Warning: Permanently added '[localhost]:60078' (ECDSA) to the list of known hosts. 2025/01/17 17:40:58 fuzzer started 2025/01/17 17:40:59 dialing manager at localhost:44245 syzkaller login: [ 69.853551] cgroup: Unknown subsys name 'net' [ 69.950855] cgroup: Unknown subsys name 'cpuset' [ 69.979830] cgroup: Unknown subsys name 'rlimit' [ 75.821633] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 17:41:17 syscalls: 2217 2025/01/17 17:41:17 code coverage: enabled 2025/01/17 17:41:17 comparison tracing: enabled 2025/01/17 17:41:17 extra coverage: enabled 2025/01/17 17:41:17 setuid sandbox: enabled 2025/01/17 17:41:17 namespace sandbox: enabled 2025/01/17 17:41:17 Android sandbox: enabled 2025/01/17 17:41:17 fault injection: enabled 2025/01/17 17:41:17 leak checking: enabled 2025/01/17 17:41:17 net packet injection: enabled 2025/01/17 17:41:17 net device setup: enabled 2025/01/17 17:41:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 17:41:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 17:41:17 USB emulation: enabled 2025/01/17 17:41:17 hci packet injection: enabled 2025/01/17 17:41:17 wifi device emulation: enabled 2025/01/17 17:41:17 802.15.4 emulation: enabled 2025/01/17 17:41:17 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 17:41:17 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 17:41:19 starting 8 fuzzer processes 17:41:19 executing program 0: getitimer(0x7, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x1}, 0x4) close(r0) signalfd(r1, &(0x7f0000000000), 0x8) 17:41:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000014c0)={0x24, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x11, 0x0, 0x0, 0x1, [@generic="6dffcd2d27f1c2f38e6274145b"]}]}, 0x24}], 0x1}, 0x0) 17:41:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x50}}, 0x0) 17:41:19 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$sock_SIOCINQ(r0, 0x309, 0x0) 17:41:19 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000001d0001d2a900000000faffff07ca"], 0x28}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x5a, &(0x7f00000001c0)=[{&(0x7f0000000080)={0x18, 0x68, 0x1}, 0x18}], 0x1}, 0x0) [ 90.011118] audit: type=1400 audit(1737135679.381:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:41:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x5000000) 17:41:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) 17:41:19 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181041, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x5) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x2) [ 91.339263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.343678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.344450] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.347030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.348861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.349408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.462857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.465291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.466348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.469990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.471855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.473231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.569864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.576134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.589952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.592240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.600951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.602809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.605324] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.620560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.623234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.626759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.629888] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.631900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.645683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.648045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.649059] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.655589] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.656863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.658765] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.659342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.661193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.666924] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.667806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.671035] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.672301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.683877] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.685053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.688467] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.697913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.708098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.712072] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.724845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.726817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.753149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.764804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.771883] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.772971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.417758] Bluetooth: hci0: command tx timeout [ 93.545667] Bluetooth: hci1: command tx timeout [ 93.738533] Bluetooth: hci3: command tx timeout [ 93.738989] Bluetooth: hci6: command tx timeout [ 93.803447] Bluetooth: hci2: command tx timeout [ 93.803674] Bluetooth: hci4: command tx timeout [ 93.865535] Bluetooth: hci5: command tx timeout [ 93.865784] Bluetooth: hci7: command tx timeout [ 95.465724] Bluetooth: hci0: command tx timeout [ 95.593917] Bluetooth: hci1: command tx timeout [ 95.786595] Bluetooth: hci3: command tx timeout [ 95.787161] Bluetooth: hci6: command tx timeout [ 95.849665] Bluetooth: hci4: command tx timeout [ 95.849822] Bluetooth: hci2: command tx timeout [ 95.913948] Bluetooth: hci7: command tx timeout [ 95.914093] Bluetooth: hci5: command tx timeout [ 97.513951] Bluetooth: hci0: command tx timeout [ 97.641566] Bluetooth: hci1: command tx timeout [ 97.833884] Bluetooth: hci6: command tx timeout [ 97.834047] Bluetooth: hci3: command tx timeout [ 97.897871] Bluetooth: hci2: command tx timeout [ 97.899711] Bluetooth: hci4: command tx timeout [ 97.961536] Bluetooth: hci5: command tx timeout [ 97.962561] Bluetooth: hci7: command tx timeout [ 99.561545] Bluetooth: hci0: command tx timeout [ 99.689464] Bluetooth: hci1: command tx timeout [ 99.881780] Bluetooth: hci3: command tx timeout [ 99.881959] Bluetooth: hci6: command tx timeout [ 99.945475] Bluetooth: hci2: command tx timeout [ 99.945567] Bluetooth: hci4: command tx timeout [ 100.010541] Bluetooth: hci7: command tx timeout [ 100.011233] Bluetooth: hci5: command tx timeout [ 153.744081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.747861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.750134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.759926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.763249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.767005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.792023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.794928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.796786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.798744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.802759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.807116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.807925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.808909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.810198] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.848170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.857830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.862257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.023330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.039553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.047149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.049134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.056154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.069158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.074609] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.075776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.077253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.092267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.092776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.107810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.115988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.126252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.131018] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.134985] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.136174] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.136996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.147335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.149712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.149956] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.161016] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.178637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.186690] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.192568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.212981] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.216885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.221891] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.226459] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.228805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.817503] Bluetooth: hci0: command tx timeout [ 155.881556] Bluetooth: hci2: command tx timeout [ 155.883423] Bluetooth: hci1: command tx timeout [ 156.140433] Bluetooth: hci4: command tx timeout [ 156.202721] Bluetooth: hci7: command tx timeout [ 156.265843] Bluetooth: hci3: command tx timeout [ 156.266012] Bluetooth: hci6: command tx timeout [ 156.330490] Bluetooth: hci5: command tx timeout [ 157.865488] Bluetooth: hci0: command tx timeout [ 157.929471] Bluetooth: hci1: command tx timeout [ 157.930082] Bluetooth: hci2: command tx timeout [ 158.185780] Bluetooth: hci4: command tx timeout [ 158.249492] Bluetooth: hci7: command tx timeout [ 158.315575] Bluetooth: hci6: command tx timeout [ 158.316584] Bluetooth: hci3: command tx timeout [ 158.377560] Bluetooth: hci5: command tx timeout [ 159.913453] Bluetooth: hci0: command tx timeout [ 159.977479] Bluetooth: hci2: command tx timeout [ 159.977557] Bluetooth: hci1: command tx timeout [ 160.233446] Bluetooth: hci4: command tx timeout [ 160.298417] Bluetooth: hci7: command tx timeout [ 160.362419] Bluetooth: hci3: command tx timeout [ 160.363007] Bluetooth: hci6: command tx timeout [ 160.425489] Bluetooth: hci5: command tx timeout [ 161.961560] Bluetooth: hci0: command tx timeout [ 162.025924] Bluetooth: hci1: command tx timeout [ 162.026113] Bluetooth: hci2: command tx timeout [ 162.281930] Bluetooth: hci4: command tx timeout [ 162.345604] Bluetooth: hci7: command tx timeout [ 162.409523] Bluetooth: hci3: command tx timeout [ 162.409646] Bluetooth: hci6: command tx timeout [ 162.473464] Bluetooth: hci5: command tx timeout [ 212.906779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.906903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.567389] [ 214.567664] ====================================================== [ 214.568256] WARNING: possible circular locking dependency detected [ 214.568852] 6.13.0-rc7-next-20250117 #1 Not tainted [ 214.569342] ------------------------------------------------------ [ 214.570554] kworker/u8:1/65 is trying to acquire lock: [ 214.571494] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.572993] [ 214.572993] but task is already holding lock: [ 214.573837] ffff88801b6c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 214.575214] [ 214.575214] which lock already depends on the new lock. [ 214.575214] [ 214.576355] [ 214.576355] the existing dependency chain (in reverse order) is: [ 214.577409] [ 214.577409] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 214.578720] __mutex_lock+0x13d/0xb50 [ 214.579382] wiphy_register+0x1b2e/0x25d0 [ 214.580151] ieee80211_register_hw+0x23a4/0x3d60 [ 214.580943] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 214.581770] init_mac80211_hwsim+0x389/0x870 [ 214.582538] do_one_initcall+0xf9/0x640 [ 214.583250] kernel_init_freeable+0x53d/0x7a0 [ 214.584213] kernel_init+0x1e/0x2d0 [ 214.584637] ret_from_fork+0x48/0x80 [ 214.585072] ret_from_fork_asm+0x1a/0x30 [ 214.585560] [ 214.585560] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 214.586172] __lock_acquire+0x29fd/0x4580 [ 214.586659] lock_acquire+0x19b/0x520 [ 214.587106] __mutex_lock+0x13d/0xb50 [ 214.587570] unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.588183] unregister_netdevice_queue+0x224/0x2e0 [ 214.588732] _cfg80211_unregister_wdev+0x57b/0x700 [ 214.589287] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 214.589840] ieee80211_unregister_hw+0x55/0x3a0 [ 214.590362] hwsim_exit_net+0x3a0/0x730 [ 214.590830] ops_exit_list+0xb3/0x180 [ 214.591278] cleanup_net+0x546/0xad0 [ 214.591732] process_one_work+0x8ee/0x1a10 [ 214.592241] worker_thread+0x674/0xe70 [ 214.592717] kthread+0x3ab/0x720 [ 214.593138] ret_from_fork+0x48/0x80 [ 214.593578] ret_from_fork_asm+0x1a/0x30 [ 214.594065] [ 214.594065] other info that might help us debug this: [ 214.594065] [ 214.594825] Possible unsafe locking scenario: [ 214.594825] [ 214.595394] CPU0 CPU1 [ 214.595850] ---- ---- [ 214.596300] lock(&rdev->wiphy.mtx); [ 214.596706] lock(rtnl_mutex); [ 214.597286] lock(&rdev->wiphy.mtx); [ 214.597916] lock(rtnl_mutex); [ 214.598277] [ 214.598277] *** DEADLOCK *** [ 214.598277] [ 214.598843] 4 locks held by kworker/u8:1/65: [ 214.599278] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 214.600298] #1: ffff88800efc7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 214.601273] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 214.602186] #3: ffff88801b6c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 214.603215] [ 214.603215] stack backtrace: [ 214.603670] CPU: 0 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 214.604475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 214.605257] Workqueue: netns cleanup_net [ 214.605676] Call Trace: [ 214.605931] [ 214.606160] dump_stack_lvl+0xca/0x120 [ 214.606588] print_circular_bug+0x47b/0x750 [ 214.607027] check_noncircular+0x2e9/0x3c0 [ 214.607456] ? srso_return_thunk+0x5/0x5f [ 214.607901] ? __pfx_check_noncircular+0x10/0x10 [ 214.608379] ? hlock_class+0x4e/0x130 [ 214.608763] ? mark_lock+0xac/0xed0 [ 214.609140] ? srso_return_thunk+0x5/0x5f [ 214.609583] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 214.610048] ? lockdep_lock+0xba/0x1b0 [ 214.610471] ? __pfx_lockdep_lock+0x10/0x10 [ 214.610933] __lock_acquire+0x29fd/0x4580 [ 214.611369] ? __pfx___lock_acquire+0x10/0x10 [ 214.611829] ? mark_held_locks+0x9e/0xe0 [ 214.612250] lock_acquire+0x19b/0x520 [ 214.612646] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.613238] ? __pfx_lock_acquire+0x10/0x10 [ 214.613677] ? lock_is_held_type+0xe3/0x120 [ 214.614129] ? srso_return_thunk+0x5/0x5f [ 214.614559] ? lock_is_held_type+0x9e/0x120 [ 214.615012] ? srso_return_thunk+0x5/0x5f [ 214.615457] __mutex_lock+0x13d/0xb50 [ 214.615872] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.616459] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.617043] ? srso_return_thunk+0x5/0x5f [ 214.617469] ? synchronize_rcu_expedited+0x38a/0x420 [ 214.617972] ? __pfx___mutex_lock+0x10/0x10 [ 214.618417] ? __pfx_autoremove_wake_function+0x10/0x10 [ 214.618952] ? srso_return_thunk+0x5/0x5f [ 214.619386] ? kasan_quarantine_put+0x84/0x1e0 [ 214.619880] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 214.620328] ? srso_return_thunk+0x5/0x5f [ 214.620765] unregister_netdevice_many_notify+0x1612/0x1c80 [ 214.621320] ? __virt_addr_valid+0x2e8/0x5d0 [ 214.621778] ? __pfx_lock_release+0x10/0x10 [ 214.622222] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 214.622811] ? find_held_lock+0x2c/0x110 [ 214.623239] ? srso_return_thunk+0x5/0x5f [ 214.623692] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 214.624207] ? srso_return_thunk+0x5/0x5f [ 214.624639] ? lock_release+0x20f/0x6f0 [ 214.625045] ? __pfx_lock_release+0x10/0x10 [ 214.625480] ? srso_return_thunk+0x5/0x5f [ 214.625909] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 214.626434] ? srso_return_thunk+0x5/0x5f [ 214.626876] unregister_netdevice_queue+0x224/0x2e0 [ 214.627378] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 214.627925] ? up_write+0x195/0x520 [ 214.628317] _cfg80211_unregister_wdev+0x57b/0x700 [ 214.628823] ? srso_return_thunk+0x5/0x5f [ 214.629266] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 214.629763] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 214.630303] ? srso_return_thunk+0x5/0x5f [ 214.630744] ? srso_return_thunk+0x5/0x5f [ 214.631177] ? synchronize_rcu+0x1ff/0x260 [ 214.631622] ieee80211_unregister_hw+0x55/0x3a0 [ 214.632094] hwsim_exit_net+0x3a0/0x730 [ 214.632504] ? __pfx_hwsim_exit_net+0x10/0x10 [ 214.632956] ? srso_return_thunk+0x5/0x5f [ 214.633389] ? netdev_run_todo+0x788/0x1040 [ 214.633830] ? __pfx_hwsim_exit_net+0x10/0x10 [ 214.634286] ops_exit_list+0xb3/0x180 [ 214.634681] cleanup_net+0x546/0xad0 [ 214.635067] ? __pfx_cleanup_net+0x10/0x10 [ 214.635510] process_one_work+0x8ee/0x1a10 [ 214.635976] ? __pfx_lock_acquire+0x10/0x10 [ 214.636418] ? __pfx_process_one_work+0x10/0x10 [ 214.636904] ? srso_return_thunk+0x5/0x5f [ 214.637339] ? move_linked_works+0x172/0x270 [ 214.637788] ? srso_return_thunk+0x5/0x5f [ 214.638219] ? assign_work+0x196/0x240 [ 214.638634] worker_thread+0x674/0xe70 [ 214.639047] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 214.639580] ? srso_return_thunk+0x5/0x5f [ 214.640009] ? __pfx_worker_thread+0x10/0x10 [ 214.640472] kthread+0x3ab/0x720 [ 214.640838] ? __pfx_kthread+0x10/0x10 [ 214.641248] ? srso_return_thunk+0x5/0x5f [ 214.641688] ? finish_task_switch.isra.0+0x206/0x840 [ 214.642201] ? __pfx_kthread+0x10/0x10 [ 214.642616] ret_from_fork+0x48/0x80 [ 214.642993] ? __pfx_kthread+0x10/0x10 [ 214.643404] ret_from_fork_asm+0x1a/0x30 [ 214.643852] [ 215.995515] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.003964] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.005966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.010223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.012952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.017503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.017830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.023785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.029488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.041152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.047742] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.049563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.071051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.075696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.076807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.086947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.098652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.101408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.284901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.289772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.295776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.308984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.335018] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.339836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.342051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.342572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.367427] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.389409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.395887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.434830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.438972] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.441285] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.443132] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.448692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.451700] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.453603] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.455759] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.464016] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.475963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.532505] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.540699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.540730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.541645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.544514] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.558697] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.590552] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.595746] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.605404] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.089473] Bluetooth: hci0: command tx timeout [ 218.090461] Bluetooth: hci1: command tx timeout [ 218.217644] Bluetooth: hci2: command tx timeout [ 218.410955] Bluetooth: hci3: command tx timeout [ 218.537494] Bluetooth: hci6: command tx timeout [ 218.665473] Bluetooth: hci5: command tx timeout [ 218.793464] Bluetooth: hci4: command tx timeout [ 218.985596] Bluetooth: hci7: command tx timeout [ 220.137501] Bluetooth: hci1: command tx timeout [ 220.138205] Bluetooth: hci0: command tx timeout [ 220.265404] Bluetooth: hci2: command tx timeout [ 220.458418] Bluetooth: hci3: command tx timeout [ 220.585537] Bluetooth: hci6: command tx timeout [ 220.713522] Bluetooth: hci5: command tx timeout [ 220.841421] Bluetooth: hci4: command tx timeout [ 221.033417] Bluetooth: hci7: command tx timeout [ 222.185478] Bluetooth: hci0: command tx timeout [ 222.186133] Bluetooth: hci1: command tx timeout [ 222.314410] Bluetooth: hci2: command tx timeout [ 222.506376] Bluetooth: hci3: command tx timeout [ 222.634491] Bluetooth: hci6: command tx timeout [ 222.762498] Bluetooth: hci5: command tx timeout [ 222.890405] Bluetooth: hci4: command tx timeout [ 223.084460] Bluetooth: hci7: command tx timeout [ 224.233481] Bluetooth: hci1: command tx timeout [ 224.233545] Bluetooth: hci0: command tx timeout [ 224.361448] Bluetooth: hci2: command tx timeout [ 224.553712] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 17:43:24 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283cd30 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800efc6b68 R8 =0000000000000001 R9 =ffffed1001df8d5c R10=0000000000000001 R11=0000000023203e2d R12=ffffffff886930b0 R13=ffff88800efc6e60 R14=ffffffff88693320 R15=0000000000000000 RIP=ffffffff8283cd85 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fa6e645dd8 CR3=000000001368e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=218bdaf3c4850986014e13888569c7cd XMM02=00000000000fd488f61f520134a0d9c2 XMM03=0000000000136bc8f9980df3bdc2dbad XMM04=705975f1a1c5176400000000000ae988 XMM05=b0bf9d74d01c2850000000000013f868 XMM06=9f165a4fe6c971ad0000000000136cd0 XMM07=711fbe8126c5d3440000000000136bc8 XMM08=ee7587d5db12e8e300000000000fd488 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88800ef4f400 RCX=ffffffff81429a4a RDX=ffff88800ef4f400 RSI=0000000000000008 RDI=ffff88800ef4f400 RBP=0000000000200000 RSP=ffff88800d35fdb8 R8 =0000000000000000 R9 =ffffed1001de9e80 R10=ffff88800ef4f407 R11=ffff88800ee557f8 R12=ffff88806cc0aff9 R13=ffffffff8861a838 R14=ffff88800ee55340 R15=0000000000000086 RIP=ffffffff81429a57 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555cafa9f058 CR3=000000000ddf0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0000ec810000000c0000ec7e0 XMM04=000000c0000ec870000000c0000ec840 XMM05=000000c0000ec8d0000000c0000ec8a0 XMM06=000000c0000865a0000000c0000ec900 XMM07=000000c0000ec960000000c0000ec930 XMM08=000000c0000ec960000000c0000ec930 XMM09=000000c0000ec9c0000000c0000ec990 XMM10=000000c0000eca20000000c0000ec9f0 XMM11=000000c0000eca80000000c0000eca50 XMM12=000000c0000ecae0000000c0000ecab0 XMM13=000000c0000ecb10000000c0000865d0 XMM14=000000c0000ecb70000000c0000ecb40 XMM15=000000c0000ecbd0000000c0000ecba0