Warning: Permanently added '[localhost]:49581' (ECDSA) to the list of known hosts. 2025/01/18 13:27:33 fuzzer started 2025/01/18 13:27:33 dialing manager at localhost:44245 syzkaller login: [ 62.078797] cgroup: Unknown subsys name 'net' [ 62.194654] cgroup: Unknown subsys name 'cpuset' [ 62.227760] cgroup: Unknown subsys name 'rlimit' [ 78.724534] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 13:27:51 syscalls: 2217 2025/01/18 13:27:51 code coverage: enabled 2025/01/18 13:27:51 comparison tracing: enabled 2025/01/18 13:27:51 extra coverage: enabled 2025/01/18 13:27:51 setuid sandbox: enabled 2025/01/18 13:27:51 namespace sandbox: enabled 2025/01/18 13:27:51 Android sandbox: enabled 2025/01/18 13:27:51 fault injection: enabled 2025/01/18 13:27:51 leak checking: enabled 2025/01/18 13:27:51 net packet injection: enabled 2025/01/18 13:27:51 net device setup: enabled 2025/01/18 13:27:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 13:27:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 13:27:51 USB emulation: enabled 2025/01/18 13:27:51 hci packet injection: enabled 2025/01/18 13:27:51 wifi device emulation: enabled 2025/01/18 13:27:51 802.15.4 emulation: enabled 2025/01/18 13:27:51 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 13:27:51 fetching corpus: 50, signal 23977/27092 (executing program) 2025/01/18 13:27:51 fetching corpus: 100, signal 37439/41405 (executing program) 2025/01/18 13:27:51 fetching corpus: 150, signal 45580/50210 (executing program) 2025/01/18 13:27:51 fetching corpus: 200, signal 51225/56461 (executing program) 2025/01/18 13:27:51 fetching corpus: 250, signal 55693/61470 (executing program) 2025/01/18 13:27:52 fetching corpus: 300, signal 61118/67114 (executing program) 2025/01/18 13:27:52 fetching corpus: 350, signal 64334/70723 (executing program) 2025/01/18 13:27:52 fetching corpus: 400, signal 67660/74289 (executing program) 2025/01/18 13:27:52 fetching corpus: 450, signal 70997/77750 (executing program) 2025/01/18 13:27:52 fetching corpus: 500, signal 74207/81009 (executing program) 2025/01/18 13:27:53 fetching corpus: 550, signal 77049/83826 (executing program) 2025/01/18 13:27:53 fetching corpus: 600, signal 78470/85420 (executing program) 2025/01/18 13:27:53 fetching corpus: 650, signal 81557/88224 (executing program) 2025/01/18 13:27:53 fetching corpus: 700, signal 83470/90096 (executing program) 2025/01/18 13:27:53 fetching corpus: 750, signal 87071/93002 (executing program) 2025/01/18 13:27:53 fetching corpus: 800, signal 88647/94406 (executing program) 2025/01/18 13:27:54 fetching corpus: 850, signal 89872/95561 (executing program) 2025/01/18 13:27:54 fetching corpus: 900, signal 91445/96886 (executing program) 2025/01/18 13:27:54 fetching corpus: 950, signal 93091/98178 (executing program) 2025/01/18 13:27:54 fetching corpus: 1000, signal 94604/99378 (executing program) 2025/01/18 13:27:54 fetching corpus: 1050, signal 95809/100298 (executing program) 2025/01/18 13:27:54 fetching corpus: 1100, signal 98503/102066 (executing program) 2025/01/18 13:27:55 fetching corpus: 1150, signal 99386/102685 (executing program) 2025/01/18 13:27:55 fetching corpus: 1200, signal 101196/103766 (executing program) 2025/01/18 13:27:55 fetching corpus: 1250, signal 104696/105652 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/105803 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/105840 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/105871 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/105902 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/105927 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/105970 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106011 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106046 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106082 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106120 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106161 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106188 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106222 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106260 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106289 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106319 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106344 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106380 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106410 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106440 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106465 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106498 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106525 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106550 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106578 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106615 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106645 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106655 (executing program) 2025/01/18 13:27:55 fetching corpus: 1264, signal 104923/106655 (executing program) 2025/01/18 13:27:58 starting 8 fuzzer processes 13:27:58 executing program 0: io_setup(0x7, &(0x7f0000000a80)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0xc, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) 13:27:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x8}, 0xe) 13:27:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x20040001, 0x0, 0x0) 13:27:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@dev, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0xff}}, 0xe8) syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0x0, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8135b6", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback}}}}}}}, 0x0) 13:27:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 87.006370] audit: type=1400 audit(1737206879.026:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:27:59 executing program 5: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1000000000000004, 0x0) 13:27:59 executing program 6: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x0, @remote}}}}}, 0x0) 13:27:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 88.416123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.418398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.420906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.426685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.429719] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.434302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.474432] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.479234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.481899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.488623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.494255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.496110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.536783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.538556] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.539239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.556725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.558973] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.563202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.605787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.611277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.622058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.629762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.632453] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.635778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.687836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.715413] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.716930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.718464] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.726557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.729195] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.730702] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.743065] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.743739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.754594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.756392] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.769179] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.769489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.772612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.778279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.780651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.786358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.795461] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.803696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.822362] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.840487] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.842494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.857286] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.860506] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.493408] Bluetooth: hci0: command tx timeout [ 90.557256] Bluetooth: hci1: command tx timeout [ 90.620077] Bluetooth: hci2: command tx timeout [ 90.749055] Bluetooth: hci3: command tx timeout [ 90.812229] Bluetooth: hci6: command tx timeout [ 90.876129] Bluetooth: hci5: command tx timeout [ 90.940875] Bluetooth: hci7: command tx timeout [ 91.005150] Bluetooth: hci4: command tx timeout [ 92.540134] Bluetooth: hci0: command tx timeout [ 92.605025] Bluetooth: hci1: command tx timeout [ 92.668057] Bluetooth: hci2: command tx timeout [ 92.796039] Bluetooth: hci3: command tx timeout [ 92.860070] Bluetooth: hci6: command tx timeout [ 92.924041] Bluetooth: hci5: command tx timeout [ 92.988142] Bluetooth: hci7: command tx timeout [ 93.053237] Bluetooth: hci4: command tx timeout [ 94.590031] Bluetooth: hci0: command tx timeout [ 94.653123] Bluetooth: hci1: command tx timeout [ 94.717116] Bluetooth: hci2: command tx timeout [ 94.844108] Bluetooth: hci3: command tx timeout [ 94.909194] Bluetooth: hci6: command tx timeout [ 94.972170] Bluetooth: hci5: command tx timeout [ 95.037008] Bluetooth: hci7: command tx timeout [ 95.101037] Bluetooth: hci4: command tx timeout [ 96.637106] Bluetooth: hci0: command tx timeout [ 96.700035] Bluetooth: hci1: command tx timeout [ 96.764993] Bluetooth: hci2: command tx timeout [ 96.892999] Bluetooth: hci3: command tx timeout [ 96.956712] Bluetooth: hci6: command tx timeout [ 97.020991] Bluetooth: hci5: command tx timeout [ 97.085586] Bluetooth: hci7: command tx timeout [ 97.149091] Bluetooth: hci4: command tx timeout [ 150.545413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.548481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.550669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.555529] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.561400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.568616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.793230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.800372] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.806164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.815266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.818806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.823466] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.825181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.830215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.832503] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.846066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.850147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.860108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.882306] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.912315] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.914248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.927638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.947133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.955434] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.957232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.960633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.962452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.978653] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.019468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.049482] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.052310] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.060580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.068373] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.076570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.089427] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.125237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.129396] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.129715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.134258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.136651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.149790] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.152392] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.160287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.166315] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.166817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.184888] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.193688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.200262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.636271] Bluetooth: hci0: command tx timeout [ 152.892278] Bluetooth: hci1: command tx timeout [ 152.956105] Bluetooth: hci2: command tx timeout [ 153.023072] Bluetooth: hci3: command tx timeout [ 153.148099] Bluetooth: hci4: command tx timeout [ 153.277164] Bluetooth: hci5: command tx timeout [ 153.277682] Bluetooth: hci6: command tx timeout [ 153.277808] Bluetooth: hci7: command tx timeout [ 154.685006] Bluetooth: hci0: command tx timeout [ 154.941101] Bluetooth: hci1: command tx timeout [ 155.004176] Bluetooth: hci2: command tx timeout [ 155.070421] Bluetooth: hci3: command tx timeout [ 155.197022] Bluetooth: hci4: command tx timeout [ 155.325978] Bluetooth: hci6: command tx timeout [ 155.326067] Bluetooth: hci5: command tx timeout [ 155.326118] Bluetooth: hci7: command tx timeout [ 156.732062] Bluetooth: hci0: command tx timeout [ 156.990171] Bluetooth: hci1: command tx timeout [ 157.053138] Bluetooth: hci2: command tx timeout [ 157.116133] Bluetooth: hci3: command tx timeout [ 157.246051] Bluetooth: hci4: command tx timeout [ 157.372306] Bluetooth: hci7: command tx timeout [ 157.372408] Bluetooth: hci5: command tx timeout [ 157.372459] Bluetooth: hci6: command tx timeout [ 158.781015] Bluetooth: hci0: command tx timeout [ 159.037012] Bluetooth: hci1: command tx timeout [ 159.101007] Bluetooth: hci2: command tx timeout [ 159.165267] Bluetooth: hci3: command tx timeout [ 159.293697] Bluetooth: hci4: command tx timeout [ 159.420048] Bluetooth: hci6: command tx timeout [ 159.420135] Bluetooth: hci5: command tx timeout [ 159.420186] Bluetooth: hci7: command tx timeout [ 209.749863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.750364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.053764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.053855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.927015] [ 210.927267] ====================================================== [ 210.927856] WARNING: possible circular locking dependency detected [ 210.928421] 6.13.0-rc7-next-20250117 #1 Not tainted [ 210.928908] ------------------------------------------------------ [ 210.930242] kworker/u8:0/11 is trying to acquire lock: [ 210.931186] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.933029] [ 210.933029] but task is already holding lock: [ 210.933884] ffff888039bb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 210.935980] [ 210.935980] which lock already depends on the new lock. [ 210.935980] [ 210.937133] [ 210.937133] the existing dependency chain (in reverse order) is: [ 210.938166] [ 210.938166] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 210.939102] __mutex_lock+0x13d/0xb50 [ 210.939932] wiphy_register+0x1b2e/0x25d0 [ 210.940421] ieee80211_register_hw+0x23a4/0x3d60 [ 210.940946] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 210.941476] init_mac80211_hwsim+0x389/0x870 [ 210.941976] do_one_initcall+0xf9/0x640 [ 210.942428] kernel_init_freeable+0x53d/0x7a0 [ 210.942940] kernel_init+0x1e/0x2d0 [ 210.943361] ret_from_fork+0x48/0x80 [ 210.943789] ret_from_fork_asm+0x1a/0x30 [ 210.944277] [ 210.944277] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 210.944894] __lock_acquire+0x29fd/0x4580 [ 210.945376] lock_acquire+0x19b/0x520 [ 210.945831] __mutex_lock+0x13d/0xb50 [ 210.946291] unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.946911] unregister_netdevice_queue+0x224/0x2e0 [ 210.947464] _cfg80211_unregister_wdev+0x57b/0x700 [ 210.948020] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 210.948572] ieee80211_unregister_hw+0x55/0x3a0 [ 210.949086] hwsim_exit_net+0x3a0/0x730 [ 210.949519] ops_exit_list+0xb3/0x180 [ 210.949942] cleanup_net+0x546/0xad0 [ 210.950355] process_one_work+0x8ee/0x1a10 [ 210.950832] worker_thread+0x674/0xe70 [ 210.951286] kthread+0x3ab/0x720 [ 210.951683] ret_from_fork+0x48/0x80 [ 210.952092] ret_from_fork_asm+0x1a/0x30 [ 210.952550] [ 210.952550] other info that might help us debug this: [ 210.952550] [ 210.953269] Possible unsafe locking scenario: [ 210.953269] [ 210.953833] CPU0 CPU1 [ 210.954277] ---- ---- [ 210.954723] lock(&rdev->wiphy.mtx); [ 210.955127] lock(rtnl_mutex); [ 210.955701] lock(&rdev->wiphy.mtx); [ 210.956325] lock(rtnl_mutex); [ 210.956681] [ 210.956681] *** DEADLOCK *** [ 210.956681] [ 210.957259] 4 locks held by kworker/u8:0/11: [ 210.957694] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 210.958699] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 210.959676] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 210.960587] #3: ffff888039bb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 210.961611] [ 210.961611] stack backtrace: [ 210.962046] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 210.962846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 210.963619] Workqueue: netns cleanup_net [ 210.964039] Call Trace: [ 210.964291] [ 210.964517] dump_stack_lvl+0xca/0x120 [ 210.964917] print_circular_bug+0x47b/0x750 [ 210.965330] check_noncircular+0x2e9/0x3c0 [ 210.965734] ? srso_return_thunk+0x5/0x5f [ 210.966143] ? __pfx_check_noncircular+0x10/0x10 [ 210.966592] ? hlock_class+0x4e/0x130 [ 210.966950] ? mark_lock+0xac/0xed0 [ 210.967306] ? srso_return_thunk+0x5/0x5f [ 210.967714] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 210.968151] ? lockdep_lock+0xba/0x1b0 [ 210.968543] ? __pfx_lockdep_lock+0x10/0x10 [ 210.968982] __lock_acquire+0x29fd/0x4580 [ 210.969410] ? __pfx___lock_acquire+0x10/0x10 [ 210.969867] ? lock_release+0x20f/0x6f0 [ 210.970278] ? __pfx_lock_release+0x10/0x10 [ 210.970727] lock_acquire+0x19b/0x520 [ 210.971121] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.971673] ? __pfx_lock_acquire+0x10/0x10 [ 210.972086] ? srso_return_thunk+0x5/0x5f [ 210.972493] ? lock_release+0x20f/0x6f0 [ 210.972881] ? srso_return_thunk+0x5/0x5f [ 210.973290] ? lock_is_held_type+0x9e/0x120 [ 210.973731] ? srso_return_thunk+0x5/0x5f [ 210.974171] __mutex_lock+0x13d/0xb50 [ 210.974573] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.975152] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.975731] ? srso_return_thunk+0x5/0x5f [ 210.976166] ? synchronize_rcu_expedited+0x38a/0x420 [ 210.976672] ? __pfx___mutex_lock+0x10/0x10 [ 210.977125] ? __pfx_autoremove_wake_function+0x10/0x10 [ 210.977663] ? srso_return_thunk+0x5/0x5f [ 210.978095] ? kasan_quarantine_put+0x84/0x1e0 [ 210.978575] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 210.979028] ? srso_return_thunk+0x5/0x5f [ 210.979468] unregister_netdevice_many_notify+0x1612/0x1c80 [ 210.980026] ? __virt_addr_valid+0x2e8/0x5d0 [ 210.980486] ? __pfx_lock_release+0x10/0x10 [ 210.980930] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 210.981520] ? find_held_lock+0x2c/0x110 [ 210.981957] ? srso_return_thunk+0x5/0x5f [ 210.982390] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 210.982896] ? srso_return_thunk+0x5/0x5f [ 210.983333] ? lock_release+0x20f/0x6f0 [ 210.983744] ? __pfx_lock_release+0x10/0x10 [ 210.984179] ? srso_return_thunk+0x5/0x5f [ 210.984616] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 210.985147] ? srso_return_thunk+0x5/0x5f [ 210.985561] unregister_netdevice_queue+0x224/0x2e0 [ 210.986034] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 210.986538] ? up_write+0x195/0x520 [ 210.986910] _cfg80211_unregister_wdev+0x57b/0x700 [ 210.987379] ? srso_return_thunk+0x5/0x5f [ 210.987790] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 210.988273] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 210.988813] ? srso_return_thunk+0x5/0x5f [ 210.989240] ? srso_return_thunk+0x5/0x5f [ 210.989647] ? synchronize_rcu+0x1ff/0x260 [ 210.990054] ieee80211_unregister_hw+0x55/0x3a0 [ 210.990491] hwsim_exit_net+0x3a0/0x730 [ 210.990874] ? __pfx_hwsim_exit_net+0x10/0x10 [ 210.991295] ? srso_return_thunk+0x5/0x5f [ 210.991702] ? netdev_run_todo+0x788/0x1040 [ 210.992123] ? __pfx_hwsim_exit_net+0x10/0x10 [ 210.992576] ops_exit_list+0xb3/0x180 [ 210.992975] cleanup_net+0x546/0xad0 [ 210.993361] ? __pfx_cleanup_net+0x10/0x10 [ 210.993805] process_one_work+0x8ee/0x1a10 [ 210.994261] ? __pfx_lock_acquire+0x10/0x10 [ 210.994699] ? __pfx_process_one_work+0x10/0x10 [ 210.995181] ? srso_return_thunk+0x5/0x5f [ 210.995615] ? move_linked_works+0x172/0x270 [ 210.996064] ? srso_return_thunk+0x5/0x5f [ 210.996490] ? assign_work+0x196/0x240 [ 210.996890] worker_thread+0x674/0xe70 [ 210.997309] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 210.997840] ? __pfx_worker_thread+0x10/0x10 [ 210.998307] kthread+0x3ab/0x720 [ 210.998670] ? __pfx_kthread+0x10/0x10 [ 210.999077] ? srso_return_thunk+0x5/0x5f [ 210.999505] ? finish_task_switch.isra.0+0x206/0x840 [ 211.000025] ? __pfx_kthread+0x10/0x10 [ 211.000435] ret_from_fork+0x48/0x80 [ 211.000810] ? __pfx_kthread+0x10/0x10 [ 211.001229] ret_from_fork_asm+0x1a/0x30 [ 211.001662] [ 212.619358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.622799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.625519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.630138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.633711] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.637130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.677347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.679849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.681871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.686204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.687637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.691304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.697415] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.699795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.703132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.708262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.708608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.712244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.863105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.875102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.889059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.900250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.906122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.906496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.909652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.915049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.920335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.922236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.922712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.927682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.928063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.939225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.939552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.945197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.949530] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.956408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.973307] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.998334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.007663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.019178] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.029548] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.031411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.043364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.051793] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.060417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.113778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.150067] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.192388] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.653242] Bluetooth: hci0: command tx timeout [ 214.781181] Bluetooth: hci1: command tx timeout [ 214.781317] Bluetooth: hci2: command tx timeout [ 214.973110] Bluetooth: hci5: command tx timeout [ 215.036193] Bluetooth: hci4: command tx timeout [ 215.165086] Bluetooth: hci3: command tx timeout [ 215.165361] Bluetooth: hci6: command tx timeout [ 215.548954] Bluetooth: hci7: command tx timeout [ 216.700238] Bluetooth: hci0: command tx timeout [ 216.828041] Bluetooth: hci2: command tx timeout [ 216.828188] Bluetooth: hci1: command tx timeout [ 217.020013] Bluetooth: hci5: command tx timeout [ 217.084264] Bluetooth: hci4: command tx timeout [ 217.212052] Bluetooth: hci3: command tx timeout [ 217.212188] Bluetooth: hci6: command tx timeout [ 217.596197] Bluetooth: hci7: command tx timeout [ 218.747971] Bluetooth: hci0: command tx timeout [ 218.875983] Bluetooth: hci2: command tx timeout [ 218.876064] Bluetooth: hci1: command tx timeout [ 219.069947] Bluetooth: hci5: command tx timeout [ 219.132056] Bluetooth: hci4: command tx timeout [ 219.259983] Bluetooth: hci3: command tx timeout [ 219.260067] Bluetooth: hci6: command tx timeout [ 219.644005] Bluetooth: hci7: command tx timeout [ 220.796061] Bluetooth: hci0: command tx timeout [ 220.923996] Bluetooth: hci2: command tx timeout [ 220.924082] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 13:30:03 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb28 R8 =0000000000000001 R9 =ffffed10012bbd55 R10=000000000000005b R11=3038383866666666 R12=000000000000005b R13=0000000000000001 R14=ffff888008fea001 R15=ffff8880095dee28 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005618ecdabf38 CR3=0000000015b7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000411e24a000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800e9cd340 RBX=ffff88806d80bf98 RCX=ffffffff81429a4a RDX=1ffff11001ddc200 RSI=0000000000000008 RDI=ffff88800eee1000 RBP=0000000000000000 RSP=ffff88800f31fdd0 R8 =0000000000000000 R9 =ffffed1001ddc200 R10=ffff88800eee1007 R11=ffff88800e9cd7f8 R12=ffff88806d80bff9 R13=ffffffff8862a7c8 R14=ffff88800e9cd340 R15=0000000000000086 RIP=ffffffff81aedda6 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f94123466d8 CR3=0000000015b7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c00058c580000000c0000564b0 XMM04=00000000000000080000000000b12868 XMM05=00000000000000000000000000000007 XMM06=000000c0003229100100000000000000 XMM07=00000000000000000000000000b129a0 XMM08=000000c00032291000000000004643c1 XMM09=0000000000000000000000c0001cac00 XMM10=000000c000e3994000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0