Warning: Permanently added '[localhost]:33853' (ECDSA) to the list of known hosts. 2025/01/29 19:43:23 fuzzer started 2025/01/29 19:43:23 dialing manager at localhost:36977 syzkaller login: [ 67.562495] cgroup: Unknown subsys name 'net' [ 67.655543] cgroup: Unknown subsys name 'cpuset' [ 67.699594] cgroup: Unknown subsys name 'rlimit' 2025/01/29 19:43:40 syscalls: 2217 2025/01/29 19:43:40 code coverage: enabled 2025/01/29 19:43:40 comparison tracing: enabled 2025/01/29 19:43:40 extra coverage: enabled 2025/01/29 19:43:40 setuid sandbox: enabled 2025/01/29 19:43:40 namespace sandbox: enabled 2025/01/29 19:43:40 Android sandbox: enabled 2025/01/29 19:43:40 fault injection: enabled 2025/01/29 19:43:40 leak checking: enabled 2025/01/29 19:43:40 net packet injection: enabled 2025/01/29 19:43:40 net device setup: enabled 2025/01/29 19:43:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 19:43:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 19:43:40 USB emulation: enabled 2025/01/29 19:43:40 hci packet injection: enabled 2025/01/29 19:43:40 wifi device emulation: enabled 2025/01/29 19:43:40 802.15.4 emulation: enabled 2025/01/29 19:43:40 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/29 19:43:40 fetching corpus: 0, signal 0/2379 (executing program) 2025/01/29 19:43:40 fetching corpus: 0, signal 0/2379 (executing program) 2025/01/29 19:43:43 starting 8 fuzzer processes 19:43:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(0xffffffffffffffff, r0, 0x0) 19:43:43 executing program 2: capset(&(0x7f0000000080), 0x0) 19:43:43 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000002540)=[{&(0x7f0000001240)=""/142, 0x8e}], 0x1, 0x0, 0x0, 0x10) 19:43:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind(r0, &(0x7f0000000680)=@un=@file={0x0, './file0/file0\x00'}, 0x80) 19:43:43 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x31e, 0x0) 19:43:43 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x2102840, &(0x7f0000000fc0)) [ 86.802040] audit: type=1400 audit(1738179823.371:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:43:43 executing program 6: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e00)={'ip6tnl0\x00', 0x0}) 19:43:43 executing program 7: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000), 0xd9e, 0xf) [ 88.207954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.212261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.218287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.228688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.235910] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.239370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.398953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.404661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.410110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.412315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.419106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.421999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.427424] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.429203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.431321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.433308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.435259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.441446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.450004] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.452328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.457048] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.463116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.465347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.470001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.474289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.476161] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.478261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.479342] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.480400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.484531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.487079] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.494051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.496318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.499074] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.499348] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.510660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.512997] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.523388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.525366] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.526536] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.531284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.533470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.545737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.554305] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.556656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.564602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.576268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.588593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.290259] Bluetooth: hci0: command tx timeout [ 90.545997] Bluetooth: hci3: command tx timeout [ 90.546596] Bluetooth: hci2: command tx timeout [ 90.611683] Bluetooth: hci5: command tx timeout [ 90.613126] Bluetooth: hci4: command tx timeout [ 90.613661] Bluetooth: hci1: command tx timeout [ 90.674880] Bluetooth: hci7: command tx timeout [ 90.675489] Bluetooth: hci6: command tx timeout [ 92.339038] Bluetooth: hci0: command tx timeout [ 92.595054] Bluetooth: hci3: command tx timeout [ 92.595986] Bluetooth: hci2: command tx timeout [ 92.658090] Bluetooth: hci1: command tx timeout [ 92.658987] Bluetooth: hci4: command tx timeout [ 92.659774] Bluetooth: hci5: command tx timeout [ 92.724185] Bluetooth: hci7: command tx timeout [ 92.725298] Bluetooth: hci6: command tx timeout [ 94.385906] Bluetooth: hci0: command tx timeout [ 94.643216] Bluetooth: hci2: command tx timeout [ 94.644403] Bluetooth: hci3: command tx timeout [ 94.705990] Bluetooth: hci4: command tx timeout [ 94.707709] Bluetooth: hci5: command tx timeout [ 94.708783] Bluetooth: hci1: command tx timeout [ 94.770272] Bluetooth: hci6: command tx timeout [ 94.771892] Bluetooth: hci7: command tx timeout [ 96.434944] Bluetooth: hci0: command tx timeout [ 96.690940] Bluetooth: hci3: command tx timeout [ 96.691458] Bluetooth: hci2: command tx timeout [ 96.755930] Bluetooth: hci4: command tx timeout [ 96.756415] Bluetooth: hci1: command tx timeout [ 96.757484] Bluetooth: hci5: command tx timeout [ 96.819169] Bluetooth: hci6: command tx timeout [ 96.819666] Bluetooth: hci7: command tx timeout [ 150.397918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.401363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.403864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.409627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.413297] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.416206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.467765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.481201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.485318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.490160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.497113] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.509528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.541679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.559138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.561313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.574146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.581138] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.585249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.610600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.631762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.634075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.662692] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.666283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.674966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.743937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.746275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.751351] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.759917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.763552] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 150.765166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.766882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.776569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.807853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.851591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.853675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.859083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.860499] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.879664] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.908153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.909314] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.927975] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.932989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.951898] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.953173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.973263] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.006439] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.013141] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.036404] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.498004] Bluetooth: hci0: command tx timeout [ 152.563256] Bluetooth: hci1: command tx timeout [ 152.754080] Bluetooth: hci3: command tx timeout [ 152.755355] Bluetooth: hci2: command tx timeout [ 152.881954] Bluetooth: hci5: command tx timeout [ 152.946134] Bluetooth: hci4: command tx timeout [ 153.010271] Bluetooth: hci6: command tx timeout [ 153.202091] Bluetooth: hci7: command tx timeout [ 154.546965] Bluetooth: hci0: command tx timeout [ 154.612818] Bluetooth: hci1: command tx timeout [ 154.802974] Bluetooth: hci2: command tx timeout [ 154.803498] Bluetooth: hci3: command tx timeout [ 154.930997] Bluetooth: hci5: command tx timeout [ 154.995003] Bluetooth: hci4: command tx timeout [ 155.058925] Bluetooth: hci6: command tx timeout [ 155.249855] Bluetooth: hci7: command tx timeout [ 156.593939] Bluetooth: hci0: command tx timeout [ 156.660957] Bluetooth: hci1: command tx timeout [ 156.851938] Bluetooth: hci2: command tx timeout [ 156.852405] Bluetooth: hci3: command tx timeout [ 156.977953] Bluetooth: hci5: command tx timeout [ 157.042029] Bluetooth: hci4: command tx timeout [ 157.106936] Bluetooth: hci6: command tx timeout [ 157.297867] Bluetooth: hci7: command tx timeout [ 158.642903] Bluetooth: hci0: command tx timeout [ 158.706856] Bluetooth: hci1: command tx timeout [ 158.897894] Bluetooth: hci3: command tx timeout [ 158.898383] Bluetooth: hci2: command tx timeout [ 159.025876] Bluetooth: hci5: command tx timeout [ 159.090334] Bluetooth: hci4: command tx timeout [ 159.154052] Bluetooth: hci6: command tx timeout [ 159.348004] Bluetooth: hci7: command tx timeout [ 210.615972] [ 210.616194] ====================================================== [ 210.616704] WARNING: possible circular locking dependency detected [ 210.617225] 6.13.0-next-20250129 #1 Not tainted [ 210.617615] ------------------------------------------------------ [ 210.618922] kworker/u8:1/64 is trying to acquire lock: [ 210.619992] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.621905] [ 210.621905] but task is already holding lock: [ 210.623647] ffff8880283e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 210.625301] [ 210.625301] which lock already depends on the new lock. [ 210.625301] [ 210.625970] [ 210.625970] the existing dependency chain (in reverse order) is: [ 210.626581] [ 210.626581] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 210.627155] __mutex_lock+0x13d/0xb50 [ 210.627562] wiphy_register+0x1b2e/0x25d0 [ 210.628012] ieee80211_register_hw+0x23a4/0x3d60 [ 210.628479] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 210.628972] init_mac80211_hwsim+0x389/0x870 [ 210.629433] do_one_initcall+0xf9/0x640 [ 210.629862] kernel_init_freeable+0x53d/0x7a0 [ 210.630324] kernel_init+0x1e/0x2d0 [ 210.630696] ret_from_fork+0x48/0x80 [ 210.631071] ret_from_fork_asm+0x1a/0x30 [ 210.631504] [ 210.631504] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 210.632069] __lock_acquire+0x29fd/0x4580 [ 210.632503] lock_acquire+0x19b/0x520 [ 210.632907] __mutex_lock+0x13d/0xb50 [ 210.633320] unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.633870] unregister_netdevice_queue+0x224/0x2e0 [ 210.634353] _cfg80211_unregister_wdev+0x57b/0x700 [ 210.634846] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 210.635328] ieee80211_unregister_hw+0x55/0x3a0 [ 210.635788] hwsim_exit_net+0x3a0/0x730 [ 210.636206] ops_exit_list+0xb3/0x180 [ 210.636595] cleanup_net+0x546/0xad0 [ 210.636982] process_one_work+0x8ee/0x1a10 [ 210.637428] worker_thread+0x674/0xe70 [ 210.637844] kthread+0x3ab/0x720 [ 210.638219] ret_from_fork+0x48/0x80 [ 210.638595] ret_from_fork_asm+0x1a/0x30 [ 210.639023] [ 210.639023] other info that might help us debug this: [ 210.639023] [ 210.639679] Possible unsafe locking scenario: [ 210.639679] [ 210.640186] CPU0 CPU1 [ 210.640570] ---- ---- [ 210.640954] lock(&rdev->wiphy.mtx); [ 210.641299] lock(rtnl_mutex); [ 210.641795] lock(&rdev->wiphy.mtx); [ 210.642326] lock(rtnl_mutex); [ 210.642635] [ 210.642635] *** DEADLOCK *** [ 210.642635] [ 210.643126] 4 locks held by kworker/u8:1/64: [ 210.643508] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 210.644408] #1: ffff88800ee1fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 210.645261] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 210.646043] #3: ffff8880283e0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 210.646928] [ 210.646928] stack backtrace: [ 210.647308] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250129 #1 [ 210.647345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 210.647368] Workqueue: netns cleanup_net [ 210.647408] Call Trace: [ 210.647418] [ 210.647429] dump_stack_lvl+0xca/0x120 [ 210.647486] print_circular_bug+0x47b/0x750 [ 210.647533] check_noncircular+0x2e9/0x3c0 [ 210.647575] ? __pfx_check_noncircular+0x10/0x10 [ 210.647619] ? hlock_class+0x4e/0x130 [ 210.647650] ? srso_return_thunk+0x5/0x5f [ 210.647709] ? lockdep_lock+0xba/0x1b0 [ 210.647767] ? __pfx_lockdep_lock+0x10/0x10 [ 210.647831] __lock_acquire+0x29fd/0x4580 [ 210.647897] ? __pfx___lock_acquire+0x10/0x10 [ 210.647945] ? lock_release+0x20f/0x6f0 [ 210.647990] ? __pfx_lock_release+0x10/0x10 [ 210.648039] lock_acquire+0x19b/0x520 [ 210.648082] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.648131] ? __pfx_lock_acquire+0x10/0x10 [ 210.648177] ? srso_return_thunk+0x5/0x5f [ 210.648232] ? lock_release+0x20f/0x6f0 [ 210.648276] ? srso_return_thunk+0x5/0x5f [ 210.648331] ? lock_is_held_type+0x9e/0x120 [ 210.648386] ? srso_return_thunk+0x5/0x5f [ 210.648445] __mutex_lock+0x13d/0xb50 [ 210.648496] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.648541] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.648587] ? srso_return_thunk+0x5/0x5f [ 210.648642] ? synchronize_rcu_expedited+0x38a/0x420 [ 210.648687] ? __pfx___mutex_lock+0x10/0x10 [ 210.648740] ? __pfx_autoremove_wake_function+0x10/0x10 [ 210.648796] ? srso_return_thunk+0x5/0x5f [ 210.648851] ? kasan_quarantine_put+0x84/0x1e0 [ 210.648913] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 210.648949] ? srso_return_thunk+0x5/0x5f [ 210.649009] unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.649054] ? __virt_addr_valid+0x2e8/0x5d0 [ 210.649108] ? __pfx_lock_release+0x10/0x10 [ 210.649153] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 210.649199] ? find_held_lock+0x2c/0x110 [ 210.649259] ? srso_return_thunk+0x5/0x5f [ 210.649316] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 210.649376] ? srso_return_thunk+0x5/0x5f [ 210.649431] ? lock_release+0x20f/0x6f0 [ 210.649476] ? __pfx_lock_release+0x10/0x10 [ 210.649519] ? srso_return_thunk+0x5/0x5f [ 210.649574] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 210.649622] ? srso_return_thunk+0x5/0x5f [ 210.649683] unregister_netdevice_queue+0x224/0x2e0 [ 210.649726] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 210.649769] ? up_write+0x195/0x520 [ 210.649825] _cfg80211_unregister_wdev+0x57b/0x700 [ 210.649877] ? srso_return_thunk+0x5/0x5f [ 210.649936] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 210.649973] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 210.650040] ? srso_return_thunk+0x5/0x5f [ 210.650095] ? srso_return_thunk+0x5/0x5f [ 210.650150] ? synchronize_rcu+0x1ff/0x260 [ 210.650193] ieee80211_unregister_hw+0x55/0x3a0 [ 210.650237] hwsim_exit_net+0x3a0/0x730 [ 210.650279] ? __pfx_hwsim_exit_net+0x10/0x10 [ 210.650319] ? srso_return_thunk+0x5/0x5f [ 210.650374] ? netdev_run_todo+0x788/0x1040 [ 210.650421] ? srso_return_thunk+0x5/0x5f [ 210.650477] ? __pfx_hwsim_exit_net+0x10/0x10 [ 210.650520] ops_exit_list+0xb3/0x180 [ 210.650562] cleanup_net+0x546/0xad0 [ 210.650606] ? __pfx_cleanup_net+0x10/0x10 [ 210.650660] process_one_work+0x8ee/0x1a10 [ 210.650726] ? __pfx_lock_acquire+0x10/0x10 [ 210.650772] ? __pfx_process_one_work+0x10/0x10 [ 210.650831] ? srso_return_thunk+0x5/0x5f [ 210.650886] ? move_linked_works+0x172/0x270 [ 210.650931] ? srso_return_thunk+0x5/0x5f [ 210.650986] ? assign_work+0x196/0x240 [ 210.651044] worker_thread+0x674/0xe70 [ 210.651103] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 210.651156] ? srso_return_thunk+0x5/0x5f [ 210.651211] ? __pfx_worker_thread+0x10/0x10 [ 210.651272] kthread+0x3ab/0x720 [ 210.651324] ? __pfx_kthread+0x10/0x10 [ 210.651377] ? srso_return_thunk+0x5/0x5f [ 210.651432] ? finish_task_switch.isra.0+0x206/0x840 [ 210.651484] ? __pfx_kthread+0x10/0x10 [ 210.651538] ret_from_fork+0x48/0x80 [ 210.651570] ? __pfx_kthread+0x10/0x10 [ 210.651623] ret_from_fork_asm+0x1a/0x30 [ 210.651691] [ 212.346236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.350099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.352188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.364275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.369007] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.372925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.478059] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.479639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.481335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.483372] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.489951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.492274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.493038] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.497130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.498901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.500502] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.505470] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.507417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.547402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.557223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.580045] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.591030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.601046] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.604162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.620227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.621310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.623709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.624440] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.627593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.627716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.638942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.640707] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.641535] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.644660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.647257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.659100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.671211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.674024] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.674453] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.681092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.685899] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.691708] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.705865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.707869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.710862] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.712340] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.713641] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.718239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.449866] Bluetooth: hci0: command tx timeout [ 214.577924] Bluetooth: hci1: command tx timeout [ 214.578399] Bluetooth: hci2: command tx timeout [ 214.641959] Bluetooth: hci3: command tx timeout [ 214.705874] Bluetooth: hci5: command tx timeout [ 214.706339] Bluetooth: hci4: command tx timeout [ 214.769899] Bluetooth: hci6: command tx timeout [ 214.770358] Bluetooth: hci7: command tx timeout [ 216.497827] Bluetooth: hci0: command tx timeout [ 216.625829] Bluetooth: hci2: command tx timeout [ 216.626281] Bluetooth: hci1: command tx timeout [ 216.691795] Bluetooth: hci3: command tx timeout [ 216.754453] Bluetooth: hci4: command tx timeout [ 216.755152] Bluetooth: hci5: command tx timeout [ 216.817831] Bluetooth: hci7: command tx timeout [ 216.818259] Bluetooth: hci6: command tx timeout [ 218.545871] Bluetooth: hci0: command tx timeout [ 218.673813] Bluetooth: hci1: command tx timeout [ 218.674291] Bluetooth: hci2: command tx timeout [ 218.737821] Bluetooth: hci3: command tx timeout [ 218.801888] Bluetooth: hci5: command tx timeout [ 218.802363] Bluetooth: hci4: command tx timeout [ 218.865873] Bluetooth: hci6: command tx timeout [ 218.866342] Bluetooth: hci7: command tx timeout [ 220.594199] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 19:45:47 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283c500 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff88800ee1ed28 R8 =0000000000000001 R9 =ffffed1001dc3d96 R10=0000000000000000 R11=3a6b636f6c206762 R12=0000000000000041 R13=ffffffff886970b0 R14=ffffffff88697060 R15=ffffffff88697320 RIP=ffffffff8283c555 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056175a745090 CR3=0000000015e30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c000100dc0000000c000086450 XMM04=000000c000086540000000c00005b530 XMM05=000000c0000865a0000000c000086570 XMM06=000000c000086600000000c0000865d0 XMM07=000000c000086660000000c000086630 XMM08=000000c000086780000000c000086750 XMM09=000000c0000867e0000000c0000867b0 XMM10=000000c000086840000000c000086810 XMM11=000000c0000868a0000000c000086870 XMM12=000000c00005b590000000c0000868d0 XMM13=000000c0000a6a80000000c0000a6a50 XMM14=000000c0000a6ae0000000c0000a6ab0 XMM15=000000c0000a6b10000000c00005a5d0 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88800f549000 RCX=ffffffff81429b7a RDX=1ffff11001ea9200 RSI=0000000000000008 RDI=ffff88800f549000 RBP=0000000000200000 RSP=ffff88800bdffdb8 R8 =0000000000000000 R9 =ffffed1001ea9200 R10=ffff88800f549007 R11=0000000000000001 R12=ffff88806d255ff9 R13=ffffffff8862e510 R14=ffff88800bdf0000 R15=0000000000000086 RIP=ffffffff81429b8f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f00d0de84b8 CR3=0000000015e30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041751b2c80000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000