Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:3923' (ECDSA) to the list of known hosts. 2025/01/18 07:44:19 fuzzer started 2025/01/18 07:44:20 dialing manager at localhost:44245 syzkaller login: [ 63.447340] cgroup: Unknown subsys name 'net' [ 63.546042] cgroup: Unknown subsys name 'cpuset' [ 63.577009] cgroup: Unknown subsys name 'rlimit' [ 70.532298] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 82.179611] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 07:44:39 syscalls: 2217 2025/01/18 07:44:39 code coverage: enabled 2025/01/18 07:44:39 comparison tracing: enabled 2025/01/18 07:44:39 extra coverage: enabled 2025/01/18 07:44:39 setuid sandbox: enabled 2025/01/18 07:44:39 namespace sandbox: enabled 2025/01/18 07:44:39 Android sandbox: enabled 2025/01/18 07:44:39 fault injection: enabled 2025/01/18 07:44:39 leak checking: enabled 2025/01/18 07:44:39 net packet injection: enabled 2025/01/18 07:44:39 net device setup: enabled 2025/01/18 07:44:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 07:44:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 07:44:39 USB emulation: enabled 2025/01/18 07:44:39 hci packet injection: enabled 2025/01/18 07:44:39 wifi device emulation: enabled 2025/01/18 07:44:39 802.15.4 emulation: enabled 2025/01/18 07:44:39 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 07:44:39 fetching corpus: 50, signal 29126/31695 (executing program) 2025/01/18 07:44:39 fetching corpus: 100, signal 40069/43116 (executing program) 2025/01/18 07:44:40 fetching corpus: 150, signal 47372/50685 (executing program) 2025/01/18 07:44:40 fetching corpus: 200, signal 56562/59591 (executing program) 2025/01/18 07:44:40 fetching corpus: 250, signal 61779/64665 (executing program) 2025/01/18 07:44:40 fetching corpus: 300, signal 67030/69439 (executing program) 2025/01/18 07:44:40 fetching corpus: 350, signal 70051/72218 (executing program) 2025/01/18 07:44:41 fetching corpus: 400, signal 73456/75135 (executing program) 2025/01/18 07:44:41 fetching corpus: 450, signal 75735/77014 (executing program) 2025/01/18 07:44:41 fetching corpus: 500, signal 78337/79021 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79613 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79660 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79714 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79758 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79799 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79844 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79892 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79937 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/79999 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80041 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80080 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80132 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80181 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80220 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80270 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80316 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80366 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80412 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80460 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80502 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80542 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80603 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80639 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80701 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80756 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80806 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80855 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80896 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80944 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80964 (executing program) 2025/01/18 07:44:41 fetching corpus: 529, signal 79062/80964 (executing program) 2025/01/18 07:44:44 starting 8 fuzzer processes 07:44:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) 07:44:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1b030000000001000200010000000800"], 0x1c}}, 0x0) 07:44:44 executing program 2: ioperm(0x0, 0x6d1f, 0x8) sched_getscheduler(0x0) 07:44:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5601, 0x0) [ 88.090088] audit: type=1400 audit(1737186284.953:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:44:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:44:44 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000840)={0x10, 0x14, 0x1}, 0x10}], 0x1}, 0x0) 07:44:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmdt(0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_LOCK(0x0, 0xb) 07:44:45 executing program 6: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) [ 89.386497] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.388909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.391581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.397411] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.400637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.402580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.659526] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.668485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.676104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.722862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.727889] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.733461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.737505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.737855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.744381] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.759464] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.764435] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.765426] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.771346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.784355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.789469] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.802295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.824279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.826403] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.830845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.832151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.832625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.833663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.836581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.837853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.840358] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.844406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.846648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.848773] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.850826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.857763] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.860715] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.863812] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.865834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.866564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.868431] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.871674] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.874312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.928360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.937765] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.972126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.986333] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.988797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.471613] Bluetooth: hci0: command tx timeout [ 91.919094] Bluetooth: hci1: command tx timeout [ 91.919397] Bluetooth: hci6: command tx timeout [ 91.919773] Bluetooth: hci5: command tx timeout [ 91.983151] Bluetooth: hci2: command tx timeout [ 91.983333] Bluetooth: hci3: command tx timeout [ 91.983495] Bluetooth: hci4: command tx timeout [ 92.047987] Bluetooth: hci7: command tx timeout [ 93.519148] Bluetooth: hci0: command tx timeout [ 93.967159] Bluetooth: hci1: command tx timeout [ 93.967845] Bluetooth: hci5: command tx timeout [ 93.968713] Bluetooth: hci6: command tx timeout [ 94.031133] Bluetooth: hci4: command tx timeout [ 94.031231] Bluetooth: hci3: command tx timeout [ 94.031345] Bluetooth: hci2: command tx timeout [ 94.095104] Bluetooth: hci7: command tx timeout [ 95.567005] Bluetooth: hci0: command tx timeout [ 96.015044] Bluetooth: hci1: command tx timeout [ 96.015646] Bluetooth: hci6: command tx timeout [ 96.015731] Bluetooth: hci5: command tx timeout [ 96.079245] Bluetooth: hci4: command tx timeout [ 96.079791] Bluetooth: hci2: command tx timeout [ 96.080792] Bluetooth: hci3: command tx timeout [ 96.145061] Bluetooth: hci7: command tx timeout [ 97.615229] Bluetooth: hci0: command tx timeout [ 98.063036] Bluetooth: hci1: command tx timeout [ 98.063634] Bluetooth: hci6: command tx timeout [ 98.064246] Bluetooth: hci5: command tx timeout [ 98.127052] Bluetooth: hci3: command tx timeout [ 98.128209] Bluetooth: hci2: command tx timeout [ 98.128842] Bluetooth: hci4: command tx timeout [ 98.191449] Bluetooth: hci7: command tx timeout [ 148.045244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.045386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.452986] [ 149.453234] ====================================================== [ 149.453829] WARNING: possible circular locking dependency detected [ 149.454426] 6.13.0-rc7-next-20250117 #1 Not tainted [ 149.454911] ------------------------------------------------------ [ 149.456531] kworker/u8:0/11 is trying to acquire lock: [ 149.457922] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.460240] [ 149.460240] but task is already holding lock: [ 149.462252] ffff88803a690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 149.464313] [ 149.464313] which lock already depends on the new lock. [ 149.464313] [ 149.466301] [ 149.466301] the existing dependency chain (in reverse order) is: [ 149.467849] [ 149.467849] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 149.468769] __mutex_lock+0x13d/0xb50 [ 149.469402] wiphy_register+0x1b2e/0x25d0 [ 149.470073] ieee80211_register_hw+0x23a4/0x3d60 [ 149.470809] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 149.471583] init_mac80211_hwsim+0x389/0x870 [ 149.472297] do_one_initcall+0xf9/0x640 [ 149.472961] kernel_init_freeable+0x53d/0x7a0 [ 149.473679] kernel_init+0x1e/0x2d0 [ 149.474255] ret_from_fork+0x48/0x80 [ 149.474843] ret_from_fork_asm+0x1a/0x30 [ 149.475524] [ 149.475524] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 149.476364] __lock_acquire+0x29fd/0x4580 [ 149.477022] lock_acquire+0x19b/0x520 [ 149.477632] __mutex_lock+0x13d/0xb50 [ 149.478253] unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.479117] unregister_netdevice_queue+0x224/0x2e0 [ 149.479899] _cfg80211_unregister_wdev+0x57b/0x700 [ 149.480672] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 149.481443] ieee80211_unregister_hw+0x55/0x3a0 [ 149.482158] hwsim_exit_net+0x3a0/0x730 [ 149.482788] ops_exit_list+0xb3/0x180 [ 149.483408] cleanup_net+0x546/0xad0 [ 149.484009] process_one_work+0x8ee/0x1a10 [ 149.484693] worker_thread+0x674/0xe70 [ 149.485338] kthread+0x3ab/0x720 [ 149.485917] ret_from_fork+0x48/0x80 [ 149.486500] ret_from_fork_asm+0x1a/0x30 [ 149.487181] [ 149.487181] other info that might help us debug this: [ 149.487181] [ 149.488199] Possible unsafe locking scenario: [ 149.488199] [ 149.488979] CPU0 CPU1 [ 149.489598] ---- ---- [ 149.490224] lock(&rdev->wiphy.mtx); [ 149.490785] lock(rtnl_mutex); [ 149.491596] lock(&rdev->wiphy.mtx); [ 149.492443] lock(rtnl_mutex); [ 149.492948] [ 149.492948] *** DEADLOCK *** [ 149.492948] [ 149.493739] 4 locks held by kworker/u8:0/11: [ 149.494357] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 149.495656] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 149.496635] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 149.497548] #3: ffff88803a690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 149.498577] [ 149.498577] stack backtrace: [ 149.499022] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 149.499834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 149.500609] Workqueue: netns cleanup_net [ 149.501025] Call Trace: [ 149.501279] [ 149.501506] dump_stack_lvl+0xca/0x120 [ 149.501919] print_circular_bug+0x47b/0x750 [ 149.502363] check_noncircular+0x2e9/0x3c0 [ 149.502795] ? srso_return_thunk+0x5/0x5f [ 149.503244] ? __pfx_check_noncircular+0x10/0x10 [ 149.503738] ? hlock_class+0x4e/0x130 [ 149.504125] ? mark_lock+0xac/0xed0 [ 149.504515] ? srso_return_thunk+0x5/0x5f [ 149.504949] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 149.505412] ? lockdep_lock+0xba/0x1b0 [ 149.505827] ? __pfx_lockdep_lock+0x10/0x10 [ 149.506292] __lock_acquire+0x29fd/0x4580 [ 149.506730] ? __pfx___lock_acquire+0x10/0x10 [ 149.507192] ? lock_release+0x20f/0x6f0 [ 149.507610] ? __pfx_lock_release+0x10/0x10 [ 149.508057] lock_acquire+0x19b/0x520 [ 149.508452] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.509036] ? __pfx_lock_acquire+0x10/0x10 [ 149.509461] ? srso_return_thunk+0x5/0x5f [ 149.509902] ? lock_release+0x20f/0x6f0 [ 149.510310] ? srso_return_thunk+0x5/0x5f [ 149.510745] ? lock_is_held_type+0x9e/0x120 [ 149.511210] ? srso_return_thunk+0x5/0x5f [ 149.511647] __mutex_lock+0x13d/0xb50 [ 149.512051] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.512633] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.513217] ? srso_return_thunk+0x5/0x5f [ 149.513650] ? synchronize_rcu_expedited+0x38a/0x420 [ 149.514164] ? __pfx___mutex_lock+0x10/0x10 [ 149.514613] ? __pfx_autoremove_wake_function+0x10/0x10 [ 149.515164] ? srso_return_thunk+0x5/0x5f [ 149.515606] ? kasan_quarantine_put+0x84/0x1e0 [ 149.516091] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 149.516547] ? srso_return_thunk+0x5/0x5f [ 149.516997] unregister_netdevice_many_notify+0x1612/0x1c80 [ 149.517570] ? __virt_addr_valid+0x2e8/0x5d0 [ 149.518037] ? __pfx_lock_release+0x10/0x10 [ 149.518478] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 149.519064] ? find_held_lock+0x2c/0x110 [ 149.519502] ? srso_return_thunk+0x5/0x5f [ 149.519940] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 149.520447] ? srso_return_thunk+0x5/0x5f [ 149.520879] ? lock_release+0x20f/0x6f0 [ 149.521289] ? __pfx_lock_release+0x10/0x10 [ 149.521728] ? srso_return_thunk+0x5/0x5f [ 149.522162] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 149.522690] ? srso_return_thunk+0x5/0x5f [ 149.523133] unregister_netdevice_queue+0x224/0x2e0 [ 149.523641] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 149.524179] ? up_write+0x195/0x520 [ 149.524569] _cfg80211_unregister_wdev+0x57b/0x700 [ 149.525071] ? srso_return_thunk+0x5/0x5f [ 149.525521] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 149.526025] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 149.526572] ? srso_return_thunk+0x5/0x5f [ 149.527003] ? srso_return_thunk+0x5/0x5f [ 149.527445] ? synchronize_rcu+0x1ff/0x260 [ 149.527873] ieee80211_unregister_hw+0x55/0x3a0 [ 149.528346] hwsim_exit_net+0x3a0/0x730 [ 149.528755] ? __pfx_hwsim_exit_net+0x10/0x10 [ 149.529216] ? srso_return_thunk+0x5/0x5f [ 149.529655] ? netdev_run_todo+0x788/0x1040 [ 149.530101] ? __pfx_hwsim_exit_net+0x10/0x10 [ 149.530561] ops_exit_list+0xb3/0x180 [ 149.530963] cleanup_net+0x546/0xad0 [ 149.531366] ? __pfx_cleanup_net+0x10/0x10 [ 149.531807] process_one_work+0x8ee/0x1a10 [ 149.532265] ? __pfx_lock_acquire+0x10/0x10 [ 149.532705] ? __pfx_process_one_work+0x10/0x10 [ 149.533194] ? srso_return_thunk+0x5/0x5f [ 149.533636] ? move_linked_works+0x172/0x270 [ 149.534086] ? srso_return_thunk+0x5/0x5f [ 149.534519] ? assign_work+0x196/0x240 [ 149.534932] worker_thread+0x674/0xe70 [ 149.535356] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 149.535888] ? __pfx_worker_thread+0x10/0x10 [ 149.536356] kthread+0x3ab/0x720 [ 149.536726] ? __pfx_kthread+0x10/0x10 [ 149.537136] ? srso_return_thunk+0x5/0x5f [ 149.537573] ? finish_task_switch.isra.0+0x206/0x840 [ 149.538097] ? __pfx_kthread+0x10/0x10 [ 149.538510] ret_from_fork+0x48/0x80 [ 149.538889] ? __pfx_kthread+0x10/0x10 [ 149.539307] ret_from_fork_asm+0x1a/0x30 [ 149.539748] [ 151.662107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.664145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.668634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.673220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.675880] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.677821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.686643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.692016] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.693841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.697295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.701820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.704335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.717697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.726036] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.727428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.736612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.739150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.751993] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.753684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.754041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.756094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.762665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.766794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.774505] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.784476] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.790639] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.800638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.805343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.805749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.806112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.810029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.813496] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.813897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.819352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.819646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.820252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.829155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.829822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.835565] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.835872] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.848699] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.849108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.851676] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.852311] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.871374] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.873480] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.874181] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.878551] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.743022] Bluetooth: hci1: command tx timeout [ 153.807986] Bluetooth: hci0: command tx timeout [ 153.808070] Bluetooth: hci2: command tx timeout [ 153.870993] Bluetooth: hci5: command tx timeout [ 153.871079] Bluetooth: hci3: command tx timeout [ 153.935348] Bluetooth: hci7: command tx timeout [ 153.935442] Bluetooth: hci6: command tx timeout [ 153.935505] Bluetooth: hci4: command tx timeout [ 155.792969] Bluetooth: hci1: command tx timeout [ 155.856065] Bluetooth: hci0: command tx timeout [ 155.856152] Bluetooth: hci2: command tx timeout [ 155.920024] Bluetooth: hci5: command tx timeout [ 155.920097] Bluetooth: hci3: command tx timeout [ 155.984524] Bluetooth: hci7: command tx timeout [ 155.984599] Bluetooth: hci4: command tx timeout [ 155.984643] Bluetooth: hci6: command tx timeout [ 157.839101] Bluetooth: hci1: command tx timeout [ 157.902989] Bluetooth: hci0: command tx timeout [ 157.903062] Bluetooth: hci2: command tx timeout [ 157.967578] Bluetooth: hci5: command tx timeout [ 157.967649] Bluetooth: hci3: command tx timeout [ 158.031559] Bluetooth: hci7: command tx timeout [ 158.031631] Bluetooth: hci4: command tx timeout [ 158.031676] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:45:46 Registers: info registers vcpu 0 RAX=ffff88800bc9b780 RBX=ffff88807a75bb20 RCX=ffffffff81429a4a RDX=1ffff11001743500 RSI=0000000000000008 RDI=ffff88800ba1a800 RBP=0000000000000000 RSP=ffff88800bfcfdc8 R8 =0000000000000000 R9 =ffffed1001743500 R10=ffff88800ba1a807 R11=ffff88800bc9bc38 R12=ffff88807a75bff9 R13=ffffffff8864d9a8 R14=ffff88800bc9b780 R15=0000000000000086 RIP=ffffffff81ab77e3 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056273341a228 CR3=000000001b5ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000417bff8a80000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000005b R11=7369786520656874 R12=000000000000005b R13=0000000000000001 R14=ffff888008fea001 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c000308000 CR3=000000001b5ee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000042442b9d62f20000 XMM02=00000000000000003fd97ebe3caa105d XMM03=000000c00089ed80000000c000421080 XMM04=000000c000420d80000000c00089e780 XMM05=000000c00089ec00000000c00089e900 XMM06=000000c000421080000000c000420f00 XMM07=000000c00089ef00000000c00089ed80 XMM08=000000c0002eab10000000c000000000 XMM09=000000c000000180000000c0002ead80 XMM10=000000c000300340000000c000773ec0 XMM11=000000c00001e000000000c0000ac180 XMM12=000000c0001aa038000000c00017e400 XMM13=000000c00023c000000000c00004cf00 XMM14=000000c00017e480000000c00004cf60 XMM15=000000c000516000000000c0000d6150