Warning: Permanently added '[localhost]:45640' (ECDSA) to the list of known hosts. 2025/01/17 18:23:30 fuzzer started 2025/01/17 18:23:31 dialing manager at localhost:44245 syzkaller login: [ 69.728022] cgroup: Unknown subsys name 'net' [ 69.821934] cgroup: Unknown subsys name 'cpuset' [ 69.860304] cgroup: Unknown subsys name 'rlimit' [ 75.130677] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 18:23:48 syscalls: 2217 2025/01/17 18:23:48 code coverage: enabled 2025/01/17 18:23:48 comparison tracing: enabled 2025/01/17 18:23:48 extra coverage: enabled 2025/01/17 18:23:48 setuid sandbox: enabled 2025/01/17 18:23:48 namespace sandbox: enabled 2025/01/17 18:23:48 Android sandbox: enabled 2025/01/17 18:23:48 fault injection: enabled 2025/01/17 18:23:48 leak checking: enabled 2025/01/17 18:23:48 net packet injection: enabled 2025/01/17 18:23:48 net device setup: enabled 2025/01/17 18:23:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 18:23:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 18:23:48 USB emulation: enabled 2025/01/17 18:23:48 hci packet injection: enabled 2025/01/17 18:23:48 wifi device emulation: enabled 2025/01/17 18:23:48 802.15.4 emulation: enabled 2025/01/17 18:23:48 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 18:23:48 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 18:23:51 starting 8 fuzzer processes 18:23:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:23:51 executing program 2: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) 18:23:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 18:23:51 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) iopl(0x3) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) 18:23:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 90.014976] audit: type=1400 audit(1737138231.502:7): avc: denied { execmem } for pid=270 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:23:51 executing program 5: r0 = epoll_create(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xe800201c}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)={0x14, 0x0, 0xa, 0x101}, 0x14}}, 0x0) 18:23:51 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x12, &(0x7f00000002c0)="26d81d84", 0x4) 18:23:51 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x39d, 0x2) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000200)='B', 0x1}], 0x1) [ 91.500143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.505777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.513936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.519992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.526968] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.538711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.576668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.581936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.587774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.598047] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.606072] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.610624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.759746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.764733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.768707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.779536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.785671] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.788029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.828630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.848109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.851902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.865638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.870855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.878953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.885250] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.898892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.902568] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.906211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.914015] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.919506] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.923972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.924595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.925470] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.929686] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.933474] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.937716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.946336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.949104] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.955757] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.956667] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.982216] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.982362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.001934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.012605] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.016499] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.028096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.054477] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.062471] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.579095] Bluetooth: hci0: command tx timeout [ 93.642385] Bluetooth: hci1: command tx timeout [ 93.898467] Bluetooth: hci2: command tx timeout [ 94.026497] Bluetooth: hci4: command tx timeout [ 94.026549] Bluetooth: hci3: command tx timeout [ 94.090374] Bluetooth: hci6: command tx timeout [ 94.090395] Bluetooth: hci5: command tx timeout [ 94.154418] Bluetooth: hci7: command tx timeout [ 95.626761] Bluetooth: hci0: command tx timeout [ 95.693282] Bluetooth: hci1: command tx timeout [ 95.946406] Bluetooth: hci2: command tx timeout [ 96.074378] Bluetooth: hci4: command tx timeout [ 96.074397] Bluetooth: hci3: command tx timeout [ 96.140348] Bluetooth: hci6: command tx timeout [ 96.140446] Bluetooth: hci5: command tx timeout [ 96.203419] Bluetooth: hci7: command tx timeout [ 97.674474] Bluetooth: hci0: command tx timeout [ 97.738600] Bluetooth: hci1: command tx timeout [ 97.994538] Bluetooth: hci2: command tx timeout [ 98.122406] Bluetooth: hci3: command tx timeout [ 98.122591] Bluetooth: hci4: command tx timeout [ 98.186448] Bluetooth: hci5: command tx timeout [ 98.186536] Bluetooth: hci6: command tx timeout [ 98.250360] Bluetooth: hci7: command tx timeout [ 99.723380] Bluetooth: hci0: command tx timeout [ 99.787534] Bluetooth: hci1: command tx timeout [ 100.043305] Bluetooth: hci2: command tx timeout [ 100.170420] Bluetooth: hci4: command tx timeout [ 100.170439] Bluetooth: hci3: command tx timeout [ 100.234432] Bluetooth: hci6: command tx timeout [ 100.234449] Bluetooth: hci5: command tx timeout [ 100.300420] Bluetooth: hci7: command tx timeout [ 153.874994] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.877693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.880038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.884498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.887839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.888630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.952758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.957533] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.968793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.982534] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.988854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.991607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.022224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.023081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.025851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.027951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.032090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.035741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.038042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.041444] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.043891] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.047117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.050154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.052945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.053604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.053874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.055305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.063444] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.066184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.069732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.086367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.088085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.091910] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.092187] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.093938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.094199] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.376912] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.400529] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.409433] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.434010] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.457819] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.480884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.999042] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.005746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.017670] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.054970] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.062508] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.064682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.915432] Bluetooth: hci0: command tx timeout [ 156.042434] Bluetooth: hci1: command tx timeout [ 156.106829] Bluetooth: hci4: command tx timeout [ 156.170510] Bluetooth: hci3: command tx timeout [ 156.170537] Bluetooth: hci2: command tx timeout [ 156.171482] Bluetooth: hci5: command tx timeout [ 156.747461] Bluetooth: hci6: command tx timeout [ 157.195368] Bluetooth: hci7: command tx timeout [ 157.962819] Bluetooth: hci0: command tx timeout [ 158.092317] Bluetooth: hci1: command tx timeout [ 158.155746] Bluetooth: hci4: command tx timeout [ 158.218348] Bluetooth: hci2: command tx timeout [ 158.218442] Bluetooth: hci5: command tx timeout [ 158.218536] Bluetooth: hci3: command tx timeout [ 158.794324] Bluetooth: hci6: command tx timeout [ 159.242445] Bluetooth: hci7: command tx timeout [ 160.011335] Bluetooth: hci0: command tx timeout [ 160.138419] Bluetooth: hci1: command tx timeout [ 160.202894] Bluetooth: hci4: command tx timeout [ 160.268283] Bluetooth: hci3: command tx timeout [ 160.268371] Bluetooth: hci5: command tx timeout [ 160.268458] Bluetooth: hci2: command tx timeout [ 160.842330] Bluetooth: hci6: command tx timeout [ 161.292669] Bluetooth: hci7: command tx timeout [ 162.059393] Bluetooth: hci0: command tx timeout [ 162.186596] Bluetooth: hci1: command tx timeout [ 162.250345] Bluetooth: hci4: command tx timeout [ 162.315282] Bluetooth: hci2: command tx timeout [ 162.315370] Bluetooth: hci5: command tx timeout [ 162.315457] Bluetooth: hci3: command tx timeout [ 162.891316] Bluetooth: hci6: command tx timeout [ 163.339379] Bluetooth: hci7: command tx timeout [ 211.611564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.611685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.903515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.903598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.718273] [ 213.718523] ====================================================== [ 213.719126] WARNING: possible circular locking dependency detected [ 213.719722] 6.13.0-rc7-next-20250117 #1 Not tainted [ 213.720204] ------------------------------------------------------ [ 213.721647] kworker/u8:1/65 is trying to acquire lock: [ 213.722743] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.724720] [ 213.724720] but task is already holding lock: [ 213.726176] ffff8880381c0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 213.727933] [ 213.727933] which lock already depends on the new lock. [ 213.727933] [ 213.729600] [ 213.729600] the existing dependency chain (in reverse order) is: [ 213.730289] [ 213.730289] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 213.730946] __mutex_lock+0x13d/0xb50 [ 213.731410] wiphy_register+0x1b2e/0x25d0 [ 213.731908] ieee80211_register_hw+0x23a4/0x3d60 [ 213.732433] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 213.732989] init_mac80211_hwsim+0x389/0x870 [ 213.733505] do_one_initcall+0xf9/0x640 [ 213.733990] kernel_init_freeable+0x53d/0x7a0 [ 213.734508] kernel_init+0x1e/0x2d0 [ 213.734928] ret_from_fork+0x48/0x80 [ 213.735367] ret_from_fork_asm+0x1a/0x30 [ 213.735851] [ 213.735851] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 213.736458] __lock_acquire+0x29fd/0x4580 [ 213.736945] lock_acquire+0x19b/0x520 [ 213.737386] __mutex_lock+0x13d/0xb50 [ 213.737842] unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.738447] unregister_netdevice_queue+0x224/0x2e0 [ 213.738994] _cfg80211_unregister_wdev+0x57b/0x700 [ 213.739556] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 213.740110] ieee80211_unregister_hw+0x55/0x3a0 [ 213.740630] hwsim_exit_net+0x3a0/0x730 [ 213.741085] ops_exit_list+0xb3/0x180 [ 213.741519] cleanup_net+0x546/0xad0 [ 213.741964] process_one_work+0x8ee/0x1a10 [ 213.742461] worker_thread+0x674/0xe70 [ 213.742932] kthread+0x3ab/0x720 [ 213.743362] ret_from_fork+0x48/0x80 [ 213.743803] ret_from_fork_asm+0x1a/0x30 [ 213.744292] [ 213.744292] other info that might help us debug this: [ 213.744292] [ 213.745042] Possible unsafe locking scenario: [ 213.745042] [ 213.745608] CPU0 CPU1 [ 213.746064] ---- ---- [ 213.746518] lock(&rdev->wiphy.mtx); [ 213.746940] lock(rtnl_mutex); [ 213.747531] lock(&rdev->wiphy.mtx); [ 213.748172] lock(rtnl_mutex); [ 213.748523] [ 213.748523] *** DEADLOCK *** [ 213.748523] [ 213.749114] 4 locks held by kworker/u8:1/65: [ 213.749546] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 213.750581] #1: ffff88800ec4fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 213.751564] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 213.752504] #3: ffff8880381c0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 213.753553] [ 213.753553] stack backtrace: [ 213.754002] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 213.754817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 213.755621] Workqueue: netns cleanup_net [ 213.756043] Call Trace: [ 213.756298] [ 213.756524] dump_stack_lvl+0xca/0x120 [ 213.756959] print_circular_bug+0x47b/0x750 [ 213.757409] check_noncircular+0x2e9/0x3c0 [ 213.757851] ? __pfx_check_noncircular+0x10/0x10 [ 213.758341] ? hlock_class+0x4e/0x130 [ 213.758734] ? mark_lock+0xac/0xed0 [ 213.759109] ? srso_return_thunk+0x5/0x5f [ 213.759547] ? sched_clock+0x37/0x60 [ 213.759960] ? lockdep_lock+0xba/0x1b0 [ 213.760377] ? __pfx_lockdep_lock+0x10/0x10 [ 213.760839] __lock_acquire+0x29fd/0x4580 [ 213.761271] ? __pfx___lock_acquire+0x10/0x10 [ 213.761751] ? lock_release+0x20f/0x6f0 [ 213.762169] ? __pfx_lock_release+0x10/0x10 [ 213.762624] lock_acquire+0x19b/0x520 [ 213.763026] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.763628] ? __pfx_lock_acquire+0x10/0x10 [ 213.764072] ? srso_return_thunk+0x5/0x5f [ 213.764514] ? lock_release+0x20f/0x6f0 [ 213.764923] ? srso_return_thunk+0x5/0x5f [ 213.765356] ? lock_is_held_type+0x9e/0x120 [ 213.765822] ? srso_return_thunk+0x5/0x5f [ 213.766266] __mutex_lock+0x13d/0xb50 [ 213.766673] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.767278] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.767868] ? srso_return_thunk+0x5/0x5f [ 213.768312] ? synchronize_rcu_expedited+0x38a/0x420 [ 213.768835] ? __pfx___mutex_lock+0x10/0x10 [ 213.769396] ? __pfx_autoremove_wake_function+0x10/0x10 [ 213.770058] ? srso_return_thunk+0x5/0x5f [ 213.770594] ? kasan_quarantine_put+0x84/0x1e0 [ 213.771197] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 213.771721] ? srso_return_thunk+0x5/0x5f [ 213.772163] unregister_netdevice_many_notify+0x1612/0x1c80 [ 213.772727] ? __virt_addr_valid+0x2e8/0x5d0 [ 213.773183] ? __pfx_lock_release+0x10/0x10 [ 213.773621] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 213.774210] ? find_held_lock+0x2c/0x110 [ 213.774654] ? srso_return_thunk+0x5/0x5f [ 213.775101] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 213.775628] ? srso_return_thunk+0x5/0x5f [ 213.776066] ? lock_release+0x20f/0x6f0 [ 213.776479] ? __pfx_lock_release+0x10/0x10 [ 213.776927] ? srso_return_thunk+0x5/0x5f [ 213.777372] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 213.777910] ? srso_return_thunk+0x5/0x5f [ 213.778355] unregister_netdevice_queue+0x224/0x2e0 [ 213.778870] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 213.779431] ? up_write+0x195/0x520 [ 213.779835] _cfg80211_unregister_wdev+0x57b/0x700 [ 213.780345] ? srso_return_thunk+0x5/0x5f [ 213.780791] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 213.781295] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 213.781860] ? srso_return_thunk+0x5/0x5f [ 213.782301] ? srso_return_thunk+0x5/0x5f [ 213.782749] ? synchronize_rcu+0x1ff/0x260 [ 213.783183] ieee80211_unregister_hw+0x55/0x3a0 [ 213.783676] hwsim_exit_net+0x3a0/0x730 [ 213.784088] ? __pfx_hwsim_exit_net+0x10/0x10 [ 213.784543] ? srso_return_thunk+0x5/0x5f [ 213.784989] ? netdev_run_todo+0x788/0x1040 [ 213.785436] ? __pfx_hwsim_exit_net+0x10/0x10 [ 213.785901] ops_exit_list+0xb3/0x180 [ 213.786295] cleanup_net+0x546/0xad0 [ 213.786695] ? __pfx_cleanup_net+0x10/0x10 [ 213.787142] process_one_work+0x8ee/0x1a10 [ 213.787631] ? __pfx_lock_acquire+0x10/0x10 [ 213.788077] ? __pfx_process_one_work+0x10/0x10 [ 213.788570] ? srso_return_thunk+0x5/0x5f [ 213.789011] ? move_linked_works+0x172/0x270 [ 213.789488] ? srso_return_thunk+0x5/0x5f [ 213.789920] ? assign_work+0x196/0x240 [ 213.790346] worker_thread+0x674/0xe70 [ 213.790778] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 213.791327] ? srso_return_thunk+0x5/0x5f [ 213.791778] ? __pfx_worker_thread+0x10/0x10 [ 213.792251] kthread+0x3ab/0x720 [ 213.792629] ? __pfx_kthread+0x10/0x10 [ 213.793041] ? srso_return_thunk+0x5/0x5f [ 213.793475] ? finish_task_switch.isra.0+0x206/0x840 [ 213.793994] ? __pfx_kthread+0x10/0x10 [ 213.794405] ret_from_fork+0x48/0x80 [ 213.794784] ? __pfx_kthread+0x10/0x10 [ 213.795195] ret_from_fork_asm+0x1a/0x30 [ 213.795656] [ 215.960340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.965645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.968301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.970786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.972881] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.974471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.082300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.085118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.086595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.089900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.091935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.093639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.210011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.216641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.223517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.229201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.231502] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.234151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.235430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.241621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.245586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.263619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.274918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.289060] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.301661] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.301936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.310628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.336573] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.340525] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.346182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.347149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.350756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.352847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.354464] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.379472] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.380556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.422539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.425719] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.426693] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.431343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.435471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.485540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.490993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.500688] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.501892] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.504150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.508431] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.513356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.994311] Bluetooth: hci0: command tx timeout [ 218.123413] Bluetooth: hci1: command tx timeout [ 218.314314] Bluetooth: hci2: command tx timeout [ 218.378297] Bluetooth: hci5: command tx timeout [ 218.378368] Bluetooth: hci3: command tx timeout [ 218.442304] Bluetooth: hci4: command tx timeout [ 218.570281] Bluetooth: hci6: command tx timeout [ 218.764255] Bluetooth: hci7: command tx timeout [ 220.044347] Bluetooth: hci0: command tx timeout [ 220.171348] Bluetooth: hci1: command tx timeout [ 220.362327] Bluetooth: hci2: command tx timeout [ 220.429263] Bluetooth: hci3: command tx timeout [ 220.429285] Bluetooth: hci5: command tx timeout [ 220.490315] Bluetooth: hci4: command tx timeout [ 220.618432] Bluetooth: hci6: command tx timeout [ 220.810276] Bluetooth: hci7: command tx timeout [ 222.091274] Bluetooth: hci0: command tx timeout [ 222.218287] Bluetooth: hci1: command tx timeout [ 222.410440] Bluetooth: hci2: command tx timeout [ 222.474879] Bluetooth: hci3: command tx timeout [ 222.475276] Bluetooth: hci5: command tx timeout [ 222.538852] Bluetooth: hci4: command tx timeout [ 222.668279] Bluetooth: hci6: command tx timeout [ 222.858522] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:25:55 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800ec4ebb8 R8 =0000000000000001 R9 =ffffed1001d89d67 R10=0000000000000032 R11=3a6b636f6c206762 R12=0000000000000032 R13=0000000000000001 R14=ffff888008fea009 R15=ffff88800ec4eeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f56c16f2260 CR3=000000000c6dc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffea000096e200 RCX=ffffffff81998b01 RDX=ffff888036e4d340 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000046 RSP=ffff88803713f660 R8 =0000000000000000 R9 =fffff9400012dc3e R10=0000000000000001 R11=00000000c9b9bd85 R12=0000000000000001 R13=00007fc0bedab000 R14=ffff88803713fad8 R15=ffff888032e47d58 RIP=ffffffff81998b01 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f259d4d96f4 CR3=000000000b6ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000417165fb80000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000