Warning: Permanently added '[localhost]:7865' (ECDSA) to the list of known hosts. 2025/01/18 00:47:49 fuzzer started 2025/01/18 00:47:50 dialing manager at localhost:44245 syzkaller login: [ 66.881065] cgroup: Unknown subsys name 'net' [ 66.976794] cgroup: Unknown subsys name 'cpuset' [ 67.002481] cgroup: Unknown subsys name 'rlimit' [ 74.851746] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 86.187701] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 00:48:10 syscalls: 2217 2025/01/18 00:48:10 code coverage: enabled 2025/01/18 00:48:10 comparison tracing: enabled 2025/01/18 00:48:10 extra coverage: enabled 2025/01/18 00:48:10 setuid sandbox: enabled 2025/01/18 00:48:10 namespace sandbox: enabled 2025/01/18 00:48:10 Android sandbox: enabled 2025/01/18 00:48:10 fault injection: enabled 2025/01/18 00:48:10 leak checking: enabled 2025/01/18 00:48:10 net packet injection: enabled 2025/01/18 00:48:10 net device setup: enabled 2025/01/18 00:48:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 00:48:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 00:48:10 USB emulation: enabled 2025/01/18 00:48:10 hci packet injection: enabled 2025/01/18 00:48:10 wifi device emulation: enabled 2025/01/18 00:48:10 802.15.4 emulation: enabled 2025/01/18 00:48:10 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 00:48:10 fetching corpus: 50, signal 33324/35664 (executing program) 2025/01/18 00:48:10 fetching corpus: 100, signal 41571/44415 (executing program) 2025/01/18 00:48:10 fetching corpus: 150, signal 52194/54933 (executing program) 2025/01/18 00:48:11 fetching corpus: 200, signal 56820/59697 (executing program) 2025/01/18 00:48:11 fetching corpus: 250, signal 60959/63772 (executing program) 2025/01/18 00:48:11 fetching corpus: 300, signal 63351/66250 (executing program) 2025/01/18 00:48:11 fetching corpus: 350, signal 66223/69011 (executing program) 2025/01/18 00:48:11 fetching corpus: 400, signal 69518/71925 (executing program) 2025/01/18 00:48:12 fetching corpus: 450, signal 73207/75031 (executing program) 2025/01/18 00:48:12 fetching corpus: 500, signal 76081/77299 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79410 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79447 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79497 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79539 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79584 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79630 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79676 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79718 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79764 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79816 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79858 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79905 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79952 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/79992 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80037 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80083 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80128 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80167 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80228 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80274 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80314 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80356 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80399 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80441 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80489 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80547 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80599 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80651 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80686 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80705 (executing program) 2025/01/18 00:48:12 fetching corpus: 525, signal 78887/80705 (executing program) 2025/01/18 00:48:16 starting 8 fuzzer processes 00:48:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 00:48:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000040)) 00:48:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x0, 0xfffffffffffff525}) 00:48:16 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) pwrite64(r0, &(0x7f00000002c0)='<', 0x1, 0x0) 00:48:16 executing program 4: memfd_create(0x0, 0x75fc91742d31320) 00:48:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x3b, 0x4) [ 93.368687] audit: type=1400 audit(1737161296.925:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:48:16 executing program 6: ioperm(0x0, 0xfff, 0x91) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000380)) 00:48:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 94.647699] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.654109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.659865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.668927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.673059] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.675373] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.847395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.856988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.860906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.882265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.895905] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.924142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.964152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.979864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.001870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.008948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.011738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.022164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.025717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.031079] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.033949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.045886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.050167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.052968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.054818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.063816] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 95.064724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.076004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.078566] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.099290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.099821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.104940] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.108088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.119816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.120240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.124704] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 95.125203] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.128782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.132393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.133185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.138721] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.148313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.172288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.188885] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.212196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.213270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.220651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.223950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.732588] Bluetooth: hci0: command tx timeout [ 96.986919] Bluetooth: hci1: command tx timeout [ 97.114832] Bluetooth: hci2: command tx timeout [ 97.242629] Bluetooth: hci4: command tx timeout [ 97.242662] Bluetooth: hci6: command tx timeout [ 97.306694] Bluetooth: hci5: command tx timeout [ 97.307501] Bluetooth: hci3: command tx timeout [ 97.307663] Bluetooth: hci7: command tx timeout [ 98.778623] Bluetooth: hci0: command tx timeout [ 99.034798] Bluetooth: hci1: command tx timeout [ 99.163341] Bluetooth: hci2: command tx timeout [ 99.290539] Bluetooth: hci4: command tx timeout [ 99.290691] Bluetooth: hci6: command tx timeout [ 99.354619] Bluetooth: hci3: command tx timeout [ 99.354743] Bluetooth: hci7: command tx timeout [ 99.354798] Bluetooth: hci5: command tx timeout [ 100.827163] Bluetooth: hci0: command tx timeout [ 101.084535] Bluetooth: hci1: command tx timeout [ 101.211039] Bluetooth: hci2: command tx timeout [ 101.338660] Bluetooth: hci4: command tx timeout [ 101.339767] Bluetooth: hci6: command tx timeout [ 101.402560] Bluetooth: hci3: command tx timeout [ 101.402645] Bluetooth: hci5: command tx timeout [ 101.402695] Bluetooth: hci7: command tx timeout [ 102.875166] Bluetooth: hci0: command tx timeout [ 103.130599] Bluetooth: hci1: command tx timeout [ 103.258656] Bluetooth: hci2: command tx timeout [ 103.386741] Bluetooth: hci6: command tx timeout [ 103.386967] Bluetooth: hci4: command tx timeout [ 103.450523] Bluetooth: hci7: command tx timeout [ 103.450634] Bluetooth: hci5: command tx timeout [ 103.450723] Bluetooth: hci3: command tx timeout [ 155.385185] [ 155.385624] ====================================================== [ 155.386776] WARNING: possible circular locking dependency detected [ 155.387889] 6.13.0-rc7-next-20250117 #1 Not tainted [ 155.390321] ------------------------------------------------------ [ 155.394572] kworker/u8:1/66 is trying to acquire lock: [ 155.396236] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 155.398171] [ 155.398171] but task is already holding lock: [ 155.399300] ffff8880157b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 155.401088] [ 155.401088] which lock already depends on the new lock. [ 155.401088] [ 155.402489] [ 155.402489] the existing dependency chain (in reverse order) is: [ 155.403819] [ 155.403819] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 155.405044] __mutex_lock+0x13d/0xb50 [ 155.405891] wiphy_register+0x1b2e/0x25d0 [ 155.406817] ieee80211_register_hw+0x23a4/0x3d60 [ 155.407834] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 155.408940] init_mac80211_hwsim+0x389/0x870 [ 155.409961] do_one_initcall+0xf9/0x640 [ 155.410886] kernel_init_freeable+0x53d/0x7a0 [ 155.411878] kernel_init+0x1e/0x2d0 [ 155.412673] ret_from_fork+0x48/0x80 [ 155.413488] ret_from_fork_asm+0x1a/0x30 [ 155.414407] [ 155.414407] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 155.415599] __lock_acquire+0x29fd/0x4580 [ 155.416520] lock_acquire+0x19b/0x520 [ 155.417348] __mutex_lock+0x13d/0xb50 [ 155.418203] unregister_netdevice_many_notify+0x1612/0x1c80 [ 155.419387] unregister_netdevice_queue+0x224/0x2e0 [ 155.420422] _cfg80211_unregister_wdev+0x57b/0x700 [ 155.421450] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 155.422489] ieee80211_unregister_hw+0x55/0x3a0 [ 155.423474] hwsim_exit_net+0x3a0/0x730 [ 155.424339] ops_exit_list+0xb3/0x180 [ 155.425178] cleanup_net+0x546/0xad0 [ 155.426010] process_one_work+0x8ee/0x1a10 [ 155.426974] worker_thread+0x674/0xe70 [ 155.427877] kthread+0x3ab/0x720 [ 155.428652] ret_from_fork+0x48/0x80 [ 155.429469] ret_from_fork_asm+0x1a/0x30 [ 155.430378] [ 155.430378] other info that might help us debug this: [ 155.430378] [ 155.431780] Possible unsafe locking scenario: [ 155.431780] [ 155.432843] CPU0 CPU1 [ 155.433692] ---- ---- [ 155.434550] lock(&rdev->wiphy.mtx); [ 155.435315] lock(rtnl_mutex); [ 155.436411] lock(&rdev->wiphy.mtx); [ 155.437568] lock(rtnl_mutex); [ 155.438232] [ 155.438232] *** DEADLOCK *** [ 155.438232] [ 155.439319] 4 locks held by kworker/u8:1/66: [ 155.440119] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 155.442047] #1: ffff88800d60fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 155.443925] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 155.445653] #3: ffff8880157b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 155.447573] [ 155.447573] stack backtrace: [ 155.448394] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 155.449930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 155.451392] Workqueue: netns cleanup_net [ 155.452179] Call Trace: [ 155.452656] [ 155.453085] dump_stack_lvl+0xca/0x120 [ 155.453870] print_circular_bug+0x47b/0x750 [ 155.454718] check_noncircular+0x2e9/0x3c0 [ 155.455530] ? __pfx_check_noncircular+0x10/0x10 [ 155.456434] ? hlock_class+0x4e/0x130 [ 155.457153] ? mark_lock+0xac/0xed0 [ 155.457861] ? srso_return_thunk+0x5/0x5f [ 155.458703] ? timerqueue_del+0x83/0x150 [ 155.459490] ? lockdep_lock+0xba/0x1b0 [ 155.460278] ? __pfx_lockdep_lock+0x10/0x10 [ 155.461174] __lock_acquire+0x29fd/0x4580 [ 155.462038] ? __pfx___lock_acquire+0x10/0x10 [ 155.463009] ? lock_release+0x20f/0x6f0 [ 155.463804] ? __pfx_lock_release+0x10/0x10 [ 155.464648] lock_acquire+0x19b/0x520 [ 155.465398] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 155.466492] ? __pfx_lock_acquire+0x10/0x10 [ 155.467347] ? srso_return_thunk+0x5/0x5f [ 155.468176] ? lock_release+0x20f/0x6f0 [ 155.468954] ? srso_return_thunk+0x5/0x5f [ 155.469783] ? lock_is_held_type+0x9e/0x120 [ 155.470709] ? srso_return_thunk+0x5/0x5f [ 155.471540] __mutex_lock+0x13d/0xb50 [ 155.472301] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 155.473377] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 155.474447] ? srso_return_thunk+0x5/0x5f [ 155.475182] ? synchronize_rcu_expedited+0x38a/0x420 [ 155.476009] ? __pfx___mutex_lock+0x10/0x10 [ 155.476749] ? __pfx_autoremove_wake_function+0x10/0x10 [ 155.477674] ? srso_return_thunk+0x5/0x5f [ 155.478434] ? kasan_quarantine_put+0x84/0x1e0 [ 155.479276] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 155.480020] ? srso_return_thunk+0x5/0x5f [ 155.480758] unregister_netdevice_many_notify+0x1612/0x1c80 [ 155.481661] ? __virt_addr_valid+0x2e8/0x5d0 [ 155.482406] ? __pfx_lock_release+0x10/0x10 [ 155.483161] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 155.484148] ? find_held_lock+0x2c/0x110 [ 155.484869] ? srso_return_thunk+0x5/0x5f [ 155.485597] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 155.486434] ? srso_return_thunk+0x5/0x5f [ 155.487175] ? lock_release+0x20f/0x6f0 [ 155.487857] ? __pfx_lock_release+0x10/0x10 [ 155.488583] ? srso_return_thunk+0x5/0x5f [ 155.489307] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 155.490164] ? srso_return_thunk+0x5/0x5f [ 155.490889] unregister_netdevice_queue+0x224/0x2e0 [ 155.491701] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 155.492583] ? up_write+0x195/0x520 [ 155.493222] _cfg80211_unregister_wdev+0x57b/0x700 [ 155.494034] ? srso_return_thunk+0x5/0x5f [ 155.494777] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 155.495588] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 155.496471] ? srso_return_thunk+0x5/0x5f [ 155.497178] ? srso_return_thunk+0x5/0x5f [ 155.497887] ? synchronize_rcu+0x1ff/0x260 [ 155.498594] ieee80211_unregister_hw+0x55/0x3a0 [ 155.499361] hwsim_exit_net+0x3a0/0x730 [ 155.500027] ? __pfx_hwsim_exit_net+0x10/0x10 [ 155.500763] ? srso_return_thunk+0x5/0x5f [ 155.501476] ? netdev_run_todo+0x788/0x1040 [ 155.502190] ? srso_return_thunk+0x5/0x5f [ 155.502914] ? __pfx_hwsim_exit_net+0x10/0x10 [ 155.503656] ops_exit_list+0xb3/0x180 [ 155.504301] cleanup_net+0x546/0xad0 [ 155.504932] ? __pfx_cleanup_net+0x10/0x10 [ 155.505645] process_one_work+0x8ee/0x1a10 [ 155.506386] ? __pfx_lock_acquire+0x10/0x10 [ 155.507112] ? __pfx_process_one_work+0x10/0x10 [ 155.507908] ? srso_return_thunk+0x5/0x5f [ 155.508617] ? move_linked_works+0x172/0x270 [ 155.509353] ? srso_return_thunk+0x5/0x5f [ 155.510065] ? assign_work+0x196/0x240 [ 155.510749] worker_thread+0x674/0xe70 [ 155.511432] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 155.512290] ? srso_return_thunk+0x5/0x5f [ 155.513000] ? __pfx_worker_thread+0x10/0x10 [ 155.513760] kthread+0x3ab/0x720 [ 155.514358] ? __pfx_kthread+0x10/0x10 [ 155.515037] ? srso_return_thunk+0x5/0x5f [ 155.515746] ? finish_task_switch.isra.0+0x206/0x840 [ 155.516582] ? __pfx_kthread+0x10/0x10 [ 155.517255] ret_from_fork+0x48/0x80 [ 155.517863] ? __pfx_kthread+0x10/0x10 [ 155.518546] ret_from_fork_asm+0x1a/0x30 [ 155.519395] [ 157.156543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.157509] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.158691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.162167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.164177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.165162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.356168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.357132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.366114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.366740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.369607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.373084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.376771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.379141] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.382026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.382905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.383687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.383899] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.385752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.386884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.387715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.389701] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.389904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.391875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.392159] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.393744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.399085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.400644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.401541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.410308] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.410645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.414702] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.415879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.417478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.424681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.435839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.459768] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.474522] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.479512] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.479807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.488592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.500694] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.507851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.512846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.521543] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.580810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.591690] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.594525] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.195503] Bluetooth: hci0: command tx timeout [ 159.450457] Bluetooth: hci1: command tx timeout [ 159.451025] Bluetooth: hci3: command tx timeout [ 159.514628] Bluetooth: hci2: command tx timeout [ 159.515046] Bluetooth: hci4: command tx timeout [ 159.515087] Bluetooth: hci5: command tx timeout [ 159.578526] Bluetooth: hci6: command tx timeout [ 159.708510] Bluetooth: hci7: command tx timeout [ 161.242539] Bluetooth: hci0: command tx timeout [ 161.499056] Bluetooth: hci3: command tx timeout [ 161.499135] Bluetooth: hci1: command tx timeout [ 161.562509] Bluetooth: hci5: command tx timeout [ 161.562588] Bluetooth: hci4: command tx timeout [ 161.562660] Bluetooth: hci2: command tx timeout [ 161.626517] Bluetooth: hci6: command tx timeout [ 161.756415] Bluetooth: hci7: command tx timeout [ 163.291580] Bluetooth: hci0: command tx timeout [ 163.546478] Bluetooth: hci1: command tx timeout [ 163.546500] Bluetooth: hci3: command tx timeout [ 163.611022] Bluetooth: hci2: command tx timeout [ 163.611136] Bluetooth: hci4: command tx timeout [ 163.611222] Bluetooth: hci5: command tx timeout [ 163.674444] Bluetooth: hci6: command tx timeout [ 163.802440] Bluetooth: hci7: command tx timeout [ 165.338460] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 00:49:19 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800d60ebb8 R8 =0000000000000001 R9 =ffffed1001ac1d67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea026 R15=ffff88800d60eeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd27f6d000 CR3=00000000154e4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000670960000000c00073ef80 XMM02=000000c000904000000000c00077c380 XMM03=000000c00073e5a0000000c0009043c0 XMM04=000000c000905180000000c000904d80 XMM05=000000c000905740000000c000905440 XMM06=000000c0009fa280000000c00042af00 XMM07=000000c000203ac0000000c000069540 XMM08=000000c00050a2c0000000c00050a0c0 XMM09=000000c00050b340000000c00050a8c0 XMM10=000000c00067e180000000c00050bcc0 XMM11=000000c00067ea80000000c00067e5c0 XMM12=000000c00067f000000000c00067edc0 XMM13=000000c00067f5c0000000c00067f500 XMM14=000000c00067fbc0000000c00067f740 XMM15=000000c0003ae310000000c00077cb80 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88807b71a638 RCX=ffffffff81429a4a RDX=1ffff11001ec1a00 RSI=0000000000000008 RDI=ffff88800f60d000 RBP=fbfbfbfbfbfbfbfb RSP=ffff88800be67dc0 R8 =0000000000000000 R9 =ffffed1001ec1a00 R10=ffff88800f60d007 R11=00000000f5257d14 R12=ffff88807b71aff9 R13=ffffffff8864e0e8 R14=ffff88800d601bc0 R15=0000000000000086 RIP=ffffffff84ab0080 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7b909d5ba0 CR3=000000000ce60000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4352a8546ccc35bca346819fae1a69c1 XMM02=00000000000fd498edb2f9687c456aab XMM03=00000000000fd550f61f520134a0d9c2 XMM04=d15d83d4bef3991d00000000000ae988 XMM05=e4595cabee4403f80000000000136940 XMM06=6098c19552daab4900000000001150f0 XMM07=a3797342f9eb3dd900000000000fe6d8 XMM08=f61f520134a0d9c200000000000fd4f8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000