Warning: Permanently added '[localhost]:15793' (ECDSA) to the list of known hosts. 2025/01/18 19:32:24 fuzzer started 2025/01/18 19:32:24 dialing manager at localhost:44245 syzkaller login: [ 61.518701] cgroup: Unknown subsys name 'net' [ 61.619986] cgroup: Unknown subsys name 'cpuset' [ 61.656015] cgroup: Unknown subsys name 'rlimit' [ 67.894314] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 19:32:41 syscalls: 2217 2025/01/18 19:32:41 code coverage: enabled 2025/01/18 19:32:41 comparison tracing: enabled 2025/01/18 19:32:41 extra coverage: enabled 2025/01/18 19:32:41 setuid sandbox: enabled 2025/01/18 19:32:41 namespace sandbox: enabled 2025/01/18 19:32:41 Android sandbox: enabled 2025/01/18 19:32:41 fault injection: enabled 2025/01/18 19:32:41 leak checking: enabled 2025/01/18 19:32:41 net packet injection: enabled 2025/01/18 19:32:41 net device setup: enabled 2025/01/18 19:32:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 19:32:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 19:32:41 USB emulation: enabled 2025/01/18 19:32:41 hci packet injection: enabled 2025/01/18 19:32:41 wifi device emulation: enabled 2025/01/18 19:32:41 802.15.4 emulation: enabled 2025/01/18 19:32:41 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 19:32:41 fetching corpus: 50, signal 26653/29649 (executing program) 2025/01/18 19:32:42 fetching corpus: 100, signal 36751/40708 (executing program) 2025/01/18 19:32:42 fetching corpus: 150, signal 43292/48037 (executing program) 2025/01/18 19:32:42 fetching corpus: 200, signal 49949/55245 (executing program) 2025/01/18 19:32:42 fetching corpus: 250, signal 54037/59900 (executing program) 2025/01/18 19:32:42 fetching corpus: 300, signal 59990/66054 (executing program) 2025/01/18 19:32:42 fetching corpus: 350, signal 62852/69348 (executing program) 2025/01/18 19:32:42 fetching corpus: 400, signal 66430/73170 (executing program) 2025/01/18 19:32:43 fetching corpus: 450, signal 70071/76893 (executing program) 2025/01/18 19:32:43 fetching corpus: 500, signal 75055/81515 (executing program) 2025/01/18 19:32:43 fetching corpus: 550, signal 77692/84140 (executing program) 2025/01/18 19:32:43 fetching corpus: 600, signal 81672/87693 (executing program) 2025/01/18 19:32:43 fetching corpus: 650, signal 83826/89767 (executing program) 2025/01/18 19:32:43 fetching corpus: 700, signal 85501/91385 (executing program) 2025/01/18 19:32:43 fetching corpus: 750, signal 87504/93200 (executing program) 2025/01/18 19:32:44 fetching corpus: 800, signal 90441/95538 (executing program) 2025/01/18 19:32:44 fetching corpus: 850, signal 92306/97132 (executing program) 2025/01/18 19:32:44 fetching corpus: 900, signal 93856/98426 (executing program) 2025/01/18 19:32:44 fetching corpus: 950, signal 95657/99812 (executing program) 2025/01/18 19:32:44 fetching corpus: 1000, signal 96780/100674 (executing program) 2025/01/18 19:32:44 fetching corpus: 1050, signal 98410/101809 (executing program) 2025/01/18 19:32:45 fetching corpus: 1100, signal 99327/102486 (executing program) 2025/01/18 19:32:45 fetching corpus: 1150, signal 101512/103806 (executing program) 2025/01/18 19:32:45 fetching corpus: 1200, signal 102832/104619 (executing program) 2025/01/18 19:32:45 fetching corpus: 1250, signal 104688/105650 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/105798 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/105835 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/105872 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/105903 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/105939 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/105968 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106008 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106038 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106069 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106109 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106145 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106179 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106220 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106250 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106283 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106320 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106346 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106387 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106418 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106458 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106483 (executing program) 2025/01/18 19:32:45 fetching corpus: 1268, signal 104940/106511 (executing program) 2025/01/18 19:32:46 fetching corpus: 1268, signal 104940/106546 (executing program) 2025/01/18 19:32:46 fetching corpus: 1268, signal 104940/106571 (executing program) 2025/01/18 19:32:46 fetching corpus: 1268, signal 104940/106610 (executing program) 2025/01/18 19:32:46 fetching corpus: 1268, signal 104940/106651 (executing program) 2025/01/18 19:32:46 fetching corpus: 1268, signal 104940/106691 (executing program) 2025/01/18 19:32:46 fetching corpus: 1268, signal 104940/106707 (executing program) 2025/01/18 19:32:46 fetching corpus: 1268, signal 104940/106707 (executing program) 2025/01/18 19:32:48 starting 8 fuzzer processes 19:32:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000044c0)={0xa, 0xfc00, 0x0, @empty}, 0x1c) 19:32:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x5382, &(0x7f0000000840)) 19:32:48 executing program 2: r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x7, 0x0, 0x0, 0x0) 19:32:48 executing program 3: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/69, 0x45}, {0x0, 0x50000}, {0x0}], 0x3, &(0x7f0000002b80)=[{&(0x7f0000001780)=""/55, 0x7ffffffff000}], 0x1, 0x0) r1 = getpid() process_vm_writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/69, 0x45}, {0x0, 0x50000}, {0x0}], 0x3, &(0x7f0000002b80)=[{&(0x7f0000001780)=""/55, 0x7ffffffff000}], 0x1, 0x0) [ 85.295195] audit: type=1400 audit(1737228768.737:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:32:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r0, 0x0) write(r0, &(0x7f0000000200)='E', 0x140000) 19:32:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) getpid() 19:32:48 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fchmod(r0, 0x0) 19:32:48 executing program 7: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = fcntl$dupfd(r0, 0x0, r0) setns(r1, 0x20000000) [ 86.762269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.763640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.767641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.770305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.776568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.776708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.780645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.781723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.786316] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.797790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.820479] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.823284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.841913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.844339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.846245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.848994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.865781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.880957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.886622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.887190] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.896048] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.902920] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.903155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.905450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.905824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.910544] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.928690] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.934555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.938777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.944798] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.950745] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.957393] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.967423] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.970879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.972271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.975996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.982531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.986020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.994016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.994053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.000652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.005487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.015702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.016912] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.025674] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.037612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.039882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.045654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.832543] Bluetooth: hci0: command tx timeout [ 88.897224] Bluetooth: hci1: command tx timeout [ 88.960591] Bluetooth: hci2: command tx timeout [ 89.024263] Bluetooth: hci7: command tx timeout [ 89.024692] Bluetooth: hci3: command tx timeout [ 89.088205] Bluetooth: hci5: command tx timeout [ 89.152193] Bluetooth: hci6: command tx timeout [ 89.152216] Bluetooth: hci4: command tx timeout [ 90.880194] Bluetooth: hci0: command tx timeout [ 90.944205] Bluetooth: hci1: command tx timeout [ 91.009346] Bluetooth: hci2: command tx timeout [ 91.072625] Bluetooth: hci3: command tx timeout [ 91.073533] Bluetooth: hci7: command tx timeout [ 91.136257] Bluetooth: hci5: command tx timeout [ 91.200368] Bluetooth: hci6: command tx timeout [ 91.200563] Bluetooth: hci4: command tx timeout [ 92.929295] Bluetooth: hci0: command tx timeout [ 92.993208] Bluetooth: hci1: command tx timeout [ 93.057262] Bluetooth: hci2: command tx timeout [ 93.120201] Bluetooth: hci7: command tx timeout [ 93.120236] Bluetooth: hci3: command tx timeout [ 93.184167] Bluetooth: hci5: command tx timeout [ 93.249162] Bluetooth: hci4: command tx timeout [ 93.249227] Bluetooth: hci6: command tx timeout [ 94.977197] Bluetooth: hci0: command tx timeout [ 95.041291] Bluetooth: hci1: command tx timeout [ 95.107324] Bluetooth: hci2: command tx timeout [ 95.168344] Bluetooth: hci7: command tx timeout [ 95.169035] Bluetooth: hci3: command tx timeout [ 95.232211] Bluetooth: hci5: command tx timeout [ 95.296415] Bluetooth: hci4: command tx timeout [ 95.296649] Bluetooth: hci6: command tx timeout [ 145.384325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.384438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.681220] [ 146.681490] ====================================================== [ 146.682176] WARNING: possible circular locking dependency detected [ 146.682859] 6.13.0-rc7-next-20250117 #1 Not tainted [ 146.683419] ------------------------------------------------------ [ 146.684333] kworker/u8:1/66 is trying to acquire lock: [ 146.687976] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.689149] [ 146.689149] but task is already holding lock: [ 146.689793] ffff88802acc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 146.690907] [ 146.690907] which lock already depends on the new lock. [ 146.690907] [ 146.691804] [ 146.691804] the existing dependency chain (in reverse order) is: [ 146.692620] [ 146.692620] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 146.693404] __mutex_lock+0x13d/0xb50 [ 146.693945] wiphy_register+0x1b2e/0x25d0 [ 146.694528] ieee80211_register_hw+0x23a4/0x3d60 [ 146.695155] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 146.695806] init_mac80211_hwsim+0x389/0x870 [ 146.696408] do_one_initcall+0xf9/0x640 [ 146.696965] kernel_init_freeable+0x53d/0x7a0 [ 146.697587] kernel_init+0x1e/0x2d0 [ 146.698074] ret_from_fork+0x48/0x80 [ 146.698572] ret_from_fork_asm+0x1a/0x30 [ 146.699138] [ 146.699138] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 146.699853] __lock_acquire+0x29fd/0x4580 [ 146.700423] lock_acquire+0x19b/0x520 [ 146.700944] __mutex_lock+0x13d/0xb50 [ 146.701484] unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.702192] unregister_netdevice_queue+0x224/0x2e0 [ 146.702825] _cfg80211_unregister_wdev+0x57b/0x700 [ 146.703451] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 146.704061] ieee80211_unregister_hw+0x55/0x3a0 [ 146.704644] hwsim_exit_net+0x3a0/0x730 [ 146.705179] ops_exit_list+0xb3/0x180 [ 146.705697] cleanup_net+0x546/0xad0 [ 146.706211] process_one_work+0x8ee/0x1a10 [ 146.706797] worker_thread+0x674/0xe70 [ 146.707348] kthread+0x3ab/0x720 [ 146.707833] ret_from_fork+0x48/0x80 [ 146.708313] ret_from_fork_asm+0x1a/0x30 [ 146.708852] [ 146.708852] other info that might help us debug this: [ 146.708852] [ 146.709723] Possible unsafe locking scenario: [ 146.709723] [ 146.710360] CPU0 CPU1 [ 146.710861] ---- ---- [ 146.711364] lock(&rdev->wiphy.mtx); [ 146.711824] lock(rtnl_mutex); [ 146.712492] lock(&rdev->wiphy.mtx); [ 146.713230] lock(rtnl_mutex); [ 146.713649] [ 146.713649] *** DEADLOCK *** [ 146.713649] [ 146.714314] 4 locks held by kworker/u8:1/66: [ 146.714825] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 146.716006] #1: ffff88800ecafd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 146.717148] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 146.718211] #3: ffff88802acc0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 146.719404] [ 146.719404] stack backtrace: [ 146.719908] CPU: 0 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 146.720832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 146.721731] Workqueue: netns cleanup_net [ 146.722216] Call Trace: [ 146.722514] [ 146.722779] dump_stack_lvl+0xca/0x120 [ 146.723269] print_circular_bug+0x47b/0x750 [ 146.723776] check_noncircular+0x2e9/0x3c0 [ 146.724275] ? __pfx_check_noncircular+0x10/0x10 [ 146.724818] ? hlock_class+0x4e/0x130 [ 146.725265] ? mark_lock+0xac/0xed0 [ 146.725699] ? srso_return_thunk+0x5/0x5f [ 146.726199] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 146.726735] ? lockdep_lock+0xba/0x1b0 [ 146.727220] ? __pfx_lockdep_lock+0x10/0x10 [ 146.727753] __lock_acquire+0x29fd/0x4580 [ 146.728259] ? __pfx___lock_acquire+0x10/0x10 [ 146.728783] ? lock_release+0x20f/0x6f0 [ 146.729259] ? __pfx_lock_release+0x10/0x10 [ 146.729771] lock_acquire+0x19b/0x520 [ 146.730235] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.730903] ? __pfx_lock_acquire+0x10/0x10 [ 146.731412] ? srso_return_thunk+0x5/0x5f [ 146.731915] ? lock_release+0x20f/0x6f0 [ 146.732392] ? srso_return_thunk+0x5/0x5f [ 146.732897] ? lock_is_held_type+0x9e/0x120 [ 146.733459] ? srso_return_thunk+0x5/0x5f [ 146.733973] __mutex_lock+0x13d/0xb50 [ 146.734442] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.735103] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.735762] ? srso_return_thunk+0x5/0x5f [ 146.736263] ? synchronize_rcu_expedited+0x38a/0x420 [ 146.736844] ? __pfx___mutex_lock+0x10/0x10 [ 146.737367] ? __pfx_autoremove_wake_function+0x10/0x10 [ 146.737986] ? srso_return_thunk+0x5/0x5f [ 146.738489] ? kasan_quarantine_put+0x84/0x1e0 [ 146.739039] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 146.739563] ? srso_return_thunk+0x5/0x5f [ 146.740065] unregister_netdevice_many_notify+0x1612/0x1c80 [ 146.740708] ? __virt_addr_valid+0x2e8/0x5d0 [ 146.741246] ? __pfx_lock_release+0x10/0x10 [ 146.741742] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 146.742406] ? find_held_lock+0x2c/0x110 [ 146.742897] ? srso_return_thunk+0x5/0x5f [ 146.743408] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 146.743990] ? srso_return_thunk+0x5/0x5f [ 146.744494] ? lock_release+0x20f/0x6f0 [ 146.744964] ? __pfx_lock_release+0x10/0x10 [ 146.745477] ? srso_return_thunk+0x5/0x5f [ 146.745978] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 146.746592] ? srso_return_thunk+0x5/0x5f [ 146.747099] unregister_netdevice_queue+0x224/0x2e0 [ 146.747675] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 146.748297] ? up_write+0x195/0x520 [ 146.748752] _cfg80211_unregister_wdev+0x57b/0x700 [ 146.749346] ? srso_return_thunk+0x5/0x5f [ 146.749854] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 146.750439] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 146.751078] ? srso_return_thunk+0x5/0x5f [ 146.751594] ? srso_return_thunk+0x5/0x5f [ 146.752108] ? synchronize_rcu+0x1ff/0x260 [ 146.752615] ieee80211_unregister_hw+0x55/0x3a0 [ 146.753190] hwsim_exit_net+0x3a0/0x730 [ 146.753811] ? __pfx_hwsim_exit_net+0x10/0x10 [ 146.754376] ? srso_return_thunk+0x5/0x5f [ 146.754907] ? netdev_run_todo+0x788/0x1040 [ 146.755440] ? __pfx_hwsim_exit_net+0x10/0x10 [ 146.755988] ops_exit_list+0xb3/0x180 [ 146.756462] cleanup_net+0x546/0xad0 [ 146.756929] ? __pfx_cleanup_net+0x10/0x10 [ 146.757464] process_one_work+0x8ee/0x1a10 [ 146.758011] ? __pfx_process_one_work+0x10/0x10 [ 146.758597] ? srso_return_thunk+0x5/0x5f [ 146.759121] ? srso_return_thunk+0x5/0x5f [ 146.759643] ? move_linked_works+0x172/0x270 [ 146.760183] ? srso_return_thunk+0x5/0x5f [ 146.760701] ? assign_work+0x196/0x240 [ 146.761217] worker_thread+0x674/0xe70 [ 146.761728] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 146.762358] ? __pfx_worker_thread+0x10/0x10 [ 146.762910] kthread+0x3ab/0x720 [ 146.763360] ? __pfx_kthread+0x10/0x10 [ 146.763856] ? srso_return_thunk+0x5/0x5f [ 146.764372] ? finish_task_switch.isra.0+0x206/0x840 [ 146.764981] ? __pfx_kthread+0x10/0x10 [ 146.765483] ret_from_fork+0x48/0x80 [ 146.765940] ? __pfx_kthread+0x10/0x10 [ 146.766441] ret_from_fork_asm+0x1a/0x30 [ 146.766979] [ 148.746652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.747062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.747759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.748445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.750743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.751955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.752810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.754763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.757530] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.758005] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.759650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.760433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.810016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.824409] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.832318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.835971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.836999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.837850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.880172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.887949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.892286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.894740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.896997] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.901603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.945913] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.973305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.973869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.984729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.993521] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.995040] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.072685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.099218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.134567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.137976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.139712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.140505] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.140953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.142322] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.142916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.153417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.162363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.164303] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.166947] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.170487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.194721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.195009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.202239] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.221831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.784190] Bluetooth: hci0: command tx timeout [ 150.848192] Bluetooth: hci1: command tx timeout [ 150.913148] Bluetooth: hci2: command tx timeout [ 150.976160] Bluetooth: hci3: command tx timeout [ 151.040177] Bluetooth: hci4: command tx timeout [ 151.233166] Bluetooth: hci5: command tx timeout [ 151.360319] Bluetooth: hci6: command tx timeout [ 151.360991] Bluetooth: hci7: command tx timeout [ 152.832177] Bluetooth: hci0: command tx timeout [ 152.896187] Bluetooth: hci1: command tx timeout [ 152.961142] Bluetooth: hci2: command tx timeout [ 153.024171] Bluetooth: hci3: command tx timeout [ 153.088195] Bluetooth: hci4: command tx timeout [ 153.280314] Bluetooth: hci5: command tx timeout [ 153.408326] Bluetooth: hci7: command tx timeout [ 153.408543] Bluetooth: hci6: command tx timeout [ 154.880462] Bluetooth: hci0: command tx timeout [ 154.946115] Bluetooth: hci1: command tx timeout [ 155.008200] Bluetooth: hci2: command tx timeout [ 155.072150] Bluetooth: hci3: command tx timeout [ 155.136317] Bluetooth: hci4: command tx timeout [ 155.328153] Bluetooth: hci5: command tx timeout [ 155.456187] Bluetooth: hci6: command tx timeout [ 155.456234] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:33:50 Registers: info registers vcpu 0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800ecaebb8 R8 =0000000000000001 R9 =ffffed1001d95d67 R10=0000000000000069 R11=2f72656b726f776b R12=0000000000000069 R13=0000000000000001 R14=ffff888008fea020 R15=ffff88800ecaeeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000557097575e48 CR3=000000001a3b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffff0000ff000000 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005570975239c0000055709756a590 XMM06=0000557096cb80600000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000310000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000020000000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800eca1bc0 RBX=ffff88807c1cf490 RCX=ffffffff81429a4a RDX=1ffff11001701400 RSI=0000000000000008 RDI=ffff88800b80a000 RBP=fbfbfbfbfbfbfbfb RSP=ffff88800efe7dd0 R8 =0000000000000000 R9 =ffffed1001701400 R10=ffff88800b80a007 R11=0000000000000001 R12=ffff88807c1cfff9 R13=ffffffff8864e570 R14=ffff88800eca1bc0 R15=0000000000000086 RIP=ffffffff81aedd9a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056061d9b9d88 CR3=000000001625e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041839f4f40000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000