Warning: Permanently added '[localhost]:16837' (ECDSA) to the list of known hosts. 2025/01/18 16:07:51 fuzzer started 2025/01/18 16:07:51 dialing manager at localhost:44245 syzkaller login: [ 61.863230] cgroup: Unknown subsys name 'net' [ 61.941804] cgroup: Unknown subsys name 'cpuset' [ 61.958220] cgroup: Unknown subsys name 'rlimit' [ 68.114812] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.007751] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 16:08:09 syscalls: 2217 2025/01/18 16:08:09 code coverage: enabled 2025/01/18 16:08:09 comparison tracing: enabled 2025/01/18 16:08:09 extra coverage: enabled 2025/01/18 16:08:09 setuid sandbox: enabled 2025/01/18 16:08:09 namespace sandbox: enabled 2025/01/18 16:08:09 Android sandbox: enabled 2025/01/18 16:08:09 fault injection: enabled 2025/01/18 16:08:09 leak checking: enabled 2025/01/18 16:08:09 net packet injection: enabled 2025/01/18 16:08:09 net device setup: enabled 2025/01/18 16:08:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 16:08:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 16:08:09 USB emulation: enabled 2025/01/18 16:08:09 hci packet injection: enabled 2025/01/18 16:08:09 wifi device emulation: enabled 2025/01/18 16:08:09 802.15.4 emulation: enabled 2025/01/18 16:08:09 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 16:08:09 fetching corpus: 50, signal 24723/27839 (executing program) 2025/01/18 16:08:09 fetching corpus: 100, signal 34506/38578 (executing program) 2025/01/18 16:08:09 fetching corpus: 150, signal 44043/48729 (executing program) 2025/01/18 16:08:10 fetching corpus: 200, signal 49812/55150 (executing program) 2025/01/18 16:08:10 fetching corpus: 250, signal 54156/60079 (executing program) 2025/01/18 16:08:10 fetching corpus: 300, signal 59125/65370 (executing program) 2025/01/18 16:08:10 fetching corpus: 350, signal 63045/69641 (executing program) 2025/01/18 16:08:10 fetching corpus: 400, signal 67342/74009 (executing program) 2025/01/18 16:08:10 fetching corpus: 450, signal 69159/76208 (executing program) 2025/01/18 16:08:11 fetching corpus: 500, signal 72329/79403 (executing program) 2025/01/18 16:08:11 fetching corpus: 550, signal 75415/82353 (executing program) 2025/01/18 16:08:11 fetching corpus: 600, signal 79207/85836 (executing program) 2025/01/18 16:08:11 fetching corpus: 650, signal 81832/88290 (executing program) 2025/01/18 16:08:11 fetching corpus: 700, signal 83035/89632 (executing program) 2025/01/18 16:08:11 fetching corpus: 750, signal 84744/91285 (executing program) 2025/01/18 16:08:11 fetching corpus: 800, signal 86559/92870 (executing program) 2025/01/18 16:08:11 fetching corpus: 850, signal 88426/94481 (executing program) 2025/01/18 16:08:12 fetching corpus: 900, signal 89716/95654 (executing program) 2025/01/18 16:08:12 fetching corpus: 950, signal 92684/97857 (executing program) 2025/01/18 16:08:12 fetching corpus: 1000, signal 93685/98755 (executing program) 2025/01/18 16:08:12 fetching corpus: 1050, signal 95696/100201 (executing program) 2025/01/18 16:08:12 fetching corpus: 1100, signal 99839/102768 (executing program) 2025/01/18 16:08:12 fetching corpus: 1150, signal 100753/103410 (executing program) 2025/01/18 16:08:12 fetching corpus: 1200, signal 103045/104746 (executing program) 2025/01/18 16:08:12 fetching corpus: 1250, signal 104383/105525 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/105846 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/105870 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/105903 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/105939 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/105968 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106002 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106037 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106073 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106097 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106139 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106170 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106199 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106226 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106254 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106282 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106312 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106345 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106384 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106416 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106452 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106487 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106521 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106539 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106569 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106603 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106628 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106658 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 16:08:13 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 16:08:17 starting 8 fuzzer processes 16:08:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) pipe(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b}, @ntf_ch_w}}]}, 0x3c}}, 0x0) 16:08:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') read(r0, &(0x7f0000000000)=""/253, 0xfd) 16:08:17 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0xd29, &(0x7f0000000780)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="f9", 0x1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 16:08:17 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003ac0)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee00, r0, 0x0) iopl(0x3) [ 87.416590] audit: type=1400 audit(1737216497.506:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:08:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x82, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000100)=""/72, 0x48) 16:08:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/llc/core\x00') 16:08:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_test', 0x268a00, 0x0) pidfd_getfd(r0, r0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:08:17 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x13, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x24}], 0x1}, 0x0) [ 88.663544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.669392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.672359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.678474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.682381] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.684964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.989486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.993852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.996342] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.008528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.015776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.021545] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.032077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.034801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.035775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.041033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.041738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.047127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.051654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.054113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.060840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.063971] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.065490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.094191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.102551] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.104778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.106844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.109760] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.116623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.116981] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.122719] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.130728] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.138023] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.144630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.149951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.151598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.156854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.157418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.160414] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.162026] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.162218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.164847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.167027] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.176516] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.178128] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.179894] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.186038] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.187784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.737845] Bluetooth: hci0: command tx timeout [ 91.122332] Bluetooth: hci5: command tx timeout [ 91.122753] Bluetooth: hci1: command tx timeout [ 91.248893] Bluetooth: hci2: command tx timeout [ 91.248965] Bluetooth: hci3: command tx timeout [ 91.249598] Bluetooth: hci4: command tx timeout [ 91.249801] Bluetooth: hci6: command tx timeout [ 91.315346] Bluetooth: hci7: command tx timeout [ 92.784353] Bluetooth: hci0: command tx timeout [ 93.168419] Bluetooth: hci1: command tx timeout [ 93.169685] Bluetooth: hci5: command tx timeout [ 93.296365] Bluetooth: hci6: command tx timeout [ 93.296481] Bluetooth: hci2: command tx timeout [ 93.296536] Bluetooth: hci3: command tx timeout [ 93.296606] Bluetooth: hci4: command tx timeout [ 93.360624] Bluetooth: hci7: command tx timeout [ 94.832616] Bluetooth: hci0: command tx timeout [ 95.216391] Bluetooth: hci5: command tx timeout [ 95.216673] Bluetooth: hci1: command tx timeout [ 95.345335] Bluetooth: hci6: command tx timeout [ 95.345372] Bluetooth: hci4: command tx timeout [ 95.345456] Bluetooth: hci3: command tx timeout [ 95.345464] Bluetooth: hci2: command tx timeout [ 95.410565] Bluetooth: hci7: command tx timeout [ 96.880362] Bluetooth: hci0: command tx timeout [ 97.264506] Bluetooth: hci5: command tx timeout [ 97.264605] Bluetooth: hci1: command tx timeout [ 97.392393] Bluetooth: hci2: command tx timeout [ 97.392494] Bluetooth: hci4: command tx timeout [ 97.393511] Bluetooth: hci3: command tx timeout [ 97.393569] Bluetooth: hci6: command tx timeout [ 97.458473] Bluetooth: hci7: command tx timeout [ 147.724953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.725076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.317439] syz-executor.0 (282) used greatest stack depth: 23552 bytes left [ 148.547236] [ 148.547484] ====================================================== [ 148.548079] WARNING: possible circular locking dependency detected [ 148.548667] 6.13.0-rc7-next-20250117 #1 Not tainted [ 148.549157] ------------------------------------------------------ [ 148.550498] kworker/u8:2/3782 is trying to acquire lock: [ 148.551813] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.553788] [ 148.553788] but task is already holding lock: [ 148.555395] ffff888015740768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 148.557587] [ 148.557587] which lock already depends on the new lock. [ 148.557587] [ 148.558842] [ 148.558842] the existing dependency chain (in reverse order) is: [ 148.559549] [ 148.559549] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 148.560206] __mutex_lock+0x13d/0xb50 [ 148.560667] wiphy_register+0x1b2e/0x25d0 [ 148.561155] ieee80211_register_hw+0x23a4/0x3d60 [ 148.561688] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 148.562248] init_mac80211_hwsim+0x389/0x870 [ 148.562742] do_one_initcall+0xf9/0x640 [ 148.563211] kernel_init_freeable+0x53d/0x7a0 [ 148.563738] kernel_init+0x1e/0x2d0 [ 148.564156] ret_from_fork+0x48/0x80 [ 148.564585] ret_from_fork_asm+0x1a/0x30 [ 148.565053] [ 148.565053] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 148.565656] __lock_acquire+0x29fd/0x4580 [ 148.566125] lock_acquire+0x19b/0x520 [ 148.566544] __mutex_lock+0x13d/0xb50 [ 148.566981] unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.567561] unregister_netdevice_queue+0x224/0x2e0 [ 148.568075] _cfg80211_unregister_wdev+0x57b/0x700 [ 148.568595] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 148.569110] ieee80211_unregister_hw+0x55/0x3a0 [ 148.569629] hwsim_exit_net+0x3a0/0x730 [ 148.570094] ops_exit_list+0xb3/0x180 [ 148.570539] cleanup_net+0x546/0xad0 [ 148.570969] process_one_work+0x8ee/0x1a10 [ 148.571452] worker_thread+0x674/0xe70 [ 148.571896] kthread+0x3ab/0x720 [ 148.572310] ret_from_fork+0x48/0x80 [ 148.572743] ret_from_fork_asm+0x1a/0x30 [ 148.573231] [ 148.573231] other info that might help us debug this: [ 148.573231] [ 148.573974] Possible unsafe locking scenario: [ 148.573974] [ 148.574543] CPU0 CPU1 [ 148.574991] ---- ---- [ 148.575447] lock(&rdev->wiphy.mtx); [ 148.575845] lock(rtnl_mutex); [ 148.576411] lock(&rdev->wiphy.mtx); [ 148.577000] lock(rtnl_mutex); [ 148.577336] [ 148.577336] *** DEADLOCK *** [ 148.577336] [ 148.577895] 4 locks held by kworker/u8:2/3782: [ 148.578317] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 148.579312] #1: ffff88803aadfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 148.580312] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 148.581258] #3: ffff888015740768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 148.582279] [ 148.582279] stack backtrace: [ 148.582699] CPU: 0 UID: 0 PID: 3782 Comm: kworker/u8:2 Not tainted 6.13.0-rc7-next-20250117 #1 [ 148.583473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.584203] Workqueue: netns cleanup_net [ 148.584620] Call Trace: [ 148.584861] [ 148.585073] dump_stack_lvl+0xca/0x120 [ 148.585470] print_circular_bug+0x47b/0x750 [ 148.585916] check_noncircular+0x2e9/0x3c0 [ 148.586350] ? srso_return_thunk+0x5/0x5f [ 148.586787] ? __pfx_check_noncircular+0x10/0x10 [ 148.587266] ? hlock_class+0x4e/0x130 [ 148.587651] ? mark_lock+0xac/0xed0 [ 148.588026] ? srso_return_thunk+0x5/0x5f [ 148.588464] ? sched_clock+0x37/0x60 [ 148.588864] ? lockdep_lock+0xba/0x1b0 [ 148.589279] ? __pfx_lockdep_lock+0x10/0x10 [ 148.589736] __lock_acquire+0x29fd/0x4580 [ 148.590171] ? __pfx___lock_acquire+0x10/0x10 [ 148.590625] ? lock_release+0x20f/0x6f0 [ 148.591025] ? __pfx_lock_release+0x10/0x10 [ 148.591445] lock_acquire+0x19b/0x520 [ 148.591814] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.592351] ? __pfx_lock_acquire+0x10/0x10 [ 148.592775] ? srso_return_thunk+0x5/0x5f [ 148.593214] ? lock_release+0x20f/0x6f0 [ 148.593623] ? srso_return_thunk+0x5/0x5f [ 148.594055] ? lock_is_held_type+0x9e/0x120 [ 148.594478] ? srso_return_thunk+0x5/0x5f [ 148.594888] __mutex_lock+0x13d/0xb50 [ 148.595266] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.595812] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.596356] ? srso_return_thunk+0x5/0x5f [ 148.596762] ? synchronize_rcu_expedited+0x38a/0x420 [ 148.597237] ? __pfx___mutex_lock+0x10/0x10 [ 148.597654] ? __pfx_autoremove_wake_function+0x10/0x10 [ 148.598188] ? srso_return_thunk+0x5/0x5f [ 148.598621] ? kasan_quarantine_put+0x84/0x1e0 [ 148.599101] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 148.599565] ? srso_return_thunk+0x5/0x5f [ 148.600006] unregister_netdevice_many_notify+0x1612/0x1c80 [ 148.600565] ? __virt_addr_valid+0x2e8/0x5d0 [ 148.601024] ? __pfx_lock_release+0x10/0x10 [ 148.601461] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 148.602050] ? find_held_lock+0x2c/0x110 [ 148.602480] ? srso_return_thunk+0x5/0x5f [ 148.602924] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 148.603436] ? srso_return_thunk+0x5/0x5f [ 148.603876] ? lock_release+0x20f/0x6f0 [ 148.604288] ? __pfx_lock_release+0x10/0x10 [ 148.604725] ? srso_return_thunk+0x5/0x5f [ 148.605159] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 148.605685] ? srso_return_thunk+0x5/0x5f [ 148.606127] unregister_netdevice_queue+0x224/0x2e0 [ 148.606592] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 148.607096] ? up_write+0x195/0x520 [ 148.607474] _cfg80211_unregister_wdev+0x57b/0x700 [ 148.607941] ? srso_return_thunk+0x5/0x5f [ 148.608365] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 148.608868] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 148.609414] ? srso_return_thunk+0x5/0x5f [ 148.609847] ? srso_return_thunk+0x5/0x5f [ 148.610281] ? synchronize_rcu+0x1ff/0x260 [ 148.610711] ieee80211_unregister_hw+0x55/0x3a0 [ 148.611149] hwsim_exit_net+0x3a0/0x730 [ 148.611551] ? __pfx_hwsim_exit_net+0x10/0x10 [ 148.612003] ? srso_return_thunk+0x5/0x5f [ 148.612429] ? netdev_run_todo+0x788/0x1040 [ 148.612841] ? __pfx_hwsim_exit_net+0x10/0x10 [ 148.613269] ops_exit_list+0xb3/0x180 [ 148.613634] cleanup_net+0x546/0xad0 [ 148.613997] ? __pfx_cleanup_net+0x10/0x10 [ 148.614407] process_one_work+0x8ee/0x1a10 [ 148.614835] ? __pfx_lock_acquire+0x10/0x10 [ 148.615248] ? __pfx_process_one_work+0x10/0x10 [ 148.615708] ? srso_return_thunk+0x5/0x5f [ 148.616130] ? move_linked_works+0x172/0x270 [ 148.616579] ? srso_return_thunk+0x5/0x5f [ 148.616987] ? assign_work+0x196/0x240 [ 148.617381] worker_thread+0x674/0xe70 [ 148.617770] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 148.618266] ? srso_return_thunk+0x5/0x5f [ 148.618673] ? __pfx_worker_thread+0x10/0x10 [ 148.619109] kthread+0x3ab/0x720 [ 148.619462] ? __pfx_kthread+0x10/0x10 [ 148.619846] ? srso_return_thunk+0x5/0x5f [ 148.620254] ? finish_task_switch.isra.0+0x206/0x840 [ 148.620765] ? __pfx_kthread+0x10/0x10 [ 148.621161] ret_from_fork+0x48/0x80 [ 148.621510] ? __pfx_kthread+0x10/0x10 [ 148.621924] ret_from_fork_asm+0x1a/0x30 [ 148.622366] [ 150.915679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.919055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.921082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.924930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.932134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.935123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.106453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.110535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.112759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.118090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.121194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.124944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.167907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.179725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.179963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.185112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.204598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.206616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.210965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.216481] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.222540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.222786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.226978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.227725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.228555] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.230163] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.232828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.234825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.235536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.251515] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.303173] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.305664] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.308516] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.310023] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.311519] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.315185] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.323372] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.328381] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.333389] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.333622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.345689] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.346600] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.347063] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.351780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.357826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.358571] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.359717] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.360570] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.011257] Bluetooth: hci0: command tx timeout [ 153.201483] Bluetooth: hci1: command tx timeout [ 153.264323] Bluetooth: hci4: command tx timeout [ 153.264380] Bluetooth: hci2: command tx timeout [ 153.328282] Bluetooth: hci3: command tx timeout [ 153.458249] Bluetooth: hci6: command tx timeout [ 153.458272] Bluetooth: hci5: command tx timeout [ 153.458335] Bluetooth: hci7: command tx timeout [ 155.057247] Bluetooth: hci0: command tx timeout [ 155.248317] Bluetooth: hci1: command tx timeout [ 155.312297] Bluetooth: hci2: command tx timeout [ 155.312383] Bluetooth: hci4: command tx timeout [ 155.376324] Bluetooth: hci3: command tx timeout [ 155.504343] Bluetooth: hci6: command tx timeout [ 155.504385] Bluetooth: hci7: command tx timeout [ 155.504542] Bluetooth: hci5: command tx timeout [ 157.104290] Bluetooth: hci0: command tx timeout [ 157.296741] Bluetooth: hci1: command tx timeout [ 157.360328] Bluetooth: hci4: command tx timeout [ 157.362273] Bluetooth: hci2: command tx timeout [ 157.425300] Bluetooth: hci3: command tx timeout [ 157.552276] Bluetooth: hci6: command tx timeout [ 157.552342] Bluetooth: hci5: command tx timeout [ 157.552417] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 16:09:18 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88803aadebb8 R8 =0000000000000001 R9 =ffffed100755bd67 R10=0000000000000020 R11=3a6b636f6c206762 R12=0000000000000020 R13=0000000000000001 R14=ffff888008fea00f R15=ffff88803aadeeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76a7640960 CR3=0000000018f72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000004244528d34b50000 XMM02=00000000000000003fd954f7ca0ae3b3 XMM03=000000c000393580000000c00069ae40 XMM04=000000c000741a00000000c00069b500 XMM05=000000c0009b4000000000c000741e80 XMM06=000000c0009b45c0000000c0009b4240 XMM07=000000c0004cd3b8000000c0009b4880 XMM08=000000c0009b5280000000c0009b5140 XMM09=000000c0009b5680000000c0009b5500 XMM10=000000c0009b5a80000000c0009b5800 XMM11=000000c0009b5d40000000c0009b5c00 XMM12=000000c000a1e340000000c000a1e140 XMM13=000000c000a1e6c0000000c000a1e540 XMM14=000000c000a1eb80000000c000a1ea40 XMM15=000000c0004cd710000000c000a1f080 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801540a440 RCX=ffffffff818e3028 RDX=ffff88800ecb3780 RSI=ffffffff818e3036 RDI=0000000000000001 RBP=ffffea00008af300 RSP=ffff8880132bf428 R8 =0000000000000000 R9 =fffff94000115e60 R10=0000000000000000 R11=00000000fa83b2da R12=0000000000000001 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff8171a158 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000001f21870 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e006c76348 CR3=0000000018f72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000056370000000c000056320 XMM02=000000c00030a630000000c0000562d0 XMM03=000000c00030a810000000c000056410 XMM04=000000c000144090000000c000144060 XMM05=000000c0001440f0000000c0001440c0 XMM06=000000c000144150000000c000144120 XMM07=000000c000143760000000c0000854d0 XMM08=000000c0001444b0000000c000144480 XMM09=000000c000144510000000c0001444e0 XMM10=000000c000144540000000c000085530 XMM11=000000c0001445a0000000c000144570 XMM12=000000c000144600000000c0001445d0 XMM13=000000c000144660000000c000144630 XMM14=000000c0001446c0000000c000144690 XMM15=000000c0000e5080000000c0001446f0