Warning: Permanently added '[localhost]:27654' (ECDSA) to the list of known hosts. 2025/01/18 03:44:20 fuzzer started 2025/01/18 03:44:20 dialing manager at localhost:44245 syzkaller login: [ 61.756300] cgroup: Unknown subsys name 'net' [ 61.872932] cgroup: Unknown subsys name 'cpuset' [ 61.909915] cgroup: Unknown subsys name 'rlimit' [ 68.284864] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 03:44:38 syscalls: 2217 2025/01/18 03:44:38 code coverage: enabled 2025/01/18 03:44:38 comparison tracing: enabled 2025/01/18 03:44:38 extra coverage: enabled 2025/01/18 03:44:38 setuid sandbox: enabled 2025/01/18 03:44:38 namespace sandbox: enabled 2025/01/18 03:44:38 Android sandbox: enabled 2025/01/18 03:44:38 fault injection: enabled 2025/01/18 03:44:38 leak checking: enabled 2025/01/18 03:44:38 net packet injection: enabled 2025/01/18 03:44:38 net device setup: enabled 2025/01/18 03:44:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 03:44:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 03:44:38 USB emulation: enabled 2025/01/18 03:44:38 hci packet injection: enabled 2025/01/18 03:44:38 wifi device emulation: enabled 2025/01/18 03:44:38 802.15.4 emulation: enabled 2025/01/18 03:44:38 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 03:44:39 fetching corpus: 50, signal 27911/30567 (executing program) 2025/01/18 03:44:39 fetching corpus: 100, signal 40597/43641 (executing program) 2025/01/18 03:44:39 fetching corpus: 150, signal 47245/50616 (executing program) 2025/01/18 03:44:39 fetching corpus: 200, signal 53915/57313 (executing program) 2025/01/18 03:44:39 fetching corpus: 250, signal 61964/64788 (executing program) 2025/01/18 03:44:40 fetching corpus: 300, signal 66363/68899 (executing program) 2025/01/18 03:44:40 fetching corpus: 350, signal 71027/72947 (executing program) 2025/01/18 03:44:40 fetching corpus: 400, signal 73462/75073 (executing program) 2025/01/18 03:44:40 fetching corpus: 450, signal 76293/77371 (executing program) 2025/01/18 03:44:40 fetching corpus: 500, signal 77718/78547 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79461 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79508 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79555 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79607 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79664 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79715 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79755 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79793 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79847 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79898 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79941 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/79995 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80031 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80077 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80129 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80188 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80223 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80273 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80316 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80371 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80412 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80457 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80511 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80553 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80597 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80653 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80700 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80744 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80801 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80820 (executing program) 2025/01/18 03:44:41 fetching corpus: 528, signal 78927/80820 (executing program) 2025/01/18 03:44:45 starting 8 fuzzer processes 03:44:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f00000001c0)) 03:44:45 executing program 1: clock_nanosleep(0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 03:44:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000000140)=ANY=[]) 03:44:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46dc7c4", 0x28}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) 03:44:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}}, 0x0) [ 86.231725] audit: type=1400 audit(1737171885.663:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:44:45 executing program 6: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000001c0), 0x20) 03:44:45 executing program 7: syz_emit_ethernet(0x70, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x3a, 0x3a, 0x0, @local, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "a254f7", 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [@dstopts={0x33}], "80b8"}}}}}}}, 0x0) 03:44:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}}}, 0x0) recvfrom(r0, 0x0, 0x34, 0x0, 0x0, 0x0) [ 87.572034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.576039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.579995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.586749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.591568] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.596311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.691242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.699294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.707916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.720727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.724179] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.727056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.768960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.771760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.782674] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.790223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.798561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.803238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.843055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.852001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.858188] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.859676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.871203] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.875997] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.876358] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.877301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.880836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.887394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.887928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.893143] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.895753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.898347] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.902263] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.906262] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.908956] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.913236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.917247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.918731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.932478] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.934455] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.939467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.944243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.950418] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.953156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.968004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.972177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.975293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.982221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.656533] Bluetooth: hci0: command tx timeout [ 89.783981] Bluetooth: hci1: command tx timeout [ 89.848005] Bluetooth: hci2: command tx timeout [ 89.975922] Bluetooth: hci4: command tx timeout [ 89.975975] Bluetooth: hci5: command tx timeout [ 90.039977] Bluetooth: hci6: command tx timeout [ 90.104474] Bluetooth: hci3: command tx timeout [ 90.104525] Bluetooth: hci7: command tx timeout [ 91.704096] Bluetooth: hci0: command tx timeout [ 91.832849] Bluetooth: hci1: command tx timeout [ 91.896089] Bluetooth: hci2: command tx timeout [ 92.024079] Bluetooth: hci4: command tx timeout [ 92.024844] Bluetooth: hci5: command tx timeout [ 92.087873] Bluetooth: hci6: command tx timeout [ 92.151933] Bluetooth: hci3: command tx timeout [ 92.154837] Bluetooth: hci7: command tx timeout [ 93.751900] Bluetooth: hci0: command tx timeout [ 93.880016] Bluetooth: hci1: command tx timeout [ 93.943858] Bluetooth: hci2: command tx timeout [ 94.071885] Bluetooth: hci5: command tx timeout [ 94.072487] Bluetooth: hci4: command tx timeout [ 94.136022] Bluetooth: hci6: command tx timeout [ 94.199975] Bluetooth: hci7: command tx timeout [ 94.200546] Bluetooth: hci3: command tx timeout [ 95.800838] Bluetooth: hci0: command tx timeout [ 95.927867] Bluetooth: hci1: command tx timeout [ 95.991964] Bluetooth: hci2: command tx timeout [ 96.121834] Bluetooth: hci4: command tx timeout [ 96.121932] Bluetooth: hci5: command tx timeout [ 96.186838] Bluetooth: hci6: command tx timeout [ 96.247910] Bluetooth: hci7: command tx timeout [ 96.247938] Bluetooth: hci3: command tx timeout [ 146.248607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.248735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.709770] [ 147.710026] ====================================================== [ 147.710620] WARNING: possible circular locking dependency detected [ 147.711222] 6.13.0-rc7-next-20250117 #1 Not tainted [ 147.711715] ------------------------------------------------------ [ 147.713361] kworker/u8:1/65 is trying to acquire lock: [ 147.714401] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.717055] [ 147.717055] but task is already holding lock: [ 147.718286] ffff88800d1a8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 147.720138] [ 147.720138] which lock already depends on the new lock. [ 147.720138] [ 147.721357] [ 147.721357] the existing dependency chain (in reverse order) is: [ 147.722076] [ 147.722076] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 147.722736] __mutex_lock+0x13d/0xb50 [ 147.723198] wiphy_register+0x1b2e/0x25d0 [ 147.723693] ieee80211_register_hw+0x23a4/0x3d60 [ 147.724238] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 147.724812] init_mac80211_hwsim+0x389/0x870 [ 147.725340] do_one_initcall+0xf9/0x640 [ 147.725823] kernel_init_freeable+0x53d/0x7a0 [ 147.726353] kernel_init+0x1e/0x2d0 [ 147.726787] ret_from_fork+0x48/0x80 [ 147.727216] ret_from_fork_asm+0x1a/0x30 [ 147.727702] [ 147.727702] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 147.728321] __lock_acquire+0x29fd/0x4580 [ 147.728832] lock_acquire+0x19b/0x520 [ 147.729291] __mutex_lock+0x13d/0xb50 [ 147.729746] unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.730380] unregister_netdevice_queue+0x224/0x2e0 [ 147.730935] _cfg80211_unregister_wdev+0x57b/0x700 [ 147.731493] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 147.732046] ieee80211_unregister_hw+0x55/0x3a0 [ 147.732571] hwsim_exit_net+0x3a0/0x730 [ 147.733045] ops_exit_list+0xb3/0x180 [ 147.733501] cleanup_net+0x546/0xad0 [ 147.733950] process_one_work+0x8ee/0x1a10 [ 147.734460] worker_thread+0x674/0xe70 [ 147.734940] kthread+0x3ab/0x720 [ 147.735357] ret_from_fork+0x48/0x80 [ 147.735781] ret_from_fork_asm+0x1a/0x30 [ 147.736273] [ 147.736273] other info that might help us debug this: [ 147.736273] [ 147.737024] Possible unsafe locking scenario: [ 147.737024] [ 147.737600] CPU0 CPU1 [ 147.738044] ---- ---- [ 147.738486] lock(&rdev->wiphy.mtx); [ 147.738889] lock(rtnl_mutex); [ 147.739459] lock(&rdev->wiphy.mtx); [ 147.740076] lock(rtnl_mutex); [ 147.740441] [ 147.740441] *** DEADLOCK *** [ 147.740441] [ 147.741007] 4 locks held by kworker/u8:1/65: [ 147.741447] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 147.742447] #1: ffff88800f2dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 147.743416] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 147.744337] #3: ffff88800d1a8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 147.745367] [ 147.745367] stack backtrace: [ 147.745814] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 147.746630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 147.747404] Workqueue: netns cleanup_net [ 147.747824] Call Trace: [ 147.748077] [ 147.748299] dump_stack_lvl+0xca/0x120 [ 147.748708] print_circular_bug+0x47b/0x750 [ 147.749148] check_noncircular+0x2e9/0x3c0 [ 147.749582] ? __pfx_check_noncircular+0x10/0x10 [ 147.750065] ? hlock_class+0x4e/0x130 [ 147.750443] ? mark_lock+0xac/0xed0 [ 147.750818] ? srso_return_thunk+0x5/0x5f [ 147.751253] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 147.751718] ? lockdep_lock+0xba/0x1b0 [ 147.752140] ? __pfx_lockdep_lock+0x10/0x10 [ 147.752593] __lock_acquire+0x29fd/0x4580 [ 147.753023] ? __pfx___lock_acquire+0x10/0x10 [ 147.753488] ? lock_release+0x20f/0x6f0 [ 147.753896] ? __pfx_lock_release+0x10/0x10 [ 147.754350] lock_acquire+0x19b/0x520 [ 147.754745] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.755339] ? __pfx_lock_acquire+0x10/0x10 [ 147.755773] ? srso_return_thunk+0x5/0x5f [ 147.756203] ? lock_release+0x20f/0x6f0 [ 147.756609] ? srso_return_thunk+0x5/0x5f [ 147.757048] ? lock_is_held_type+0x9e/0x120 [ 147.757508] ? srso_return_thunk+0x5/0x5f [ 147.757947] __mutex_lock+0x13d/0xb50 [ 147.758346] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.758932] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.759517] ? srso_return_thunk+0x5/0x5f [ 147.759959] ? synchronize_rcu_expedited+0x38a/0x420 [ 147.760468] ? __pfx___mutex_lock+0x10/0x10 [ 147.760917] ? __pfx_autoremove_wake_function+0x10/0x10 [ 147.761472] ? srso_return_thunk+0x5/0x5f [ 147.761917] ? kasan_quarantine_put+0x84/0x1e0 [ 147.762405] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 147.762866] ? srso_return_thunk+0x5/0x5f [ 147.763305] unregister_netdevice_many_notify+0x1612/0x1c80 [ 147.763886] ? __virt_addr_valid+0x2e8/0x5d0 [ 147.764353] ? __pfx_lock_release+0x10/0x10 [ 147.764790] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 147.765392] ? find_held_lock+0x2c/0x110 [ 147.765821] ? srso_return_thunk+0x5/0x5f [ 147.766258] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 147.766771] ? srso_return_thunk+0x5/0x5f [ 147.767201] ? lock_release+0x20f/0x6f0 [ 147.767608] ? __pfx_lock_release+0x10/0x10 [ 147.768043] ? srso_return_thunk+0x5/0x5f [ 147.768473] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 147.768997] ? srso_return_thunk+0x5/0x5f [ 147.769444] unregister_netdevice_queue+0x224/0x2e0 [ 147.769940] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 147.770476] ? up_write+0x195/0x520 [ 147.770864] _cfg80211_unregister_wdev+0x57b/0x700 [ 147.771362] ? srso_return_thunk+0x5/0x5f [ 147.771799] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 147.772299] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 147.772838] ? srso_return_thunk+0x5/0x5f [ 147.773276] ? srso_return_thunk+0x5/0x5f [ 147.773708] ? synchronize_rcu+0x1ff/0x260 [ 147.774142] ieee80211_unregister_hw+0x55/0x3a0 [ 147.774614] hwsim_exit_net+0x3a0/0x730 [ 147.775028] ? __pfx_hwsim_exit_net+0x10/0x10 [ 147.775478] ? srso_return_thunk+0x5/0x5f [ 147.775912] ? netdev_run_todo+0x788/0x1040 [ 147.776349] ? __pfx_hwsim_exit_net+0x10/0x10 [ 147.776798] ops_exit_list+0xb3/0x180 [ 147.777196] cleanup_net+0x546/0xad0 [ 147.777606] ? __pfx_cleanup_net+0x10/0x10 [ 147.778051] process_one_work+0x8ee/0x1a10 [ 147.778512] ? __pfx_lock_acquire+0x10/0x10 [ 147.778991] ? __pfx_process_one_work+0x10/0x10 [ 147.779502] ? srso_return_thunk+0x5/0x5f [ 147.779985] ? move_linked_works+0x172/0x270 [ 147.780432] ? srso_return_thunk+0x5/0x5f [ 147.780862] ? assign_work+0x196/0x240 [ 147.781280] worker_thread+0x674/0xe70 [ 147.781696] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 147.782225] ? srso_return_thunk+0x5/0x5f [ 147.782656] ? __pfx_worker_thread+0x10/0x10 [ 147.783126] kthread+0x3ab/0x720 [ 147.783491] ? __pfx_kthread+0x10/0x10 [ 147.783904] ? srso_return_thunk+0x5/0x5f [ 147.784337] ? finish_task_switch.isra.0+0x206/0x840 [ 147.784851] ? __pfx_kthread+0x10/0x10 [ 147.785267] ret_from_fork+0x48/0x80 [ 147.785635] ? __pfx_kthread+0x10/0x10 [ 147.786042] ret_from_fork_asm+0x1a/0x30 [ 147.786482] [ 149.777189] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.779235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.781265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.783249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.786003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.789942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.795222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.797637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.799903] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.802022] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.802051] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.805339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.851610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.853605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.854270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.854558] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.857077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.872091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.883478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.884093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.886137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.888642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.889419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.890252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.899175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.902070] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.902461] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.907973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.908528] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.921271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.921987] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.926169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.928017] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.931537] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.935210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.938309] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.940045] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.946121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.946416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.946696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.952895] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.954932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.965372] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.967799] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.969502] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.971535] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.974238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.976047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.863901] Bluetooth: hci1: command tx timeout [ 151.864004] Bluetooth: hci0: command tx timeout [ 151.927796] Bluetooth: hci3: command tx timeout [ 151.927869] Bluetooth: hci2: command tx timeout [ 151.992808] Bluetooth: hci5: command tx timeout [ 151.992883] Bluetooth: hci6: command tx timeout [ 151.992954] Bluetooth: hci4: command tx timeout [ 152.058800] Bluetooth: hci7: command tx timeout [ 153.911913] Bluetooth: hci0: command tx timeout [ 153.912984] Bluetooth: hci1: command tx timeout [ 153.976106] Bluetooth: hci2: command tx timeout [ 153.976559] Bluetooth: hci3: command tx timeout [ 154.039967] Bluetooth: hci4: command tx timeout [ 154.040694] Bluetooth: hci6: command tx timeout [ 154.041497] Bluetooth: hci5: command tx timeout [ 154.103942] Bluetooth: hci7: command tx timeout [ 155.960231] Bluetooth: hci1: command tx timeout [ 155.960253] Bluetooth: hci0: command tx timeout [ 156.023902] Bluetooth: hci3: command tx timeout [ 156.024016] Bluetooth: hci2: command tx timeout [ 156.087820] Bluetooth: hci5: command tx timeout [ 156.087846] Bluetooth: hci4: command tx timeout [ 156.087879] Bluetooth: hci6: command tx timeout [ 156.152859] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:45:47 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800f2cb780 RCX=ffffffff81429a4a RDX=0000000000000000 RSI=ffffffff814299d3 RDI=ffff88800f2cb7ac RBP=fcfcfcfcfcfc0000 RSP=ffff88800f557db8 R8 =0000000000000000 R9 =ffffed1001e4d400 R10=ffff88800f26a007 R11=0000000000000001 R12=ffff88807c13dff9 R13=ffffffff8864e570 R14=ffff88800f2cb780 R15=0000000000000086 RIP=ffffffff814299ec RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00033b000 CR3=000000000b6b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=8ad2189abdbb529f844d972743ff8497 XMM02=ee7587d5db12e8e300000000000fd188 XMM03=5d38eb214c259f800000000000133da8 XMM04=fdfd00b87e6e1b1700000000000ae988 XMM05=9f165a4fe6c971ad00000000001384e0 XMM06=7c8d2a4f1e787a980000000000138440 XMM07=5d38eb214c259f800000000000133da8 XMM08=ee7587d5db12e8e300000000000fd188 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800f2debb8 R8 =0000000000000001 R9 =ffffed1001e5bd67 R10=000000000000005b R11=6f6c206863696877 R12=000000000000005b R13=0000000000000001 R14=ffff888008fea001 R15=ffff88800f2deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055973e0dcb90 CR3=000000000d7dc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=000063643730006563697665642e3169 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000