Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:23943' (ECDSA) to the list of known hosts. 2025/01/30 18:00:13 fuzzer started 2025/01/30 18:00:13 dialing manager at localhost:46401 syzkaller login: [ 62.784034] cgroup: Unknown subsys name 'net' [ 62.871402] cgroup: Unknown subsys name 'cpuset' [ 62.911044] cgroup: Unknown subsys name 'rlimit' 2025/01/30 18:00:30 syscalls: 2217 2025/01/30 18:00:30 code coverage: enabled 2025/01/30 18:00:30 comparison tracing: enabled 2025/01/30 18:00:30 extra coverage: enabled 2025/01/30 18:00:30 setuid sandbox: enabled 2025/01/30 18:00:30 namespace sandbox: enabled 2025/01/30 18:00:30 Android sandbox: enabled 2025/01/30 18:00:30 fault injection: enabled 2025/01/30 18:00:30 leak checking: enabled 2025/01/30 18:00:30 net packet injection: enabled 2025/01/30 18:00:30 net device setup: enabled 2025/01/30 18:00:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 18:00:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 18:00:30 USB emulation: enabled 2025/01/30 18:00:30 hci packet injection: enabled 2025/01/30 18:00:30 wifi device emulation: enabled 2025/01/30 18:00:30 802.15.4 emulation: enabled 2025/01/30 18:00:30 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 18:00:30 fetching corpus: 0, signal 0/0 (executing program) 2025/01/30 18:00:32 starting 8 fuzzer processes 18:00:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) 18:00:32 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x1) 18:00:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 18:00:32 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001940)=[{&(0x7f0000001880)="12edf2fa1959a3", 0x7, 0xfffffffffffffffa}], 0x0, 0x0) [ 81.488371] audit: type=1400 audit(1738260032.539:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:00:32 executing program 4: add_key(&(0x7f0000000580)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 18:00:32 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) read(r0, 0x0, 0x0) 18:00:32 executing program 6: mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) 18:00:32 executing program 7: tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 82.815658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.819359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.823211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.825480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.826308] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.832453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.833745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.838292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.841019] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.844382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.863240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.884039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.884246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.893329] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.896007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.915091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.932188] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.935309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.945647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.948399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.950398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.956532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.961426] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.963997] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.020162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.023661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.025828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.030957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.034376] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.047168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.054763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.065168] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.077198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.082208] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.086037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.088308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.094849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.108871] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.112035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.137338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.147214] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.166737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.228715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.242013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.261455] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.301133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.310941] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.316027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.892129] Bluetooth: hci1: command tx timeout [ 84.955719] Bluetooth: hci0: command tx timeout [ 85.018693] Bluetooth: hci3: command tx timeout [ 85.018749] Bluetooth: hci2: command tx timeout [ 85.083716] Bluetooth: hci4: command tx timeout [ 85.211686] Bluetooth: hci6: command tx timeout [ 85.274772] Bluetooth: hci5: command tx timeout [ 85.403216] Bluetooth: hci7: command tx timeout [ 86.940064] Bluetooth: hci1: command tx timeout [ 87.003737] Bluetooth: hci0: command tx timeout [ 87.066844] Bluetooth: hci2: command tx timeout [ 87.068673] Bluetooth: hci3: command tx timeout [ 87.130661] Bluetooth: hci4: command tx timeout [ 87.260584] Bluetooth: hci6: command tx timeout [ 87.322634] Bluetooth: hci5: command tx timeout [ 87.450716] Bluetooth: hci7: command tx timeout [ 88.986661] Bluetooth: hci1: command tx timeout [ 89.051695] Bluetooth: hci0: command tx timeout [ 89.114667] Bluetooth: hci2: command tx timeout [ 89.115708] Bluetooth: hci3: command tx timeout [ 89.179591] Bluetooth: hci4: command tx timeout [ 89.306634] Bluetooth: hci6: command tx timeout [ 89.371694] Bluetooth: hci5: command tx timeout [ 89.498780] Bluetooth: hci7: command tx timeout [ 91.034623] Bluetooth: hci1: command tx timeout [ 91.099796] Bluetooth: hci0: command tx timeout [ 91.162817] Bluetooth: hci3: command tx timeout [ 91.165565] Bluetooth: hci2: command tx timeout [ 91.227677] Bluetooth: hci4: command tx timeout [ 91.354865] Bluetooth: hci6: command tx timeout [ 91.418926] Bluetooth: hci5: command tx timeout [ 91.546690] Bluetooth: hci7: command tx timeout [ 145.459963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.464652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.467240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.478118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.484892] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.488611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.577278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.581517] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.583739] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.586829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.590963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.594778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.596874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.605658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.607398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.609775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.612480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.615897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.720689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.728459] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.750288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.764143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.792818] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.794729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.799145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.802879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.812906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.828225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.839889] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.850919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.911882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.922646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.928335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.953804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.966332] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 145.988873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.013450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.024996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.026771] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.040852] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.044804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.048096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.061711] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.062474] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.073328] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.077277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.099931] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.112091] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.546712] Bluetooth: hci0: command tx timeout [ 147.676646] Bluetooth: hci1: command tx timeout [ 147.676663] Bluetooth: hci2: command tx timeout [ 147.866823] Bluetooth: hci3: command tx timeout [ 147.995705] Bluetooth: hci4: command tx timeout [ 148.059181] Bluetooth: hci5: command tx timeout [ 148.186700] Bluetooth: hci7: command tx timeout [ 148.187876] Bluetooth: hci6: command tx timeout [ 149.594623] Bluetooth: hci0: command tx timeout [ 149.722636] Bluetooth: hci1: command tx timeout [ 149.723638] Bluetooth: hci2: command tx timeout [ 149.914721] Bluetooth: hci3: command tx timeout [ 150.042666] Bluetooth: hci4: command tx timeout [ 150.108677] Bluetooth: hci5: command tx timeout [ 150.235425] Bluetooth: hci6: command tx timeout [ 150.235951] Bluetooth: hci7: command tx timeout [ 151.645816] Bluetooth: hci0: command tx timeout [ 151.771900] Bluetooth: hci2: command tx timeout [ 151.771943] Bluetooth: hci1: command tx timeout [ 151.962672] Bluetooth: hci3: command tx timeout [ 152.090603] Bluetooth: hci4: command tx timeout [ 152.155559] Bluetooth: hci5: command tx timeout [ 152.282629] Bluetooth: hci7: command tx timeout [ 152.282651] Bluetooth: hci6: command tx timeout [ 153.690649] Bluetooth: hci0: command tx timeout [ 153.818907] Bluetooth: hci1: command tx timeout [ 153.819357] Bluetooth: hci2: command tx timeout [ 154.011592] Bluetooth: hci3: command tx timeout [ 154.139586] Bluetooth: hci4: command tx timeout [ 154.203700] Bluetooth: hci5: command tx timeout [ 154.332575] Bluetooth: hci6: command tx timeout [ 154.333068] Bluetooth: hci7: command tx timeout [ 205.428091] [ 205.428352] ====================================================== [ 205.428970] WARNING: possible circular locking dependency detected [ 205.429576] 6.13.0-next-20250130 #1 Not tainted [ 205.430047] ------------------------------------------------------ [ 205.431200] kworker/u8:1/63 is trying to acquire lock: [ 205.432351] ffffffff86219b68 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 205.435778] [ 205.435778] but task is already holding lock: [ 205.437203] ffff888036140768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 205.438155] [ 205.438155] which lock already depends on the new lock. [ 205.438155] [ 205.438895] [ 205.438895] the existing dependency chain (in reverse order) is: [ 205.439610] [ 205.439610] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 205.440270] __mutex_lock+0x13d/0xb50 [ 205.440749] wiphy_register+0x1b2e/0x25d0 [ 205.441279] ieee80211_register_hw+0x23a4/0x3d60 [ 205.441817] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 205.442371] init_mac80211_hwsim+0x389/0x870 [ 205.442896] do_one_initcall+0xf9/0x640 [ 205.443400] kernel_init_freeable+0x53d/0x7a0 [ 205.443938] kernel_init+0x1e/0x2d0 [ 205.444390] ret_from_fork+0x48/0x80 [ 205.444821] ret_from_fork_asm+0x1a/0x30 [ 205.445287] [ 205.445287] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 205.445949] __lock_acquire+0x29fd/0x4580 [ 205.447005] lock_acquire+0x19b/0x520 [ 205.447476] __mutex_lock+0x13d/0xb50 [ 205.447940] unregister_netdevice_many_notify+0x1612/0x1c80 [ 205.448558] unregister_netdevice_queue+0x224/0x2e0 [ 205.449137] _cfg80211_unregister_wdev+0x57b/0x700 [ 205.449669] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 205.450192] ieee80211_unregister_hw+0x55/0x3a0 [ 205.450679] hwsim_exit_net+0x3a0/0x730 [ 205.451104] ops_exit_list+0xb3/0x180 [ 205.451504] cleanup_net+0x546/0xad0 [ 205.451910] process_one_work+0x8ee/0x1a10 [ 205.452375] worker_thread+0x674/0xe70 [ 205.452824] kthread+0x3ab/0x720 [ 205.453235] ret_from_fork+0x48/0x80 [ 205.453639] ret_from_fork_asm+0x1a/0x30 [ 205.454134] [ 205.454134] other info that might help us debug this: [ 205.454134] [ 205.454766] Possible unsafe locking scenario: [ 205.454766] [ 205.455281] CPU0 CPU1 [ 205.455676] ---- ---- [ 205.456068] lock(&rdev->wiphy.mtx); [ 205.456417] lock(rtnl_mutex); [ 205.456916] lock(&rdev->wiphy.mtx); [ 205.457476] lock(rtnl_mutex); [ 205.457784] [ 205.457784] *** DEADLOCK *** [ 205.457784] [ 205.458270] 4 locks held by kworker/u8:1/63: [ 205.458657] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 205.459554] #1: ffff88800bbc7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 205.460433] #2: ffffffff8620db90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 205.461237] #3: ffff888036140768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 205.462127] [ 205.462127] stack backtrace: [ 205.462505] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250130 #1 [ 205.462542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 205.462566] Workqueue: netns cleanup_net [ 205.462608] Call Trace: [ 205.462620] [ 205.462633] dump_stack_lvl+0xca/0x120 [ 205.462693] print_circular_bug+0x47b/0x750 [ 205.462741] check_noncircular+0x2e9/0x3c0 [ 205.462783] ? srso_return_thunk+0x5/0x5f [ 205.462842] ? __pfx_check_noncircular+0x10/0x10 [ 205.462884] ? hlock_class+0x4e/0x130 [ 205.462915] ? mark_lock+0xac/0xed0 [ 205.462957] ? srso_return_thunk+0x5/0x5f [ 205.463014] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 205.463061] ? lockdep_lock+0xba/0x1b0 [ 205.463122] ? __pfx_lockdep_lock+0x10/0x10 [ 205.463186] __lock_acquire+0x29fd/0x4580 [ 205.463242] ? __pfx___lock_acquire+0x10/0x10 [ 205.463287] ? lock_release+0x20f/0x6f0 [ 205.463332] ? __pfx_lock_release+0x10/0x10 [ 205.463381] lock_acquire+0x19b/0x520 [ 205.463426] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 205.463476] ? __pfx_lock_acquire+0x10/0x10 [ 205.463522] ? srso_return_thunk+0x5/0x5f [ 205.463578] ? lock_release+0x20f/0x6f0 [ 205.463624] ? srso_return_thunk+0x5/0x5f [ 205.463680] ? lock_is_held_type+0x9e/0x120 [ 205.463737] ? srso_return_thunk+0x5/0x5f [ 205.463797] __mutex_lock+0x13d/0xb50 [ 205.463851] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 205.463897] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 205.463943] ? srso_return_thunk+0x5/0x5f [ 205.464000] ? synchronize_rcu_expedited+0x38a/0x420 [ 205.464046] ? __pfx___mutex_lock+0x10/0x10 [ 205.464101] ? __pfx_autoremove_wake_function+0x10/0x10 [ 205.464157] ? srso_return_thunk+0x5/0x5f [ 205.464213] ? kasan_quarantine_put+0x84/0x1e0 [ 205.464277] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 205.464313] ? srso_return_thunk+0x5/0x5f [ 205.464374] unregister_netdevice_many_notify+0x1612/0x1c80 [ 205.464421] ? __virt_addr_valid+0x2e8/0x5d0 [ 205.464475] ? __pfx_lock_release+0x10/0x10 [ 205.464522] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 205.464568] ? find_held_lock+0x2c/0x110 [ 205.464628] ? srso_return_thunk+0x5/0x5f [ 205.464687] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 205.464749] ? srso_return_thunk+0x5/0x5f [ 205.464806] ? lock_release+0x20f/0x6f0 [ 205.464851] ? __pfx_lock_release+0x10/0x10 [ 205.464895] ? srso_return_thunk+0x5/0x5f [ 205.464952] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 205.465011] ? srso_return_thunk+0x5/0x5f [ 205.465073] unregister_netdevice_queue+0x224/0x2e0 [ 205.465117] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 205.465161] ? up_write+0x195/0x520 [ 205.465218] _cfg80211_unregister_wdev+0x57b/0x700 [ 205.465272] ? srso_return_thunk+0x5/0x5f [ 205.465333] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 205.465371] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 205.465410] ? srso_return_thunk+0x5/0x5f [ 205.465466] ? srso_return_thunk+0x5/0x5f [ 205.465523] ? synchronize_rcu+0x1ff/0x260 [ 205.465567] ieee80211_unregister_hw+0x55/0x3a0 [ 205.465613] hwsim_exit_net+0x3a0/0x730 [ 205.465656] ? __pfx_hwsim_exit_net+0x10/0x10 [ 205.465697] ? srso_return_thunk+0x5/0x5f [ 205.465753] ? netdev_run_todo+0x788/0x1040 [ 205.465801] ? srso_return_thunk+0x5/0x5f [ 205.465859] ? __pfx_hwsim_exit_net+0x10/0x10 [ 205.465902] ops_exit_list+0xb3/0x180 [ 205.465945] cleanup_net+0x546/0xad0 [ 205.465991] ? __pfx_cleanup_net+0x10/0x10 [ 205.466045] process_one_work+0x8ee/0x1a10 [ 205.466113] ? __pfx_lock_acquire+0x10/0x10 [ 205.466159] ? __pfx_process_one_work+0x10/0x10 [ 205.466220] ? srso_return_thunk+0x5/0x5f [ 205.466277] ? move_linked_works+0x172/0x270 [ 205.466322] ? srso_return_thunk+0x5/0x5f [ 205.466379] ? assign_work+0x196/0x240 [ 205.466438] worker_thread+0x674/0xe70 [ 205.466499] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 205.466552] ? srso_return_thunk+0x5/0x5f [ 205.466609] ? __pfx_worker_thread+0x10/0x10 [ 205.466671] kthread+0x3ab/0x720 [ 205.466725] ? __pfx_kthread+0x10/0x10 [ 205.466779] ? srso_return_thunk+0x5/0x5f [ 205.466836] ? finish_task_switch.isra.0+0x206/0x840 [ 205.466889] ? __pfx_kthread+0x10/0x10 [ 205.466945] ret_from_fork+0x48/0x80 [ 205.466977] ? __pfx_kthread+0x10/0x10 [ 205.467032] ret_from_fork_asm+0x1a/0x30 [ 205.467100] [ 207.207047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.210795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.215843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.223038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.225399] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.227011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.271099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.273793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.283197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.288780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.294173] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.296071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.332933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.339859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.341983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.350959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.353120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.354874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.399939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.406853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.408378] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.412472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.414721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.421828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.426448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.428383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.430707] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.432309] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.435878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.437995] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.441756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.456203] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.463939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.472056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.486095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.486152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.503448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.513976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.520035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.526628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.528321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.533751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.537862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.540075] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.541936] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.609792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.622670] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.634880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.242644] Bluetooth: hci0: command tx timeout [ 209.370866] Bluetooth: hci1: command tx timeout [ 209.434940] Bluetooth: hci2: command tx timeout [ 209.563618] Bluetooth: hci3: command tx timeout [ 209.564487] Bluetooth: hci7: command tx timeout [ 209.626725] Bluetooth: hci5: command tx timeout [ 209.627778] Bluetooth: hci4: command tx timeout [ 209.690684] Bluetooth: hci6: command tx timeout [ 211.291655] Bluetooth: hci0: command tx timeout [ 211.418753] Bluetooth: hci1: command tx timeout [ 211.482607] Bluetooth: hci2: command tx timeout [ 211.610762] Bluetooth: hci7: command tx timeout [ 211.611269] Bluetooth: hci3: command tx timeout [ 211.676370] Bluetooth: hci5: command tx timeout [ 211.676861] Bluetooth: hci4: command tx timeout [ 211.739569] Bluetooth: hci6: command tx timeout [ 213.339544] Bluetooth: hci0: command tx timeout [ 213.466658] Bluetooth: hci1: command tx timeout [ 213.531581] Bluetooth: hci2: command tx timeout [ 213.658567] Bluetooth: hci7: command tx timeout [ 213.659027] Bluetooth: hci3: command tx timeout [ 213.722684] Bluetooth: hci5: command tx timeout [ 213.723137] Bluetooth: hci4: command tx timeout [ 213.787548] Bluetooth: hci6: command tx timeout [ 215.387680] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 18:02:36 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283d2d5 RDI=ffffffff88693060 RBP=ffffffff88693020 RSP=ffff88800bbc6c90 R8 =0000000000000000 R9 =ffffed1001d5e046 R10=0000000000000032 R11=6666666666666666 R12=0000000000000032 R13=0000000000000010 R14=ffffffff88693020 R15=ffffffff8283d2c0 RIP=ffffffff8283d32d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564c2e01c4d0 CR3=0000000009d06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000002000000000000564c2dff1820 XMM05=0000564c2dff4cd00000564c2e02dc60 XMM06=0000564c2e006ca00000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800f020000 RBX=ffff88806d739d28 RCX=ffffffff81429b7a RDX=1ffff1100171ce80 RSI=0000000000000008 RDI=ffff88800b8e7400 RBP=0000000000000000 RSP=ffff88800f02fdd0 R8 =0000000000000000 R9 =ffffed100171ce80 R10=ffff88800b8e7407 R11=ffff88800f0204b8 R12=ffff88806d739ff9 R13=ffffffff8862a6e0 R14=ffff88800f020000 R15=0000000000000086 RIP=ffffffff81af012a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faeda5ba5f0 CR3=0000000014b6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2036333a32303a3831203033206e614a XMM01=617420646570706f7453203a5d315b64 XMM02=6c6c694b20465220657661532f64616f XMM03=65747379732072656c6c616b7a797320 XMM04=2032333a30303a3831203033206e614a XMM05=65636f72703d7373616c63742030733a XMM06=733a755f6d65747379733d747865746e XMM07=725f6d65747379733a755f6d65747379 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000