Warning: Permanently added '[localhost]:34584' (ECDSA) to the list of known hosts. 2025/01/18 05:24:58 fuzzer started 2025/01/18 05:24:59 dialing manager at localhost:44245 syzkaller login: [ 70.144666] cgroup: Unknown subsys name 'net' [ 70.248999] cgroup: Unknown subsys name 'cpuset' [ 70.285124] cgroup: Unknown subsys name 'rlimit' [ 76.558901] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.513458] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 05:25:17 syscalls: 2217 2025/01/18 05:25:17 code coverage: enabled 2025/01/18 05:25:17 comparison tracing: enabled 2025/01/18 05:25:17 extra coverage: enabled 2025/01/18 05:25:17 setuid sandbox: enabled 2025/01/18 05:25:17 namespace sandbox: enabled 2025/01/18 05:25:17 Android sandbox: enabled 2025/01/18 05:25:17 fault injection: enabled 2025/01/18 05:25:17 leak checking: enabled 2025/01/18 05:25:17 net packet injection: enabled 2025/01/18 05:25:17 net device setup: enabled 2025/01/18 05:25:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 05:25:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 05:25:17 USB emulation: enabled 2025/01/18 05:25:17 hci packet injection: enabled 2025/01/18 05:25:17 wifi device emulation: enabled 2025/01/18 05:25:17 802.15.4 emulation: enabled 2025/01/18 05:25:17 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 05:25:17 fetching corpus: 50, signal 29521/32042 (executing program) 2025/01/18 05:25:17 fetching corpus: 100, signal 45403/48006 (executing program) 2025/01/18 05:25:17 fetching corpus: 150, signal 51614/54567 (executing program) 2025/01/18 05:25:18 fetching corpus: 200, signal 59382/62105 (executing program) 2025/01/18 05:25:18 fetching corpus: 250, signal 62571/65332 (executing program) 2025/01/18 05:25:18 fetching corpus: 300, signal 67208/69647 (executing program) 2025/01/18 05:25:18 fetching corpus: 350, signal 69157/71517 (executing program) 2025/01/18 05:25:18 fetching corpus: 400, signal 72054/74073 (executing program) 2025/01/18 05:25:19 fetching corpus: 450, signal 74018/75775 (executing program) 2025/01/18 05:25:19 fetching corpus: 500, signal 77920/78710 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79503 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79550 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79601 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79642 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79681 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79735 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79794 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79836 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79875 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79923 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/79975 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80026 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80067 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80113 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80155 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80207 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80250 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80290 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80336 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80391 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80429 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80468 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80511 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80555 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80589 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80642 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80709 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80760 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80810 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80820 (executing program) 2025/01/18 05:25:19 fetching corpus: 528, signal 78927/80820 (executing program) 2025/01/18 05:25:22 starting 8 fuzzer processes 05:25:22 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioperm(0x0, 0x22, 0x55c) fchdir(r0) 05:25:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 05:25:22 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7c7de", 0x8, 0x88, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x7}}}}}}, 0x0) 05:25:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x15, 0x0, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 05:25:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x2088024, &(0x7f0000000080)={[{@usrquota}]}) [ 93.383886] audit: type=1400 audit(1737177922.697:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:25:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f0000000640)=@srh={0x0, 0xc, 0x4, 0x6, 0x0, 0x0, 0x0, [@remote, @private1, @dev, @rand_addr=' \x01\x00', @remote, @remote]}, 0x68) 05:25:22 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000c40)=0xe, 0xc0800) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x20180, 0x0) r0 = fork() tgkill(r0, r0, 0x4) close(0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000) 05:25:22 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) [ 94.559763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.561836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.564305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.568903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.570651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.571626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.675174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.680769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.686934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.690551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.692625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.696822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.743458] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.748052] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.751267] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.765546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.767365] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.770069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.866519] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.875266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.878157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.878592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.881842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.889145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.890325] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.893350] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.894568] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.902549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.909584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.911435] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.912437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.927324] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.928275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.942415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.944173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.945895] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.949344] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.950971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.954750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.955632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.973405] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.989084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.011418] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.015137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.018863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.022123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.040525] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.042342] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.645115] Bluetooth: hci0: command tx timeout [ 96.772795] Bluetooth: hci1: command tx timeout [ 96.835782] Bluetooth: hci2: command tx timeout [ 96.964853] Bluetooth: hci5: command tx timeout [ 97.027836] Bluetooth: hci3: command tx timeout [ 97.091825] Bluetooth: hci6: command tx timeout [ 97.092091] Bluetooth: hci7: command tx timeout [ 97.092209] Bluetooth: hci4: command tx timeout [ 98.693988] Bluetooth: hci0: command tx timeout [ 98.820856] Bluetooth: hci1: command tx timeout [ 98.885731] Bluetooth: hci2: command tx timeout [ 99.013721] Bluetooth: hci5: command tx timeout [ 99.076882] Bluetooth: hci3: command tx timeout [ 99.140848] Bluetooth: hci4: command tx timeout [ 99.141217] Bluetooth: hci7: command tx timeout [ 99.141293] Bluetooth: hci6: command tx timeout [ 100.739782] Bluetooth: hci0: command tx timeout [ 100.868730] Bluetooth: hci1: command tx timeout [ 100.931873] Bluetooth: hci2: command tx timeout [ 101.059751] Bluetooth: hci5: command tx timeout [ 101.123886] Bluetooth: hci3: command tx timeout [ 101.187896] Bluetooth: hci4: command tx timeout [ 101.188546] Bluetooth: hci6: command tx timeout [ 101.188645] Bluetooth: hci7: command tx timeout [ 102.788005] Bluetooth: hci0: command tx timeout [ 102.915830] Bluetooth: hci1: command tx timeout [ 102.980828] Bluetooth: hci2: command tx timeout [ 103.108037] Bluetooth: hci5: command tx timeout [ 103.173716] Bluetooth: hci3: command tx timeout [ 103.235985] Bluetooth: hci4: command tx timeout [ 103.236833] Bluetooth: hci7: command tx timeout [ 103.237454] Bluetooth: hci6: command tx timeout [ 154.896160] syz-executor.1 (281) used greatest stack depth: 23600 bytes left [ 156.947744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.955589] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.956333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.960496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.962991] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.963538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.071236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.077500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.079705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.079906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.081948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.086314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.087501] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.089144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.090406] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.118169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.126918] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.136382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.158125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.176473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.181032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.182505] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.183902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.190224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.234326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.238985] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.240372] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.259874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.260642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.271126] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.275130] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.278985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.280174] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.283186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.283542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.289535] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.293525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.299136] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.306505] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.308592] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.310244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.315234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.316508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.318928] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.320176] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.335925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.351810] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.354623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.044772] Bluetooth: hci0: command tx timeout [ 159.171900] Bluetooth: hci2: command tx timeout [ 159.173092] Bluetooth: hci1: command tx timeout [ 159.364739] Bluetooth: hci7: command tx timeout [ 159.364918] Bluetooth: hci3: command tx timeout [ 159.491977] Bluetooth: hci6: command tx timeout [ 159.493303] Bluetooth: hci5: command tx timeout [ 159.493387] Bluetooth: hci4: command tx timeout [ 161.091755] Bluetooth: hci0: command tx timeout [ 161.219892] Bluetooth: hci2: command tx timeout [ 161.220527] Bluetooth: hci1: command tx timeout [ 161.411978] Bluetooth: hci3: command tx timeout [ 161.412589] Bluetooth: hci7: command tx timeout [ 161.541726] Bluetooth: hci6: command tx timeout [ 161.541834] Bluetooth: hci5: command tx timeout [ 161.541939] Bluetooth: hci4: command tx timeout [ 163.139797] Bluetooth: hci0: command tx timeout [ 163.267919] Bluetooth: hci1: command tx timeout [ 163.268645] Bluetooth: hci2: command tx timeout [ 163.459906] Bluetooth: hci3: command tx timeout [ 163.460505] Bluetooth: hci7: command tx timeout [ 163.588241] Bluetooth: hci4: command tx timeout [ 163.588338] Bluetooth: hci5: command tx timeout [ 163.588427] Bluetooth: hci6: command tx timeout [ 165.188021] Bluetooth: hci0: command tx timeout [ 165.317888] Bluetooth: hci1: command tx timeout [ 165.318028] Bluetooth: hci2: command tx timeout [ 165.509769] Bluetooth: hci3: command tx timeout [ 165.509866] Bluetooth: hci7: command tx timeout [ 165.636075] Bluetooth: hci6: command tx timeout [ 165.636218] Bluetooth: hci5: command tx timeout [ 165.636329] Bluetooth: hci4: command tx timeout [ 215.260108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.260267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.664448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.664520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.998527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.998619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.972267] [ 216.972529] ====================================================== [ 216.973133] WARNING: possible circular locking dependency detected [ 216.973732] 6.13.0-rc7-next-20250117 #1 Not tainted [ 216.974213] ------------------------------------------------------ [ 216.975818] kworker/u8:0/11 is trying to acquire lock: [ 216.977052] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.980225] [ 216.980225] but task is already holding lock: [ 216.982015] ffff88803a088768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 216.984318] [ 216.984318] which lock already depends on the new lock. [ 216.984318] [ 216.985369] [ 216.985369] the existing dependency chain (in reverse order) is: [ 216.986333] [ 216.986333] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 216.987245] __mutex_lock+0x13d/0xb50 [ 216.987875] wiphy_register+0x1b2e/0x25d0 [ 216.988550] ieee80211_register_hw+0x23a4/0x3d60 [ 216.989295] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 216.990071] init_mac80211_hwsim+0x389/0x870 [ 216.990778] do_one_initcall+0xf9/0x640 [ 216.991428] kernel_init_freeable+0x53d/0x7a0 [ 216.992143] kernel_init+0x1e/0x2d0 [ 216.992725] ret_from_fork+0x48/0x80 [ 216.993333] ret_from_fork_asm+0x1a/0x30 [ 216.994012] [ 216.994012] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 216.994854] __lock_acquire+0x29fd/0x4580 [ 216.995511] lock_acquire+0x19b/0x520 [ 216.996127] __mutex_lock+0x13d/0xb50 [ 216.996749] unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.997605] unregister_netdevice_queue+0x224/0x2e0 [ 216.998366] _cfg80211_unregister_wdev+0x57b/0x700 [ 216.999128] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 216.999892] ieee80211_unregister_hw+0x55/0x3a0 [ 217.000615] hwsim_exit_net+0x3a0/0x730 [ 217.001255] ops_exit_list+0xb3/0x180 [ 217.001863] cleanup_net+0x546/0xad0 [ 217.002460] process_one_work+0x8ee/0x1a10 [ 217.003148] worker_thread+0x674/0xe70 [ 217.003801] kthread+0x3ab/0x720 [ 217.004377] ret_from_fork+0x48/0x80 [ 217.004971] ret_from_fork_asm+0x1a/0x30 [ 217.005640] [ 217.005640] other info that might help us debug this: [ 217.005640] [ 217.006652] Possible unsafe locking scenario: [ 217.006652] [ 217.007429] CPU0 CPU1 [ 217.008042] ---- ---- [ 217.008648] lock(&rdev->wiphy.mtx); [ 217.009205] lock(rtnl_mutex); [ 217.009988] lock(&rdev->wiphy.mtx); [ 217.010836] lock(rtnl_mutex); [ 217.011328] [ 217.011328] *** DEADLOCK *** [ 217.011328] [ 217.012101] 4 locks held by kworker/u8:0/11: [ 217.012706] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 217.013870] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 217.014841] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 217.015755] #3: ffff88803a088768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.016774] [ 217.016774] stack backtrace: [ 217.017216] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 217.018020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 217.018803] Workqueue: netns cleanup_net [ 217.019220] Call Trace: [ 217.019475] [ 217.019703] dump_stack_lvl+0xca/0x120 [ 217.020116] print_circular_bug+0x47b/0x750 [ 217.020559] check_noncircular+0x2e9/0x3c0 [ 217.020997] ? __pfx_check_noncircular+0x10/0x10 [ 217.021475] ? hlock_class+0x4e/0x130 [ 217.021854] ? mark_lock+0xac/0xed0 [ 217.022233] ? srso_return_thunk+0x5/0x5f [ 217.022668] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 217.023133] ? lockdep_lock+0xba/0x1b0 [ 217.023552] ? __pfx_lockdep_lock+0x10/0x10 [ 217.024011] __lock_acquire+0x29fd/0x4580 [ 217.024447] ? __pfx___lock_acquire+0x10/0x10 [ 217.024910] ? lock_release+0x20f/0x6f0 [ 217.025321] ? __pfx_lock_release+0x10/0x10 [ 217.025765] lock_acquire+0x19b/0x520 [ 217.026158] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.026734] ? __pfx_lock_acquire+0x10/0x10 [ 217.027171] ? srso_return_thunk+0x5/0x5f [ 217.027607] ? lock_release+0x20f/0x6f0 [ 217.028014] ? srso_return_thunk+0x5/0x5f [ 217.028450] ? lock_is_held_type+0x9e/0x120 [ 217.028914] ? srso_return_thunk+0x5/0x5f [ 217.029376] __mutex_lock+0x13d/0xb50 [ 217.029781] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.030358] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.030935] ? srso_return_thunk+0x5/0x5f [ 217.031370] ? synchronize_rcu_expedited+0x38a/0x420 [ 217.031881] ? __pfx___mutex_lock+0x10/0x10 [ 217.032326] ? __pfx_autoremove_wake_function+0x10/0x10 [ 217.032867] ? srso_return_thunk+0x5/0x5f [ 217.033309] ? kasan_quarantine_put+0x84/0x1e0 [ 217.033789] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 217.034242] ? srso_return_thunk+0x5/0x5f [ 217.034681] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.035245] ? __virt_addr_valid+0x2e8/0x5d0 [ 217.035701] ? __pfx_lock_release+0x10/0x10 [ 217.036141] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 217.036749] ? find_held_lock+0x2c/0x110 [ 217.037183] ? srso_return_thunk+0x5/0x5f [ 217.037618] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 217.038124] ? srso_return_thunk+0x5/0x5f [ 217.038561] ? lock_release+0x20f/0x6f0 [ 217.038970] ? __pfx_lock_release+0x10/0x10 [ 217.039417] ? srso_return_thunk+0x5/0x5f [ 217.039852] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.040377] ? srso_return_thunk+0x5/0x5f [ 217.040817] unregister_netdevice_queue+0x224/0x2e0 [ 217.041333] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 217.041883] ? up_write+0x195/0x520 [ 217.042276] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.042778] ? srso_return_thunk+0x5/0x5f [ 217.043219] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.043722] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 217.044265] ? srso_return_thunk+0x5/0x5f [ 217.044697] ? srso_return_thunk+0x5/0x5f [ 217.045138] ? synchronize_rcu+0x1ff/0x260 [ 217.045572] ieee80211_unregister_hw+0x55/0x3a0 [ 217.046039] hwsim_exit_net+0x3a0/0x730 [ 217.046448] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.046896] ? srso_return_thunk+0x5/0x5f [ 217.047330] ? netdev_run_todo+0x788/0x1040 [ 217.047772] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.048225] ops_exit_list+0xb3/0x180 [ 217.048618] cleanup_net+0x546/0xad0 [ 217.049012] ? __pfx_cleanup_net+0x10/0x10 [ 217.049453] process_one_work+0x8ee/0x1a10 [ 217.049909] ? __pfx_lock_acquire+0x10/0x10 [ 217.050346] ? __pfx_process_one_work+0x10/0x10 [ 217.050831] ? srso_return_thunk+0x5/0x5f [ 217.051268] ? move_linked_works+0x172/0x270 [ 217.051721] ? srso_return_thunk+0x5/0x5f [ 217.052156] ? assign_work+0x196/0x240 [ 217.052574] worker_thread+0x674/0xe70 [ 217.052996] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.053532] ? __pfx_worker_thread+0x10/0x10 [ 217.054006] kthread+0x3ab/0x720 [ 217.054376] ? __pfx_kthread+0x10/0x10 [ 217.054787] ? srso_return_thunk+0x5/0x5f [ 217.055221] ? finish_task_switch.isra.0+0x206/0x840 [ 217.055741] ? __pfx_kthread+0x10/0x10 [ 217.056156] ret_from_fork+0x48/0x80 [ 217.056530] ? __pfx_kthread+0x10/0x10 [ 217.056948] ret_from_fork_asm+0x1a/0x30 [ 217.057384] [ 218.705015] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.707524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.710327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.714617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.717253] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.719916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.768243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.771421] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.783947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.790050] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.793756] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.802520] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.849871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.853110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.854137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.859210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.863136] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.863971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.918278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.920409] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.923085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.924029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.928044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.931276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.934881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.936550] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.937365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.949329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.952450] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.956069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.993144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.012155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.026815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.026878] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.027059] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.037894] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.045229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.062815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.064987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.090941] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.091376] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.093468] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.098864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.099445] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.105280] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.106336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.116817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.137911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.739707] Bluetooth: hci0: command tx timeout [ 220.868746] Bluetooth: hci1: command tx timeout [ 220.931804] Bluetooth: hci2: command tx timeout [ 220.995691] Bluetooth: hci3: command tx timeout [ 221.059765] Bluetooth: hci4: command tx timeout [ 221.188788] Bluetooth: hci6: command tx timeout [ 221.251781] Bluetooth: hci7: command tx timeout [ 221.315697] Bluetooth: hci5: command tx timeout [ 222.788738] Bluetooth: hci0: command tx timeout [ 222.915759] Bluetooth: hci1: command tx timeout [ 222.979773] Bluetooth: hci2: command tx timeout [ 223.043856] Bluetooth: hci3: command tx timeout [ 223.107940] Bluetooth: hci4: command tx timeout [ 223.235897] Bluetooth: hci6: command tx timeout [ 223.299774] Bluetooth: hci7: command tx timeout [ 223.363717] Bluetooth: hci5: command tx timeout [ 224.835849] Bluetooth: hci0: command tx timeout [ 224.963755] Bluetooth: hci1: command tx timeout [ 225.028737] Bluetooth: hci2: command tx timeout [ 225.091771] Bluetooth: hci3: command tx timeout [ 225.155892] Bluetooth: hci4: command tx timeout [ 225.283690] Bluetooth: hci6: command tx timeout [ 225.348858] Bluetooth: hci7: command tx timeout [ 225.412397] Bluetooth: hci5: command tx timeout [ 226.883824] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 05:27:26 Registers: info registers vcpu 0 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb28 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=000000000000002f R11=6666666666666666 R12=000000000000002f R13=0000000000000001 R14=ffff888008fea066 R15=ffff8880095dee28 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558c42bb6130 CR3=000000000e970000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000003000000000000563d31fdbed0 XMM05=0000563d31fb00800000563d31fb0040 XMM06=000000000000000000000000ffffffff XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800d359000 RBX=ffff88800ba9fde0 RCX=ffffffff81429a4a RDX=ffff88800d25f470 RSI=0000000000000001 RDI=ffff88800d2a9b40 RBP=ffff88800d2a9b40 RSP=ffff88800f88fda0 R8 =0000000000000000 R9 =ffffed1001e56300 R10=ffff88800f2b1807 R11=ffff8880099dbc38 R12=ffff88800d2f1ad0 R13=ffff88800ba9fde0 R14=ffff8880099db780 R15=0000000000000082 RIP=ffffffff81aeced0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1878129438 CR3=00000000174ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffff0000563d31ff6710 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000563d31fafaf00000563d31fcc2e0 XMM06=0000563d31fa50500000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000