Warning: Permanently added '[localhost]:20079' (ECDSA) to the list of known hosts. 2025/01/18 14:21:11 fuzzer started 2025/01/18 14:21:12 dialing manager at localhost:44245 syzkaller login: [ 66.826944] cgroup: Unknown subsys name 'net' [ 66.928513] cgroup: Unknown subsys name 'cpuset' [ 66.959622] cgroup: Unknown subsys name 'rlimit' [ 72.369070] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 82.567550] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 14:21:28 syscalls: 2217 2025/01/18 14:21:28 code coverage: enabled 2025/01/18 14:21:28 comparison tracing: enabled 2025/01/18 14:21:28 extra coverage: enabled 2025/01/18 14:21:28 setuid sandbox: enabled 2025/01/18 14:21:28 namespace sandbox: enabled 2025/01/18 14:21:28 Android sandbox: enabled 2025/01/18 14:21:28 fault injection: enabled 2025/01/18 14:21:28 leak checking: enabled 2025/01/18 14:21:28 net packet injection: enabled 2025/01/18 14:21:28 net device setup: enabled 2025/01/18 14:21:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 14:21:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 14:21:28 USB emulation: enabled 2025/01/18 14:21:28 hci packet injection: enabled 2025/01/18 14:21:28 wifi device emulation: enabled 2025/01/18 14:21:28 802.15.4 emulation: enabled 2025/01/18 14:21:28 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 14:21:28 fetching corpus: 50, signal 25168/28217 (executing program) 2025/01/18 14:21:29 fetching corpus: 100, signal 38673/42497 (executing program) 2025/01/18 14:21:29 fetching corpus: 150, signal 45753/50276 (executing program) 2025/01/18 14:21:29 fetching corpus: 200, signal 50482/55713 (executing program) 2025/01/18 14:21:29 fetching corpus: 250, signal 55128/60917 (executing program) 2025/01/18 14:21:29 fetching corpus: 300, signal 60426/66492 (executing program) 2025/01/18 14:21:30 fetching corpus: 350, signal 64026/70452 (executing program) 2025/01/18 14:21:30 fetching corpus: 400, signal 67378/74041 (executing program) 2025/01/18 14:21:30 fetching corpus: 450, signal 71671/78257 (executing program) 2025/01/18 14:21:30 fetching corpus: 500, signal 74241/80966 (executing program) 2025/01/18 14:21:30 fetching corpus: 550, signal 76563/83381 (executing program) 2025/01/18 14:21:30 fetching corpus: 600, signal 78937/85721 (executing program) 2025/01/18 14:21:31 fetching corpus: 650, signal 81500/88115 (executing program) 2025/01/18 14:21:31 fetching corpus: 700, signal 83610/90130 (executing program) 2025/01/18 14:21:31 fetching corpus: 750, signal 86478/92487 (executing program) 2025/01/18 14:21:31 fetching corpus: 800, signal 87996/93881 (executing program) 2025/01/18 14:21:31 fetching corpus: 850, signal 89881/95487 (executing program) 2025/01/18 14:21:31 fetching corpus: 900, signal 91184/96680 (executing program) 2025/01/18 14:21:32 fetching corpus: 950, signal 92774/97973 (executing program) 2025/01/18 14:21:32 fetching corpus: 1000, signal 94130/99083 (executing program) 2025/01/18 14:21:32 fetching corpus: 1050, signal 96641/100805 (executing program) 2025/01/18 14:21:32 fetching corpus: 1100, signal 97841/101671 (executing program) 2025/01/18 14:21:32 fetching corpus: 1150, signal 99714/102868 (executing program) 2025/01/18 14:21:32 fetching corpus: 1200, signal 101215/103812 (executing program) 2025/01/18 14:21:33 fetching corpus: 1250, signal 104688/105686 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/105827 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/105859 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/105892 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/105921 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/105956 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/105986 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106012 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106039 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106069 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106110 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106146 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106173 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106210 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106250 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106281 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106308 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106331 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106369 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106391 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106423 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106452 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106478 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106511 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106544 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106581 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106613 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106649 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106655 (executing program) 2025/01/18 14:21:33 fetching corpus: 1264, signal 104923/106655 (executing program) 2025/01/18 14:21:38 starting 8 fuzzer processes 14:21:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x4000e10) 14:21:38 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 14:21:38 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x6, 0xa, 0x0, 0xfffffffffffffffe) 14:21:38 executing program 3: r0 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x2002, 0x0, 0x0) [ 92.463093] audit: type=1400 audit(1737210098.086:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:21:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmmsg$unix(r2, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40d0) 14:21:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x2c}], 0x1}, 0x0) 14:21:38 executing program 6: ioperm(0x0, 0x7ff, 0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) 14:21:38 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x9, 0x8) [ 93.857860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.860951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.862923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.867555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.870032] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.870720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.057632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.070319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.071490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.075457] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.076236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.081147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.082026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.083362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.087598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.088696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.091214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.092134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.093515] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.094444] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.094711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.095196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.095680] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.096001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.104940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.110065] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.110470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.116094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.117180] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.121764] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.122387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.122779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.138263] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.144196] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.163423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.172433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.196230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.197819] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.213606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.213638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.228745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.230738] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.248804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.249472] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.261560] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.271277] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.275630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.280002] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.956801] Bluetooth: hci0: command tx timeout [ 96.147118] Bluetooth: hci3: command tx timeout [ 96.148390] Bluetooth: hci2: command tx timeout [ 96.211031] Bluetooth: hci5: command tx timeout [ 96.276045] Bluetooth: hci4: command tx timeout [ 96.276082] Bluetooth: hci1: command tx timeout [ 96.402992] Bluetooth: hci7: command tx timeout [ 96.404036] Bluetooth: hci6: command tx timeout [ 98.003920] Bluetooth: hci0: command tx timeout [ 98.195257] Bluetooth: hci2: command tx timeout [ 98.196004] Bluetooth: hci3: command tx timeout [ 98.259040] Bluetooth: hci5: command tx timeout [ 98.323258] Bluetooth: hci4: command tx timeout [ 98.323986] Bluetooth: hci1: command tx timeout [ 98.452893] Bluetooth: hci7: command tx timeout [ 98.452934] Bluetooth: hci6: command tx timeout [ 100.052150] Bluetooth: hci0: command tx timeout [ 100.243216] Bluetooth: hci3: command tx timeout [ 100.244046] Bluetooth: hci2: command tx timeout [ 100.308013] Bluetooth: hci5: command tx timeout [ 100.371956] Bluetooth: hci1: command tx timeout [ 100.372003] Bluetooth: hci4: command tx timeout [ 100.500902] Bluetooth: hci6: command tx timeout [ 100.501003] Bluetooth: hci7: command tx timeout [ 102.099005] Bluetooth: hci0: command tx timeout [ 102.291034] Bluetooth: hci2: command tx timeout [ 102.291194] Bluetooth: hci3: command tx timeout [ 102.357902] Bluetooth: hci5: command tx timeout [ 102.419954] Bluetooth: hci4: command tx timeout [ 102.419991] Bluetooth: hci1: command tx timeout [ 102.547930] Bluetooth: hci7: command tx timeout [ 102.548024] Bluetooth: hci6: command tx timeout [ 156.253411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.255368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.259937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.263115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.268097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.269682] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.385942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.389029] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.393206] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.398276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.402218] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.404254] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.581396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.584553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.590370] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.593281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.595396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.601090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.608430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.609399] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.610641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.614151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.618798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.622271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.625274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.632242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.637225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.646418] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.655091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.662452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.666674] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.672104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.687702] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.688055] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.696726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.699174] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.721428] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.726478] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.729527] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.734641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.762020] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.773444] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.776152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.779183] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.821267] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.863171] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.865400] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.866688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.291945] Bluetooth: hci0: command tx timeout [ 158.420406] Bluetooth: hci1: command tx timeout [ 158.676896] Bluetooth: hci3: command tx timeout [ 158.739890] Bluetooth: hci4: command tx timeout [ 158.803006] Bluetooth: hci6: command tx timeout [ 158.867888] Bluetooth: hci5: command tx timeout [ 158.868238] Bluetooth: hci2: command tx timeout [ 158.995910] Bluetooth: hci7: command tx timeout [ 160.338967] Bluetooth: hci0: command tx timeout [ 160.466977] Bluetooth: hci1: command tx timeout [ 160.723069] Bluetooth: hci3: command tx timeout [ 160.787010] Bluetooth: hci4: command tx timeout [ 160.851300] Bluetooth: hci6: command tx timeout [ 160.915893] Bluetooth: hci5: command tx timeout [ 160.915901] Bluetooth: hci2: command tx timeout [ 161.043586] Bluetooth: hci7: command tx timeout [ 162.387861] Bluetooth: hci0: command tx timeout [ 162.514891] Bluetooth: hci1: command tx timeout [ 162.770933] Bluetooth: hci3: command tx timeout [ 162.836432] Bluetooth: hci4: command tx timeout [ 162.899880] Bluetooth: hci6: command tx timeout [ 162.963114] Bluetooth: hci2: command tx timeout [ 162.963122] Bluetooth: hci5: command tx timeout [ 163.091905] Bluetooth: hci7: command tx timeout [ 164.435878] Bluetooth: hci0: command tx timeout [ 164.563909] Bluetooth: hci1: command tx timeout [ 164.819991] Bluetooth: hci3: command tx timeout [ 164.884190] Bluetooth: hci4: command tx timeout [ 164.947882] Bluetooth: hci6: command tx timeout [ 165.010979] Bluetooth: hci2: command tx timeout [ 165.012008] Bluetooth: hci5: command tx timeout [ 165.139883] Bluetooth: hci7: command tx timeout [ 215.053591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.053737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.738025] [ 216.738480] ====================================================== [ 216.739714] WARNING: possible circular locking dependency detected [ 216.740940] 6.13.0-rc7-next-20250117 #1 Not tainted [ 216.742897] ------------------------------------------------------ [ 216.748479] kworker/u8:2/6969 is trying to acquire lock: [ 216.749503] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.751394] [ 216.751394] but task is already holding lock: [ 216.752413] ffff88803a8f8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 216.754215] [ 216.754215] which lock already depends on the new lock. [ 216.754215] [ 216.755613] [ 216.755613] the existing dependency chain (in reverse order) is: [ 216.756891] [ 216.756891] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 216.758102] __mutex_lock+0x13d/0xb50 [ 216.758954] wiphy_register+0x1b2e/0x25d0 [ 216.759847] ieee80211_register_hw+0x23a4/0x3d60 [ 216.760830] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 216.761859] init_mac80211_hwsim+0x389/0x870 [ 216.762827] do_one_initcall+0xf9/0x640 [ 216.763709] kernel_init_freeable+0x53d/0x7a0 [ 216.764673] kernel_init+0x1e/0x2d0 [ 216.765450] ret_from_fork+0x48/0x80 [ 216.766229] ret_from_fork_asm+0x1a/0x30 [ 216.767132] [ 216.767132] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 216.768261] __lock_acquire+0x29fd/0x4580 [ 216.769168] lock_acquire+0x19b/0x520 [ 216.770002] __mutex_lock+0x13d/0xb50 [ 216.770850] unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.771993] unregister_netdevice_queue+0x224/0x2e0 [ 216.773042] _cfg80211_unregister_wdev+0x57b/0x700 [ 216.774045] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 216.775117] ieee80211_unregister_hw+0x55/0x3a0 [ 216.776072] hwsim_exit_net+0x3a0/0x730 [ 216.776961] ops_exit_list+0xb3/0x180 [ 216.777761] cleanup_net+0x546/0xad0 [ 216.778565] process_one_work+0x8ee/0x1a10 [ 216.779551] worker_thread+0x674/0xe70 [ 216.780424] kthread+0x3ab/0x720 [ 216.781239] ret_from_fork+0x48/0x80 [ 216.782050] ret_from_fork_asm+0x1a/0x30 [ 216.782972] [ 216.782972] other info that might help us debug this: [ 216.782972] [ 216.784413] Possible unsafe locking scenario: [ 216.784413] [ 216.785485] CPU0 CPU1 [ 216.786335] ---- ---- [ 216.787204] lock(&rdev->wiphy.mtx); [ 216.787958] lock(rtnl_mutex); [ 216.789084] lock(&rdev->wiphy.mtx); [ 216.790260] lock(rtnl_mutex); [ 216.790918] [ 216.790918] *** DEADLOCK *** [ 216.790918] [ 216.791976] 4 locks held by kworker/u8:2/6969: [ 216.792846] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 216.794770] #1: ffff8880177c7d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 216.796619] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 216.798374] #3: ffff88803a8f8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 216.800341] [ 216.800341] stack backtrace: [ 216.801175] CPU: 1 UID: 0 PID: 6969 Comm: kworker/u8:2 Not tainted 6.13.0-rc7-next-20250117 #1 [ 216.802679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 216.804142] Workqueue: netns cleanup_net [ 216.804928] Call Trace: [ 216.805407] [ 216.805823] dump_stack_lvl+0xca/0x120 [ 216.806627] print_circular_bug+0x47b/0x750 [ 216.807466] check_noncircular+0x2e9/0x3c0 [ 216.808281] ? __pfx_check_noncircular+0x10/0x10 [ 216.809188] ? srso_return_thunk+0x5/0x5f [ 216.809984] ? hlock_class+0x4e/0x130 [ 216.810700] ? srso_return_thunk+0x5/0x5f [ 216.811528] ? arch_scale_cpu_capacity+0x17/0xa0 [ 216.812409] ? lockdep_lock+0xba/0x1b0 [ 216.813189] ? __pfx_lockdep_lock+0x10/0x10 [ 216.814015] ? srso_return_thunk+0x5/0x5f [ 216.814861] __lock_acquire+0x29fd/0x4580 [ 216.815693] ? srso_return_thunk+0x5/0x5f [ 216.816497] ? __pfx___lock_acquire+0x10/0x10 [ 216.817336] ? srso_return_thunk+0x5/0x5f [ 216.818165] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 216.819173] ? srso_return_thunk+0x5/0x5f [ 216.819962] lock_acquire+0x19b/0x520 [ 216.820711] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.821843] ? __pfx_lock_acquire+0x10/0x10 [ 216.822685] ? srso_return_thunk+0x5/0x5f [ 216.823534] ? lock_release+0x20f/0x6f0 [ 216.824337] ? srso_return_thunk+0x5/0x5f [ 216.825181] ? lock_is_held_type+0x9e/0x120 [ 216.826044] __mutex_lock+0x13d/0xb50 [ 216.826777] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.827871] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.828999] ? srso_return_thunk+0x5/0x5f [ 216.829798] ? synchronize_rcu_expedited+0x38a/0x420 [ 216.830782] ? __pfx___mutex_lock+0x10/0x10 [ 216.831672] ? __pfx_autoremove_wake_function+0x10/0x10 [ 216.832690] ? srso_return_thunk+0x5/0x5f [ 216.833535] ? kasan_quarantine_put+0x84/0x1e0 [ 216.834476] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 216.835371] ? srso_return_thunk+0x5/0x5f [ 216.836224] unregister_netdevice_many_notify+0x1612/0x1c80 [ 216.837276] ? __virt_addr_valid+0x2e8/0x5d0 [ 216.838190] ? __pfx_lock_release+0x10/0x10 [ 216.839070] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 216.840247] ? find_held_lock+0x2c/0x110 [ 216.841118] ? srso_return_thunk+0x5/0x5f [ 216.842000] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 216.842961] ? srso_return_thunk+0x5/0x5f [ 216.843832] ? lock_release+0x20f/0x6f0 [ 216.844666] ? __pfx_lock_release+0x10/0x10 [ 216.845518] ? srso_return_thunk+0x5/0x5f [ 216.846346] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 216.847351] ? srso_return_thunk+0x5/0x5f [ 216.848213] unregister_netdevice_queue+0x224/0x2e0 [ 216.849212] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 216.850315] ? up_write+0x195/0x520 [ 216.851153] _cfg80211_unregister_wdev+0x57b/0x700 [ 216.852179] ? srso_return_thunk+0x5/0x5f [ 216.853083] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 216.854023] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 216.855124] ? srso_return_thunk+0x5/0x5f [ 216.856001] ? srso_return_thunk+0x5/0x5f [ 216.856894] ? synchronize_rcu+0x1ff/0x260 [ 216.857711] ieee80211_unregister_hw+0x55/0x3a0 [ 216.858568] hwsim_exit_net+0x3a0/0x730 [ 216.859304] ? __pfx_hwsim_exit_net+0x10/0x10 [ 216.860129] ? srso_return_thunk+0x5/0x5f [ 216.860910] ? netdev_run_todo+0x788/0x1040 [ 216.861720] ? srso_return_thunk+0x5/0x5f [ 216.862515] ? __pfx_hwsim_exit_net+0x10/0x10 [ 216.863364] ops_exit_list+0xb3/0x180 [ 216.864085] cleanup_net+0x546/0xad0 [ 216.864798] ? __pfx_cleanup_net+0x10/0x10 [ 216.865608] process_one_work+0x8ee/0x1a10 [ 216.866398] ? __pfx_lock_acquire+0x10/0x10 [ 216.867216] ? __pfx_process_one_work+0x10/0x10 [ 216.868287] ? srso_return_thunk+0x5/0x5f [ 216.869278] ? move_linked_works+0x172/0x270 [ 216.870301] ? srso_return_thunk+0x5/0x5f [ 216.871289] ? assign_work+0x196/0x240 [ 216.872194] worker_thread+0x674/0xe70 [ 216.873059] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 216.874120] ? srso_return_thunk+0x5/0x5f [ 216.875010] ? __pfx_worker_thread+0x10/0x10 [ 216.875970] kthread+0x3ab/0x720 [ 216.876726] ? __pfx_kthread+0x10/0x10 [ 216.877561] ? srso_return_thunk+0x5/0x5f [ 216.878451] ? finish_task_switch.isra.0+0x206/0x840 [ 216.879512] ? __pfx_kthread+0x10/0x10 [ 216.880353] ret_from_fork+0x48/0x80 [ 216.881091] ? __pfx_kthread+0x10/0x10 [ 216.881889] ret_from_fork_asm+0x1a/0x30 [ 216.882777] [ 218.203417] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.205286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.206515] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.210387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.213225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.214031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.394095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.394731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.395983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.401343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.402475] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.406262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.588011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.591481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.592410] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.596009] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.601943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.606253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.611539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.620203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.621051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.644095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.648539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.649214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.664774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.671109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.671372] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.672766] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.677130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.684367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.686195] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.692039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.700533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.700892] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.701138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.705029] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.706123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.707160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.708128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.710315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.712485] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.713366] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.767149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.777326] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.779468] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.786655] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.788647] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.791047] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.243886] Bluetooth: hci0: command tx timeout [ 220.436109] Bluetooth: hci1: command tx timeout [ 220.691230] Bluetooth: hci2: command tx timeout [ 220.691313] Bluetooth: hci3: command tx timeout [ 220.756847] Bluetooth: hci4: command tx timeout [ 220.756936] Bluetooth: hci5: command tx timeout [ 220.757007] Bluetooth: hci6: command tx timeout [ 220.818911] Bluetooth: hci7: command tx timeout [ 222.292025] Bluetooth: hci0: command tx timeout [ 222.482863] Bluetooth: hci1: command tx timeout [ 222.738898] Bluetooth: hci2: command tx timeout [ 222.738985] Bluetooth: hci3: command tx timeout [ 222.804839] Bluetooth: hci4: command tx timeout [ 222.804909] Bluetooth: hci6: command tx timeout [ 222.804973] Bluetooth: hci5: command tx timeout [ 222.867956] Bluetooth: hci7: command tx timeout [ 224.339846] Bluetooth: hci0: command tx timeout [ 224.531952] Bluetooth: hci1: command tx timeout [ 224.787989] Bluetooth: hci2: command tx timeout [ 224.788299] Bluetooth: hci3: command tx timeout [ 224.851929] Bluetooth: hci5: command tx timeout [ 224.852064] Bluetooth: hci6: command tx timeout [ 224.852129] Bluetooth: hci4: command tx timeout [ 224.916615] Bluetooth: hci7: command tx timeout [ 226.386862] Bluetooth: hci0: command tx timeout [ 226.578927] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 14:23:42 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff8880119e6cb8 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888011af4b90 RBP=ffff888011af4b90 RSP=ffff88800f1efd98 R8 =0000000000000000 R9 =fffffbfff0c8043a R10=ffffffff864021d7 R11=ffff88800f1e04b8 R12=ffff8880119e2809 R13=ffff8880119e6cb8 R14=ffff88800f1e0000 R15=0000000000000082 RIP=ffffffff84aaddec RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005596f6b66480 CR3=000000001353c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000003ffffffff000055daf692f890 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=00000000000000000000003338353839 XMM05=5f4345535500303630323d4d554e5145 XMM06=746f6f7465756c623d4d455453595342 XMM07=622f6c6175747269762f736563697665 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880177c6bb8 R8 =0000000000000001 R9 =ffffed1002ef8d67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea02a R15=ffff8880177c6eb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faeb0f620e8 CR3=000000000c6f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=4d0528bb5e5b688dc94a0dec5f210015 XMM02=d12871896912de2d00000000000feec8 XMM03=f9980df3bdc2dbad000000000012e928 XMM04=b9c087045200cd1200000000000ae988 XMM05=3cc027b654ebc506000000000013fab0 XMM06=9f165a4fe6c971ad0000000000137458 XMM07=711fbe8126c5d3440000000000137350 XMM08=68a8aee3740b9fad00000000000fefe8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000