Warning: Permanently added '[localhost]:31899' (ECDSA) to the list of known hosts. 2025/01/17 21:44:01 fuzzer started 2025/01/17 21:44:02 dialing manager at localhost:44245 syzkaller login: [ 62.569100] cgroup: Unknown subsys name 'net' [ 62.673246] cgroup: Unknown subsys name 'cpuset' [ 62.714940] cgroup: Unknown subsys name 'rlimit' [ 68.295186] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.350661] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 21:44:19 syscalls: 2217 2025/01/17 21:44:19 code coverage: enabled 2025/01/17 21:44:19 comparison tracing: enabled 2025/01/17 21:44:19 extra coverage: enabled 2025/01/17 21:44:19 setuid sandbox: enabled 2025/01/17 21:44:19 namespace sandbox: enabled 2025/01/17 21:44:19 Android sandbox: enabled 2025/01/17 21:44:19 fault injection: enabled 2025/01/17 21:44:19 leak checking: enabled 2025/01/17 21:44:19 net packet injection: enabled 2025/01/17 21:44:19 net device setup: enabled 2025/01/17 21:44:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 21:44:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 21:44:19 USB emulation: enabled 2025/01/17 21:44:19 hci packet injection: enabled 2025/01/17 21:44:19 wifi device emulation: enabled 2025/01/17 21:44:19 802.15.4 emulation: enabled 2025/01/17 21:44:19 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/17 21:44:19 fetching corpus: 1, signal 573/2047 (executing program) 2025/01/17 21:44:19 fetching corpus: 1, signal 573/2047 (executing program) 2025/01/17 21:44:23 starting 8 fuzzer processes 21:44:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="5d84079bcb1796bb740c0274b59274ad2b18133e7938730d247056f48fc35155737a7d8a0fd7a2a97ce502ac25ed9d1dd069774261e65ceb541a92032711e01e"]) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x4000, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r3, 0x8) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff, r4, r2, r2, r0, r0, r1], 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x103f0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x0, 0x5}, 0x103c0, 0x80000001, 0x7, 0x7, 0x1, 0x7, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)) close_range(r5, 0xffffffffffffffff, 0x0) 21:44:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) unlink(&(0x7f0000000380)='./file1\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x840, 0x170) pread64(r1, &(0x7f0000000180)=""/134, 0x86, 0x0) 21:44:23 executing program 2: futex(&(0x7f0000001700), 0xb, 0x0, 0x0, &(0x7f0000005740), 0x0) 21:44:23 executing program 3: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)='\x00') [ 84.053337] audit: type=1400 audit(1737150263.832:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:44:23 executing program 4: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x2a01, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000000c0)={"000000ffffffffffffffea00", 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}) 21:44:23 executing program 5: getrandom(&(0x7f0000000000)=""/132, 0x84, 0x0) 21:44:23 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='wH', 0x2}], 0x1}}, {{&(0x7f0000000000)={0x3, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 21:44:23 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x0, 0xcd}}) [ 85.697354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.699642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.701022] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.705826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.707419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.708342] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.710660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.711619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.714095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.731599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.739627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.758622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.760348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.773442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.785734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.816563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.821803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.822661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.826626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.830846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.838691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.843474] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.866516] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.870891] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.896113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.928927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.943555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.960042] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.976676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.984624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.002414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.012670] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.014708] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.019564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.022668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.025887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.047891] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.088499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.094797] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.096500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.098989] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.106606] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.109415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.110908] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.133928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.157544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.212596] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.216702] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.771544] Bluetooth: hci1: command tx timeout [ 87.835571] Bluetooth: hci0: command tx timeout [ 87.899233] Bluetooth: hci3: command tx timeout [ 87.899270] Bluetooth: hci2: command tx timeout [ 88.092447] Bluetooth: hci4: command tx timeout [ 88.156371] Bluetooth: hci6: command tx timeout [ 88.219356] Bluetooth: hci5: command tx timeout [ 88.347319] Bluetooth: hci7: command tx timeout [ 89.819386] Bluetooth: hci1: command tx timeout [ 89.883292] Bluetooth: hci0: command tx timeout [ 89.947305] Bluetooth: hci2: command tx timeout [ 89.947330] Bluetooth: hci3: command tx timeout [ 90.139434] Bluetooth: hci4: command tx timeout [ 90.205270] Bluetooth: hci6: command tx timeout [ 90.268207] Bluetooth: hci5: command tx timeout [ 90.395360] Bluetooth: hci7: command tx timeout [ 91.867202] Bluetooth: hci1: command tx timeout [ 91.932179] Bluetooth: hci0: command tx timeout [ 91.996275] Bluetooth: hci2: command tx timeout [ 91.996313] Bluetooth: hci3: command tx timeout [ 92.187308] Bluetooth: hci4: command tx timeout [ 92.253173] Bluetooth: hci6: command tx timeout [ 92.315232] Bluetooth: hci5: command tx timeout [ 92.443266] Bluetooth: hci7: command tx timeout [ 93.915295] Bluetooth: hci1: command tx timeout [ 93.979319] Bluetooth: hci0: command tx timeout [ 94.043268] Bluetooth: hci2: command tx timeout [ 94.046164] Bluetooth: hci3: command tx timeout [ 94.235475] Bluetooth: hci4: command tx timeout [ 94.299345] Bluetooth: hci6: command tx timeout [ 94.363237] Bluetooth: hci5: command tx timeout [ 94.491727] Bluetooth: hci7: command tx timeout [ 145.156174] syz-executor.5 (289) used greatest stack depth: 24584 bytes left [ 145.417973] syz-executor.7 (286) used greatest stack depth: 24304 bytes left [ 148.200857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.204558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.209990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.216663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.222922] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.227792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.296444] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.299433] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.305285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.307524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.311926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.315774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.316011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.322556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.322795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.330854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.334937] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.338399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.339042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.345736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.347989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.349737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.369780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.373332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.458934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.464973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.484768] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.492603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.499393] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.503252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.510847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.520822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.521042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.527484] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.529234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.540448] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.547615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.553811] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.554085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.554447] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.566443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.569952] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.572053] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.574691] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.575499] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.579999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.583798] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.594478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.300249] Bluetooth: hci0: command tx timeout [ 150.427347] Bluetooth: hci3: command tx timeout [ 150.428345] Bluetooth: hci2: command tx timeout [ 150.492352] Bluetooth: hci1: command tx timeout [ 150.619359] Bluetooth: hci4: command tx timeout [ 150.619765] Bluetooth: hci5: command tx timeout [ 150.683353] Bluetooth: hci7: command tx timeout [ 150.684546] Bluetooth: hci6: command tx timeout [ 152.350169] Bluetooth: hci0: command tx timeout [ 152.475242] Bluetooth: hci3: command tx timeout [ 152.475286] Bluetooth: hci2: command tx timeout [ 152.541153] Bluetooth: hci1: command tx timeout [ 152.667267] Bluetooth: hci5: command tx timeout [ 152.667289] Bluetooth: hci4: command tx timeout [ 152.732248] Bluetooth: hci6: command tx timeout [ 152.732284] Bluetooth: hci7: command tx timeout [ 154.396186] Bluetooth: hci0: command tx timeout [ 154.524215] Bluetooth: hci2: command tx timeout [ 154.524313] Bluetooth: hci3: command tx timeout [ 154.587291] Bluetooth: hci1: command tx timeout [ 154.715267] Bluetooth: hci4: command tx timeout [ 154.716191] Bluetooth: hci5: command tx timeout [ 154.779336] Bluetooth: hci7: command tx timeout [ 154.779370] Bluetooth: hci6: command tx timeout [ 156.445279] Bluetooth: hci0: command tx timeout [ 156.571226] Bluetooth: hci3: command tx timeout [ 156.571242] Bluetooth: hci2: command tx timeout [ 156.635742] Bluetooth: hci1: command tx timeout [ 156.763178] Bluetooth: hci4: command tx timeout [ 156.763221] Bluetooth: hci5: command tx timeout [ 156.827892] Bluetooth: hci6: command tx timeout [ 156.828588] Bluetooth: hci7: command tx timeout [ 183.282983] modprobe (5502) used greatest stack depth: 24216 bytes left [ 210.035085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.041532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.042645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.047512] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.050251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.051784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.148980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.154717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.157927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.161021] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.162357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.166986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.167982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.169643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.175707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.178171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.178343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.183200] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.184057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.185581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.186598] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.191131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.214410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.218204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.218477] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.225680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.227224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.232375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.234569] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.236553] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.606897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.622009] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.624846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.631435] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.632957] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.643550] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.645051] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.646240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.648576] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.649999] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.651084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.659684] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.680253] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.686297] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.688316] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.730807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.750303] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.752322] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.123317] Bluetooth: hci0: command tx timeout [ 212.251353] Bluetooth: hci4: command tx timeout [ 212.251963] Bluetooth: hci1: command tx timeout [ 212.316244] Bluetooth: hci3: command tx timeout [ 212.316636] Bluetooth: hci2: command tx timeout [ 212.699543] Bluetooth: hci7: command tx timeout [ 212.827408] Bluetooth: hci6: command tx timeout [ 212.827887] Bluetooth: hci5: command tx timeout [ 214.172243] Bluetooth: hci0: command tx timeout [ 214.300215] Bluetooth: hci1: command tx timeout [ 214.300562] Bluetooth: hci4: command tx timeout [ 214.363835] Bluetooth: hci2: command tx timeout [ 214.363971] Bluetooth: hci3: command tx timeout [ 214.748181] Bluetooth: hci7: command tx timeout [ 214.876211] Bluetooth: hci5: command tx timeout [ 214.876235] Bluetooth: hci6: command tx timeout [ 216.219708] Bluetooth: hci0: command tx timeout [ 216.347427] Bluetooth: hci1: command tx timeout [ 216.349019] Bluetooth: hci4: command tx timeout [ 216.411406] Bluetooth: hci3: command tx timeout [ 216.412207] Bluetooth: hci2: command tx timeout [ 216.795308] Bluetooth: hci7: command tx timeout [ 216.923241] Bluetooth: hci5: command tx timeout [ 216.924805] Bluetooth: hci6: command tx timeout [ 218.267186] Bluetooth: hci0: command tx timeout [ 218.395457] Bluetooth: hci4: command tx timeout [ 218.395520] Bluetooth: hci1: command tx timeout [ 218.459251] Bluetooth: hci2: command tx timeout [ 218.459274] Bluetooth: hci3: command tx timeout [ 218.844367] Bluetooth: hci7: command tx timeout [ 218.971278] Bluetooth: hci6: command tx timeout [ 218.971302] Bluetooth: hci5: command tx timeout [ 272.172954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.178012] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.185578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.193264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.197039] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.200488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.243956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.248481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.252741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.261068] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.271439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.273581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.440417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.448172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.451474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.461401] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.466469] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.468571] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.562971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.569996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.572656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.586475] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.588684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.600864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.614837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.617598] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.619740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.633929] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.643011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.649577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.664960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.665302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.675247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.677713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.677781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.684747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.690532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.693417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.696137] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.697864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.704583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.707828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.756198] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.773423] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.776644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.782229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.825425] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.827678] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.267191] Bluetooth: hci0: command tx timeout [ 274.331206] Bluetooth: hci1: command tx timeout [ 274.524481] Bluetooth: hci2: command tx timeout [ 274.653163] Bluetooth: hci4: command tx timeout [ 274.779287] Bluetooth: hci3: command tx timeout [ 274.779369] Bluetooth: hci6: command tx timeout [ 274.843474] Bluetooth: hci5: command tx timeout [ 275.035587] Bluetooth: hci7: command tx timeout [ 276.317130] Bluetooth: hci0: command tx timeout [ 276.379340] Bluetooth: hci1: command tx timeout [ 276.571208] Bluetooth: hci2: command tx timeout [ 276.699203] Bluetooth: hci4: command tx timeout [ 276.829148] Bluetooth: hci3: command tx timeout [ 276.829174] Bluetooth: hci6: command tx timeout [ 276.892243] Bluetooth: hci5: command tx timeout [ 277.084129] Bluetooth: hci7: command tx timeout [ 278.363243] Bluetooth: hci0: command tx timeout [ 278.429353] Bluetooth: hci1: command tx timeout [ 278.625222] Bluetooth: hci2: command tx timeout [ 278.747483] Bluetooth: hci4: command tx timeout [ 278.875623] Bluetooth: hci6: command tx timeout [ 278.875654] Bluetooth: hci3: command tx timeout [ 278.939746] Bluetooth: hci5: command tx timeout [ 279.131384] Bluetooth: hci7: command tx timeout [ 280.411356] Bluetooth: hci0: command tx timeout [ 280.475137] Bluetooth: hci1: command tx timeout [ 280.667204] Bluetooth: hci2: command tx timeout [ 280.796167] Bluetooth: hci4: command tx timeout [ 280.924150] Bluetooth: hci6: command tx timeout [ 280.924228] Bluetooth: hci3: command tx timeout [ 280.988151] Bluetooth: hci5: command tx timeout [ 281.180212] Bluetooth: hci7: command tx timeout [ 330.727236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.727388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.173123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.173215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.700263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.700348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.536627] syz-executor.5 (10074) used greatest stack depth: 24208 bytes left [ 332.838016] [ 332.838502] ====================================================== [ 332.839818] WARNING: possible circular locking dependency detected [ 332.841107] 6.13.0-rc7-next-20250117 #1 Not tainted [ 332.844281] ------------------------------------------------------ [ 332.846795] kworker/u8:1/66 is trying to acquire lock: [ 332.847925] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.850086] [ 332.850086] but task is already holding lock: [ 332.851330] ffff888029f20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.853434] [ 332.853434] which lock already depends on the new lock. [ 332.853434] [ 332.855086] [ 332.855086] the existing dependency chain (in reverse order) is: [ 332.856629] [ 332.856629] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 332.858074] __mutex_lock+0x13d/0xb50 [ 332.859068] wiphy_register+0x1b2e/0x25d0 [ 332.860133] ieee80211_register_hw+0x23a4/0x3d60 [ 332.861297] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 332.862524] init_mac80211_hwsim+0x389/0x870 [ 332.863646] do_one_initcall+0xf9/0x640 [ 332.864723] kernel_init_freeable+0x53d/0x7a0 [ 332.865879] kernel_init+0x1e/0x2d0 [ 332.866792] ret_from_fork+0x48/0x80 [ 332.867716] ret_from_fork_asm+0x1a/0x30 [ 332.868785] [ 332.868785] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 332.870122] __lock_acquire+0x29fd/0x4580 [ 332.871169] lock_acquire+0x19b/0x520 [ 332.872166] __mutex_lock+0x13d/0xb50 [ 332.873172] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.874521] unregister_netdevice_queue+0x224/0x2e0 [ 332.875721] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.876955] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.878168] ieee80211_unregister_hw+0x55/0x3a0 [ 332.879299] hwsim_exit_net+0x3a0/0x730 [ 332.880319] ops_exit_list+0xb3/0x180 [ 332.881291] cleanup_net+0x546/0xad0 [ 332.882265] process_one_work+0x8ee/0x1a10 [ 332.883366] worker_thread+0x674/0xe70 [ 332.884420] kthread+0x3ab/0x720 [ 332.885116] ret_from_fork+0x48/0x80 [ 332.885740] ret_from_fork_asm+0x1a/0x30 [ 332.886450] [ 332.886450] other info that might help us debug this: [ 332.886450] [ 332.887540] Possible unsafe locking scenario: [ 332.887540] [ 332.888383] CPU0 CPU1 [ 332.888980] ---- ---- [ 332.889529] lock(&rdev->wiphy.mtx); [ 332.890054] lock(rtnl_mutex); [ 332.890757] lock(&rdev->wiphy.mtx); [ 332.891523] lock(rtnl_mutex); [ 332.891977] [ 332.891977] *** DEADLOCK *** [ 332.891977] [ 332.892691] 4 locks held by kworker/u8:1/66: [ 332.893232] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 332.894478] #1: ffff88800eab7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 332.895673] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 332.896798] #3: ffff888029f20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 332.898051] [ 332.898051] stack backtrace: [ 332.898594] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 332.899575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 332.900529] Workqueue: netns cleanup_net [ 332.901045] Call Trace: [ 332.901364] [ 332.901646] dump_stack_lvl+0xca/0x120 [ 332.902163] print_circular_bug+0x47b/0x750 [ 332.902704] check_noncircular+0x2e9/0x3c0 [ 332.903230] ? __pfx_check_noncircular+0x10/0x10 [ 332.903826] ? hlock_class+0x4e/0x130 [ 332.904293] ? srso_return_thunk+0x5/0x5f [ 332.904827] ? mark_lock+0xac/0xed0 [ 332.905299] ? lockdep_lock+0xba/0x1b0 [ 332.905816] ? __pfx_lockdep_lock+0x10/0x10 [ 332.906381] __lock_acquire+0x29fd/0x4580 [ 332.906921] ? __pfx___lock_acquire+0x10/0x10 [ 332.907480] ? lock_release+0x20f/0x6f0 [ 332.907995] ? __pfx_lock_release+0x10/0x10 [ 332.908533] ? srso_return_thunk+0x5/0x5f [ 332.909065] lock_acquire+0x19b/0x520 [ 332.909549] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.910265] ? __pfx_lock_acquire+0x10/0x10 [ 332.910798] ? __pfx_lock_release+0x10/0x10 [ 332.911337] ? __pfx_try_to_wake_up+0x10/0x10 [ 332.911900] ? srso_return_thunk+0x5/0x5f [ 332.912431] ? lock_is_held_type+0x9e/0x120 [ 332.912985] ? srso_return_thunk+0x5/0x5f [ 332.913527] __mutex_lock+0x13d/0xb50 [ 332.914021] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.914726] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.915431] ? srso_return_thunk+0x5/0x5f [ 332.915974] ? synchronize_rcu_expedited+0x38a/0x420 [ 332.916595] ? __pfx___mutex_lock+0x10/0x10 [ 332.917153] ? srso_return_thunk+0x5/0x5f [ 332.917688] ? srso_return_thunk+0x5/0x5f [ 332.918218] ? kasan_quarantine_put+0x84/0x1e0 [ 332.918805] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 332.919367] ? srso_return_thunk+0x5/0x5f [ 332.919913] unregister_netdevice_many_notify+0x1612/0x1c80 [ 332.920596] ? __virt_addr_valid+0x2e8/0x5d0 [ 332.921157] ? __pfx_lock_release+0x10/0x10 [ 332.921701] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 332.922427] ? find_held_lock+0x2c/0x110 [ 332.922954] ? srso_return_thunk+0x5/0x5f [ 332.923494] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 332.924125] ? srso_return_thunk+0x5/0x5f [ 332.924662] ? lock_release+0x20f/0x6f0 [ 332.925169] ? __pfx_lock_release+0x10/0x10 [ 332.925706] ? srso_return_thunk+0x5/0x5f [ 332.926242] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.926893] ? srso_return_thunk+0x5/0x5f [ 332.927434] unregister_netdevice_queue+0x224/0x2e0 [ 332.928049] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 332.928697] ? up_write+0x195/0x520 [ 332.929178] _cfg80211_unregister_wdev+0x57b/0x700 [ 332.929792] ? srso_return_thunk+0x5/0x5f [ 332.930344] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 332.930964] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 332.931633] ? srso_return_thunk+0x5/0x5f [ 332.932184] ? srso_return_thunk+0x5/0x5f [ 332.932715] ? synchronize_rcu+0x1ff/0x260 [ 332.933241] ieee80211_unregister_hw+0x55/0x3a0 [ 332.933823] hwsim_exit_net+0x3a0/0x730 [ 332.934325] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.934880] ? srso_return_thunk+0x5/0x5f [ 332.935411] ? netdev_run_todo+0x788/0x1040 [ 332.935960] ? __pfx_hwsim_exit_net+0x10/0x10 [ 332.936514] ops_exit_list+0xb3/0x180 [ 332.936995] cleanup_net+0x546/0xad0 [ 332.937471] ? __pfx_cleanup_net+0x10/0x10 [ 332.938006] process_one_work+0x8ee/0x1a10 [ 332.938563] ? __pfx_lock_acquire+0x10/0x10 [ 332.939101] ? __pfx_process_one_work+0x10/0x10 [ 332.939692] ? srso_return_thunk+0x5/0x5f [ 332.940231] ? move_linked_works+0x172/0x270 [ 332.940787] ? srso_return_thunk+0x5/0x5f [ 332.941319] ? assign_work+0x196/0x240 [ 332.941825] worker_thread+0x674/0xe70 [ 332.942337] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 332.943002] ? srso_return_thunk+0x5/0x5f [ 332.943538] ? __pfx_worker_thread+0x10/0x10 [ 332.944117] kthread+0x3ab/0x720 [ 332.944571] ? __pfx_kthread+0x10/0x10 [ 332.945075] ? srso_return_thunk+0x5/0x5f [ 332.945614] ? finish_task_switch.isra.0+0x206/0x840 [ 332.946245] ? __pfx_kthread+0x10/0x10 [ 332.946750] ret_from_fork+0x48/0x80 [ 332.947210] ? __pfx_kthread+0x10/0x10 [ 332.947712] ret_from_fork_asm+0x1a/0x30 [ 332.948271] [ 334.629716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.631752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.634766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.640794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.643895] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.645592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.947027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.954821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.956300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.959500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.962871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.965629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.971178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.975341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.975735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.978871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.982722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.985716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.985911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.989405] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.992362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.997203] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.000863] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.003588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.027316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.034205] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.034526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.044604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.044739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.056167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.057605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.058997] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.059379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.062217] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.062535] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.062818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.063807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.064569] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.064843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.065444] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.065960] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.066680] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.075591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.077745] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.080725] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.085524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.098307] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.099496] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.667175] Bluetooth: hci0: command tx timeout [ 336.987819] Bluetooth: hci1: command tx timeout [ 337.051171] Bluetooth: hci3: command tx timeout [ 337.052128] Bluetooth: hci2: command tx timeout [ 337.115214] Bluetooth: hci7: command tx timeout [ 337.115460] Bluetooth: hci5: command tx timeout [ 337.115551] Bluetooth: hci4: command tx timeout [ 337.180246] Bluetooth: hci6: command tx timeout [ 338.716356] Bluetooth: hci0: command tx timeout [ 339.036239] Bluetooth: hci1: command tx timeout [ 339.099250] Bluetooth: hci2: command tx timeout [ 339.099431] Bluetooth: hci3: command tx timeout [ 339.163352] Bluetooth: hci4: command tx timeout [ 339.163392] Bluetooth: hci5: command tx timeout [ 339.163526] Bluetooth: hci7: command tx timeout [ 339.228172] Bluetooth: hci6: command tx timeout [ 340.763138] Bluetooth: hci0: command tx timeout [ 341.083169] Bluetooth: hci1: command tx timeout [ 341.147466] Bluetooth: hci3: command tx timeout [ 341.148340] Bluetooth: hci2: command tx timeout [ 341.211216] Bluetooth: hci7: command tx timeout [ 341.211334] Bluetooth: hci5: command tx timeout [ 341.211451] Bluetooth: hci4: command tx timeout [ 341.275176] Bluetooth: hci6: command tx timeout [ 342.812459] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 21:48:32 Registers: info registers vcpu 0 RAX=0000000000052d49 RBX=0000000000000000 RCX=ffffffff84a8bb27 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001 R12=ffffffff864021d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9f4b07dcb0 CR3=000000000dcca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000002ffffffff0000565234e30840 XMM05=00000000000000000000000000000000 XMM06=0000565234e195300000000000000002 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800eab6bb8 R8 =0000000000000001 R9 =ffffed1001d56d67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea010 R15=ffff88800eab6eb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9f4b03efb0 CR3=000000000ef34000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=00000000000000000000000000000000 XMM05=010100000000ffff0000000500000008 XMM06=000000000000006563697665642e3469 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000