Warning: Permanently added '[localhost]:64103' (ECDSA) to the list of known hosts. 2025/01/18 09:27:39 fuzzer started 2025/01/18 09:27:39 dialing manager at localhost:44245 syzkaller login: [ 70.163422] cgroup: Unknown subsys name 'net' [ 70.270268] cgroup: Unknown subsys name 'cpuset' [ 70.299331] cgroup: Unknown subsys name 'rlimit' [ 75.616455] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 85.366566] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 09:27:55 syscalls: 2217 2025/01/18 09:27:55 code coverage: enabled 2025/01/18 09:27:55 comparison tracing: enabled 2025/01/18 09:27:55 extra coverage: enabled 2025/01/18 09:27:55 setuid sandbox: enabled 2025/01/18 09:27:55 namespace sandbox: enabled 2025/01/18 09:27:55 Android sandbox: enabled 2025/01/18 09:27:55 fault injection: enabled 2025/01/18 09:27:55 leak checking: enabled 2025/01/18 09:27:55 net packet injection: enabled 2025/01/18 09:27:55 net device setup: enabled 2025/01/18 09:27:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 09:27:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 09:27:55 USB emulation: enabled 2025/01/18 09:27:55 hci packet injection: enabled 2025/01/18 09:27:55 wifi device emulation: enabled 2025/01/18 09:27:55 802.15.4 emulation: enabled 2025/01/18 09:27:55 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 09:27:55 fetching corpus: 50, signal 28053/30676 (executing program) 2025/01/18 09:27:55 fetching corpus: 100, signal 39811/42874 (executing program) 2025/01/18 09:27:56 fetching corpus: 150, signal 46435/49844 (executing program) 2025/01/18 09:27:56 fetching corpus: 200, signal 51257/54933 (executing program) 2025/01/18 09:27:56 fetching corpus: 250, signal 56749/60369 (executing program) 2025/01/18 09:27:56 fetching corpus: 300, signal 60160/63757 (executing program) 2025/01/18 09:27:56 fetching corpus: 350, signal 65225/68308 (executing program) 2025/01/18 09:27:56 fetching corpus: 400, signal 68035/70903 (executing program) 2025/01/18 09:27:57 fetching corpus: 450, signal 72450/74535 (executing program) 2025/01/18 09:27:57 fetching corpus: 500, signal 77406/78368 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79637 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79685 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79736 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79781 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79823 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79871 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79920 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/79975 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80020 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80069 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80123 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80172 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80209 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80248 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80290 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80342 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80383 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80433 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80477 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80527 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80579 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80620 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80664 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80714 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80749 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80795 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80852 (executing program) 2025/01/18 09:27:57 fetching corpus: 529, signal 79062/80898 (executing program) 2025/01/18 09:27:58 fetching corpus: 529, signal 79062/80938 (executing program) 2025/01/18 09:27:58 fetching corpus: 529, signal 79062/80964 (executing program) 2025/01/18 09:27:58 fetching corpus: 529, signal 79062/80964 (executing program) 2025/01/18 09:28:02 starting 8 fuzzer processes 09:28:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="150000006bffff000001"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 09:28:02 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x6609, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="ad33e180ef0c65cdfa0ac14089f640404ff72aff5b2f6e8a68c1b211685f8239044c0d717042eb9fc6d6b8a71cc448351c754e5889ed41f0b8e1eed9f21dffe6d732c8f57aceaab67389e204c2613621cfa97b8a09abc561137a50e2beee6f8b7a0d24b43acea2b1c70e00"/118, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="650f4daae6edec96d5033fd37f814f758d8160bbe267ef40f2bdd3008db1f64b12fcb89b1a16f3db4b"]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0x530e, &(0x7f0000000480)={{0x1, 0x1, 0x18}, './file0\x00'}) move_mount(r2, &(0x7f0000000140)='\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, 0x0) utimensat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r4, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) finit_module(r3, 0x0, 0x1) [ 92.421130] audit: type=1400 audit(1737192482.303:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:28:02 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 09:28:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8942, &(0x7f0000000080)={'wlan1\x00', 0x0}) 09:28:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) 09:28:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r0, 0x0) 09:28:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10) 09:28:02 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_udp_encap(r0, 0x3a, 0x64, 0x0, 0x0) [ 93.877364] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.884807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.885560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.890656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.894631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.898765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.906647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.911685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.914555] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.917325] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.917808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.921711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.944245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.948360] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.949031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.964759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.982414] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.986933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.994053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.997223] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.000298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.013591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.016514] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.020569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.020627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.028515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.031632] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.033782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.041768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.050213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.053387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.056542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.058922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.065330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.071628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.075435] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.085223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.092563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.098461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.108759] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.125741] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.128301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.131443] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.133334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.136332] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.150614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.171442] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.173551] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.019837] Bluetooth: hci0: command tx timeout [ 96.020716] Bluetooth: hci1: command tx timeout [ 96.083087] Bluetooth: hci4: command tx timeout [ 96.083440] Bluetooth: hci2: command tx timeout [ 96.149050] Bluetooth: hci5: command tx timeout [ 96.149261] Bluetooth: hci3: command tx timeout [ 96.213595] Bluetooth: hci6: command tx timeout [ 96.277040] Bluetooth: hci7: command tx timeout [ 98.067075] Bluetooth: hci1: command tx timeout [ 98.067728] Bluetooth: hci0: command tx timeout [ 98.132102] Bluetooth: hci2: command tx timeout [ 98.132807] Bluetooth: hci4: command tx timeout [ 98.197056] Bluetooth: hci3: command tx timeout [ 98.197150] Bluetooth: hci5: command tx timeout [ 98.259334] Bluetooth: hci6: command tx timeout [ 98.323227] Bluetooth: hci7: command tx timeout [ 100.116073] Bluetooth: hci1: command tx timeout [ 100.116639] Bluetooth: hci0: command tx timeout [ 100.180727] Bluetooth: hci4: command tx timeout [ 100.181721] Bluetooth: hci2: command tx timeout [ 100.243466] Bluetooth: hci5: command tx timeout [ 100.243547] Bluetooth: hci3: command tx timeout [ 100.307115] Bluetooth: hci6: command tx timeout [ 100.371022] Bluetooth: hci7: command tx timeout [ 102.163952] Bluetooth: hci1: command tx timeout [ 102.164825] Bluetooth: hci0: command tx timeout [ 102.227127] Bluetooth: hci4: command tx timeout [ 102.227226] Bluetooth: hci2: command tx timeout [ 102.294022] Bluetooth: hci3: command tx timeout [ 102.294118] Bluetooth: hci5: command tx timeout [ 102.355223] Bluetooth: hci6: command tx timeout [ 102.420259] Bluetooth: hci7: command tx timeout [ 154.378970] [ 154.379374] ====================================================== [ 154.380467] WARNING: possible circular locking dependency detected [ 154.381570] 6.13.0-rc7-next-20250117 #1 Not tainted [ 154.385275] ------------------------------------------------------ [ 154.386380] kworker/u8:0/11 is trying to acquire lock: [ 154.387455] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.389492] [ 154.389492] but task is already holding lock: [ 154.390742] ffff88800d128768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 154.392593] [ 154.392593] which lock already depends on the new lock. [ 154.392593] [ 154.394104] [ 154.394104] the existing dependency chain (in reverse order) is: [ 154.395645] [ 154.395645] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 154.397110] __mutex_lock+0x13d/0xb50 [ 154.397950] wiphy_register+0x1b2e/0x25d0 [ 154.398943] ieee80211_register_hw+0x23a4/0x3d60 [ 154.400044] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 154.401231] init_mac80211_hwsim+0x389/0x870 [ 154.402251] do_one_initcall+0xf9/0x640 [ 154.403161] kernel_init_freeable+0x53d/0x7a0 [ 154.404151] kernel_init+0x1e/0x2d0 [ 154.404977] ret_from_fork+0x48/0x80 [ 154.405745] ret_from_fork_asm+0x1a/0x30 [ 154.406626] [ 154.406626] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 154.407772] __lock_acquire+0x29fd/0x4580 [ 154.408663] lock_acquire+0x19b/0x520 [ 154.409495] __mutex_lock+0x13d/0xb50 [ 154.410503] unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.411883] unregister_netdevice_queue+0x224/0x2e0 [ 154.413149] _cfg80211_unregister_wdev+0x57b/0x700 [ 154.414322] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 154.415451] ieee80211_unregister_hw+0x55/0x3a0 [ 154.416631] hwsim_exit_net+0x3a0/0x730 [ 154.417629] ops_exit_list+0xb3/0x180 [ 154.418459] cleanup_net+0x546/0xad0 [ 154.419277] process_one_work+0x8ee/0x1a10 [ 154.420245] worker_thread+0x674/0xe70 [ 154.421163] kthread+0x3ab/0x720 [ 154.422091] ret_from_fork+0x48/0x80 [ 154.422925] ret_from_fork_asm+0x1a/0x30 [ 154.423900] [ 154.423900] other info that might help us debug this: [ 154.423900] [ 154.425452] Possible unsafe locking scenario: [ 154.425452] [ 154.426522] CPU0 CPU1 [ 154.427388] ---- ---- [ 154.428253] lock(&rdev->wiphy.mtx); [ 154.429058] lock(rtnl_mutex); [ 154.430213] lock(&rdev->wiphy.mtx); [ 154.431479] lock(rtnl_mutex); [ 154.432284] [ 154.432284] *** DEADLOCK *** [ 154.432284] [ 154.433573] 4 locks held by kworker/u8:0/11: [ 154.434409] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 154.436350] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 154.438242] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 154.440179] #3: ffff88800d128768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 154.442169] [ 154.442169] stack backtrace: [ 154.443020] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 154.444547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 154.446045] Workqueue: netns cleanup_net [ 154.446870] Call Trace: [ 154.447367] [ 154.447815] dump_stack_lvl+0xca/0x120 [ 154.448621] print_circular_bug+0x47b/0x750 [ 154.449499] check_noncircular+0x2e9/0x3c0 [ 154.450499] ? __pfx_check_noncircular+0x10/0x10 [ 154.451610] ? hlock_class+0x4e/0x130 [ 154.452502] ? mark_lock+0xac/0xed0 [ 154.453388] ? srso_return_thunk+0x5/0x5f [ 154.454394] ? timerqueue_del+0x83/0x150 [ 154.455357] ? lockdep_lock+0xba/0x1b0 [ 154.456316] ? __pfx_lockdep_lock+0x10/0x10 [ 154.457258] __lock_acquire+0x29fd/0x4580 [ 154.458206] ? __pfx___lock_acquire+0x10/0x10 [ 154.459213] ? lock_release+0x20f/0x6f0 [ 154.460015] ? __pfx_lock_release+0x10/0x10 [ 154.460907] lock_acquire+0x19b/0x520 [ 154.461787] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.463033] ? __pfx_lock_acquire+0x10/0x10 [ 154.463913] ? srso_return_thunk+0x5/0x5f [ 154.464802] ? lock_release+0x20f/0x6f0 [ 154.465626] ? srso_return_thunk+0x5/0x5f [ 154.466496] ? lock_is_held_type+0x9e/0x120 [ 154.467396] ? srso_return_thunk+0x5/0x5f [ 154.468269] __mutex_lock+0x13d/0xb50 [ 154.469182] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.470378] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.471516] ? srso_return_thunk+0x5/0x5f [ 154.472390] ? synchronize_rcu_expedited+0x38a/0x420 [ 154.473430] ? __pfx___mutex_lock+0x10/0x10 [ 154.474441] ? __pfx_autoremove_wake_function+0x10/0x10 [ 154.475578] ? srso_return_thunk+0x5/0x5f [ 154.476456] ? kasan_quarantine_put+0x84/0x1e0 [ 154.477424] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 154.478343] ? srso_return_thunk+0x5/0x5f [ 154.479239] unregister_netdevice_many_notify+0x1612/0x1c80 [ 154.480365] ? __virt_addr_valid+0x2e8/0x5d0 [ 154.481321] ? __pfx_lock_release+0x10/0x10 [ 154.482207] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 154.483585] ? find_held_lock+0x2c/0x110 [ 154.484475] ? srso_return_thunk+0x5/0x5f [ 154.485403] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 154.486594] ? srso_return_thunk+0x5/0x5f [ 154.487642] ? lock_release+0x20f/0x6f0 [ 154.488548] ? __pfx_lock_release+0x10/0x10 [ 154.489456] ? srso_return_thunk+0x5/0x5f [ 154.490346] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 154.491609] ? srso_return_thunk+0x5/0x5f [ 154.492666] unregister_netdevice_queue+0x224/0x2e0 [ 154.493734] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 154.494879] ? up_write+0x195/0x520 [ 154.495723] _cfg80211_unregister_wdev+0x57b/0x700 [ 154.496787] ? srso_return_thunk+0x5/0x5f [ 154.497768] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 154.498998] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 154.500258] ? srso_return_thunk+0x5/0x5f [ 154.501153] ? srso_return_thunk+0x5/0x5f [ 154.502081] ? synchronize_rcu+0x1ff/0x260 [ 154.502996] ieee80211_unregister_hw+0x55/0x3a0 [ 154.504146] hwsim_exit_net+0x3a0/0x730 [ 154.505022] ? __pfx_hwsim_exit_net+0x10/0x10 [ 154.505971] ? srso_return_thunk+0x5/0x5f [ 154.506871] ? netdev_run_todo+0x788/0x1040 [ 154.507771] ? __pfx_hwsim_exit_net+0x10/0x10 [ 154.508720] ops_exit_list+0xb3/0x180 [ 154.509537] cleanup_net+0x546/0xad0 [ 154.510342] ? __pfx_cleanup_net+0x10/0x10 [ 154.511258] process_one_work+0x8ee/0x1a10 [ 154.512208] ? __pfx_lock_acquire+0x10/0x10 [ 154.513155] ? __pfx_process_one_work+0x10/0x10 [ 154.514301] ? srso_return_thunk+0x5/0x5f [ 154.515365] ? move_linked_works+0x172/0x270 [ 154.516466] ? srso_return_thunk+0x5/0x5f [ 154.517539] ? assign_work+0x196/0x240 [ 154.518540] worker_thread+0x674/0xe70 [ 154.519401] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 154.520501] ? __pfx_worker_thread+0x10/0x10 [ 154.521645] kthread+0x3ab/0x720 [ 154.522538] ? __pfx_kthread+0x10/0x10 [ 154.523422] ? srso_return_thunk+0x5/0x5f [ 154.524334] ? finish_task_switch.isra.0+0x206/0x840 [ 154.525498] ? __pfx_kthread+0x10/0x10 [ 154.526505] ret_from_fork+0x48/0x80 [ 154.527420] ? __pfx_kthread+0x10/0x10 [ 154.528423] ret_from_fork_asm+0x1a/0x30 [ 154.529384] [ 156.777712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.780706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.785747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.790510] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.793629] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.800430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.827664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.830176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.831241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.833116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.835520] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.836737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.896648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.898070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.901981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.909359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.912393] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.913516] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.918393] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.926884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.927165] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.936077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.940603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.942083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.945318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.952306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.961322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.962882] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.964209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.965745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.979126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.980414] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.988503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.988845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.007279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.007610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.021892] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.023304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.028883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.037237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.044179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.045435] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.051307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.068284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.072441] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.086178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.096030] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.108162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.867171] Bluetooth: hci1: command tx timeout [ 158.867505] Bluetooth: hci0: command tx timeout [ 158.996260] Bluetooth: hci4: command tx timeout [ 158.997107] Bluetooth: hci3: command tx timeout [ 158.998022] Bluetooth: hci2: command tx timeout [ 159.123118] Bluetooth: hci5: command tx timeout [ 159.123408] Bluetooth: hci6: command tx timeout [ 159.188154] Bluetooth: hci7: command tx timeout [ 160.915241] Bluetooth: hci0: command tx timeout [ 160.916390] Bluetooth: hci1: command tx timeout [ 161.043241] Bluetooth: hci2: command tx timeout [ 161.043281] Bluetooth: hci3: command tx timeout [ 161.043632] Bluetooth: hci4: command tx timeout [ 161.171103] Bluetooth: hci6: command tx timeout [ 161.171155] Bluetooth: hci5: command tx timeout [ 161.235602] Bluetooth: hci7: command tx timeout [ 162.963104] Bluetooth: hci0: command tx timeout [ 162.964258] Bluetooth: hci1: command tx timeout [ 163.091070] Bluetooth: hci3: command tx timeout [ 163.091294] Bluetooth: hci2: command tx timeout [ 163.091356] Bluetooth: hci4: command tx timeout [ 163.219176] Bluetooth: hci5: command tx timeout [ 163.219305] Bluetooth: hci6: command tx timeout [ 163.285138] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 09:29:04 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000031 R11=0000000033312e36 R12=0000000000000031 R13=0000000000000001 R14=ffff888008fea026 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001f27f60 CR3=0000000015dd6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800ba41bc0 RBX=ffff88807af842d0 RCX=ffffffff81429a4a RDX=1ffff1100173d400 RSI=0000000000000008 RDI=ffff88800b9ea000 RBP=0000000000000000 RSP=ffff88800f12fdd0 R8 =0000000000000000 R9 =ffffed100173d400 R10=ffff88800b9ea007 R11=ffff88800ba42078 R12=ffff88807af84ff9 R13=ffffffff8864dd48 R14=ffff88800ba41bc0 R15=0000000000000086 RIP=ffffffff81aedda6 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49951cdba0 CR3=0000000015dd6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0002e54d0000000c000304320 XMM04=000000c00011bf50000000c00011bf20 XMM05=000000c00011bfb0000000c00011bf80 XMM06=000000c000099380000000c00012c000 XMM07=000000c00012b8c0000000c00012c030 XMM08=000000c00012c390000000c00012c360 XMM09=000000c0000993e0000000c00012c3c0 XMM10=000000c00012c420000000c00012c3f0 XMM11=000000c00012c480000000c00012c450 XMM12=000000c00012c4e0000000c00012c4b0 XMM13=000000c00012c540000000c00012c510 XMM14=000000c00012c5a0000000c00012c570 XMM15=000000c000130160000000c000099410