Warning: Permanently added '[localhost]:18697' (ECDSA) to the list of known hosts. 2025/01/18 19:00:18 fuzzer started 2025/01/18 19:00:18 dialing manager at localhost:44245 syzkaller login: [ 63.012607] cgroup: Unknown subsys name 'net' [ 63.103410] cgroup: Unknown subsys name 'cpuset' [ 63.138027] cgroup: Unknown subsys name 'rlimit' [ 68.458739] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.381478] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 19:00:35 syscalls: 2217 2025/01/18 19:00:35 code coverage: enabled 2025/01/18 19:00:35 comparison tracing: enabled 2025/01/18 19:00:35 extra coverage: enabled 2025/01/18 19:00:35 setuid sandbox: enabled 2025/01/18 19:00:35 namespace sandbox: enabled 2025/01/18 19:00:35 Android sandbox: enabled 2025/01/18 19:00:35 fault injection: enabled 2025/01/18 19:00:35 leak checking: enabled 2025/01/18 19:00:35 net packet injection: enabled 2025/01/18 19:00:35 net device setup: enabled 2025/01/18 19:00:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 19:00:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 19:00:35 USB emulation: enabled 2025/01/18 19:00:35 hci packet injection: enabled 2025/01/18 19:00:35 wifi device emulation: enabled 2025/01/18 19:00:35 802.15.4 emulation: enabled 2025/01/18 19:00:35 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 19:00:35 fetching corpus: 50, signal 29240/32148 (executing program) 2025/01/18 19:00:36 fetching corpus: 100, signal 41741/45466 (executing program) 2025/01/18 19:00:36 fetching corpus: 150, signal 49446/53826 (executing program) 2025/01/18 19:00:36 fetching corpus: 200, signal 53914/58886 (executing program) 2025/01/18 19:00:36 fetching corpus: 250, signal 58095/63595 (executing program) 2025/01/18 19:00:36 fetching corpus: 300, signal 61221/67213 (executing program) 2025/01/18 19:00:36 fetching corpus: 350, signal 64851/71137 (executing program) 2025/01/18 19:00:37 fetching corpus: 400, signal 67623/74191 (executing program) 2025/01/18 19:00:37 fetching corpus: 450, signal 70309/77070 (executing program) 2025/01/18 19:00:37 fetching corpus: 500, signal 74399/80963 (executing program) 2025/01/18 19:00:37 fetching corpus: 550, signal 77120/83724 (executing program) 2025/01/18 19:00:37 fetching corpus: 600, signal 79856/86324 (executing program) 2025/01/18 19:00:37 fetching corpus: 650, signal 84523/90284 (executing program) 2025/01/18 19:00:38 fetching corpus: 700, signal 86703/92245 (executing program) 2025/01/18 19:00:38 fetching corpus: 750, signal 88904/94204 (executing program) 2025/01/18 19:00:38 fetching corpus: 800, signal 91012/95935 (executing program) 2025/01/18 19:00:38 fetching corpus: 850, signal 92613/97265 (executing program) 2025/01/18 19:00:38 fetching corpus: 900, signal 94246/98614 (executing program) 2025/01/18 19:00:38 fetching corpus: 950, signal 96629/100346 (executing program) 2025/01/18 19:00:39 fetching corpus: 1000, signal 98153/101493 (executing program) 2025/01/18 19:00:39 fetching corpus: 1050, signal 99629/102474 (executing program) 2025/01/18 19:00:39 fetching corpus: 1100, signal 100899/103357 (executing program) 2025/01/18 19:00:39 fetching corpus: 1150, signal 102209/104181 (executing program) 2025/01/18 19:00:39 fetching corpus: 1200, signal 103431/104934 (executing program) 2025/01/18 19:00:39 fetching corpus: 1250, signal 104369/105495 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/105841 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/105881 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/105921 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/105951 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/105973 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106011 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106040 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106078 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106106 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106142 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106175 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106212 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106250 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106280 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106302 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106333 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106375 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106403 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106439 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106469 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106502 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106534 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106561 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106587 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106615 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106658 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106695 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106707 (executing program) 2025/01/18 19:00:40 fetching corpus: 1268, signal 104940/106707 (executing program) 2025/01/18 19:00:44 starting 8 fuzzer processes 19:00:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000009440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 19:00:44 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14}, 0x14) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RVERSION(r0, &(0x7f0000019200)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) [ 88.373976] audit: type=1400 audit(1737226844.142:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:00:44 executing program 2: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x47140adcdf8d55b2) 19:00:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 19:00:44 executing program 4: modify_ldt$write(0x1, 0x0, 0x10) 19:00:44 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 19:00:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp6\x00') pread64(r2, &(0x7f0000000000)=""/31, 0x1f, 0x0) 19:00:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0x100000001) [ 89.522695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.527711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.530476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.536425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.540999] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.543740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.714323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.717136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.719224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.724625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.736252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.739263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.843446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.850662] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.852606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.866276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.869128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.872588] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.974020] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.976278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.979131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.981759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.984708] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.985389] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.022763] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.025173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.025772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.028503] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.029737] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.030681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.094931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.096238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.115559] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.119018] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.122404] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.130306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.132308] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.145298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.147370] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.151380] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.152984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.155614] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.156785] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.157483] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.162726] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.242993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.244004] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.244470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.614675] Bluetooth: hci0: command tx timeout [ 91.806931] Bluetooth: hci1: command tx timeout [ 91.934008] Bluetooth: hci2: command tx timeout [ 92.061993] Bluetooth: hci4: command tx timeout [ 92.062532] Bluetooth: hci3: command tx timeout [ 92.254090] Bluetooth: hci5: command tx timeout [ 92.318653] Bluetooth: hci6: command tx timeout [ 92.319718] Bluetooth: hci7: command tx timeout [ 93.661956] Bluetooth: hci0: command tx timeout [ 93.854891] Bluetooth: hci1: command tx timeout [ 93.981934] Bluetooth: hci2: command tx timeout [ 94.110115] Bluetooth: hci3: command tx timeout [ 94.110289] Bluetooth: hci4: command tx timeout [ 94.302305] Bluetooth: hci5: command tx timeout [ 94.366062] Bluetooth: hci7: command tx timeout [ 94.366213] Bluetooth: hci6: command tx timeout [ 95.710245] Bluetooth: hci0: command tx timeout [ 95.902378] Bluetooth: hci1: command tx timeout [ 96.029993] Bluetooth: hci2: command tx timeout [ 96.158966] Bluetooth: hci4: command tx timeout [ 96.159089] Bluetooth: hci3: command tx timeout [ 96.350325] Bluetooth: hci5: command tx timeout [ 96.414111] Bluetooth: hci7: command tx timeout [ 96.414228] Bluetooth: hci6: command tx timeout [ 97.758117] Bluetooth: hci0: command tx timeout [ 97.950208] Bluetooth: hci1: command tx timeout [ 98.077983] Bluetooth: hci2: command tx timeout [ 98.206663] Bluetooth: hci3: command tx timeout [ 98.206926] Bluetooth: hci4: command tx timeout [ 98.397991] Bluetooth: hci5: command tx timeout [ 98.462059] Bluetooth: hci7: command tx timeout [ 98.462238] Bluetooth: hci6: command tx timeout [ 150.618395] [ 150.618848] ====================================================== [ 150.620010] WARNING: possible circular locking dependency detected [ 150.621175] 6.13.0-rc7-next-20250117 #1 Not tainted [ 150.626090] ------------------------------------------------------ [ 150.628150] kworker/u8:1/65 is trying to acquire lock: [ 150.629150] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 150.631105] [ 150.631105] but task is already holding lock: [ 150.632202] ffff888015f98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 150.634106] [ 150.634106] which lock already depends on the new lock. [ 150.634106] [ 150.635586] [ 150.635586] the existing dependency chain (in reverse order) is: [ 150.636946] [ 150.636946] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 150.638225] __mutex_lock+0x13d/0xb50 [ 150.639101] wiphy_register+0x1b2e/0x25d0 [ 150.640071] ieee80211_register_hw+0x23a4/0x3d60 [ 150.641102] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 150.642190] init_mac80211_hwsim+0x389/0x870 [ 150.643205] do_one_initcall+0xf9/0x640 [ 150.644135] kernel_init_freeable+0x53d/0x7a0 [ 150.645151] kernel_init+0x1e/0x2d0 [ 150.645961] ret_from_fork+0x48/0x80 [ 150.646803] ret_from_fork_asm+0x1a/0x30 [ 150.647768] [ 150.647768] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 150.648957] __lock_acquire+0x29fd/0x4580 [ 150.649876] lock_acquire+0x19b/0x520 [ 150.650738] __mutex_lock+0x13d/0xb50 [ 150.651636] unregister_netdevice_many_notify+0x1612/0x1c80 [ 150.652819] unregister_netdevice_queue+0x224/0x2e0 [ 150.653883] _cfg80211_unregister_wdev+0x57b/0x700 [ 150.654949] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 150.656017] ieee80211_unregister_hw+0x55/0x3a0 [ 150.657034] hwsim_exit_net+0x3a0/0x730 [ 150.657935] ops_exit_list+0xb3/0x180 [ 150.658804] cleanup_net+0x546/0xad0 [ 150.659667] process_one_work+0x8ee/0x1a10 [ 150.660644] worker_thread+0x674/0xe70 [ 150.661556] kthread+0x3ab/0x720 [ 150.662365] ret_from_fork+0x48/0x80 [ 150.663203] ret_from_fork_asm+0x1a/0x30 [ 150.664145] [ 150.664145] other info that might help us debug this: [ 150.664145] [ 150.665564] Possible unsafe locking scenario: [ 150.665564] [ 150.666648] CPU0 CPU1 [ 150.667514] ---- ---- [ 150.668371] lock(&rdev->wiphy.mtx); [ 150.669140] lock(rtnl_mutex); [ 150.670274] lock(&rdev->wiphy.mtx); [ 150.671483] lock(rtnl_mutex); [ 150.672169] [ 150.672169] *** DEADLOCK *** [ 150.672169] [ 150.673273] 4 locks held by kworker/u8:1/65: [ 150.674112] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 150.676092] #1: ffff88800edbfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 150.677996] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 150.679794] #3: ffff888015f98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 150.681790] [ 150.681790] stack backtrace: [ 150.682629] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 150.684181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 150.685661] Workqueue: netns cleanup_net [ 150.686458] Call Trace: [ 150.686943] [ 150.687388] dump_stack_lvl+0xca/0x120 [ 150.688191] print_circular_bug+0x47b/0x750 [ 150.689035] check_noncircular+0x2e9/0x3c0 [ 150.689879] ? __pfx_check_noncircular+0x10/0x10 [ 150.690798] ? hlock_class+0x4e/0x130 [ 150.691548] ? mark_lock+0xac/0xed0 [ 150.692284] ? srso_return_thunk+0x5/0x5f [ 150.693136] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 150.694030] ? lockdep_lock+0xba/0x1b0 [ 150.694843] ? __pfx_lockdep_lock+0x10/0x10 [ 150.695745] __lock_acquire+0x29fd/0x4580 [ 150.696609] ? __pfx___lock_acquire+0x10/0x10 [ 150.697503] ? lock_release+0x20f/0x6f0 [ 150.698304] ? __pfx_lock_release+0x10/0x10 [ 150.699163] lock_acquire+0x19b/0x520 [ 150.699944] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 150.701077] ? __pfx_lock_acquire+0x10/0x10 [ 150.701931] ? srso_return_thunk+0x5/0x5f [ 150.702782] ? lock_release+0x20f/0x6f0 [ 150.703584] ? srso_return_thunk+0x5/0x5f [ 150.704432] ? lock_is_held_type+0x9e/0x120 [ 150.705309] ? srso_return_thunk+0x5/0x5f [ 150.706174] __mutex_lock+0x13d/0xb50 [ 150.706955] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 150.708082] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 150.709191] ? srso_return_thunk+0x5/0x5f [ 150.710040] ? synchronize_rcu_expedited+0x38a/0x420 [ 150.711026] ? __pfx___mutex_lock+0x10/0x10 [ 150.711892] ? __pfx_autoremove_wake_function+0x10/0x10 [ 150.712933] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 150.713809] unregister_netdevice_many_notify+0x1612/0x1c80 [ 150.714895] ? __virt_addr_valid+0x2e8/0x5d0 [ 150.715795] ? __pfx_lock_release+0x10/0x10 [ 150.716642] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 150.717785] ? find_held_lock+0x2c/0x110 [ 150.718617] ? srso_return_thunk+0x5/0x5f [ 150.719491] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 150.720485] ? srso_return_thunk+0x5/0x5f [ 150.721340] ? lock_release+0x20f/0x6f0 [ 150.722142] ? __pfx_lock_release+0x10/0x10 [ 150.723002] ? srso_return_thunk+0x5/0x5f [ 150.723861] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 150.724875] ? srso_return_thunk+0x5/0x5f [ 150.725723] unregister_netdevice_queue+0x224/0x2e0 [ 150.726693] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 150.727761] ? up_write+0x195/0x520 [ 150.728536] _cfg80211_unregister_wdev+0x57b/0x700 [ 150.729513] ? srso_return_thunk+0x5/0x5f [ 150.730366] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 150.731340] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 150.732394] ? srso_return_thunk+0x5/0x5f [ 150.733233] ? srso_return_thunk+0x5/0x5f [ 150.734074] ? synchronize_rcu+0x1ff/0x260 [ 150.734902] ieee80211_unregister_hw+0x55/0x3a0 [ 150.735840] hwsim_exit_net+0x3a0/0x730 [ 150.736645] ? __pfx_hwsim_exit_net+0x10/0x10 [ 150.737534] ? srso_return_thunk+0x5/0x5f [ 150.738384] ? netdev_run_todo+0x788/0x1040 [ 150.739264] ? __pfx_hwsim_exit_net+0x10/0x10 [ 150.740147] ops_exit_list+0xb3/0x180 [ 150.740914] cleanup_net+0x546/0xad0 [ 150.741669] ? __pfx_cleanup_net+0x10/0x10 [ 150.742535] process_one_work+0x8ee/0x1a10 [ 150.743446] ? __pfx_lock_acquire+0x10/0x10 [ 150.744306] ? __pfx_process_one_work+0x10/0x10 [ 150.745258] ? srso_return_thunk+0x5/0x5f [ 150.746099] ? move_linked_works+0x172/0x270 [ 150.746975] ? srso_return_thunk+0x5/0x5f [ 150.747821] ? assign_work+0x196/0x240 [ 150.748623] worker_thread+0x674/0xe70 [ 150.749434] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 150.750469] ? srso_return_thunk+0x5/0x5f [ 150.751331] ? __pfx_worker_thread+0x10/0x10 [ 150.752249] kthread+0x3ab/0x720 [ 150.752972] ? __pfx_kthread+0x10/0x10 [ 150.753765] ? srso_return_thunk+0x5/0x5f [ 150.754612] ? finish_task_switch.isra.0+0x206/0x840 [ 150.755624] ? __pfx_kthread+0x10/0x10 [ 150.756420] ret_from_fork+0x48/0x80 [ 150.757141] ? __pfx_kthread+0x10/0x10 [ 150.757933] ret_from_fork_asm+0x1a/0x30 [ 150.758781] [ 152.548566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.549420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.550566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.555338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.559627] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.560757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.695699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.703359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.709805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.723164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.727026] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.727552] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.728601] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.729132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.733229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.753119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.755563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.757580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.758752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.761726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.766661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.781945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.784675] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.785203] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.810721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.814397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.818284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.818415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.828905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.837115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.849293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.850418] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.852270] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.859079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.859416] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.862006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.889191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.894093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.896736] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.926519] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.929483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.943755] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.948581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.956964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.963548] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.968132] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.979053] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.979562] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.589883] Bluetooth: hci0: command tx timeout [ 154.782540] Bluetooth: hci2: command tx timeout [ 154.782620] Bluetooth: hci1: command tx timeout [ 154.845923] Bluetooth: hci3: command tx timeout [ 154.910076] Bluetooth: hci4: command tx timeout [ 154.910234] Bluetooth: hci5: command tx timeout [ 155.038912] Bluetooth: hci7: command tx timeout [ 155.038993] Bluetooth: hci6: command tx timeout [ 156.638942] Bluetooth: hci0: command tx timeout [ 156.829968] Bluetooth: hci1: command tx timeout [ 156.830124] Bluetooth: hci2: command tx timeout [ 156.895026] Bluetooth: hci3: command tx timeout [ 156.958918] Bluetooth: hci5: command tx timeout [ 156.958999] Bluetooth: hci4: command tx timeout [ 157.085908] Bluetooth: hci6: command tx timeout [ 157.085991] Bluetooth: hci7: command tx timeout [ 158.685896] Bluetooth: hci0: command tx timeout [ 158.877936] Bluetooth: hci1: command tx timeout [ 158.878141] Bluetooth: hci2: command tx timeout [ 158.941875] Bluetooth: hci3: command tx timeout [ 159.005999] Bluetooth: hci5: command tx timeout [ 159.006788] Bluetooth: hci4: command tx timeout [ 159.135454] Bluetooth: hci6: command tx timeout [ 159.135547] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:01:46 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=ffff88800eb4d340 RCX=ffffffff81429a0f RDX=0000000000000000 RSI=0000000000200000 RDI=0000000000000000 RBP=0000000000200000 RSP=ffff88800edd7db0 R8 =0000000000000000 R9 =ffffed1001d63f80 R10=ffff88800eb1fc07 R11=00000000f5257d14 R12=ffff88807506fff9 R13=ffffffff8864b2b0 R14=ffff88800eb4d340 R15=0000000000000086 RIP=ffffffff81719c48 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0fa2ad2038 CR3=000000002bb40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000001ffffffff000056403b74e240 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000056403b7ccfc0000056403b74da50 XMM06=000056403b78e560ffffffff00000003 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800edbebb8 R8 =0000000000000001 R9 =ffffed1001db7d67 R10=0000000000000030 R11=2d2d2d2d2d2d2d2d R12=0000000000000030 R13=0000000000000001 R14=ffff888008fea006 R15=ffff88800edbeeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056403b771090 CR3=000000000b7c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=d828adecb4d1ae4a00000000000ae988 XMM05=9e3045640d4d4e850000000000137b48 XMM06=6098c19552daab490000000000116088 XMM07=00000000000000000000000000000000 XMM08=415453454d49545f454d49544c414552 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000