Warning: Permanently added '[localhost]:59204' (ECDSA) to the list of known hosts. 2025/01/18 00:10:13 fuzzer started 2025/01/18 00:10:13 dialing manager at localhost:44245 syzkaller login: [ 65.862187] cgroup: Unknown subsys name 'net' [ 65.924167] cgroup: Unknown subsys name 'cpuset' [ 65.937865] cgroup: Unknown subsys name 'rlimit' [ 70.661463] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.959992] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 00:10:29 syscalls: 2217 2025/01/18 00:10:29 code coverage: enabled 2025/01/18 00:10:29 comparison tracing: enabled 2025/01/18 00:10:29 extra coverage: enabled 2025/01/18 00:10:29 setuid sandbox: enabled 2025/01/18 00:10:29 namespace sandbox: enabled 2025/01/18 00:10:29 Android sandbox: enabled 2025/01/18 00:10:29 fault injection: enabled 2025/01/18 00:10:29 leak checking: enabled 2025/01/18 00:10:29 net packet injection: enabled 2025/01/18 00:10:29 net device setup: enabled 2025/01/18 00:10:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 00:10:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 00:10:29 USB emulation: enabled 2025/01/18 00:10:29 hci packet injection: enabled 2025/01/18 00:10:29 wifi device emulation: enabled 2025/01/18 00:10:29 802.15.4 emulation: enabled 2025/01/18 00:10:29 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 00:10:29 fetching corpus: 50, signal 24592/27382 (executing program) 2025/01/18 00:10:29 fetching corpus: 100, signal 39358/42441 (executing program) 2025/01/18 00:10:29 fetching corpus: 150, signal 50480/53493 (executing program) 2025/01/18 00:10:30 fetching corpus: 200, signal 56214/59286 (executing program) 2025/01/18 00:10:30 fetching corpus: 250, signal 62262/65037 (executing program) 2025/01/18 00:10:30 fetching corpus: 300, signal 65318/68026 (executing program) 2025/01/18 00:10:30 fetching corpus: 350, signal 69722/71869 (executing program) 2025/01/18 00:10:30 fetching corpus: 400, signal 71435/73481 (executing program) 2025/01/18 00:10:31 fetching corpus: 450, signal 74147/75712 (executing program) 2025/01/18 00:10:31 fetching corpus: 500, signal 76402/77521 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79391 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79440 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79493 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79543 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79589 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79640 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79687 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79747 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79789 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79837 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79879 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79915 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/79953 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80001 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80039 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80084 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80131 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80173 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80223 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80278 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80329 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80367 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80408 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80448 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80496 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80530 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80590 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80641 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80687 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80705 (executing program) 2025/01/18 00:10:31 fetching corpus: 525, signal 78887/80705 (executing program) 2025/01/18 00:10:35 starting 8 fuzzer processes 00:10:35 executing program 0: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(r0, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) 00:10:35 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, r1) 00:10:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b45, 0x4) 00:10:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001500), 0x0) 00:10:35 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) [ 87.627726] audit: type=1400 audit(1737159035.591:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:10:35 executing program 5: r0 = memfd_create(&(0x7f0000001480)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\t\x00\x00\x00\x00\x00\x00\x00\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\b\x00\x00\x00\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba}\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x83\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\xb7\xd5\x1a\xc3~\xa93n\x139\xf1\xca\xe5\x0f\xdce\x9b\xf3yd\x8c\x11\xee\xe5\xa5\vS\xe2 k\xd5\xe1\xab\r\xb6\xa5\xfe\x9f\xb3\xd05>^\xa6\xf4\x0f\xfc\xf6\x10\xfe\x84\xc7\x1cf\'\xab7\xcb:\x1f=T\xf4\xf9p\x8f]\x00\xc7}\xf60s\xfa@\xc8;\x15\x9b\xb1M\xc7\x9e\xc7\x8f\xe6\xe4\x86\x15\x16\x8c\x85\b\xee\x05\xd0\x87\xa4\xbd*\xd9\xe2S/U\xd6\x92\xe4\x89\x0e\x11*\x03Zj@\xc3.C7\xefx\xd6\xe3\x89\x01\x81w\x89\xefb\xb2\xaf\xf3\xa1\x7f(\xd3y\x1c\x16\xbb0\x06wG\xb7s\xe1\xf2\xc0\x92\x7f3\xf9\x11<\xa7e\x90\x9b(\xf7\x19\x82yt(\xe5\xd6\x96\xbf\xbf\xb4\x8b\xba\xcf\xdc\x90\x98B\xe1\xc0\xc3\xc7\xcc\xd56\x7f\xb9zt\xec\xc3_\xc6`\xa7\xbe\xc0\xccb{\xaa1l6\x85\x18B\xf5|\"C\xcfU\x8e\xa3\x97\x9a\x15]\x15\xc3\x15\x97\x8e\xdfV\r\xde\x86\xf9-\xefU\xc5\xb8\xc71\xe9\xd9\xa2\xf5\x9d\xcbj\x14\x02r\xa1C\xeaD\xc7P\"\xaf\xe6gc(C\xe3\xb8\xe7\x0f\xd8z\xd4^i`>\\i\xc1W_\xa4\x11\xd9\x93TD\x95\xf9\xfe\x12@\"\xf4g1 @\xb0\xae\xeb)\xb8\xfe\x174\x1c\xe3^ _m2x\xcd\tTj.\xa7\x0e\xc1\x89\x17e\x91\xf6`J\xa3a\xe3\';&\x87H\xa8\xfcl[6V^\xd9\x00\xab`v3\x97\x9e\xfa\xa4.5\xda\x19K\xd5\xab\x126-\xc0/ tk\xc9\xbc\xc2\xd6\x9f\xe3\xfd:\xba\\\vI\xb2\x84\xe9zN\x04v/Y2l\xc6\xf2>U\x8f\x14}\b<\v\x94\x1a\xfa\xb8', 0x3) pwrite64(r0, &(0x7f0000000480)="568ed402", 0x4, 0x9) fcntl$addseals(r0, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}) 00:10:35 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x9, 0x0) 00:10:35 executing program 7: openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pselect6(0xfe58, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) [ 89.162349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.165340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.168801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.172235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.177105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.180769] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.185399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.186077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.199667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.210845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.214545] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.216890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.220440] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.239484] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.241745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.247094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.265573] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.267492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.277478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.293277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.297623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.303444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.308016] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.310605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.338734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.346592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.348490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.360578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.363266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.365352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.419451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.432629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.435908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.454512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.454833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.459061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.473604] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.478724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.480345] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.482285] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.485841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.491541] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.495463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.496192] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.514981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.520651] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.525553] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.553708] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.240484] Bluetooth: hci1: command tx timeout [ 91.303507] Bluetooth: hci2: command tx timeout [ 91.303645] Bluetooth: hci0: command tx timeout [ 91.366237] Bluetooth: hci3: command tx timeout [ 91.430253] Bluetooth: hci4: command tx timeout [ 91.622233] Bluetooth: hci5: command tx timeout [ 91.686233] Bluetooth: hci6: command tx timeout [ 91.750273] Bluetooth: hci7: command tx timeout [ 93.287459] Bluetooth: hci1: command tx timeout [ 93.350227] Bluetooth: hci0: command tx timeout [ 93.352189] Bluetooth: hci2: command tx timeout [ 93.415215] Bluetooth: hci3: command tx timeout [ 93.478197] Bluetooth: hci4: command tx timeout [ 93.670281] Bluetooth: hci5: command tx timeout [ 93.738150] Bluetooth: hci6: command tx timeout [ 93.798176] Bluetooth: hci7: command tx timeout [ 95.336216] Bluetooth: hci1: command tx timeout [ 95.398401] Bluetooth: hci2: command tx timeout [ 95.398674] Bluetooth: hci0: command tx timeout [ 95.463461] Bluetooth: hci3: command tx timeout [ 95.527467] Bluetooth: hci4: command tx timeout [ 95.719378] Bluetooth: hci5: command tx timeout [ 95.783740] Bluetooth: hci6: command tx timeout [ 95.847212] Bluetooth: hci7: command tx timeout [ 97.383180] Bluetooth: hci1: command tx timeout [ 97.448182] Bluetooth: hci0: command tx timeout [ 97.448268] Bluetooth: hci2: command tx timeout [ 97.510225] Bluetooth: hci3: command tx timeout [ 97.576156] Bluetooth: hci4: command tx timeout [ 97.766442] Bluetooth: hci5: command tx timeout [ 97.830282] Bluetooth: hci6: command tx timeout [ 97.896252] Bluetooth: hci7: command tx timeout [ 151.643846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.647053] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.649163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.657115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.660871] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.663182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.862010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.872507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.874498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.877238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.877481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.881866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.883491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.885447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.886313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.893803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.896962] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.898954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.904741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.905071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.914211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.916249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.919836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.920806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.989317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.995726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.005898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.013938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.016997] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.025360] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.059053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.063438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.067200] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.073750] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.076299] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.080244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.127372] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.138996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.139400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.146463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.148353] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.148759] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.161241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.163612] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.176369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.196514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.202931] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.203634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.702227] Bluetooth: hci0: command tx timeout [ 153.959183] Bluetooth: hci1: command tx timeout [ 153.959202] Bluetooth: hci3: command tx timeout [ 154.023175] Bluetooth: hci2: command tx timeout [ 154.086273] Bluetooth: hci4: command tx timeout [ 154.150331] Bluetooth: hci5: command tx timeout [ 154.214215] Bluetooth: hci7: command tx timeout [ 154.278357] Bluetooth: hci6: command tx timeout [ 155.750239] Bluetooth: hci0: command tx timeout [ 156.006262] Bluetooth: hci1: command tx timeout [ 156.007327] Bluetooth: hci3: command tx timeout [ 156.070316] Bluetooth: hci2: command tx timeout [ 156.134166] Bluetooth: hci4: command tx timeout [ 156.198218] Bluetooth: hci5: command tx timeout [ 156.262428] Bluetooth: hci7: command tx timeout [ 156.328211] Bluetooth: hci6: command tx timeout [ 157.799153] Bluetooth: hci0: command tx timeout [ 158.056215] Bluetooth: hci3: command tx timeout [ 158.056289] Bluetooth: hci1: command tx timeout [ 158.118234] Bluetooth: hci2: command tx timeout [ 158.182190] Bluetooth: hci4: command tx timeout [ 158.246261] Bluetooth: hci5: command tx timeout [ 158.313152] Bluetooth: hci7: command tx timeout [ 158.375280] Bluetooth: hci6: command tx timeout [ 159.847164] Bluetooth: hci0: command tx timeout [ 160.102272] Bluetooth: hci1: command tx timeout [ 160.103183] Bluetooth: hci3: command tx timeout [ 160.166297] Bluetooth: hci2: command tx timeout [ 160.230299] Bluetooth: hci4: command tx timeout [ 160.294265] Bluetooth: hci5: command tx timeout [ 160.358202] Bluetooth: hci7: command tx timeout [ 160.422180] Bluetooth: hci6: command tx timeout [ 213.811339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.813441] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.814911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.819545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.820615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.821157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.899363] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.901340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.910918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.916589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.920366] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.922682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.958192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.961316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.962710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.968424] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.969846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.972277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.979520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.981780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.982930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.984370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.986692] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.987811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.090378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.091461] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.093693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.095338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.095437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.095947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.099414] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.101037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.104716] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.105663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.110367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.110544] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.116715] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.122833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.124693] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.125877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.127042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.136550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.143252] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.145677] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.154563] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.160433] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.161225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.191247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.846612] Bluetooth: hci0: command tx timeout [ 215.974282] Bluetooth: hci1: command tx timeout [ 216.038318] Bluetooth: hci2: command tx timeout [ 216.038339] Bluetooth: hci3: command tx timeout [ 216.230235] Bluetooth: hci6: command tx timeout [ 216.233261] Bluetooth: hci5: command tx timeout [ 216.295237] Bluetooth: hci4: command tx timeout [ 216.358380] Bluetooth: hci7: command tx timeout [ 217.894299] Bluetooth: hci0: command tx timeout [ 218.022773] Bluetooth: hci1: command tx timeout [ 218.086335] Bluetooth: hci2: command tx timeout [ 218.089165] Bluetooth: hci3: command tx timeout [ 218.278509] Bluetooth: hci5: command tx timeout [ 218.278877] Bluetooth: hci6: command tx timeout [ 218.344147] Bluetooth: hci4: command tx timeout [ 218.408163] Bluetooth: hci7: command tx timeout [ 219.942351] Bluetooth: hci0: command tx timeout [ 220.070281] Bluetooth: hci1: command tx timeout [ 220.134377] Bluetooth: hci3: command tx timeout [ 220.135353] Bluetooth: hci2: command tx timeout [ 220.326466] Bluetooth: hci6: command tx timeout [ 220.326494] Bluetooth: hci5: command tx timeout [ 220.390168] Bluetooth: hci4: command tx timeout [ 220.454184] Bluetooth: hci7: command tx timeout [ 221.990236] Bluetooth: hci0: command tx timeout [ 222.118830] Bluetooth: hci1: command tx timeout [ 222.182555] Bluetooth: hci2: command tx timeout [ 222.184158] Bluetooth: hci3: command tx timeout [ 222.374581] Bluetooth: hci5: command tx timeout [ 222.374668] Bluetooth: hci6: command tx timeout [ 222.438204] Bluetooth: hci4: command tx timeout [ 222.502160] Bluetooth: hci7: command tx timeout [ 276.031961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.035050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.040574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.054576] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.059049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.063636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.105016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.107197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.110630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.117539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.121452] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.126535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.407606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.417304] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.419683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.436743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.441242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.446351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.481654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.487480] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.496435] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.504751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.508664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.512426] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.515171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.522721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.523518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.548354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.549417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.554354] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.555504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.556568] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.556976] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.572656] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.578833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.582019] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.582588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.590364] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.590428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.641354] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.645396] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.666111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.702023] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.732736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.817649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.890670] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.897743] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.900344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.118201] Bluetooth: hci0: command tx timeout [ 278.183197] Bluetooth: hci1: command tx timeout [ 278.502262] Bluetooth: hci2: command tx timeout [ 278.631135] Bluetooth: hci4: command tx timeout [ 278.694274] Bluetooth: hci5: command tx timeout [ 278.695329] Bluetooth: hci3: command tx timeout [ 278.760115] Bluetooth: hci6: command tx timeout [ 279.017649] Bluetooth: hci7: command tx timeout [ 280.167193] Bluetooth: hci0: command tx timeout [ 280.232172] Bluetooth: hci1: command tx timeout [ 280.551190] Bluetooth: hci2: command tx timeout [ 280.679317] Bluetooth: hci4: command tx timeout [ 280.742178] Bluetooth: hci3: command tx timeout [ 280.742227] Bluetooth: hci5: command tx timeout [ 280.806196] Bluetooth: hci6: command tx timeout [ 281.062210] Bluetooth: hci7: command tx timeout [ 282.214625] Bluetooth: hci0: command tx timeout [ 282.279127] Bluetooth: hci1: command tx timeout [ 282.598155] Bluetooth: hci2: command tx timeout [ 282.726194] Bluetooth: hci4: command tx timeout [ 282.790185] Bluetooth: hci3: command tx timeout [ 282.791177] Bluetooth: hci5: command tx timeout [ 282.855124] Bluetooth: hci6: command tx timeout [ 283.111245] Bluetooth: hci7: command tx timeout [ 284.264119] Bluetooth: hci0: command tx timeout [ 284.326161] Bluetooth: hci1: command tx timeout [ 284.646266] Bluetooth: hci2: command tx timeout [ 284.774147] Bluetooth: hci4: command tx timeout [ 284.838436] Bluetooth: hci5: command tx timeout [ 284.838509] Bluetooth: hci3: command tx timeout [ 284.902210] Bluetooth: hci6: command tx timeout [ 285.158712] Bluetooth: hci7: command tx timeout [ 336.292165] syz-executor.1 (9990) used greatest stack depth: 23584 bytes left [ 336.481276] [ 336.481572] ====================================================== [ 336.482256] WARNING: possible circular locking dependency detected [ 336.482938] 6.13.0-rc7-next-20250117 #1 Not tainted [ 336.483512] ------------------------------------------------------ [ 336.484191] kworker/u8:0/11 is trying to acquire lock: [ 336.484785] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.485917] [ 336.485917] but task is already holding lock: [ 336.486529] ffff88802a5d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.487626] [ 336.487626] which lock already depends on the new lock. [ 336.487626] [ 336.488494] [ 336.488494] the existing dependency chain (in reverse order) is: [ 336.489316] [ 336.489316] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 336.490093] __mutex_lock+0x13d/0xb50 [ 336.490645] wiphy_register+0x1b2e/0x25d0 [ 336.491871] ieee80211_register_hw+0x23a4/0x3d60 [ 336.493078] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 336.494282] init_mac80211_hwsim+0x389/0x870 [ 336.495411] do_one_initcall+0xf9/0x640 [ 336.496371] kernel_init_freeable+0x53d/0x7a0 [ 336.498000] kernel_init+0x1e/0x2d0 [ 336.499014] ret_from_fork+0x48/0x80 [ 336.500038] ret_from_fork_asm+0x1a/0x30 [ 336.500944] [ 336.500944] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 336.502527] __lock_acquire+0x29fd/0x4580 [ 336.503098] lock_acquire+0x19b/0x520 [ 336.503641] __mutex_lock+0x13d/0xb50 [ 336.504185] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.504939] unregister_netdevice_queue+0x224/0x2e0 [ 336.505607] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.506273] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.506939] ieee80211_unregister_hw+0x55/0x3a0 [ 336.507562] hwsim_exit_net+0x3a0/0x730 [ 336.508114] ops_exit_list+0xb3/0x180 [ 336.508658] cleanup_net+0x546/0xad0 [ 336.509185] process_one_work+0x8ee/0x1a10 [ 336.509790] worker_thread+0x674/0xe70 [ 336.510362] kthread+0x3ab/0x720 [ 336.510876] ret_from_fork+0x48/0x80 [ 336.511401] ret_from_fork_asm+0x1a/0x30 [ 336.511988] [ 336.511988] other info that might help us debug this: [ 336.511988] [ 336.512888] Possible unsafe locking scenario: [ 336.512888] [ 336.513561] CPU0 CPU1 [ 336.514090] ---- ---- [ 336.514627] lock(&rdev->wiphy.mtx); [ 336.515099] lock(rtnl_mutex); [ 336.515781] lock(&rdev->wiphy.mtx); [ 336.516511] lock(rtnl_mutex); [ 336.516941] [ 336.516941] *** DEADLOCK *** [ 336.516941] [ 336.517616] 4 locks held by kworker/u8:0/11: [ 336.518144] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 336.519366] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 336.520514] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 336.521587] #3: ffff88802a5d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 336.522733] [ 336.522733] stack backtrace: [ 336.523216] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 336.524098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 336.525000] Workqueue: netns cleanup_net [ 336.525498] Call Trace: [ 336.525811] [ 336.526065] dump_stack_lvl+0xca/0x120 [ 336.526530] print_circular_bug+0x47b/0x750 [ 336.527019] check_noncircular+0x2e9/0x3c0 [ 336.527500] ? lock_repin_lock+0x207/0x320 [ 336.527997] ? __pfx_check_noncircular+0x10/0x10 [ 336.528534] ? hlock_class+0x4e/0x130 [ 336.528961] ? mark_lock+0xac/0xed0 [ 336.529411] ? __pfx_lock_repin_lock+0x10/0x10 [ 336.529972] ? timerqueue_del+0x83/0x150 [ 336.530463] ? lockdep_lock+0xba/0x1b0 [ 336.530956] ? __pfx_lockdep_lock+0x10/0x10 [ 336.531507] __lock_acquire+0x29fd/0x4580 [ 336.532021] ? __pfx___lock_acquire+0x10/0x10 [ 336.532573] ? lock_release+0x20f/0x6f0 [ 336.533062] ? __pfx_lock_release+0x10/0x10 [ 336.533587] lock_acquire+0x19b/0x520 [ 336.534057] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.534738] ? __pfx_lock_acquire+0x10/0x10 [ 336.535244] ? srso_return_thunk+0x5/0x5f [ 336.535750] ? lock_release+0x20f/0x6f0 [ 336.536230] ? srso_return_thunk+0x5/0x5f [ 336.536748] ? lock_is_held_type+0x9e/0x120 [ 336.537268] ? srso_return_thunk+0x5/0x5f [ 336.537777] __mutex_lock+0x13d/0xb50 [ 336.538270] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.538903] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.539556] ? srso_return_thunk+0x5/0x5f [ 336.540062] ? synchronize_rcu_expedited+0x38a/0x420 [ 336.540672] ? __pfx___mutex_lock+0x10/0x10 [ 336.541197] ? __pfx_autoremove_wake_function+0x10/0x10 [ 336.541776] ? srso_return_thunk+0x5/0x5f [ 336.542247] ? kasan_quarantine_put+0x84/0x1e0 [ 336.542765] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 336.543260] ? srso_return_thunk+0x5/0x5f [ 336.543745] unregister_netdevice_many_notify+0x1612/0x1c80 [ 336.544354] ? __virt_addr_valid+0x2e8/0x5d0 [ 336.544873] ? __pfx_lock_release+0x10/0x10 [ 336.545370] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 336.546059] ? find_held_lock+0x2c/0x110 [ 336.546568] ? srso_return_thunk+0x5/0x5f [ 336.547081] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 336.547671] ? srso_return_thunk+0x5/0x5f [ 336.548188] ? lock_release+0x20f/0x6f0 [ 336.548688] ? __pfx_lock_release+0x10/0x10 [ 336.549230] ? srso_return_thunk+0x5/0x5f [ 336.549751] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.550366] ? srso_return_thunk+0x5/0x5f [ 336.550867] unregister_netdevice_queue+0x224/0x2e0 [ 336.551435] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 336.552068] ? up_write+0x195/0x520 [ 336.552550] _cfg80211_unregister_wdev+0x57b/0x700 [ 336.553147] ? srso_return_thunk+0x5/0x5f [ 336.553687] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 336.554295] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 336.554955] ? srso_return_thunk+0x5/0x5f [ 336.555475] ? srso_return_thunk+0x5/0x5f [ 336.555993] ? synchronize_rcu+0x1ff/0x260 [ 336.556522] ieee80211_unregister_hw+0x55/0x3a0 [ 336.557090] hwsim_exit_net+0x3a0/0x730 [ 336.557585] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.558110] ? srso_return_thunk+0x5/0x5f [ 336.558638] ? netdev_run_todo+0x788/0x1040 [ 336.559156] ? __pfx_hwsim_exit_net+0x10/0x10 [ 336.559698] ops_exit_list+0xb3/0x180 [ 336.560163] cleanup_net+0x546/0xad0 [ 336.560602] ? __pfx_cleanup_net+0x10/0x10 [ 336.561086] process_one_work+0x8ee/0x1a10 [ 336.561606] ? __pfx_lock_acquire+0x10/0x10 [ 336.562090] ? __pfx_process_one_work+0x10/0x10 [ 336.562634] ? srso_return_thunk+0x5/0x5f [ 336.563115] ? move_linked_works+0x172/0x270 [ 336.563614] ? srso_return_thunk+0x5/0x5f [ 336.564095] ? assign_work+0x196/0x240 [ 336.564578] worker_thread+0x674/0xe70 [ 336.565041] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 336.565621] ? __pfx_worker_thread+0x10/0x10 [ 336.566172] kthread+0x3ab/0x720 [ 336.566587] ? __pfx_kthread+0x10/0x10 [ 336.567833] ? srso_return_thunk+0x5/0x5f [ 336.568577] ? finish_task_switch.isra.0+0x206/0x840 [ 336.569306] ? __pfx_kthread+0x10/0x10 [ 336.569913] ret_from_fork+0x48/0x80 [ 336.570462] ? __pfx_kthread+0x10/0x10 [ 336.571029] ret_from_fork_asm+0x1a/0x30 [ 336.571632] [ 338.095637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.098450] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.100638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.104877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.108838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.110422] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.228558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.230449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.232818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.245393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.248945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.252665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.354936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.355933] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.357209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.359382] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.364433] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.366145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.482585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.487440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.495205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.504378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.508397] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.509907] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.574389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.576895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.580340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.586872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.588503] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.589391] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.614839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.623381] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.631254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.637372] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.650608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.654903] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.657296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.689301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.692275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.694408] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.696117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.704795] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.712599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.724493] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.728262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.731224] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.744362] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.746240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.135293] Bluetooth: hci0: command tx timeout [ 340.327114] Bluetooth: hci1: command tx timeout [ 340.391665] Bluetooth: hci2: command tx timeout [ 340.582467] Bluetooth: hci3: command tx timeout [ 340.646321] Bluetooth: hci4: command tx timeout [ 340.710239] Bluetooth: hci6: command tx timeout [ 340.776231] Bluetooth: hci5: command tx timeout [ 340.776361] Bluetooth: hci7: command tx timeout [ 342.182137] Bluetooth: hci0: command tx timeout [ 342.374171] Bluetooth: hci1: command tx timeout [ 342.438580] Bluetooth: hci2: command tx timeout [ 342.630133] Bluetooth: hci3: command tx timeout [ 342.695103] Bluetooth: hci4: command tx timeout [ 342.761099] Bluetooth: hci6: command tx timeout [ 342.823134] Bluetooth: hci7: command tx timeout [ 342.823148] Bluetooth: hci5: command tx timeout [ 344.230240] Bluetooth: hci0: command tx timeout [ 344.423092] Bluetooth: hci1: command tx timeout [ 344.486273] Bluetooth: hci2: command tx timeout [ 344.678344] Bluetooth: hci3: command tx timeout [ 344.742331] Bluetooth: hci4: command tx timeout [ 344.806231] Bluetooth: hci6: command tx timeout [ 344.870171] Bluetooth: hci7: command tx timeout [ 344.871143] Bluetooth: hci5: command tx timeout [ 346.278139] Bluetooth: hci0: command tx timeout [ 346.470214] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 00:14:44 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb38 R8 =0000000000000001 R9 =ffffed10012bbd57 R10=0000000000000061 R11=0000000020202020 R12=0000000000000061 R13=0000000000000001 R14=ffff888008fea027 R15=ffff8880095dee38 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc74799000 CR3=000000001694a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0003221e0000000c000322190 XMM02=000000c0002b0b40000000c0002b0b10 XMM03=000000c0002b0d20000000c000322140 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=ffff88806cf00000 RBX=0000000000000001 RCX=ffffffff84a8bb27 RDX=ffffed100d9e6c4b RSI=0000000000000004 RDI=ffffffff814b1b6a RBP=dffffc0000000000 RSP=ffff8880096a7e68 R8 =0000000000000000 R9 =ffffed100d9e6c4a R10=ffff88806cf36253 R11=0000000000000000 R12=ffffffff864021d0 R13=1ffff110012d4fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8cace RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f210a8fb878 CR3=000000001694a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c00093d1c0000000c000303530 XMM02=000000c000303c30000000c000303980 XMM03=000000c000303cb0000000c000303c70 XMM04=000000c000353800000000c0003536c0 XMM05=000000c000353cc0000000c000353b40 XMM06=000000c0007cc200000000c000353f40 XMM07=000000c000155f80000000c0007cc2c0 XMM08=00000000004643c60000000000000000 XMM09=0000000000000000000000c0000560a0 XMM10=000000c000dc444000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0