Warning: Permanently added '[localhost]:18786' (ECDSA) to the list of known hosts. 2025/01/18 15:49:53 fuzzer started 2025/01/18 15:49:53 dialing manager at localhost:44245 syzkaller login: [ 70.505717] cgroup: Unknown subsys name 'net' [ 70.587499] cgroup: Unknown subsys name 'cpuset' [ 70.626647] cgroup: Unknown subsys name 'rlimit' [ 75.741742] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 15:50:09 syscalls: 2217 2025/01/18 15:50:09 code coverage: enabled 2025/01/18 15:50:09 comparison tracing: enabled 2025/01/18 15:50:09 extra coverage: enabled 2025/01/18 15:50:09 setuid sandbox: enabled 2025/01/18 15:50:09 namespace sandbox: enabled 2025/01/18 15:50:09 Android sandbox: enabled 2025/01/18 15:50:09 fault injection: enabled 2025/01/18 15:50:09 leak checking: enabled 2025/01/18 15:50:09 net packet injection: enabled 2025/01/18 15:50:09 net device setup: enabled 2025/01/18 15:50:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 15:50:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 15:50:09 USB emulation: enabled 2025/01/18 15:50:09 hci packet injection: enabled 2025/01/18 15:50:09 wifi device emulation: enabled 2025/01/18 15:50:09 802.15.4 emulation: enabled 2025/01/18 15:50:09 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 15:50:09 fetching corpus: 50, signal 22916/26081 (executing program) 2025/01/18 15:50:09 fetching corpus: 100, signal 34910/38953 (executing program) 2025/01/18 15:50:09 fetching corpus: 150, signal 43907/48585 (executing program) 2025/01/18 15:50:09 fetching corpus: 200, signal 49063/54448 (executing program) 2025/01/18 15:50:09 fetching corpus: 250, signal 54586/60454 (executing program) 2025/01/18 15:50:10 fetching corpus: 300, signal 59441/65715 (executing program) 2025/01/18 15:50:10 fetching corpus: 350, signal 63849/70323 (executing program) 2025/01/18 15:50:10 fetching corpus: 400, signal 66318/73206 (executing program) 2025/01/18 15:50:10 fetching corpus: 450, signal 69976/76879 (executing program) 2025/01/18 15:50:10 fetching corpus: 500, signal 73171/80096 (executing program) 2025/01/18 15:50:10 fetching corpus: 550, signal 76554/83327 (executing program) 2025/01/18 15:50:11 fetching corpus: 600, signal 79531/86051 (executing program) 2025/01/18 15:50:11 fetching corpus: 650, signal 80881/87556 (executing program) 2025/01/18 15:50:11 fetching corpus: 700, signal 82752/89397 (executing program) 2025/01/18 15:50:11 fetching corpus: 750, signal 84545/91085 (executing program) 2025/01/18 15:50:11 fetching corpus: 800, signal 86091/92560 (executing program) 2025/01/18 15:50:11 fetching corpus: 850, signal 87833/94101 (executing program) 2025/01/18 15:50:11 fetching corpus: 900, signal 91121/96606 (executing program) 2025/01/18 15:50:12 fetching corpus: 950, signal 92259/97616 (executing program) 2025/01/18 15:50:12 fetching corpus: 1000, signal 94317/99132 (executing program) 2025/01/18 15:50:12 fetching corpus: 1050, signal 98072/101589 (executing program) 2025/01/18 15:50:12 fetching corpus: 1100, signal 99551/102597 (executing program) 2025/01/18 15:50:12 fetching corpus: 1150, signal 101914/104051 (executing program) 2025/01/18 15:50:13 fetching corpus: 1200, signal 103298/104879 (executing program) 2025/01/18 15:50:13 fetching corpus: 1250, signal 104410/105502 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/105795 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/105826 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/105864 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/105897 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/105941 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/105968 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106004 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106026 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106061 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106095 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106137 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106176 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106199 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106229 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106258 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106289 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106336 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106366 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106400 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106428 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106461 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106499 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106540 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106575 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106594 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106623 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106657 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 15:50:13 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 15:50:17 starting 8 fuzzer processes 15:50:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1ffffffffffffd46, &(0x7f00000000c0)) 15:50:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) dup3(r0, r1, 0x0) 15:50:17 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) 15:50:17 executing program 3: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) 15:50:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in=@private, {@in=@broadcast, @in=@dev}, {{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in=@multicast2}, {{@in=@loopback}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 94.630971] audit: type=1400 audit(1737215417.878:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:50:17 executing program 5: socket$inet(0x2, 0x3, 0x0) 15:50:17 executing program 6: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "6f1ae7", 0x14, 0x2b, 0x0, @local, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:50:17 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@newsa={0x154, 0x10, 0x3c7c02c9b47383d1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0xfe}, [@algo_crypt={0x48, 0x2, {{'ecb(arc4)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) [ 95.987395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.993459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.996594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.997406] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.000475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.007446] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.009582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.010485] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.011670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.018861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.028781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.029758] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.030207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.032103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.032523] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.032907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.041299] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.044059] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.071810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.073772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.075396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.083151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.110400] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.111108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.113656] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.116836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.121501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.131821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.157795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.157796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.164947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.173260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.173805] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.184468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.189596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.190306] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.191492] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.196569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.199805] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.201494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.213334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.215308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.229366] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.230346] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.232268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.236235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.260241] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.260650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.072746] Bluetooth: hci0: command tx timeout [ 98.136147] Bluetooth: hci1: command tx timeout [ 98.136317] Bluetooth: hci2: command tx timeout [ 98.137056] Bluetooth: hci3: command tx timeout [ 98.264148] Bluetooth: hci4: command tx timeout [ 98.264657] Bluetooth: hci5: command tx timeout [ 98.264829] Bluetooth: hci6: command tx timeout [ 98.328185] Bluetooth: hci7: command tx timeout [ 100.122063] Bluetooth: hci0: command tx timeout [ 100.184107] Bluetooth: hci3: command tx timeout [ 100.184187] Bluetooth: hci2: command tx timeout [ 100.184200] Bluetooth: hci1: command tx timeout [ 100.312576] Bluetooth: hci6: command tx timeout [ 100.312718] Bluetooth: hci5: command tx timeout [ 100.312812] Bluetooth: hci4: command tx timeout [ 100.376160] Bluetooth: hci7: command tx timeout [ 102.168101] Bluetooth: hci0: command tx timeout [ 102.233114] Bluetooth: hci1: command tx timeout [ 102.233195] Bluetooth: hci3: command tx timeout [ 102.233308] Bluetooth: hci2: command tx timeout [ 102.362187] Bluetooth: hci6: command tx timeout [ 102.362281] Bluetooth: hci4: command tx timeout [ 102.362292] Bluetooth: hci5: command tx timeout [ 102.424102] Bluetooth: hci7: command tx timeout [ 104.217110] Bluetooth: hci0: command tx timeout [ 104.280130] Bluetooth: hci2: command tx timeout [ 104.280234] Bluetooth: hci1: command tx timeout [ 104.281323] Bluetooth: hci3: command tx timeout [ 104.408126] Bluetooth: hci5: command tx timeout [ 104.408228] Bluetooth: hci6: command tx timeout [ 104.409312] Bluetooth: hci4: command tx timeout [ 104.472144] Bluetooth: hci7: command tx timeout [ 156.175329] [ 156.175582] ====================================================== [ 156.176183] WARNING: possible circular locking dependency detected [ 156.176777] 6.13.0-rc7-next-20250117 #1 Not tainted [ 156.177268] ------------------------------------------------------ [ 156.178726] kworker/u8:1/67 is trying to acquire lock: [ 156.179901] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.181926] [ 156.181926] but task is already holding lock: [ 156.183622] ffff88803b8b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 156.185508] [ 156.185508] which lock already depends on the new lock. [ 156.185508] [ 156.186947] [ 156.186947] the existing dependency chain (in reverse order) is: [ 156.187647] [ 156.187647] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 156.188319] __mutex_lock+0x13d/0xb50 [ 156.188786] wiphy_register+0x1b2e/0x25d0 [ 156.189270] ieee80211_register_hw+0x23a4/0x3d60 [ 156.189798] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 156.190353] init_mac80211_hwsim+0x389/0x870 [ 156.190894] do_one_initcall+0xf9/0x640 [ 156.191380] kernel_init_freeable+0x53d/0x7a0 [ 156.191914] kernel_init+0x1e/0x2d0 [ 156.192341] ret_from_fork+0x48/0x80 [ 156.192776] ret_from_fork_asm+0x1a/0x30 [ 156.193266] [ 156.193266] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 156.193888] __lock_acquire+0x29fd/0x4580 [ 156.194380] lock_acquire+0x19b/0x520 [ 156.194830] __mutex_lock+0x13d/0xb50 [ 156.195305] unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.195931] unregister_netdevice_queue+0x224/0x2e0 [ 156.196483] _cfg80211_unregister_wdev+0x57b/0x700 [ 156.197044] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 156.197603] ieee80211_unregister_hw+0x55/0x3a0 [ 156.198126] hwsim_exit_net+0x3a0/0x730 [ 156.198594] ops_exit_list+0xb3/0x180 [ 156.199048] cleanup_net+0x546/0xad0 [ 156.199492] process_one_work+0x8ee/0x1a10 [ 156.200003] worker_thread+0x674/0xe70 [ 156.200474] kthread+0x3ab/0x720 [ 156.200888] ret_from_fork+0x48/0x80 [ 156.201314] ret_from_fork_asm+0x1a/0x30 [ 156.201796] [ 156.201796] other info that might help us debug this: [ 156.201796] [ 156.202546] Possible unsafe locking scenario: [ 156.202546] [ 156.203129] CPU0 CPU1 [ 156.203567] ---- ---- [ 156.204005] lock(&rdev->wiphy.mtx); [ 156.204401] lock(rtnl_mutex); [ 156.204966] lock(&rdev->wiphy.mtx); [ 156.205576] lock(rtnl_mutex); [ 156.205928] [ 156.205928] *** DEADLOCK *** [ 156.205928] [ 156.206492] 4 locks held by kworker/u8:1/67: [ 156.206943] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 156.207964] #1: ffff88800f3b7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 156.208951] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 156.209868] #3: ffff88803b8b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 156.210914] [ 156.210914] stack backtrace: [ 156.211348] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 156.212154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 156.212913] Workqueue: netns cleanup_net [ 156.213324] Call Trace: [ 156.213578] [ 156.213803] dump_stack_lvl+0xca/0x120 [ 156.214214] print_circular_bug+0x47b/0x750 [ 156.214648] check_noncircular+0x2e9/0x3c0 [ 156.215078] ? __pfx_check_noncircular+0x10/0x10 [ 156.215543] ? hlock_class+0x4e/0x130 [ 156.215918] ? mark_lock+0xac/0xed0 [ 156.216287] ? srso_return_thunk+0x5/0x5f [ 156.216718] ? lockdep_lock+0xba/0x1b0 [ 156.217131] ? __pfx_lockdep_lock+0x10/0x10 [ 156.217582] __lock_acquire+0x29fd/0x4580 [ 156.218012] ? __pfx___lock_acquire+0x10/0x10 [ 156.218461] ? lock_release+0x20f/0x6f0 [ 156.218877] ? __pfx_lock_release+0x10/0x10 [ 156.219326] lock_acquire+0x19b/0x520 [ 156.219723] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.220289] ? __pfx_lock_acquire+0x10/0x10 [ 156.220726] ? srso_return_thunk+0x5/0x5f [ 156.221159] ? lock_release+0x20f/0x6f0 [ 156.221562] ? srso_return_thunk+0x5/0x5f [ 156.221990] ? lock_is_held_type+0x9e/0x120 [ 156.222434] ? srso_return_thunk+0x5/0x5f [ 156.222871] __mutex_lock+0x13d/0xb50 [ 156.223268] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.223850] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.224433] ? srso_return_thunk+0x5/0x5f [ 156.224865] ? synchronize_rcu_expedited+0x38a/0x420 [ 156.225369] ? __pfx___mutex_lock+0x10/0x10 [ 156.225816] ? __pfx_autoremove_wake_function+0x10/0x10 [ 156.226354] ? srso_return_thunk+0x5/0x5f [ 156.226785] ? kasan_quarantine_put+0x84/0x1e0 [ 156.227272] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 156.227726] ? srso_return_thunk+0x5/0x5f [ 156.228171] unregister_netdevice_many_notify+0x1612/0x1c80 [ 156.228730] ? __virt_addr_valid+0x2e8/0x5d0 [ 156.229182] ? __pfx_lock_release+0x10/0x10 [ 156.229623] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 156.230212] ? find_held_lock+0x2c/0x110 [ 156.230637] ? srso_return_thunk+0x5/0x5f [ 156.231081] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 156.231585] ? srso_return_thunk+0x5/0x5f [ 156.232017] ? lock_release+0x20f/0x6f0 [ 156.232436] ? __pfx_lock_release+0x10/0x10 [ 156.232878] ? srso_return_thunk+0x5/0x5f [ 156.233313] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 156.233832] ? srso_return_thunk+0x5/0x5f [ 156.234269] unregister_netdevice_queue+0x224/0x2e0 [ 156.234757] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 156.235301] ? up_write+0x195/0x520 [ 156.235684] _cfg80211_unregister_wdev+0x57b/0x700 [ 156.236177] ? srso_return_thunk+0x5/0x5f [ 156.236607] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 156.237098] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 156.237648] ? srso_return_thunk+0x5/0x5f [ 156.238086] ? srso_return_thunk+0x5/0x5f [ 156.238522] ? synchronize_rcu+0x1ff/0x260 [ 156.238950] ieee80211_unregister_hw+0x55/0x3a0 [ 156.239414] hwsim_exit_net+0x3a0/0x730 [ 156.239812] ? __pfx_hwsim_exit_net+0x10/0x10 [ 156.240258] ? srso_return_thunk+0x5/0x5f [ 156.240688] ? netdev_run_todo+0x788/0x1040 [ 156.241123] ? __pfx_hwsim_exit_net+0x10/0x10 [ 156.241568] ops_exit_list+0xb3/0x180 [ 156.241951] cleanup_net+0x546/0xad0 [ 156.242331] ? __pfx_cleanup_net+0x10/0x10 [ 156.242760] process_one_work+0x8ee/0x1a10 [ 156.243216] ? __pfx_lock_acquire+0x10/0x10 [ 156.243659] ? __pfx_process_one_work+0x10/0x10 [ 156.244144] ? srso_return_thunk+0x5/0x5f [ 156.244576] ? move_linked_works+0x172/0x270 [ 156.245021] ? srso_return_thunk+0x5/0x5f [ 156.245453] ? assign_work+0x196/0x240 [ 156.245864] worker_thread+0x674/0xe70 [ 156.246277] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 156.246801] ? srso_return_thunk+0x5/0x5f [ 156.247237] ? __pfx_worker_thread+0x10/0x10 [ 156.247698] kthread+0x3ab/0x720 [ 156.248063] ? __pfx_kthread+0x10/0x10 [ 156.248470] ? srso_return_thunk+0x5/0x5f [ 156.248901] ? finish_task_switch.isra.0+0x206/0x840 [ 156.249416] ? __pfx_kthread+0x10/0x10 [ 156.249832] ret_from_fork+0x48/0x80 [ 156.250209] ? __pfx_kthread+0x10/0x10 [ 156.250620] ret_from_fork_asm+0x1a/0x30 [ 156.251084] [ 158.335768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.336888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.338294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.343625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.347068] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.348500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.390446] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.393494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.400615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.403179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.406291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.407881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.408571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.409250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.410903] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.411843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.412958] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.413879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.425701] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.426844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.427760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.436147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.438745] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.445285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.449183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.455359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.457272] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.458249] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.465236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.466263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.470156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.470667] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.472118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.490412] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.492688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.497575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.499144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.504026] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.504941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.514193] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.515717] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.517586] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.519820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.523222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.528839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.530896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.544206] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.547789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.408077] Bluetooth: hci0: command tx timeout [ 160.473634] Bluetooth: hci2: command tx timeout [ 160.536042] Bluetooth: hci3: command tx timeout [ 160.536687] Bluetooth: hci1: command tx timeout [ 160.600082] Bluetooth: hci5: command tx timeout [ 160.600159] Bluetooth: hci4: command tx timeout [ 160.600226] Bluetooth: hci7: command tx timeout [ 160.600275] Bluetooth: hci6: command tx timeout [ 162.456100] Bluetooth: hci0: command tx timeout [ 162.520072] Bluetooth: hci2: command tx timeout [ 162.584089] Bluetooth: hci1: command tx timeout [ 162.584610] Bluetooth: hci3: command tx timeout [ 162.648779] Bluetooth: hci6: command tx timeout [ 162.648851] Bluetooth: hci7: command tx timeout [ 162.648916] Bluetooth: hci4: command tx timeout [ 162.648988] Bluetooth: hci5: command tx timeout [ 164.504097] Bluetooth: hci0: command tx timeout [ 164.568159] Bluetooth: hci2: command tx timeout [ 164.632106] Bluetooth: hci3: command tx timeout [ 164.632197] Bluetooth: hci1: command tx timeout [ 164.696103] Bluetooth: hci6: command tx timeout [ 164.696173] Bluetooth: hci5: command tx timeout [ 164.696190] Bluetooth: hci4: command tx timeout [ 164.696253] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:51:19 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800903f158 RCX=ffffffff815092f3 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff88800e880128 RBP=ffff8880153d9a90 RSP=ffff88800c247dd0 R8 =0000000000000000 R9 =ffffed1001d10025 R10=ffff88800e88012b R11=0000000000000532 R12=ffff88800903f159 R13=ffff88800e8e2b90 R14=ffff88800aee3780 R15=0000000000000086 RIP=ffffffff81aeddc5 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c00030b000 CR3=000000000bfc2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183b8aa40000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800f3b6bb8 R8 =0000000000000001 R9 =ffffed1001e76d67 R10=0000000000000077 R11=6f6c206863696877 R12=0000000000000077 R13=0000000000000001 R14=ffff888008fea020 R15=ffff88800f3b6eb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001f27f60 CR3=000000000bfc2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0004e80b0000000c0004e80c0 XMM02=000000c000131ec0000000c000131e90 XMM03=000000c000131f20000000c000131ef0 XMM04=000000c000131e30000000c000131e00 XMM05=000000c000131e90000000c000131e60 XMM06=000000c000131ef0000000c000131ec0 XMM07=000000c000144840000000c000131f20 XMM08=000000c000146000000000c000131fb0 XMM09=000000c000146060000000c000146030 XMM10=000000c0001460c0000000c000146090 XMM11=000000c000146120000000c0001460f0 XMM12=000000c0000874d0000000c000146150 XMM13=000000c0001461b0000000c000146180 XMM14=000000c000146210000000c0001461e0 XMM15=000000c000145e40000000c000146240