Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:25388' (ECDSA) to the list of known hosts. 2025/01/18 10:47:25 fuzzer started 2025/01/18 10:47:26 dialing manager at localhost:44245 syzkaller login: [ 62.830478] cgroup: Unknown subsys name 'net' [ 62.950440] cgroup: Unknown subsys name 'cpuset' [ 62.998423] cgroup: Unknown subsys name 'rlimit' [ 68.137650] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 78.538941] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 10:47:42 syscalls: 2217 2025/01/18 10:47:42 code coverage: enabled 2025/01/18 10:47:42 comparison tracing: enabled 2025/01/18 10:47:42 extra coverage: enabled 2025/01/18 10:47:42 setuid sandbox: enabled 2025/01/18 10:47:42 namespace sandbox: enabled 2025/01/18 10:47:42 Android sandbox: enabled 2025/01/18 10:47:42 fault injection: enabled 2025/01/18 10:47:42 leak checking: enabled 2025/01/18 10:47:42 net packet injection: enabled 2025/01/18 10:47:42 net device setup: enabled 2025/01/18 10:47:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 10:47:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 10:47:42 USB emulation: enabled 2025/01/18 10:47:42 hci packet injection: enabled 2025/01/18 10:47:42 wifi device emulation: enabled 2025/01/18 10:47:42 802.15.4 emulation: enabled 2025/01/18 10:47:42 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 10:47:42 fetching corpus: 50, signal 33329/36076 (executing program) 2025/01/18 10:47:43 fetching corpus: 100, signal 41602/45248 (executing program) 2025/01/18 10:47:43 fetching corpus: 150, signal 50192/54370 (executing program) 2025/01/18 10:47:43 fetching corpus: 200, signal 55167/59908 (executing program) 2025/01/18 10:47:43 fetching corpus: 250, signal 58961/64250 (executing program) 2025/01/18 10:47:43 fetching corpus: 300, signal 61960/67802 (executing program) 2025/01/18 10:47:43 fetching corpus: 350, signal 65643/71756 (executing program) 2025/01/18 10:47:44 fetching corpus: 400, signal 68649/75027 (executing program) 2025/01/18 10:47:44 fetching corpus: 450, signal 71238/77835 (executing program) 2025/01/18 10:47:44 fetching corpus: 500, signal 75454/81803 (executing program) 2025/01/18 10:47:44 fetching corpus: 550, signal 77663/84135 (executing program) 2025/01/18 10:47:44 fetching corpus: 600, signal 79953/86411 (executing program) 2025/01/18 10:47:44 fetching corpus: 650, signal 84981/90623 (executing program) 2025/01/18 10:47:44 fetching corpus: 700, signal 86947/92452 (executing program) 2025/01/18 10:47:45 fetching corpus: 750, signal 89131/94362 (executing program) 2025/01/18 10:47:45 fetching corpus: 800, signal 91384/96195 (executing program) 2025/01/18 10:47:45 fetching corpus: 850, signal 92722/97341 (executing program) 2025/01/18 10:47:45 fetching corpus: 900, signal 94565/98836 (executing program) 2025/01/18 10:47:45 fetching corpus: 950, signal 96596/100352 (executing program) 2025/01/18 10:47:45 fetching corpus: 1000, signal 98562/101722 (executing program) 2025/01/18 10:47:46 fetching corpus: 1050, signal 100054/102736 (executing program) 2025/01/18 10:47:46 fetching corpus: 1100, signal 101277/103564 (executing program) 2025/01/18 10:47:46 fetching corpus: 1150, signal 102336/104275 (executing program) 2025/01/18 10:47:46 fetching corpus: 1200, signal 103740/105090 (executing program) 2025/01/18 10:47:46 fetching corpus: 1250, signal 104740/105656 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/105764 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/105795 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/105827 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/105853 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/105886 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/105927 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/105962 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/106000 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/106030 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/106057 (executing program) 2025/01/18 10:47:46 fetching corpus: 1262, signal 104892/106087 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106121 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106161 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106192 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106218 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106251 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106284 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106314 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106354 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106382 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106420 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106458 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106491 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106517 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106548 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106577 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106615 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106624 (executing program) 2025/01/18 10:47:47 fetching corpus: 1262, signal 104892/106624 (executing program) 2025/01/18 10:47:50 starting 8 fuzzer processes 10:47:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x28, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) 10:47:50 executing program 1: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:47:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) 10:47:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 87.209136] audit: type=1400 audit(1737197270.952:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:47:50 executing program 4: futex(0x0, 0x10b, 0x0, 0x0, 0x0, 0x0) 10:47:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) fallocate(r1, 0x10, 0x5, 0x7ffc) lseek(r0, 0x0, 0x4) 10:47:51 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001000010000000000000000000c0000000200000000000000040000000c00168008"], 0x2c}], 0x1}, 0x0) 10:47:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x13, 0x32, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) [ 88.760700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.763532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.766319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.772344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.777085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.779177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.818310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.820966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.822974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.824441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.827149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.831293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.836799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.840597] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.842321] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.845076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.854158] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.856165] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.902179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.906325] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.913346] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.917163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.928327] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.930210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.968067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.969449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.970543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.973423] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.975086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.975916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.022029] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.025771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.036569] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.049035] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.052632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.060176] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.083667] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.085451] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.089165] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.093267] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.094927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.102301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.102592] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.105392] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.118306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.140240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.146403] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.148271] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.852645] Bluetooth: hci0: command tx timeout [ 90.916945] Bluetooth: hci2: command tx timeout [ 90.917352] Bluetooth: hci1: command tx timeout [ 90.979966] Bluetooth: hci3: command tx timeout [ 91.043992] Bluetooth: hci4: command tx timeout [ 91.172073] Bluetooth: hci5: command tx timeout [ 91.172412] Bluetooth: hci6: command tx timeout [ 91.236198] Bluetooth: hci7: command tx timeout [ 92.900903] Bluetooth: hci0: command tx timeout [ 92.964025] Bluetooth: hci2: command tx timeout [ 92.965441] Bluetooth: hci1: command tx timeout [ 93.029937] Bluetooth: hci3: command tx timeout [ 93.091957] Bluetooth: hci4: command tx timeout [ 93.220119] Bluetooth: hci6: command tx timeout [ 93.220222] Bluetooth: hci5: command tx timeout [ 93.283893] Bluetooth: hci7: command tx timeout [ 94.947894] Bluetooth: hci0: command tx timeout [ 95.011944] Bluetooth: hci1: command tx timeout [ 95.012042] Bluetooth: hci2: command tx timeout [ 95.075902] Bluetooth: hci3: command tx timeout [ 95.141898] Bluetooth: hci4: command tx timeout [ 95.267984] Bluetooth: hci5: command tx timeout [ 95.268117] Bluetooth: hci6: command tx timeout [ 95.332104] Bluetooth: hci7: command tx timeout [ 96.995999] Bluetooth: hci0: command tx timeout [ 97.059915] Bluetooth: hci2: command tx timeout [ 97.060027] Bluetooth: hci1: command tx timeout [ 97.123956] Bluetooth: hci3: command tx timeout [ 97.188068] Bluetooth: hci4: command tx timeout [ 97.315905] Bluetooth: hci6: command tx timeout [ 97.316009] Bluetooth: hci5: command tx timeout [ 97.379868] Bluetooth: hci7: command tx timeout [ 151.156100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.158325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.159188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.164447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.165937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.166609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.424264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.427461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.431671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.433782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.443894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.447261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.449581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.450570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.451426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.452196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.455935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.456374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.467468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.471730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.479159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.481633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.482672] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.484040] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.487165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.488897] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.488905] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.489090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.491667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.492075] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.492988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.496924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.501908] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.502415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.524454] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.524788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.538914] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.539634] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.540054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.545494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.556412] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.558424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.662559] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.665101] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.667208] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.676188] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.683255] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.685486] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.188014] Bluetooth: hci0: command tx timeout [ 153.508977] Bluetooth: hci3: command tx timeout [ 153.572031] Bluetooth: hci6: command tx timeout [ 153.573375] Bluetooth: hci2: command tx timeout [ 153.573692] Bluetooth: hci4: command tx timeout [ 153.573707] Bluetooth: hci1: command tx timeout [ 153.700035] Bluetooth: hci5: command tx timeout [ 153.765159] Bluetooth: hci7: command tx timeout [ 155.235920] Bluetooth: hci0: command tx timeout [ 155.555886] Bluetooth: hci3: command tx timeout [ 155.620860] Bluetooth: hci6: command tx timeout [ 155.620995] Bluetooth: hci1: command tx timeout [ 155.621021] Bluetooth: hci2: command tx timeout [ 155.621140] Bluetooth: hci4: command tx timeout [ 155.749836] Bluetooth: hci5: command tx timeout [ 155.811892] Bluetooth: hci7: command tx timeout [ 157.283943] Bluetooth: hci0: command tx timeout [ 157.603927] Bluetooth: hci3: command tx timeout [ 157.668000] Bluetooth: hci4: command tx timeout [ 157.668129] Bluetooth: hci1: command tx timeout [ 157.668216] Bluetooth: hci6: command tx timeout [ 157.668989] Bluetooth: hci2: command tx timeout [ 157.796930] Bluetooth: hci5: command tx timeout [ 157.861384] Bluetooth: hci7: command tx timeout [ 159.332890] Bluetooth: hci0: command tx timeout [ 159.652952] Bluetooth: hci3: command tx timeout [ 159.717869] Bluetooth: hci2: command tx timeout [ 159.717968] Bluetooth: hci6: command tx timeout [ 159.718019] Bluetooth: hci1: command tx timeout [ 159.718079] Bluetooth: hci4: command tx timeout [ 159.844911] Bluetooth: hci5: command tx timeout [ 159.908895] Bluetooth: hci7: command tx timeout [ 211.609286] [ 211.609547] ====================================================== [ 211.610195] WARNING: possible circular locking dependency detected [ 211.610811] 6.13.0-rc7-next-20250117 #1 Not tainted [ 211.611294] ------------------------------------------------------ [ 211.612702] kworker/u8:0/11 is trying to acquire lock: [ 211.613807] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.615693] [ 211.615693] but task is already holding lock: [ 211.617152] ffff888015e20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 211.618985] [ 211.618985] which lock already depends on the new lock. [ 211.618985] [ 211.620674] [ 211.620674] the existing dependency chain (in reverse order) is: [ 211.621562] [ 211.621562] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 211.622217] __mutex_lock+0x13d/0xb50 [ 211.622672] wiphy_register+0x1b2e/0x25d0 [ 211.623156] ieee80211_register_hw+0x23a4/0x3d60 [ 211.623685] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 211.624244] init_mac80211_hwsim+0x389/0x870 [ 211.624766] do_one_initcall+0xf9/0x640 [ 211.625243] kernel_init_freeable+0x53d/0x7a0 [ 211.625762] kernel_init+0x1e/0x2d0 [ 211.626178] ret_from_fork+0x48/0x80 [ 211.626602] ret_from_fork_asm+0x1a/0x30 [ 211.627098] [ 211.627098] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 211.627709] __lock_acquire+0x29fd/0x4580 [ 211.628197] lock_acquire+0x19b/0x520 [ 211.628654] __mutex_lock+0x13d/0xb50 [ 211.629112] unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.629730] unregister_netdevice_queue+0x224/0x2e0 [ 211.630282] _cfg80211_unregister_wdev+0x57b/0x700 [ 211.630837] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 211.631396] ieee80211_unregister_hw+0x55/0x3a0 [ 211.631921] hwsim_exit_net+0x3a0/0x730 [ 211.632386] ops_exit_list+0xb3/0x180 [ 211.632840] cleanup_net+0x546/0xad0 [ 211.633280] process_one_work+0x8ee/0x1a10 [ 211.633812] worker_thread+0x674/0xe70 [ 211.634304] kthread+0x3ab/0x720 [ 211.634747] ret_from_fork+0x48/0x80 [ 211.635189] ret_from_fork_asm+0x1a/0x30 [ 211.635698] [ 211.635698] other info that might help us debug this: [ 211.635698] [ 211.636457] Possible unsafe locking scenario: [ 211.636457] [ 211.637027] CPU0 CPU1 [ 211.637473] ---- ---- [ 211.637944] lock(&rdev->wiphy.mtx); [ 211.638365] lock(rtnl_mutex); [ 211.638970] lock(&rdev->wiphy.mtx); [ 211.639631] lock(rtnl_mutex); [ 211.640000] [ 211.640000] *** DEADLOCK *** [ 211.640000] [ 211.640599] 4 locks held by kworker/u8:0/11: [ 211.641051] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 211.642125] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 211.643128] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 211.644029] #3: ffff888015e20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 211.645047] [ 211.645047] stack backtrace: [ 211.645479] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 211.646279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 211.647095] Workqueue: netns cleanup_net [ 211.647515] Call Trace: [ 211.647767] [ 211.647996] dump_stack_lvl+0xca/0x120 [ 211.648442] print_circular_bug+0x47b/0x750 [ 211.648903] check_noncircular+0x2e9/0x3c0 [ 211.649347] ? srso_return_thunk+0x5/0x5f [ 211.649803] ? __pfx_check_noncircular+0x10/0x10 [ 211.650292] ? hlock_class+0x4e/0x130 [ 211.650695] ? mark_lock+0xac/0xed0 [ 211.651083] ? srso_return_thunk+0x5/0x5f [ 211.651533] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 211.652008] ? lockdep_lock+0xba/0x1b0 [ 211.652447] ? __pfx_lockdep_lock+0x10/0x10 [ 211.652905] __lock_acquire+0x29fd/0x4580 [ 211.653337] ? __pfx___lock_acquire+0x10/0x10 [ 211.653815] ? lock_release+0x20f/0x6f0 [ 211.654223] ? __pfx_lock_release+0x10/0x10 [ 211.654665] lock_acquire+0x19b/0x520 [ 211.655060] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.655661] ? __pfx_lock_acquire+0x10/0x10 [ 211.656111] ? srso_return_thunk+0x5/0x5f [ 211.656573] ? lock_release+0x20f/0x6f0 [ 211.657008] ? srso_return_thunk+0x5/0x5f [ 211.657461] ? lock_is_held_type+0x9e/0x120 [ 211.657934] ? srso_return_thunk+0x5/0x5f [ 211.658392] __mutex_lock+0x13d/0xb50 [ 211.658813] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.659416] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.660013] ? srso_return_thunk+0x5/0x5f [ 211.660478] ? synchronize_rcu_expedited+0x38a/0x420 [ 211.661007] ? __pfx___mutex_lock+0x10/0x10 [ 211.661459] ? __pfx_autoremove_wake_function+0x10/0x10 [ 211.662003] ? srso_return_thunk+0x5/0x5f [ 211.662436] ? kasan_quarantine_put+0x84/0x1e0 [ 211.662916] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 211.663371] ? srso_return_thunk+0x5/0x5f [ 211.663808] unregister_netdevice_many_notify+0x1612/0x1c80 [ 211.664363] ? __virt_addr_valid+0x2e8/0x5d0 [ 211.664832] ? __pfx_lock_release+0x10/0x10 [ 211.665271] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 211.665859] ? find_held_lock+0x2c/0x110 [ 211.666294] ? srso_return_thunk+0x5/0x5f [ 211.666746] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 211.667271] ? srso_return_thunk+0x5/0x5f [ 211.667732] ? lock_release+0x20f/0x6f0 [ 211.668160] ? __pfx_lock_release+0x10/0x10 [ 211.668620] ? srso_return_thunk+0x5/0x5f [ 211.669076] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 211.669637] ? srso_return_thunk+0x5/0x5f [ 211.670091] unregister_netdevice_queue+0x224/0x2e0 [ 211.670621] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 211.671189] ? up_write+0x195/0x520 [ 211.671590] _cfg80211_unregister_wdev+0x57b/0x700 [ 211.672105] ? srso_return_thunk+0x5/0x5f [ 211.672556] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 211.673078] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 211.673643] ? srso_return_thunk+0x5/0x5f [ 211.674093] ? srso_return_thunk+0x5/0x5f [ 211.674549] ? synchronize_rcu+0x1ff/0x260 [ 211.674991] ieee80211_unregister_hw+0x55/0x3a0 [ 211.675451] hwsim_exit_net+0x3a0/0x730 [ 211.675858] ? __pfx_hwsim_exit_net+0x10/0x10 [ 211.676307] ? srso_return_thunk+0x5/0x5f [ 211.676746] ? netdev_run_todo+0x788/0x1040 [ 211.677187] ? __pfx_hwsim_exit_net+0x10/0x10 [ 211.677643] ops_exit_list+0xb3/0x180 [ 211.678060] cleanup_net+0x546/0xad0 [ 211.678465] ? __pfx_cleanup_net+0x10/0x10 [ 211.678930] process_one_work+0x8ee/0x1a10 [ 211.679389] ? __pfx_lock_acquire+0x10/0x10 [ 211.679842] ? __pfx_process_one_work+0x10/0x10 [ 211.680345] ? srso_return_thunk+0x5/0x5f [ 211.680805] ? move_linked_works+0x172/0x270 [ 211.681265] ? srso_return_thunk+0x5/0x5f [ 211.681711] ? assign_work+0x196/0x240 [ 211.682124] worker_thread+0x674/0xe70 [ 211.682540] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 211.683094] ? __pfx_worker_thread+0x10/0x10 [ 211.683584] kthread+0x3ab/0x720 [ 211.683965] ? __pfx_kthread+0x10/0x10 [ 211.684391] ? srso_return_thunk+0x5/0x5f [ 211.684848] ? finish_task_switch.isra.0+0x206/0x840 [ 211.685368] ? __pfx_kthread+0x10/0x10 [ 211.685772] ret_from_fork+0x48/0x80 [ 211.686138] ? __pfx_kthread+0x10/0x10 [ 211.686540] ret_from_fork_asm+0x1a/0x30 [ 211.686970] [ 212.906586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.909160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.911480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.916178] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.927198] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.930180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.077113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.081836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.084118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.086197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.089324] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.091095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.103946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.106965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.108336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.114260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.117165] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.118914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.174128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.180004] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.181448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.184761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.187999] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.190903] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.245161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.247609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.249380] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.251646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.253434] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.255088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.298119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.316038] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.361002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.370159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.372114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.373441] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.376672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.402887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.403050] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.438608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.439009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.443006] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.451239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.452847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.457926] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.459303] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.459495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.462167] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.948961] Bluetooth: hci0: command tx timeout [ 215.140084] Bluetooth: hci2: command tx timeout [ 215.141612] Bluetooth: hci1: command tx timeout [ 215.268901] Bluetooth: hci3: command tx timeout [ 215.333845] Bluetooth: hci4: command tx timeout [ 215.461830] Bluetooth: hci5: command tx timeout [ 215.523932] Bluetooth: hci6: command tx timeout [ 215.588834] Bluetooth: hci7: command tx timeout [ 216.996402] Bluetooth: hci0: command tx timeout [ 217.188991] Bluetooth: hci2: command tx timeout [ 217.189416] Bluetooth: hci1: command tx timeout [ 217.316022] Bluetooth: hci3: command tx timeout [ 217.380629] Bluetooth: hci4: command tx timeout [ 217.507943] Bluetooth: hci5: command tx timeout [ 217.574258] Bluetooth: hci6: command tx timeout [ 217.637285] Bluetooth: hci7: command tx timeout [ 219.043863] Bluetooth: hci0: command tx timeout [ 219.235943] Bluetooth: hci1: command tx timeout [ 219.236695] Bluetooth: hci2: command tx timeout [ 219.363923] Bluetooth: hci3: command tx timeout [ 219.428401] Bluetooth: hci4: command tx timeout [ 219.555881] Bluetooth: hci5: command tx timeout [ 219.621900] Bluetooth: hci6: command tx timeout [ 219.683840] Bluetooth: hci7: command tx timeout [ 221.092869] Bluetooth: hci0: command tx timeout [ 221.283839] Bluetooth: hci2: command tx timeout [ 221.283857] Bluetooth: hci1: command tx timeout [ 221.412839] Bluetooth: hci3: command tx timeout [ 221.475953] Bluetooth: hci4: command tx timeout [ 221.605819] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 10:49:55 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88800f295800 RCX=ffffffff81429a4a RDX=ffff88800f295800 RSI=0000000000000008 RDI=ffff88800f295800 RBP=0000000000200000 RSP=ffff88800bd9fdb8 R8 =0000000000000000 R9 =ffffed1001e52b00 R10=ffff88800f295807 R11=ffff88800f3b3c38 R12=ffffffff85bc3ff9 R13=ffff888008c50378 R14=ffff88800f3b3780 R15=0000000000000086 RIP=ffffffff81429a4d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564ebc835090 CR3=00000000163f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6576652d7372656b726f772d6c6c696b XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=ffffffff000000020000564ebc83e180 XMM05=0000564ebc84da900000564ebc849ee0 XMM06=0000564ebc852b100000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000000 R9 =fffffbfff0be1544 R10=0000000000000000 R11=6f6c206863696877 R12=0000000000000005 R13=ffff8880095deeb8 R14=000000000000000e R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76e97e65c0 CR3=000000000cbe4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=be353173de5c7090724152ba39324a17 XMM02=d12871896912de2d00000000000fed80 XMM03=f9980df3bdc2dbad0000000000133308 XMM04=3596f3ca7503b03400000000000ae988 XMM05=3cc027b654ebc506000000000013f330 XMM06=9f165a4fe6c971ad0000000000137298 XMM07=711fbe8126c5d3440000000000137190 XMM08=68a8aee3740b9fad00000000000feea0 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000