Warning: Permanently added '[localhost]:39980' (ECDSA) to the list of known hosts. 2025/01/18 20:40:04 fuzzer started 2025/01/18 20:40:04 dialing manager at localhost:44245 syzkaller login: [ 69.465006] cgroup: Unknown subsys name 'net' [ 69.583347] cgroup: Unknown subsys name 'cpuset' [ 69.629214] cgroup: Unknown subsys name 'rlimit' [ 76.507639] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.435737] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 20:40:24 syscalls: 2217 2025/01/18 20:40:24 code coverage: enabled 2025/01/18 20:40:24 comparison tracing: enabled 2025/01/18 20:40:24 extra coverage: enabled 2025/01/18 20:40:24 setuid sandbox: enabled 2025/01/18 20:40:24 namespace sandbox: enabled 2025/01/18 20:40:24 Android sandbox: enabled 2025/01/18 20:40:24 fault injection: enabled 2025/01/18 20:40:24 leak checking: enabled 2025/01/18 20:40:24 net packet injection: enabled 2025/01/18 20:40:24 net device setup: enabled 2025/01/18 20:40:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 20:40:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 20:40:24 USB emulation: enabled 2025/01/18 20:40:24 hci packet injection: enabled 2025/01/18 20:40:24 wifi device emulation: enabled 2025/01/18 20:40:24 802.15.4 emulation: enabled 2025/01/18 20:40:24 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 20:40:24 fetching corpus: 50, signal 22980/26115 (executing program) 2025/01/18 20:40:24 fetching corpus: 100, signal 34690/38756 (executing program) 2025/01/18 20:40:24 fetching corpus: 150, signal 43710/48471 (executing program) 2025/01/18 20:40:24 fetching corpus: 200, signal 48966/54434 (executing program) 2025/01/18 20:40:25 fetching corpus: 250, signal 54911/60733 (executing program) 2025/01/18 20:40:25 fetching corpus: 300, signal 59280/65499 (executing program) 2025/01/18 20:40:25 fetching corpus: 350, signal 63803/70230 (executing program) 2025/01/18 20:40:25 fetching corpus: 400, signal 66298/73133 (executing program) 2025/01/18 20:40:25 fetching corpus: 450, signal 69594/76552 (executing program) 2025/01/18 20:40:25 fetching corpus: 500, signal 73107/80048 (executing program) 2025/01/18 20:40:26 fetching corpus: 550, signal 76470/83278 (executing program) 2025/01/18 20:40:26 fetching corpus: 600, signal 79264/85966 (executing program) 2025/01/18 20:40:26 fetching corpus: 650, signal 80854/87636 (executing program) 2025/01/18 20:40:26 fetching corpus: 700, signal 82741/89467 (executing program) 2025/01/18 20:40:26 fetching corpus: 750, signal 84423/91110 (executing program) 2025/01/18 20:40:26 fetching corpus: 800, signal 86085/92623 (executing program) 2025/01/18 20:40:26 fetching corpus: 850, signal 87831/94176 (executing program) 2025/01/18 20:40:27 fetching corpus: 900, signal 91068/96621 (executing program) 2025/01/18 20:40:27 fetching corpus: 950, signal 92246/97670 (executing program) 2025/01/18 20:40:27 fetching corpus: 1000, signal 94312/99216 (executing program) 2025/01/18 20:40:27 fetching corpus: 1050, signal 96409/100687 (executing program) 2025/01/18 20:40:27 fetching corpus: 1100, signal 99509/102623 (executing program) 2025/01/18 20:40:27 fetching corpus: 1150, signal 101856/104025 (executing program) 2025/01/18 20:40:28 fetching corpus: 1200, signal 103242/104838 (executing program) 2025/01/18 20:40:28 fetching corpus: 1250, signal 104369/105493 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/105795 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/105829 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/105873 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/105905 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/105950 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/105983 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106014 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106049 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106083 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106110 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106155 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106186 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106223 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106251 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106276 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106326 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106351 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106379 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106405 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106447 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106474 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106521 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106570 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106599 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106636 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106668 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106716 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106730 (executing program) 2025/01/18 20:40:28 fetching corpus: 1269, signal 104941/106730 (executing program) 2025/01/18 20:40:31 starting 8 fuzzer processes 20:40:31 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="c7899dad433e", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @loopback}, "c68a921f669ec770"}}}}}, 0x0) 20:40:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x2a, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x24}], 0x1}, 0x0) 20:40:31 executing program 2: clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={r0}, 0xc) [ 95.556856] audit: type=1400 audit(1737232831.442:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:40:31 executing program 3: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r2 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mknodat$null(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x0) 20:40:31 executing program 4: umount2(&(0x7f0000000340)='./cgroup/pids.max\x00', 0x0) 20:40:31 executing program 5: io_setup(0x40, &(0x7f0000000240)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 20:40:31 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7c5de", 0x10, 0x88, 0x0, @private2, @local, {[@dstopts], {0x0, 0x0, 0x8}}}}}}, 0x0) 20:40:31 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3b00000002"]}) [ 97.017021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.023000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.026391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.031327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.036778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.039046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.073063] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.078047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.084016] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.098104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.106130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.111114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.262070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.274200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.276313] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.281699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.286659] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.288677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.360996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.376319] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.383648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.389035] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.394010] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.396729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.408024] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.408405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.417030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.418656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.419590] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.422158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.455934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.458755] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.461077] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.464366] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.469634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.474462] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.481272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.489452] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.493495] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.494744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.511260] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.526358] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.527963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.540722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.543515] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.597039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.602921] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.610277] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.101109] Bluetooth: hci0: command tx timeout [ 99.164269] Bluetooth: hci1: command tx timeout [ 99.355933] Bluetooth: hci2: command tx timeout [ 99.483900] Bluetooth: hci3: command tx timeout [ 99.548941] Bluetooth: hci4: command tx timeout [ 99.612106] Bluetooth: hci6: command tx timeout [ 99.612569] Bluetooth: hci5: command tx timeout [ 99.676894] Bluetooth: hci7: command tx timeout [ 101.147933] Bluetooth: hci0: command tx timeout [ 101.211874] Bluetooth: hci1: command tx timeout [ 101.403923] Bluetooth: hci2: command tx timeout [ 101.531885] Bluetooth: hci3: command tx timeout [ 101.597021] Bluetooth: hci4: command tx timeout [ 101.662866] Bluetooth: hci6: command tx timeout [ 101.662957] Bluetooth: hci5: command tx timeout [ 101.724186] Bluetooth: hci7: command tx timeout [ 103.195917] Bluetooth: hci0: command tx timeout [ 103.260882] Bluetooth: hci1: command tx timeout [ 103.452117] Bluetooth: hci2: command tx timeout [ 103.579940] Bluetooth: hci3: command tx timeout [ 103.644845] Bluetooth: hci4: command tx timeout [ 103.707909] Bluetooth: hci5: command tx timeout [ 103.708480] Bluetooth: hci6: command tx timeout [ 103.771894] Bluetooth: hci7: command tx timeout [ 105.244953] Bluetooth: hci0: command tx timeout [ 105.308440] Bluetooth: hci1: command tx timeout [ 105.499881] Bluetooth: hci2: command tx timeout [ 105.628146] Bluetooth: hci3: command tx timeout [ 105.691907] Bluetooth: hci4: command tx timeout [ 105.755927] Bluetooth: hci5: command tx timeout [ 105.756019] Bluetooth: hci6: command tx timeout [ 105.819876] Bluetooth: hci7: command tx timeout [ 157.223800] [ 157.224054] ====================================================== [ 157.224648] WARNING: possible circular locking dependency detected [ 157.225244] 6.13.0-rc7-next-20250117 #1 Not tainted [ 157.226067] ------------------------------------------------------ [ 157.227384] kworker/u8:1/67 is trying to acquire lock: [ 157.228424] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 157.230894] [ 157.230894] but task is already holding lock: [ 157.232051] ffff88803c1f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 157.233846] [ 157.233846] which lock already depends on the new lock. [ 157.233846] [ 157.235106] [ 157.235106] the existing dependency chain (in reverse order) is: [ 157.235817] [ 157.235817] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 157.236470] __mutex_lock+0x13d/0xb50 [ 157.236929] wiphy_register+0x1b2e/0x25d0 [ 157.237429] ieee80211_register_hw+0x23a4/0x3d60 [ 157.237973] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 157.238534] init_mac80211_hwsim+0x389/0x870 [ 157.239055] do_one_initcall+0xf9/0x640 [ 157.239540] kernel_init_freeable+0x53d/0x7a0 [ 157.240067] kernel_init+0x1e/0x2d0 [ 157.240488] ret_from_fork+0x48/0x80 [ 157.240918] ret_from_fork_asm+0x1a/0x30 [ 157.241403] [ 157.241403] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 157.242025] __lock_acquire+0x29fd/0x4580 [ 157.242510] lock_acquire+0x19b/0x520 [ 157.242957] __mutex_lock+0x13d/0xb50 [ 157.243414] unregister_netdevice_many_notify+0x1612/0x1c80 [ 157.244026] unregister_netdevice_queue+0x224/0x2e0 [ 157.244584] _cfg80211_unregister_wdev+0x57b/0x700 [ 157.245138] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 157.245692] ieee80211_unregister_hw+0x55/0x3a0 [ 157.246209] hwsim_exit_net+0x3a0/0x730 [ 157.246672] ops_exit_list+0xb3/0x180 [ 157.247119] cleanup_net+0x546/0xad0 [ 157.247568] process_one_work+0x8ee/0x1a10 [ 157.248071] worker_thread+0x674/0xe70 [ 157.248544] kthread+0x3ab/0x720 [ 157.248967] ret_from_fork+0x48/0x80 [ 157.249395] ret_from_fork_asm+0x1a/0x30 [ 157.249886] [ 157.249886] other info that might help us debug this: [ 157.249886] [ 157.250633] Possible unsafe locking scenario: [ 157.250633] [ 157.251201] CPU0 CPU1 [ 157.251647] ---- ---- [ 157.252096] lock(&rdev->wiphy.mtx); [ 157.252496] lock(rtnl_mutex); [ 157.253067] lock(&rdev->wiphy.mtx); [ 157.253698] lock(rtnl_mutex); [ 157.254054] [ 157.254054] *** DEADLOCK *** [ 157.254054] [ 157.254621] 4 locks held by kworker/u8:1/67: [ 157.255059] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 157.256069] #1: ffff88800ecc7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 157.257035] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 157.257941] #3: ffff88803c1f0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 157.258954] [ 157.258954] stack backtrace: [ 157.259389] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 157.260185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 157.260951] Workqueue: netns cleanup_net [ 157.261367] Call Trace: [ 157.261629] [ 157.261856] dump_stack_lvl+0xca/0x120 [ 157.262271] print_circular_bug+0x47b/0x750 [ 157.262713] check_noncircular+0x2e9/0x3c0 [ 157.263139] ? srso_return_thunk+0x5/0x5f [ 157.263572] ? __pfx_check_noncircular+0x10/0x10 [ 157.264049] ? hlock_class+0x4e/0x130 [ 157.264429] ? mark_lock+0xac/0xed0 [ 157.264806] ? srso_return_thunk+0x5/0x5f [ 157.265245] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 157.265718] ? lockdep_lock+0xba/0x1b0 [ 157.266136] ? __pfx_lockdep_lock+0x10/0x10 [ 157.266595] __lock_acquire+0x29fd/0x4580 [ 157.267027] ? __pfx___lock_acquire+0x10/0x10 [ 157.267478] ? lock_release+0x20f/0x6f0 [ 157.267887] ? __pfx_lock_release+0x10/0x10 [ 157.268331] lock_acquire+0x19b/0x520 [ 157.268725] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 157.269303] ? __pfx_lock_acquire+0x10/0x10 [ 157.269745] ? srso_return_thunk+0x5/0x5f [ 157.270181] ? lock_release+0x20f/0x6f0 [ 157.270587] ? srso_return_thunk+0x5/0x5f [ 157.271016] ? lock_is_held_type+0x9e/0x120 [ 157.271473] ? srso_return_thunk+0x5/0x5f [ 157.271914] __mutex_lock+0x13d/0xb50 [ 157.272313] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 157.272892] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 157.273477] ? srso_return_thunk+0x5/0x5f [ 157.273911] ? synchronize_rcu_expedited+0x38a/0x420 [ 157.274414] ? __pfx___mutex_lock+0x10/0x10 [ 157.274867] ? __pfx_autoremove_wake_function+0x10/0x10 [ 157.275414] ? srso_return_thunk+0x5/0x5f [ 157.275850] ? kasan_quarantine_put+0x84/0x1e0 [ 157.276333] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 157.276785] ? srso_return_thunk+0x5/0x5f [ 157.277223] unregister_netdevice_many_notify+0x1612/0x1c80 [ 157.277789] ? __virt_addr_valid+0x2e8/0x5d0 [ 157.278250] ? __pfx_lock_release+0x10/0x10 [ 157.278693] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 157.279281] ? find_held_lock+0x2c/0x110 [ 157.279712] ? srso_return_thunk+0x5/0x5f [ 157.280153] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 157.280662] ? srso_return_thunk+0x5/0x5f [ 157.281101] ? lock_release+0x20f/0x6f0 [ 157.281521] ? __pfx_lock_release+0x10/0x10 [ 157.281960] ? srso_return_thunk+0x5/0x5f [ 157.282402] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 157.282933] ? srso_return_thunk+0x5/0x5f [ 157.283373] unregister_netdevice_queue+0x224/0x2e0 [ 157.283866] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 157.284402] ? up_write+0x195/0x520 [ 157.284791] _cfg80211_unregister_wdev+0x57b/0x700 [ 157.285292] ? srso_return_thunk+0x5/0x5f [ 157.285746] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 157.286245] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 157.286785] ? srso_return_thunk+0x5/0x5f [ 157.287217] ? srso_return_thunk+0x5/0x5f [ 157.287648] ? synchronize_rcu+0x1ff/0x260 [ 157.288068] ieee80211_unregister_hw+0x55/0x3a0 [ 157.288538] hwsim_exit_net+0x3a0/0x730 [ 157.288947] ? __pfx_hwsim_exit_net+0x10/0x10 [ 157.289397] ? srso_return_thunk+0x5/0x5f [ 157.289851] ? netdev_run_todo+0x788/0x1040 [ 157.290288] ? __pfx_hwsim_exit_net+0x10/0x10 [ 157.290740] ops_exit_list+0xb3/0x180 [ 157.291131] cleanup_net+0x546/0xad0 [ 157.291521] ? __pfx_cleanup_net+0x10/0x10 [ 157.291958] process_one_work+0x8ee/0x1a10 [ 157.292411] ? __pfx_lock_acquire+0x10/0x10 [ 157.292849] ? __pfx_process_one_work+0x10/0x10 [ 157.293334] ? srso_return_thunk+0x5/0x5f [ 157.293775] ? move_linked_works+0x172/0x270 [ 157.294224] ? srso_return_thunk+0x5/0x5f [ 157.294649] ? assign_work+0x196/0x240 [ 157.295061] worker_thread+0x674/0xe70 [ 157.295470] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 157.295990] ? srso_return_thunk+0x5/0x5f [ 157.296413] ? __pfx_worker_thread+0x10/0x10 [ 157.296878] kthread+0x3ab/0x720 [ 157.297241] ? __pfx_kthread+0x10/0x10 [ 157.297664] ? srso_return_thunk+0x5/0x5f [ 157.298099] ? finish_task_switch.isra.0+0x206/0x840 [ 157.298618] ? __pfx_kthread+0x10/0x10 [ 157.299029] ret_from_fork+0x48/0x80 [ 157.299407] ? __pfx_kthread+0x10/0x10 [ 157.299829] ret_from_fork_asm+0x1a/0x30 [ 157.300274] [ 159.431778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.436037] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.438383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.439165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.440841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.442625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.444921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.447598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.450692] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.451067] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.453427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.458191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.477264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.477600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.478776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.479025] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.479430] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.482101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.489970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.502050] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.509083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.511291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.511629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.512693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.541894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.546448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.547506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.554357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.560232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.561393] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.599219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 159.600541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.601604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.607052] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 159.610145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.611710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.613147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.614569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 159.621074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.628182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.632044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.632512] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 159.636052] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 159.636377] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 159.637310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.637727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.642274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 159.643229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.500114] Bluetooth: hci1: command tx timeout [ 161.500136] Bluetooth: hci0: command tx timeout [ 161.564143] Bluetooth: hci2: command tx timeout [ 161.564166] Bluetooth: hci3: command tx timeout [ 161.629827] Bluetooth: hci4: command tx timeout [ 161.692019] Bluetooth: hci7: command tx timeout [ 161.755921] Bluetooth: hci6: command tx timeout [ 161.755944] Bluetooth: hci5: command tx timeout [ 163.547886] Bluetooth: hci1: command tx timeout [ 163.547962] Bluetooth: hci0: command tx timeout [ 163.611919] Bluetooth: hci3: command tx timeout [ 163.612900] Bluetooth: hci2: command tx timeout [ 163.677023] Bluetooth: hci4: command tx timeout [ 163.741037] Bluetooth: hci7: command tx timeout [ 163.803923] Bluetooth: hci5: command tx timeout [ 163.803963] Bluetooth: hci6: command tx timeout [ 165.595860] Bluetooth: hci0: command tx timeout [ 165.595882] Bluetooth: hci1: command tx timeout [ 165.662869] Bluetooth: hci2: command tx timeout [ 165.662919] Bluetooth: hci3: command tx timeout [ 165.724373] Bluetooth: hci4: command tx timeout [ 165.787920] Bluetooth: hci7: command tx timeout [ 165.851913] Bluetooth: hci5: command tx timeout [ 165.851986] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:41:33 Registers: info registers vcpu 0 RAX=ffff88800f200000 RBX=ffff8880786e2fd0 RCX=ffffffff81429a4a RDX=1ffff11001da5900 RSI=0000000000000008 RDI=ffff88800ed2c800 RBP=ffffffffffffffff RSP=ffff88800f20fdd0 R8 =0000000000000000 R9 =ffffed1001da5900 R10=ffff88800ed2c807 R11=ffff88800f2004b8 R12=ffff8880786e2ff9 R13=ffffffff8864cb28 R14=ffff88800f200000 R15=0000000000000086 RIP=ffffffff81aedda6 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c000302000 CR3=000000000e6f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183c46ac0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800ecc6bb8 R8 =0000000000000001 R9 =ffffed1001d98d67 R10=0000000000000033 R11=6f6c206863696877 R12=0000000000000033 R13=0000000000000001 R14=ffff888008fea009 R15=ffff88800ecc6eb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c000303000 CR3=000000000e6f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000040ce980000000000 XMM03=000000c0005ced00000000c0005ce900 XMM04=000000c0005cfa40000000c0005cf880 XMM05=000000c0005cfe00000000c0005cfc00 XMM06=000000c000786180000000c000786000 XMM07=000000c000a80560000000c0007863c0 XMM08=000000c000787540000000c000787300 XMM09=000000c0009a8380000000c0009a9340 XMM10=000000c0009a8fc0000000c0009a8980 XMM11=000000c0009a9a40000000c0009a9500 XMM12=000000c000af8480000000c0009a9d80 XMM13=000000c000af8dc0000000c000af8980 XMM14=000000c000af96c0000000c000af8fc0 XMM15=000000c000949aa0000000c000af97c0