Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:32285' (ECDSA) to the list of known hosts. 2025/01/18 11:17:47 fuzzer started 2025/01/18 11:17:48 dialing manager at localhost:44245 syzkaller login: [ 60.949920] cgroup: Unknown subsys name 'net' [ 61.051963] cgroup: Unknown subsys name 'cpuset' [ 61.087901] cgroup: Unknown subsys name 'rlimit' [ 66.863188] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 11:18:05 syscalls: 2217 2025/01/18 11:18:05 code coverage: enabled 2025/01/18 11:18:05 comparison tracing: enabled 2025/01/18 11:18:05 extra coverage: enabled 2025/01/18 11:18:05 setuid sandbox: enabled 2025/01/18 11:18:05 namespace sandbox: enabled 2025/01/18 11:18:05 Android sandbox: enabled 2025/01/18 11:18:05 fault injection: enabled 2025/01/18 11:18:05 leak checking: enabled 2025/01/18 11:18:05 net packet injection: enabled 2025/01/18 11:18:05 net device setup: enabled 2025/01/18 11:18:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 11:18:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 11:18:05 USB emulation: enabled 2025/01/18 11:18:05 hci packet injection: enabled 2025/01/18 11:18:05 wifi device emulation: enabled 2025/01/18 11:18:05 802.15.4 emulation: enabled 2025/01/18 11:18:05 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 11:18:05 fetching corpus: 50, signal 25302/28330 (executing program) 2025/01/18 11:18:06 fetching corpus: 100, signal 34001/38079 (executing program) 2025/01/18 11:18:06 fetching corpus: 150, signal 42516/47260 (executing program) 2025/01/18 11:18:06 fetching corpus: 200, signal 47358/52836 (executing program) 2025/01/18 11:18:06 fetching corpus: 250, signal 53544/59359 (executing program) 2025/01/18 11:18:06 fetching corpus: 300, signal 59609/65678 (executing program) 2025/01/18 11:18:06 fetching corpus: 350, signal 63039/69467 (executing program) 2025/01/18 11:18:06 fetching corpus: 400, signal 66200/72920 (executing program) 2025/01/18 11:18:07 fetching corpus: 450, signal 72831/79085 (executing program) 2025/01/18 11:18:07 fetching corpus: 500, signal 75200/81598 (executing program) 2025/01/18 11:18:07 fetching corpus: 550, signal 78524/84782 (executing program) 2025/01/18 11:18:07 fetching corpus: 600, signal 81633/87645 (executing program) 2025/01/18 11:18:07 fetching corpus: 650, signal 83738/89639 (executing program) 2025/01/18 11:18:07 fetching corpus: 700, signal 85713/91527 (executing program) 2025/01/18 11:18:08 fetching corpus: 750, signal 88266/93693 (executing program) 2025/01/18 11:18:08 fetching corpus: 800, signal 90696/95724 (executing program) 2025/01/18 11:18:08 fetching corpus: 850, signal 92462/97264 (executing program) 2025/01/18 11:18:08 fetching corpus: 900, signal 93918/98461 (executing program) 2025/01/18 11:18:09 fetching corpus: 950, signal 95291/99567 (executing program) 2025/01/18 11:18:09 fetching corpus: 1000, signal 97177/100927 (executing program) 2025/01/18 11:18:09 fetching corpus: 1050, signal 98223/101741 (executing program) 2025/01/18 11:18:09 fetching corpus: 1100, signal 100269/103051 (executing program) 2025/01/18 11:18:09 fetching corpus: 1150, signal 101313/103745 (executing program) 2025/01/18 11:18:09 fetching corpus: 1200, signal 103165/104812 (executing program) 2025/01/18 11:18:10 fetching corpus: 1250, signal 104792/105758 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/105829 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/105867 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/105893 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/105921 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/105961 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/105998 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106020 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106048 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106077 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106104 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106140 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106171 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106198 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106228 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106257 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106296 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106323 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106358 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106379 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106409 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106440 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106473 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106500 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106522 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106543 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106578 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106612 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106624 (executing program) 2025/01/18 11:18:10 fetching corpus: 1262, signal 104892/106624 (executing program) 2025/01/18 11:18:14 starting 8 fuzzer processes 11:18:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4) 11:18:14 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) splice(r0, 0x0, r1, 0x0, 0x800004, 0x0) 11:18:14 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:18:14 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='.#;{]]&\'\x00') 11:18:14 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x7000) 11:18:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)=ANY=[@ANYBLOB="02"]) [ 86.846727] audit: type=1400 audit(1737199094.315:7): avc: denied { execmem } for pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:18:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) 11:18:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f00000001c0)) [ 88.241359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.245829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.248752] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.257087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.265107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.270162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.299206] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.308011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.316579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.326829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.349477] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.352928] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.355053] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.359608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.373865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.397642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.412008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.413747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.427007] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.430793] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.433764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.437960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.438979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.443932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.446120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.448052] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.449787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.452962] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.453701] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.458046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.481228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.484995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.494066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.496260] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.504155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.506380] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.508193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.516047] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.520702] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.526046] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.536681] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.537796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.538792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.559389] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.562335] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.572326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.575795] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.578124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.381337] Bluetooth: hci0: command tx timeout [ 90.444674] Bluetooth: hci1: command tx timeout [ 90.508643] Bluetooth: hci4: command tx timeout [ 90.509028] Bluetooth: hci6: command tx timeout [ 90.572241] Bluetooth: hci2: command tx timeout [ 90.635833] Bluetooth: hci5: command tx timeout [ 90.637405] Bluetooth: hci7: command tx timeout [ 90.637756] Bluetooth: hci3: command tx timeout [ 92.429575] Bluetooth: hci0: command tx timeout [ 92.491993] Bluetooth: hci1: command tx timeout [ 92.555615] Bluetooth: hci6: command tx timeout [ 92.556402] Bluetooth: hci4: command tx timeout [ 92.619886] Bluetooth: hci2: command tx timeout [ 92.684037] Bluetooth: hci3: command tx timeout [ 92.684724] Bluetooth: hci7: command tx timeout [ 92.685210] Bluetooth: hci5: command tx timeout [ 94.476748] Bluetooth: hci0: command tx timeout [ 94.539874] Bluetooth: hci1: command tx timeout [ 94.604694] Bluetooth: hci4: command tx timeout [ 94.605325] Bluetooth: hci6: command tx timeout [ 94.667649] Bluetooth: hci2: command tx timeout [ 94.731672] Bluetooth: hci5: command tx timeout [ 94.732409] Bluetooth: hci7: command tx timeout [ 94.732576] Bluetooth: hci3: command tx timeout [ 96.523645] Bluetooth: hci0: command tx timeout [ 96.587608] Bluetooth: hci1: command tx timeout [ 96.651585] Bluetooth: hci6: command tx timeout [ 96.652158] Bluetooth: hci4: command tx timeout [ 96.715730] Bluetooth: hci2: command tx timeout [ 96.779658] Bluetooth: hci5: command tx timeout [ 96.780229] Bluetooth: hci3: command tx timeout [ 96.780819] Bluetooth: hci7: command tx timeout [ 148.624401] syz-executor.0 (282) used greatest stack depth: 23296 bytes left [ 151.456093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.462119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.465373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.471653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.475399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.476111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.486569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.487581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.494600] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.495390] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.498920] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.501755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.522836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.541004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.542083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.548292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.549449] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.564734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.566155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.569088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.569138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.569246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.575220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.576023] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.576390] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.580074] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.580339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.582229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.584751] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.586029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.921929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.929538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.937005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.015777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.048052] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.068270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.103397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.108230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.112786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.115890] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.120006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.121903] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.169229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.185697] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.190855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.197869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.224250] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.230806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.611594] Bluetooth: hci3: command tx timeout [ 153.675582] Bluetooth: hci2: command tx timeout [ 153.675627] Bluetooth: hci0: command tx timeout [ 153.675824] Bluetooth: hci1: command tx timeout [ 153.803585] Bluetooth: hci4: command tx timeout [ 154.253644] Bluetooth: hci5: command tx timeout [ 154.315640] Bluetooth: hci6: command tx timeout [ 154.379800] Bluetooth: hci7: command tx timeout [ 155.659598] Bluetooth: hci3: command tx timeout [ 155.723715] Bluetooth: hci1: command tx timeout [ 155.723941] Bluetooth: hci0: command tx timeout [ 155.724681] Bluetooth: hci2: command tx timeout [ 155.851700] Bluetooth: hci4: command tx timeout [ 156.299589] Bluetooth: hci5: command tx timeout [ 156.364559] Bluetooth: hci6: command tx timeout [ 156.427631] Bluetooth: hci7: command tx timeout [ 157.707764] Bluetooth: hci3: command tx timeout [ 157.772585] Bluetooth: hci1: command tx timeout [ 157.772674] Bluetooth: hci2: command tx timeout [ 157.772756] Bluetooth: hci0: command tx timeout [ 157.899629] Bluetooth: hci4: command tx timeout [ 158.347893] Bluetooth: hci5: command tx timeout [ 158.411553] Bluetooth: hci6: command tx timeout [ 158.475624] Bluetooth: hci7: command tx timeout [ 159.756021] Bluetooth: hci3: command tx timeout [ 159.819890] Bluetooth: hci0: command tx timeout [ 159.819968] Bluetooth: hci2: command tx timeout [ 159.819991] Bluetooth: hci1: command tx timeout [ 159.948685] Bluetooth: hci4: command tx timeout [ 160.397537] Bluetooth: hci5: command tx timeout [ 160.460643] Bluetooth: hci6: command tx timeout [ 160.526528] Bluetooth: hci7: command tx timeout [ 209.920926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.921138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.704199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.704288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.607728] [ 212.608204] ====================================================== [ 212.609473] WARNING: possible circular locking dependency detected [ 212.610705] 6.13.0-rc7-next-20250117 #1 Not tainted [ 212.615142] ------------------------------------------------------ [ 212.618557] kworker/u8:1/65 is trying to acquire lock: [ 212.619636] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.621728] [ 212.621728] but task is already holding lock: [ 212.622889] ffff88803cc38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 212.624877] [ 212.624877] which lock already depends on the new lock. [ 212.624877] [ 212.626445] [ 212.626445] the existing dependency chain (in reverse order) is: [ 212.627927] [ 212.627927] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 212.629302] __mutex_lock+0x13d/0xb50 [ 212.630257] wiphy_register+0x1b2e/0x25d0 [ 212.631285] ieee80211_register_hw+0x23a4/0x3d60 [ 212.632410] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 212.633584] init_mac80211_hwsim+0x389/0x870 [ 212.634646] do_one_initcall+0xf9/0x640 [ 212.635641] kernel_init_freeable+0x53d/0x7a0 [ 212.636729] kernel_init+0x1e/0x2d0 [ 212.637606] ret_from_fork+0x48/0x80 [ 212.638490] ret_from_fork_asm+0x1a/0x30 [ 212.639494] [ 212.639494] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 212.640763] __lock_acquire+0x29fd/0x4580 [ 212.641754] lock_acquire+0x19b/0x520 [ 212.642670] __mutex_lock+0x13d/0xb50 [ 212.643608] unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.644880] unregister_netdevice_queue+0x224/0x2e0 [ 212.646001] _cfg80211_unregister_wdev+0x57b/0x700 [ 212.647141] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 212.648261] ieee80211_unregister_hw+0x55/0x3a0 [ 212.649339] hwsim_exit_net+0x3a0/0x730 [ 212.650290] ops_exit_list+0xb3/0x180 [ 212.651190] cleanup_net+0x546/0xad0 [ 212.652079] process_one_work+0x8ee/0x1a10 [ 212.653117] worker_thread+0x674/0xe70 [ 212.654080] kthread+0x3ab/0x720 [ 212.654939] ret_from_fork+0x48/0x80 [ 212.655805] ret_from_fork_asm+0x1a/0x30 [ 212.656806] [ 212.656806] other info that might help us debug this: [ 212.656806] [ 212.658331] Possible unsafe locking scenario: [ 212.658331] [ 212.659477] CPU0 CPU1 [ 212.660384] ---- ---- [ 212.661305] lock(&rdev->wiphy.mtx); [ 212.662122] lock(rtnl_mutex); [ 212.663299] lock(&rdev->wiphy.mtx); [ 212.664542] lock(rtnl_mutex); [ 212.665262] [ 212.665262] *** DEADLOCK *** [ 212.665262] [ 212.666399] 4 locks held by kworker/u8:1/65: [ 212.667270] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 212.669284] #1: ffff88800ee07d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 212.671232] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 212.673057] #3: ffff88803cc38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 212.675117] [ 212.675117] stack backtrace: [ 212.675990] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 212.677616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 212.679163] Workqueue: netns cleanup_net [ 212.679999] Call Trace: [ 212.680511] [ 212.680968] dump_stack_lvl+0xca/0x120 [ 212.681796] print_circular_bug+0x47b/0x750 [ 212.682668] check_noncircular+0x2e9/0x3c0 [ 212.683527] ? __pfx_check_noncircular+0x10/0x10 [ 212.684545] ? hlock_class+0x4e/0x130 [ 212.685309] ? mark_lock+0xac/0xed0 [ 212.686059] ? srso_return_thunk+0x5/0x5f [ 212.686921] ? timerqueue_del+0x83/0x150 [ 212.687755] ? lockdep_lock+0xba/0x1b0 [ 212.688598] ? __pfx_lockdep_lock+0x10/0x10 [ 212.689516] __lock_acquire+0x29fd/0x4580 [ 212.690384] ? __pfx___lock_acquire+0x10/0x10 [ 212.691296] ? lock_release+0x20f/0x6f0 [ 212.692093] ? __pfx_lock_release+0x10/0x10 [ 212.692957] lock_acquire+0x19b/0x520 [ 212.693720] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.694846] ? __pfx_lock_acquire+0x10/0x10 [ 212.695711] ? srso_return_thunk+0x5/0x5f [ 212.696573] ? lock_release+0x20f/0x6f0 [ 212.697373] ? srso_return_thunk+0x5/0x5f [ 212.698219] ? lock_is_held_type+0x9e/0x120 [ 212.699093] ? srso_return_thunk+0x5/0x5f [ 212.699945] __mutex_lock+0x13d/0xb50 [ 212.700732] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.701861] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.702990] ? srso_return_thunk+0x5/0x5f [ 212.703837] ? synchronize_rcu_expedited+0x38a/0x420 [ 212.704847] ? __pfx___mutex_lock+0x10/0x10 [ 212.705720] ? __pfx_autoremove_wake_function+0x10/0x10 [ 212.706769] ? srso_return_thunk+0x5/0x5f [ 212.707619] ? kasan_quarantine_put+0x84/0x1e0 [ 212.708548] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 212.709419] ? srso_return_thunk+0x5/0x5f [ 212.710274] unregister_netdevice_many_notify+0x1612/0x1c80 [ 212.711365] ? __virt_addr_valid+0x2e8/0x5d0 [ 212.712258] ? __pfx_lock_release+0x10/0x10 [ 212.713120] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 212.714282] ? find_held_lock+0x2c/0x110 [ 212.715122] ? srso_return_thunk+0x5/0x5f [ 212.715967] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 212.716950] ? srso_return_thunk+0x5/0x5f [ 212.717796] ? lock_release+0x20f/0x6f0 [ 212.718590] ? __pfx_lock_release+0x10/0x10 [ 212.719436] ? srso_return_thunk+0x5/0x5f [ 212.720272] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.721301] ? srso_return_thunk+0x5/0x5f [ 212.722148] unregister_netdevice_queue+0x224/0x2e0 [ 212.723092] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 212.724115] ? up_write+0x195/0x520 [ 212.724865] _cfg80211_unregister_wdev+0x57b/0x700 [ 212.725822] ? srso_return_thunk+0x5/0x5f [ 212.726662] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 212.727617] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 212.728676] ? srso_return_thunk+0x5/0x5f [ 212.729513] ? srso_return_thunk+0x5/0x5f [ 212.730354] ? synchronize_rcu+0x1ff/0x260 [ 212.731171] ieee80211_unregister_hw+0x55/0x3a0 [ 212.732063] hwsim_exit_net+0x3a0/0x730 [ 212.732837] ? __pfx_hwsim_exit_net+0x10/0x10 [ 212.733668] ? srso_return_thunk+0x5/0x5f [ 212.734467] ? netdev_run_todo+0x788/0x1040 [ 212.735275] ? __pfx_hwsim_exit_net+0x10/0x10 [ 212.736112] ops_exit_list+0xb3/0x180 [ 212.736850] cleanup_net+0x546/0xad0 [ 212.737570] ? __pfx_cleanup_net+0x10/0x10 [ 212.738397] process_one_work+0x8ee/0x1a10 [ 212.739239] ? __pfx_lock_acquire+0x10/0x10 [ 212.740056] ? __pfx_process_one_work+0x10/0x10 [ 212.740961] ? srso_return_thunk+0x5/0x5f [ 212.741756] ? move_linked_works+0x172/0x270 [ 212.742585] ? srso_return_thunk+0x5/0x5f [ 212.743389] ? assign_work+0x196/0x240 [ 212.744189] worker_thread+0x674/0xe70 [ 212.744999] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 212.745985] ? srso_return_thunk+0x5/0x5f [ 212.746774] ? __pfx_worker_thread+0x10/0x10 [ 212.747634] kthread+0x3ab/0x720 [ 212.748332] ? __pfx_kthread+0x10/0x10 [ 212.749122] ? srso_return_thunk+0x5/0x5f [ 212.749949] ? finish_task_switch.isra.0+0x206/0x840 [ 212.750929] ? __pfx_kthread+0x10/0x10 [ 212.751709] ret_from_fork+0x48/0x80 [ 212.752394] ? __pfx_kthread+0x10/0x10 [ 212.753160] ret_from_fork_asm+0x1a/0x30 [ 212.753964] [ 214.425077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.429185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.430283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.433865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.437114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.439296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.682732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.685320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.687486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.693299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.696855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.698806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.699103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.707837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.708532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.716193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.718771] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.719378] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.720250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.721324] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.721958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.761373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.776311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.778592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.855557] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.864890] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.872663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.891491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.901019] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.903741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.931222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.935679] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.936296] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.937076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.938914] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.940057] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.940956] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.957817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.963940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.003849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.010898] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.016984] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.017660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.020429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.021136] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.022879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.024167] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.024807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.460520] Bluetooth: hci0: command tx timeout [ 216.779571] Bluetooth: hci1: command tx timeout [ 216.779651] Bluetooth: hci2: command tx timeout [ 216.843527] Bluetooth: hci3: command tx timeout [ 216.971766] Bluetooth: hci4: command tx timeout [ 216.971846] Bluetooth: hci6: command tx timeout [ 217.100503] Bluetooth: hci5: command tx timeout [ 217.100584] Bluetooth: hci7: command tx timeout [ 218.507585] Bluetooth: hci0: command tx timeout [ 218.827571] Bluetooth: hci1: command tx timeout [ 218.827652] Bluetooth: hci2: command tx timeout [ 218.891597] Bluetooth: hci3: command tx timeout [ 219.020551] Bluetooth: hci4: command tx timeout [ 219.020630] Bluetooth: hci6: command tx timeout [ 219.148136] Bluetooth: hci7: command tx timeout [ 219.148210] Bluetooth: hci5: command tx timeout [ 220.555508] Bluetooth: hci0: command tx timeout [ 220.875684] Bluetooth: hci1: command tx timeout [ 220.875918] Bluetooth: hci2: command tx timeout [ 220.939670] Bluetooth: hci3: command tx timeout [ 221.067691] Bluetooth: hci4: command tx timeout [ 221.067884] Bluetooth: hci6: command tx timeout [ 221.195876] Bluetooth: hci5: command tx timeout [ 221.195953] Bluetooth: hci7: command tx timeout [ 222.603846] Bluetooth: hci0: command tx timeout VM DIAGNOSIS: 11:20:20 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff860120e0 RCX=ffffffff81429a4a RDX=ffffc90011cac000 RSI=0000000000000001 RDI=ffffffff84ff4900 RBP=ffffffff84ff4900 RSP=ffff88800f577dd0 R8 =0000000000000000 R9 =ffffed1001852a00 R10=ffff88800c295007 R11=ffff88800c2fa078 R12=ffffffff86012ff9 R13=ffff888008c50378 R14=ffff88800c2f9bc0 R15=0000000000000086 RIP=ffffffff81aeddc5 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561520b6db68 CR3=00000000155a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c000133e00000000c000133dd0 XMM04=00000000000000003fd3333333333333 XMM05=000000c00008c900000000c00008c990 XMM06=000000c00008c950000000c00008c9d0 XMM07=000000c00008c9a0000000c00008ca00 XMM08=000000c00008ce40000000c00008ce20 XMM09=000000c00008cf10000000c00008ceb0 XMM10=000000c00008ce80000000c00008cbe0 XMM11=000000c00008cf40000000c00008cfb0 XMM12=000000c00008cf30000000c00008cf70 XMM13=000000c00008cf20000000c00008cf90 XMM14=000000c00008cc00000000c00008ce30 XMM15=000000c00008cfd0000000c00008cf80 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283cd30 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800ee06bc0 R8 =0000000000000001 R9 =ffffed1001dc0d67 R10=0000000000000001 R11=2d2d2d2d2d2d2d2d R12=ffffffff886930b0 R13=ffff88800ee06eb8 R14=ffffffff88693320 R15=0000000000000000 RIP=ffffffff8283cd85 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe97ee24e30 CR3=00000000155a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0000e0000000000c00029e500 XMM02=00000000000000004173986920000000 XMM03=000000c000148300000000c0001482d0 XMM04=000000c00008f500000000c000148330 XMM05=000000c000148390000000c000148360 XMM06=000000c0001483f0000000c0001483c0 XMM07=000000c000148450000000c000148420 XMM08=000000c0001484b0000000c000148480 XMM09=000000c000148510000000c0001484e0 XMM10=000000c000148540000000c00008f530 XMM11=000000c0001485a0000000c000148570 XMM12=000000c000148600000000c0001485d0 XMM13=000000c000148660000000c000148630 XMM14=000000c0001486c0000000c000148690 XMM15=000000c0000e9080000000c0001486f0