Warning: Permanently added '[localhost]:53898' (ECDSA) to the list of known hosts. 2025/01/18 18:29:43 fuzzer started 2025/01/18 18:29:44 dialing manager at localhost:44245 syzkaller login: [ 62.834880] cgroup: Unknown subsys name 'net' [ 62.915516] cgroup: Unknown subsys name 'cpuset' [ 62.933938] cgroup: Unknown subsys name 'rlimit' [ 68.989491] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 80.568052] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 18:30:02 syscalls: 2217 2025/01/18 18:30:02 code coverage: enabled 2025/01/18 18:30:02 comparison tracing: enabled 2025/01/18 18:30:02 extra coverage: enabled 2025/01/18 18:30:02 setuid sandbox: enabled 2025/01/18 18:30:02 namespace sandbox: enabled 2025/01/18 18:30:02 Android sandbox: enabled 2025/01/18 18:30:02 fault injection: enabled 2025/01/18 18:30:02 leak checking: enabled 2025/01/18 18:30:02 net packet injection: enabled 2025/01/18 18:30:02 net device setup: enabled 2025/01/18 18:30:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 18:30:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 18:30:02 USB emulation: enabled 2025/01/18 18:30:02 hci packet injection: enabled 2025/01/18 18:30:02 wifi device emulation: enabled 2025/01/18 18:30:02 802.15.4 emulation: enabled 2025/01/18 18:30:02 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 18:30:02 fetching corpus: 50, signal 25612/28650 (executing program) 2025/01/18 18:30:03 fetching corpus: 100, signal 38755/42572 (executing program) 2025/01/18 18:30:03 fetching corpus: 150, signal 43974/48671 (executing program) 2025/01/18 18:30:03 fetching corpus: 200, signal 50585/55807 (executing program) 2025/01/18 18:30:03 fetching corpus: 250, signal 56832/62425 (executing program) 2025/01/18 18:30:03 fetching corpus: 300, signal 61005/67043 (executing program) 2025/01/18 18:30:03 fetching corpus: 350, signal 65612/71827 (executing program) 2025/01/18 18:30:04 fetching corpus: 400, signal 69213/75577 (executing program) 2025/01/18 18:30:04 fetching corpus: 450, signal 72882/79237 (executing program) 2025/01/18 18:30:04 fetching corpus: 500, signal 76278/82605 (executing program) 2025/01/18 18:30:04 fetching corpus: 550, signal 79367/85567 (executing program) 2025/01/18 18:30:04 fetching corpus: 600, signal 81881/88012 (executing program) 2025/01/18 18:30:04 fetching corpus: 650, signal 84297/90185 (executing program) 2025/01/18 18:30:05 fetching corpus: 700, signal 85763/91694 (executing program) 2025/01/18 18:30:05 fetching corpus: 750, signal 87883/93538 (executing program) 2025/01/18 18:30:05 fetching corpus: 800, signal 89963/95280 (executing program) 2025/01/18 18:30:05 fetching corpus: 850, signal 91921/96876 (executing program) 2025/01/18 18:30:05 fetching corpus: 900, signal 94333/98678 (executing program) 2025/01/18 18:30:05 fetching corpus: 950, signal 95723/99770 (executing program) 2025/01/18 18:30:05 fetching corpus: 1000, signal 97218/100913 (executing program) 2025/01/18 18:30:06 fetching corpus: 1050, signal 98651/101921 (executing program) 2025/01/18 18:30:06 fetching corpus: 1100, signal 99755/102679 (executing program) 2025/01/18 18:30:06 fetching corpus: 1150, signal 101473/103756 (executing program) 2025/01/18 18:30:06 fetching corpus: 1200, signal 103710/105049 (executing program) 2025/01/18 18:30:06 fetching corpus: 1250, signal 104656/105602 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/105791 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/105832 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/105867 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/105900 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/105936 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/105962 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/105994 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106019 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106052 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106081 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106120 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106151 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106192 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106224 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106268 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106297 (executing program) 2025/01/18 18:30:06 fetching corpus: 1266, signal 104934/106333 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106369 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106391 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106427 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106468 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106502 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106521 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106557 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106589 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106628 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106659 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 18:30:07 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 18:30:11 starting 8 fuzzer processes 18:30:11 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[]) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x42, 0x0) 18:30:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000600)=0xc) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={[{@uid={'uid', 0x3d, r1}}]}) 18:30:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) 18:30:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) 18:30:12 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc00) write$P9_RMKDIR(r0, 0x0, 0x0) [ 90.310847] audit: type=1400 audit(1737225012.092:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:30:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2008061, &(0x7f0000000500)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30]}}]}) 18:30:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r0, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) setuid(0x0) 18:30:12 executing program 7: ioperm(0x0, 0x7ff, 0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 92.016718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.021599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.024978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.027524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.030125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.032779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.038812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.041991] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.045446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.047838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.051994] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.060070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.112951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.121521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.126161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.132728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.134909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.141429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.146287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.173215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.173951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.178958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.179344] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.185199] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.188029] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.188385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.197783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.198189] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.209020] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.209371] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.212386] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.215488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.219084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.220748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.225993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.235984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.240487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.241385] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.271266] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.277228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.278577] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.279436] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.326110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.333326] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.334013] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.341816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.348151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.350060] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.093374] Bluetooth: hci1: command tx timeout [ 94.156266] Bluetooth: hci2: command tx timeout [ 94.219800] Bluetooth: hci3: command tx timeout [ 94.283981] Bluetooth: hci0: command tx timeout [ 94.347836] Bluetooth: hci4: command tx timeout [ 94.347940] Bluetooth: hci5: command tx timeout [ 94.411781] Bluetooth: hci6: command tx timeout [ 94.411831] Bluetooth: hci7: command tx timeout [ 96.140460] Bluetooth: hci1: command tx timeout [ 96.205792] Bluetooth: hci2: command tx timeout [ 96.267712] Bluetooth: hci3: command tx timeout [ 96.331734] Bluetooth: hci0: command tx timeout [ 96.395735] Bluetooth: hci5: command tx timeout [ 96.395770] Bluetooth: hci4: command tx timeout [ 96.459750] Bluetooth: hci7: command tx timeout [ 96.459853] Bluetooth: hci6: command tx timeout [ 98.188071] Bluetooth: hci1: command tx timeout [ 98.251769] Bluetooth: hci2: command tx timeout [ 98.317005] Bluetooth: hci3: command tx timeout [ 98.379809] Bluetooth: hci0: command tx timeout [ 98.444061] Bluetooth: hci4: command tx timeout [ 98.444699] Bluetooth: hci5: command tx timeout [ 98.508295] Bluetooth: hci6: command tx timeout [ 98.508358] Bluetooth: hci7: command tx timeout [ 100.235686] Bluetooth: hci1: command tx timeout [ 100.300730] Bluetooth: hci2: command tx timeout [ 100.365059] Bluetooth: hci3: command tx timeout [ 100.428904] Bluetooth: hci0: command tx timeout [ 100.492720] Bluetooth: hci5: command tx timeout [ 100.492800] Bluetooth: hci4: command tx timeout [ 100.555853] Bluetooth: hci7: command tx timeout [ 100.555889] Bluetooth: hci6: command tx timeout [ 149.701330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.701461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.950713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.950795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.218077] [ 151.218335] ====================================================== [ 151.218898] WARNING: possible circular locking dependency detected [ 151.219484] 6.13.0-rc7-next-20250117 #1 Not tainted [ 151.219971] ------------------------------------------------------ [ 151.221176] kworker/u8:1/67 is trying to acquire lock: [ 151.222370] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.224487] [ 151.224487] but task is already holding lock: [ 151.225971] ffff88803c218768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.228015] [ 151.228015] which lock already depends on the new lock. [ 151.228015] [ 151.229227] [ 151.229227] the existing dependency chain (in reverse order) is: [ 151.229935] [ 151.229935] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 151.230621] __mutex_lock+0x13d/0xb50 [ 151.231086] wiphy_register+0x1b2e/0x25d0 [ 151.231589] ieee80211_register_hw+0x23a4/0x3d60 [ 151.232128] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 151.232696] init_mac80211_hwsim+0x389/0x870 [ 151.233217] do_one_initcall+0xf9/0x640 [ 151.233704] kernel_init_freeable+0x53d/0x7a0 [ 151.234235] kernel_init+0x1e/0x2d0 [ 151.234675] ret_from_fork+0x48/0x80 [ 151.235115] ret_from_fork_asm+0x1a/0x30 [ 151.235604] [ 151.235604] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 151.236223] __lock_acquire+0x29fd/0x4580 [ 151.236709] lock_acquire+0x19b/0x520 [ 151.237163] __mutex_lock+0x13d/0xb50 [ 151.237621] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.238234] unregister_netdevice_queue+0x224/0x2e0 [ 151.238792] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.239350] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.239907] ieee80211_unregister_hw+0x55/0x3a0 [ 151.240418] hwsim_exit_net+0x3a0/0x730 [ 151.240871] ops_exit_list+0xb3/0x180 [ 151.241305] cleanup_net+0x546/0xad0 [ 151.241732] process_one_work+0x8ee/0x1a10 [ 151.242230] worker_thread+0x674/0xe70 [ 151.242715] kthread+0x3ab/0x720 [ 151.243134] ret_from_fork+0x48/0x80 [ 151.243566] ret_from_fork_asm+0x1a/0x30 [ 151.244052] [ 151.244052] other info that might help us debug this: [ 151.244052] [ 151.244797] Possible unsafe locking scenario: [ 151.244797] [ 151.245360] CPU0 CPU1 [ 151.245804] ---- ---- [ 151.246247] lock(&rdev->wiphy.mtx); [ 151.246659] lock(rtnl_mutex); [ 151.247240] lock(&rdev->wiphy.mtx); [ 151.247877] lock(rtnl_mutex); [ 151.248235] [ 151.248235] *** DEADLOCK *** [ 151.248235] [ 151.248807] 4 locks held by kworker/u8:1/67: [ 151.249242] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 151.250255] #1: ffff88800dd1fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 151.251238] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 151.252157] #3: ffff88803c218768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 151.253177] [ 151.253177] stack backtrace: [ 151.253611] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 151.254413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 151.255193] Workqueue: netns cleanup_net [ 151.255613] Call Trace: [ 151.255871] [ 151.256100] dump_stack_lvl+0xca/0x120 [ 151.256526] print_circular_bug+0x47b/0x750 [ 151.256972] check_noncircular+0x2e9/0x3c0 [ 151.257405] ? __pfx_check_noncircular+0x10/0x10 [ 151.257884] ? hlock_class+0x4e/0x130 [ 151.258278] ? mark_lock+0xac/0xed0 [ 151.258670] ? srso_return_thunk+0x5/0x5f [ 151.259116] ? lockdep_lock+0xba/0x1b0 [ 151.259539] ? __pfx_lockdep_lock+0x10/0x10 [ 151.259994] __lock_acquire+0x29fd/0x4580 [ 151.260427] ? __pfx___lock_acquire+0x10/0x10 [ 151.260887] ? lock_release+0x20f/0x6f0 [ 151.261297] ? __pfx_lock_release+0x10/0x10 [ 151.261740] lock_acquire+0x19b/0x520 [ 151.262133] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.262718] ? __pfx_lock_acquire+0x10/0x10 [ 151.263161] ? srso_return_thunk+0x5/0x5f [ 151.263597] ? lock_release+0x20f/0x6f0 [ 151.264011] ? srso_return_thunk+0x5/0x5f [ 151.264446] ? lock_is_held_type+0x9e/0x120 [ 151.264879] ? srso_return_thunk+0x5/0x5f [ 151.265289] __mutex_lock+0x13d/0xb50 [ 151.265694] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.266275] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.266866] ? srso_return_thunk+0x5/0x5f [ 151.267283] ? synchronize_rcu_expedited+0x38a/0x420 [ 151.267756] ? __pfx___mutex_lock+0x10/0x10 [ 151.268202] ? __pfx_autoremove_wake_function+0x10/0x10 [ 151.268745] ? srso_return_thunk+0x5/0x5f [ 151.269178] ? kasan_quarantine_put+0x84/0x1e0 [ 151.269661] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 151.270105] ? srso_return_thunk+0x5/0x5f [ 151.270524] unregister_netdevice_many_notify+0x1612/0x1c80 [ 151.271044] ? __virt_addr_valid+0x2e8/0x5d0 [ 151.271482] ? __pfx_lock_release+0x10/0x10 [ 151.271900] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 151.272456] ? find_held_lock+0x2c/0x110 [ 151.272866] ? srso_return_thunk+0x5/0x5f [ 151.273297] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 151.273810] ? srso_return_thunk+0x5/0x5f [ 151.274251] ? lock_release+0x20f/0x6f0 [ 151.274667] ? __pfx_lock_release+0x10/0x10 [ 151.275107] ? srso_return_thunk+0x5/0x5f [ 151.275543] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.276074] ? srso_return_thunk+0x5/0x5f [ 151.276497] unregister_netdevice_queue+0x224/0x2e0 [ 151.276962] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 151.277507] ? up_write+0x195/0x520 [ 151.277904] _cfg80211_unregister_wdev+0x57b/0x700 [ 151.278408] ? srso_return_thunk+0x5/0x5f [ 151.278856] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 151.279359] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 151.279909] ? srso_return_thunk+0x5/0x5f [ 151.280344] ? srso_return_thunk+0x5/0x5f [ 151.280784] ? synchronize_rcu+0x1ff/0x260 [ 151.281194] ieee80211_unregister_hw+0x55/0x3a0 [ 151.281633] hwsim_exit_net+0x3a0/0x730 [ 151.282014] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.282454] ? srso_return_thunk+0x5/0x5f [ 151.282900] ? netdev_run_todo+0x788/0x1040 [ 151.283344] ? __pfx_hwsim_exit_net+0x10/0x10 [ 151.283804] ops_exit_list+0xb3/0x180 [ 151.284202] cleanup_net+0x546/0xad0 [ 151.284574] ? __pfx_cleanup_net+0x10/0x10 [ 151.284984] process_one_work+0x8ee/0x1a10 [ 151.285411] ? __pfx_lock_acquire+0x10/0x10 [ 151.285854] ? __pfx_process_one_work+0x10/0x10 [ 151.286340] ? srso_return_thunk+0x5/0x5f [ 151.286781] ? move_linked_works+0x172/0x270 [ 151.287233] ? srso_return_thunk+0x5/0x5f [ 151.287667] ? assign_work+0x196/0x240 [ 151.288087] worker_thread+0x674/0xe70 [ 151.288479] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 151.288996] ? srso_return_thunk+0x5/0x5f [ 151.289420] ? __pfx_worker_thread+0x10/0x10 [ 151.289878] kthread+0x3ab/0x720 [ 151.290245] ? __pfx_kthread+0x10/0x10 [ 151.290652] ? srso_return_thunk+0x5/0x5f [ 151.291076] ? finish_task_switch.isra.0+0x206/0x840 [ 151.291577] ? __pfx_kthread+0x10/0x10 [ 151.291980] ret_from_fork+0x48/0x80 [ 151.292345] ? __pfx_kthread+0x10/0x10 [ 151.292732] ret_from_fork_asm+0x1a/0x30 [ 151.293145] [ 153.894444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.899679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.902288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.910359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.913355] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.916650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.072041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.074125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.081934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.082507] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.083818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.085276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.086304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.086637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.096749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.112634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.116422] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.117947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.201086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.204151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.206239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.211052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.213459] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.215427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.266958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.272255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.279769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.281548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.291210] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.300851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.304866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.305320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.327010] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.363905] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.381280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.387735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.399408] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.404073] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.408541] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.408891] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.417369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.430869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.454917] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.464881] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.493161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.549835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.552545] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.559036] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.981756] Bluetooth: hci0: command tx timeout [ 156.107977] Bluetooth: hci2: command tx timeout [ 156.171866] Bluetooth: hci1: command tx timeout [ 156.236676] Bluetooth: hci3: command tx timeout [ 156.365640] Bluetooth: hci4: command tx timeout [ 156.493660] Bluetooth: hci5: command tx timeout [ 156.619692] Bluetooth: hci6: command tx timeout [ 156.684670] Bluetooth: hci7: command tx timeout [ 158.028159] Bluetooth: hci0: command tx timeout [ 158.156666] Bluetooth: hci2: command tx timeout [ 158.220627] Bluetooth: hci1: command tx timeout [ 158.283659] Bluetooth: hci3: command tx timeout [ 158.411776] Bluetooth: hci4: command tx timeout [ 158.541640] Bluetooth: hci5: command tx timeout [ 158.668703] Bluetooth: hci6: command tx timeout [ 158.731642] Bluetooth: hci7: command tx timeout [ 160.075693] Bluetooth: hci0: command tx timeout [ 160.203889] Bluetooth: hci2: command tx timeout [ 160.268633] Bluetooth: hci1: command tx timeout [ 160.331683] Bluetooth: hci3: command tx timeout [ 160.460668] Bluetooth: hci4: command tx timeout [ 160.587683] Bluetooth: hci5: command tx timeout [ 160.716690] Bluetooth: hci6: command tx timeout [ 160.779727] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:31:13 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800dd1ebb8 R8 =0000000000000001 R9 =ffffed1001ba3d67 R10=0000000000000032 R11=3a6b636f6c206762 R12=0000000000000032 R13=0000000000000001 R14=ffff888008fea008 R15=ffff88800dd1eeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556211a7beb0 CR3=000000000c33e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004185209480000000 XMM03=0000000a000000090000000600000000 XMM04=7320636578650a0073746e6968206365 XMM05=09006e65672063657865080073646565 XMM06=20636578650e007a7a75662063657865 XMM07=20636578650a006574616469646e6163 XMM08=20636578650a00657a696d696e696d20 XMM09=746e696820636578650a006873616d73 XMM10=650800736465657320636578650a0073 XMM11=7566206365786509006e656720636578 XMM12=616469646e616320636578650e007a7a XMM13=11006c61746f7420636578650a006574 XMM14=7472617473657220726f747563657865 XMM15=000065676169727420636578650b0073 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff857eb1f0 RCX=0000000000000000 RDX=1ffffd40001c33c8 RSI=00000000000000ff RDI=ffffed10070cf400 RBP=0000000000000000 RSP=ffff888038b9f9a8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffed10070cf200 R11=00000000000007e0 R12=ffffffff857eb200 R13=0000000000038679 R14=ffffea0000e19e40 R15=0000000000000000 RIP=ffffffff81a346e9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f56916b090 CR3=000000000c33e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000080000000000b12868 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=000000c000b33c8000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=6c61746f7420636578650a0073646565 XMM14=617473657220726f7475636578651100 XMM15=00007a7a756620636578650900737472