluetooth: hci2: command tx timeout [ 218.946386] Bluetooth: hci3: command tx timeout [ 219.074215] Bluetooth: hci4: command tx timeout [ 219.202484] Bluetooth: hci6: command tx timeout [ 219.202578] Bluetooth: hci5: command tx timeout [ 219.266650] Bluetooth: hci7: command tx timeout [ 220.866338] Bluetooth: hci0: command tx timeout [ 220.866641] Bluetooth: hci1: command tx timeout [ 220.994377] Bluetooth: hci3: command tx timeout [ 220.995242] Bluetooth: hci2: command tx timeout [ 221.122275] Bluetooth: hci4: command tx timeout [ 221.252187] Bluetooth: hci5: command tx timeout [ 221.252283] Bluetooth: hci6: command tx timeout [ 221.314446] Bluetooth: hci7: command tx timeout [ 222.914231] Bluetooth: hci1: command tx timeout [ 222.914328] Bluetooth: hci0: command tx timeout [ 223.042265] Bluetooth: hci2: command tx timeout [ 223.042521] Bluetooth: hci3: command tx timeout [ 223.172202] Bluetooth: hci4: command tx timeout [ 223.298299] Bluetooth: hci6: command tx timeout [ 223.298400] Bluetooth: hci5: command tx timeout [ 223.362285] Bluetooth: hci7: command tx timeout [ 275.630285] [ 275.630538] ====================================================== [ 275.631137] WARNING: possible circular locking dependency detected [ 275.631740] 6.13.0-rc7-next-20250117 #1 Not tainted [ 275.632227] ------------------------------------------------------ [ 275.633405] kworker/u8:1/66 is trying to acquire lock: [ 275.634543] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.636335] [ 275.636335] but task is already holding lock: [ 275.637389] ffff88803bb88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 275.639572] [ 275.639572] which lock already depends on the new lock. [ 275.639572] [ 275.641017] [ 275.641017] the existing dependency chain (in reverse order) is: [ 275.642318] [ 275.642318] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 275.643477] __mutex_lock+0x13d/0xb50 [ 275.643941] wiphy_register+0x1b2e/0x25d0 [ 275.644433] ieee80211_register_hw+0x23a4/0x3d60 [ 275.644983] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 275.645549] init_mac80211_hwsim+0x389/0x870 [ 275.646071] do_one_initcall+0xf9/0x640 [ 275.646559] kernel_init_freeable+0x53d/0x7a0 [ 275.647095] kernel_init+0x1e/0x2d0 [ 275.647523] ret_from_fork+0x48/0x80 [ 275.647956] ret_from_fork_asm+0x1a/0x30 [ 275.648442] [ 275.648442] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 275.649046] __lock_acquire+0x29fd/0x4580 [ 275.649532] lock_acquire+0x19b/0x520 [ 275.649985] __mutex_lock+0x13d/0xb50 [ 275.650445] unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.651072] unregister_netdevice_queue+0x224/0x2e0 [ 275.651630] _cfg80211_unregister_wdev+0x57b/0x700 [ 275.652187] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 275.652743] ieee80211_unregister_hw+0x55/0x3a0 [ 275.653268] hwsim_exit_net+0x3a0/0x730 [ 275.653733] ops_exit_list+0xb3/0x180 [ 275.654179] cleanup_net+0x546/0xad0 [ 275.654621] process_one_work+0x8ee/0x1a10 [ 275.655132] worker_thread+0x674/0xe70 [ 275.655604] kthread+0x3ab/0x720 [ 275.656018] ret_from_fork+0x48/0x80 [ 275.656449] ret_from_fork_asm+0x1a/0x30 [ 275.656930] [ 275.656930] other info that might help us debug this: [ 275.656930] [ 275.657678] Possible unsafe locking scenario: [ 275.657678] [ 275.658245] CPU0 CPU1 [ 275.658689] ---- ---- [ 275.659145] lock(&rdev->wiphy.mtx); [ 275.659545] lock(rtnl_mutex); [ 275.660122] lock(&rdev->wiphy.mtx); [ 275.660742] lock(rtnl_mutex); [ 275.661094] [ 275.661094] *** DEADLOCK *** [ 275.661094] [ 275.661658] 4 locks held by kworker/u8:1/66: [ 275.662085] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 275.663102] #1: ffff88800e66fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 275.664064] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 275.664950] #3: ffff88803bb88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 275.665953] [ 275.665953] stack backtrace: [ 275.666387] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 275.667194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.667949] Workqueue: netns cleanup_net [ 275.668355] Call Trace: [ 275.668607] [ 275.668834] dump_stack_lvl+0xca/0x120 [ 275.669254] print_circular_bug+0x47b/0x750 [ 275.669685] check_noncircular+0x2e9/0x3c0 [ 275.670103] ? __pfx_check_noncircular+0x10/0x10 [ 275.670566] ? hlock_class+0x4e/0x130 [ 275.670950] ? mark_lock+0xac/0xed0 [ 275.671332] ? lockdep_lock+0xba/0x1b0 [ 275.671748] ? __pfx_lockdep_lock+0x10/0x10 [ 275.672199] __lock_acquire+0x29fd/0x4580 [ 275.672620] ? __pfx___lock_acquire+0x10/0x10 [ 275.673065] ? lock_release+0x20f/0x6f0 [ 275.673465] ? __pfx_lock_release+0x10/0x10 [ 275.673903] lock_acquire+0x19b/0x520 [ 275.674298] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.674877] ? __pfx_lock_acquire+0x10/0x10 [ 275.675328] ? srso_return_thunk+0x5/0x5f [ 275.675766] ? lock_release+0x20f/0x6f0 [ 275.676176] ? srso_return_thunk+0x5/0x5f [ 275.676608] ? lock_is_held_type+0x9e/0x120 [ 275.677063] ? srso_return_thunk+0x5/0x5f [ 275.677502] __mutex_lock+0x13d/0xb50 [ 275.677896] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.678464] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.679040] ? srso_return_thunk+0x5/0x5f [ 275.679468] ? synchronize_rcu_expedited+0x38a/0x420 [ 275.679964] ? __pfx___mutex_lock+0x10/0x10 [ 275.680408] ? __pfx_autoremove_wake_function+0x10/0x10 [ 275.680943] ? srso_return_thunk+0x5/0x5f [ 275.681380] ? kasan_quarantine_put+0x84/0x1e0 [ 275.681853] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 275.682305] ? srso_return_thunk+0x5/0x5f [ 275.682738] unregister_netdevice_many_notify+0x1612/0x1c80 [ 275.683294] ? __virt_addr_valid+0x2e8/0x5d0 [ 275.683744] ? __pfx_lock_release+0x10/0x10 [ 275.684176] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 275.684758] ? find_held_lock+0x2c/0x110 [ 275.685180] ? srso_return_thunk+0x5/0x5f [ 275.685609] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 275.686106] ? srso_return_thunk+0x5/0x5f [ 275.686534] ? lock_release+0x20f/0x6f0 [ 275.686950] ? __pfx_lock_release+0x10/0x10 [ 275.687384] ? srso_return_thunk+0x5/0x5f [ 275.687811] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.688329] ? srso_return_thunk+0x5/0x5f [ 275.688759] unregister_netdevice_queue+0x224/0x2e0 [ 275.689247] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 275.689778] ? up_write+0x195/0x520 [ 275.690167] _cfg80211_unregister_wdev+0x57b/0x700 [ 275.690659] ? srso_return_thunk+0x5/0x5f [ 275.691102] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 275.691595] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 275.692143] ? srso_return_thunk+0x5/0x5f [ 275.692578] ? srso_return_thunk+0x5/0x5f [ 275.693017] ? synchronize_rcu+0x1ff/0x260 [ 275.693447] ieee80211_unregister_hw+0x55/0x3a0 [ 275.693925] hwsim_exit_net+0x3a0/0x730 [ 275.694332] ? __pfx_hwsim_exit_net+0x10/0x10 [ 275.694784] ? srso_return_thunk+0x5/0x5f [ 275.695221] ? netdev_run_todo+0x788/0x1040 [ 275.695651] ? __pfx_hwsim_exit_net+0x10/0x10 [ 275.696097] ops_exit_list+0xb3/0x180 [ 275.696484] cleanup_net+0x546/0xad0 [ 275.696863] ? __pfx_cleanup_net+0x10/0x10 [ 275.697301] process_one_work+0x8ee/0x1a10 [ 275.697747] ? __pfx_lock_acquire+0x10/0x10 [ 275.698189] ? __pfx_process_one_work+0x10/0x10 [ 275.698667] ? srso_return_thunk+0x5/0x5f [ 275.699099] ? move_linked_works+0x172/0x270 [ 275.699546] ? srso_return_thunk+0x5/0x5f [ 275.699984] ? assign_work+0x196/0x240 [ 275.700401] worker_thread+0x674/0xe70 [ 275.700819] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.701357] ? srso_return_thunk+0x5/0x5f [ 275.701776] ? __pfx_worker_thread+0x10/0x10 [ 275.702218] kthread+0x3ab/0x720 [ 275.702562] ? __pfx_kthread+0x10/0x10 [ 275.702958] ? srso_return_thunk+0x5/0x5f [ 275.703370] ? finish_task_switch.isra.0+0x206/0x840 [ 275.703851] ? __pfx_kthread+0x10/0x10 [ 275.704243] ret_from_fork+0x48/0x80 [ 275.704592] ? __pfx_kthread+0x10/0x10 [ 275.704998] ret_from_fork_asm+0x1a/0x30 [ 275.705446] [ 277.323348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.326564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.328423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.331832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.334999] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.336951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.398551] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.400430] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.404426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.410908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.416566] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.419413] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.518689] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.520431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.522305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.527035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.532275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.535584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.714669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.718927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.720585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.724028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.734313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.736165] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.792890] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.796305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.796626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.801493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.806779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.810743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.820727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.841819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.842343] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.860841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.877055] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.879076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.884450] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.889574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.896686] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.912301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.924768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.925102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.932000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.945442] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.969876] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.972504] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.978923] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.996038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.362422] Bluetooth: hci0: command tx timeout [ 279.490307] Bluetooth: hci1: command tx timeout [ 279.555181] Bluetooth: hci2: command tx timeout [ 279.810306] Bluetooth: hci3: command tx timeout [ 280.003227] Bluetooth: hci5: command tx timeout [ 280.003410] Bluetooth: hci4: command tx timeout [ 280.130277] Bluetooth: hci6: command tx timeout [ 280.194772] Bluetooth: hci7: command tx timeout [ 281.410287] Bluetooth: hci0: command tx timeout [ 281.539608] Bluetooth: hci1: command tx timeout [ 281.603219] Bluetooth: hci2: command tx timeout [ 281.860208] Bluetooth: hci3: command tx timeout [ 282.051274] Bluetooth: hci4: command tx timeout [ 282.052587] Bluetooth: hci5: command tx timeout [ 282.178437] Bluetooth: hci6: command tx timeout [ 282.243172] Bluetooth: hci7: command tx timeout [ 283.458179] Bluetooth: hci0: command tx timeout [ 283.586259] Bluetooth: hci1: command tx timeout [ 283.650225] Bluetooth: hci2: command tx timeout [ 283.907148] Bluetooth: hci3: command tx timeout [ 284.098241] Bluetooth: hci5: command tx timeout [ 284.098719] Bluetooth: hci4: command tx timeout [ 284.226188] Bluetooth: hci6: command tx timeout [ 284.291206] Bluetooth: hci7: command tx timeout [ 285.509161] Bluetooth: hci0: command tx timeout [ 285.635249] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 00:39:11 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283cd30 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800e66ead0 R8 =0000000000000000 R9 =fffffbfff0be1544 R10=00000000000fe503 R11=3038383866666666 R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10d2666 R15=dffffc0000000000 RIP=ffffffff8283cd85 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa72a44f830 CR3=000000003bc94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffff000055cf5643fe50 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=000055cf56447860ffffffff00000002 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff11001e76fa1 RCX=ffffffff8150243e RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf36250 RBP=0000000000000001 RSP=ffff88800f3b7cf8 R8 =0000000000000000 R9 =fffffbfff0c8043a R10=ffffffff864021d7 R11=0000000000000532 R12=ffff88800fa4f018 R13=ffffffff81aeddbe R14=000000000003a64c R15=0000000000000086 RIP=ffffffff8150289a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056373a771530 CR3=0000000015796000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0005296e0000000c0004e5fc0 XMM04=000000c000146090000000c000146060 XMM05=000000c0001460f0000000c0001460c0 XMM06=000000c000146150000000c000146120 XMM07=000000c000145760000000c0000874d0 XMM08=000000c0001464b0000000c000146480 XMM09=000000c000146510000000c0001464e0 XMM10=000000c000146540000000c000087530 XMM11=000000c0001465a0000000c000146570 XMM12=000000c000146600000000c0001465d0 XMM13=000000c000146660000000c000146630 XMM14=000000c0001466c0000000c000146690 XMM15=000000c0000e7080000000c0001466f0