Warning: Permanently added '[localhost]:13352' (ECDSA) to the list of known hosts. 2025/01/18 17:02:18 fuzzer started 2025/01/18 17:02:18 dialing manager at localhost:44245 syzkaller login: [ 69.377269] cgroup: Unknown subsys name 'net' [ 69.499955] cgroup: Unknown subsys name 'cpuset' [ 69.550098] cgroup: Unknown subsys name 'rlimit' [ 74.198632] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 83.883036] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 17:02:33 syscalls: 2217 2025/01/18 17:02:33 code coverage: enabled 2025/01/18 17:02:33 comparison tracing: enabled 2025/01/18 17:02:33 extra coverage: enabled 2025/01/18 17:02:33 setuid sandbox: enabled 2025/01/18 17:02:33 namespace sandbox: enabled 2025/01/18 17:02:33 Android sandbox: enabled 2025/01/18 17:02:33 fault injection: enabled 2025/01/18 17:02:33 leak checking: enabled 2025/01/18 17:02:33 net packet injection: enabled 2025/01/18 17:02:33 net device setup: enabled 2025/01/18 17:02:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 17:02:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 17:02:33 USB emulation: enabled 2025/01/18 17:02:33 hci packet injection: enabled 2025/01/18 17:02:33 wifi device emulation: enabled 2025/01/18 17:02:33 802.15.4 emulation: enabled 2025/01/18 17:02:33 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 17:02:33 fetching corpus: 50, signal 23576/26687 (executing program) 2025/01/18 17:02:34 fetching corpus: 100, signal 33596/37631 (executing program) 2025/01/18 17:02:34 fetching corpus: 150, signal 41859/46648 (executing program) 2025/01/18 17:02:34 fetching corpus: 200, signal 48692/54072 (executing program) 2025/01/18 17:02:34 fetching corpus: 250, signal 52917/58929 (executing program) 2025/01/18 17:02:34 fetching corpus: 300, signal 59015/65231 (executing program) 2025/01/18 17:02:35 fetching corpus: 350, signal 62726/69279 (executing program) 2025/01/18 17:02:35 fetching corpus: 400, signal 67022/73703 (executing program) 2025/01/18 17:02:35 fetching corpus: 450, signal 69672/76663 (executing program) 2025/01/18 17:02:35 fetching corpus: 500, signal 72225/79358 (executing program) 2025/01/18 17:02:35 fetching corpus: 550, signal 75906/82904 (executing program) 2025/01/18 17:02:35 fetching corpus: 600, signal 78546/85462 (executing program) 2025/01/18 17:02:36 fetching corpus: 650, signal 81509/88186 (executing program) 2025/01/18 17:02:36 fetching corpus: 700, signal 83228/89886 (executing program) 2025/01/18 17:02:36 fetching corpus: 750, signal 85235/91715 (executing program) 2025/01/18 17:02:36 fetching corpus: 800, signal 86608/93078 (executing program) 2025/01/18 17:02:36 fetching corpus: 850, signal 88441/94648 (executing program) 2025/01/18 17:02:36 fetching corpus: 900, signal 89982/95970 (executing program) 2025/01/18 17:02:37 fetching corpus: 950, signal 92636/97976 (executing program) 2025/01/18 17:02:37 fetching corpus: 1000, signal 93841/98960 (executing program) 2025/01/18 17:02:37 fetching corpus: 1050, signal 95959/100491 (executing program) 2025/01/18 17:02:37 fetching corpus: 1100, signal 97828/101763 (executing program) 2025/01/18 17:02:37 fetching corpus: 1150, signal 101089/103672 (executing program) 2025/01/18 17:02:37 fetching corpus: 1200, signal 102858/104724 (executing program) 2025/01/18 17:02:37 fetching corpus: 1250, signal 104696/105662 (executing program) 2025/01/18 17:02:37 fetching corpus: 1266, signal 104934/105817 (executing program) 2025/01/18 17:02:37 fetching corpus: 1266, signal 104934/105849 (executing program) 2025/01/18 17:02:37 fetching corpus: 1266, signal 104934/105888 (executing program) 2025/01/18 17:02:37 fetching corpus: 1266, signal 104934/105925 (executing program) 2025/01/18 17:02:37 fetching corpus: 1266, signal 104934/105956 (executing program) 2025/01/18 17:02:37 fetching corpus: 1266, signal 104934/105995 (executing program) 2025/01/18 17:02:37 fetching corpus: 1266, signal 104934/106021 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106056 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106096 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106126 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106166 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106192 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106214 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106239 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106268 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106294 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106327 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106353 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106381 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106413 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106452 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106487 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106529 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106568 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106596 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106623 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106653 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 17:02:38 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 17:02:42 starting 8 fuzzer processes 17:02:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x401a012, r1, 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) 17:02:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14000000760001fd"], 0x14}], 0x1}, 0x0) 17:02:42 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 17:02:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_channels={0x0, 0x78}}) 17:02:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) [ 93.131693] audit: type=1400 audit(1737219762.571:7): avc: denied { execmem } for pid=277 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:02:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x6, &(0x7f0000000000)={0x0, 0x3938700}) 17:02:42 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 17:02:42 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) sched_yield() [ 94.478721] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.485230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.489668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.496825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.500123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.505338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.726016] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.729338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.733969] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.761088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.761584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.765268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.769094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.769592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.773222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.790688] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.791521] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.795051] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.801300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.804943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.807153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.823448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.826421] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.829121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.882895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.885363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.887595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.893191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.896305] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.898269] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.902722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.915172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.916157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.921945] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.930676] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.935172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.961558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.968110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.971005] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.976130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.984989] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.989862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.993066] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.996144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.017549] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.021490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.030607] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.044665] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.591863] Bluetooth: hci0: command tx timeout [ 96.824399] Bluetooth: hci1: command tx timeout [ 96.887945] Bluetooth: hci3: command tx timeout [ 96.888883] Bluetooth: hci2: command tx timeout [ 96.952831] Bluetooth: hci4: command tx timeout [ 97.080920] Bluetooth: hci6: command tx timeout [ 97.145001] Bluetooth: hci7: command tx timeout [ 97.145035] Bluetooth: hci5: command tx timeout [ 98.615840] Bluetooth: hci0: command tx timeout [ 98.871863] Bluetooth: hci1: command tx timeout [ 98.935829] Bluetooth: hci2: command tx timeout [ 98.935895] Bluetooth: hci3: command tx timeout [ 98.999855] Bluetooth: hci4: command tx timeout [ 99.127961] Bluetooth: hci6: command tx timeout [ 99.192835] Bluetooth: hci7: command tx timeout [ 99.192918] Bluetooth: hci5: command tx timeout [ 100.664050] Bluetooth: hci0: command tx timeout [ 100.920841] Bluetooth: hci1: command tx timeout [ 100.983889] Bluetooth: hci3: command tx timeout [ 100.986856] Bluetooth: hci2: command tx timeout [ 101.047998] Bluetooth: hci4: command tx timeout [ 101.176101] Bluetooth: hci6: command tx timeout [ 101.240876] Bluetooth: hci5: command tx timeout [ 101.241538] Bluetooth: hci7: command tx timeout [ 102.711811] Bluetooth: hci0: command tx timeout [ 102.968821] Bluetooth: hci1: command tx timeout [ 103.031845] Bluetooth: hci2: command tx timeout [ 103.031941] Bluetooth: hci3: command tx timeout [ 103.095808] Bluetooth: hci4: command tx timeout [ 103.224853] Bluetooth: hci6: command tx timeout [ 103.288948] Bluetooth: hci7: command tx timeout [ 103.289022] Bluetooth: hci5: command tx timeout [ 157.462223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.465182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.469406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.481445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.506368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.509962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.520483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.524352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.529953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.534124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.537987] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.545919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.546045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.553084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.556293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.562299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.563337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.563678] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.572618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.572620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.575065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.577374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.578549] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.579005] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.699807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.702370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.704428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.708553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.711596] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.713382] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.774281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.782029] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.793077] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.803620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.809712] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.813862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.815682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.818806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.823071] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.825064] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.827344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.829654] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.833073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.839895] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.842052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.845148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.867179] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.879958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.543905] Bluetooth: hci0: command tx timeout [ 159.608319] Bluetooth: hci1: command tx timeout [ 159.671929] Bluetooth: hci2: command tx timeout [ 159.672784] Bluetooth: hci3: command tx timeout [ 159.735926] Bluetooth: hci4: command tx timeout [ 159.927832] Bluetooth: hci5: command tx timeout [ 159.928791] Bluetooth: hci7: command tx timeout [ 159.991965] Bluetooth: hci6: command tx timeout [ 161.591959] Bluetooth: hci0: command tx timeout [ 161.657549] Bluetooth: hci1: command tx timeout [ 161.720917] Bluetooth: hci3: command tx timeout [ 161.722098] Bluetooth: hci2: command tx timeout [ 161.783876] Bluetooth: hci4: command tx timeout [ 161.975959] Bluetooth: hci7: command tx timeout [ 161.977018] Bluetooth: hci5: command tx timeout [ 162.041788] Bluetooth: hci6: command tx timeout [ 163.639850] Bluetooth: hci0: command tx timeout [ 163.703880] Bluetooth: hci1: command tx timeout [ 163.767817] Bluetooth: hci2: command tx timeout [ 163.767847] Bluetooth: hci3: command tx timeout [ 163.833992] Bluetooth: hci4: command tx timeout [ 164.025172] Bluetooth: hci5: command tx timeout [ 164.025205] Bluetooth: hci7: command tx timeout [ 164.087808] Bluetooth: hci6: command tx timeout [ 165.689053] Bluetooth: hci0: command tx timeout [ 165.752858] Bluetooth: hci1: command tx timeout [ 165.815843] Bluetooth: hci3: command tx timeout [ 165.817785] Bluetooth: hci2: command tx timeout [ 165.879874] Bluetooth: hci4: command tx timeout [ 166.071859] Bluetooth: hci7: command tx timeout [ 166.071884] Bluetooth: hci5: command tx timeout [ 166.135796] Bluetooth: hci6: command tx timeout [ 216.229937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.230063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.138812] [ 217.139062] ====================================================== [ 217.139632] WARNING: possible circular locking dependency detected [ 217.140235] 6.13.0-rc7-next-20250117 #1 Not tainted [ 217.140719] ------------------------------------------------------ [ 217.141855] kworker/u8:0/11 is trying to acquire lock: [ 217.143230] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.145523] [ 217.145523] but task is already holding lock: [ 217.147295] ffff888015f40768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.149579] [ 217.149579] which lock already depends on the new lock. [ 217.149579] [ 217.150851] [ 217.150851] the existing dependency chain (in reverse order) is: [ 217.151545] [ 217.151545] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 217.152192] __mutex_lock+0x13d/0xb50 [ 217.152650] wiphy_register+0x1b2e/0x25d0 [ 217.153127] ieee80211_register_hw+0x23a4/0x3d60 [ 217.153642] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 217.154191] init_mac80211_hwsim+0x389/0x870 [ 217.154711] do_one_initcall+0xf9/0x640 [ 217.155178] kernel_init_freeable+0x53d/0x7a0 [ 217.155699] kernel_init+0x1e/0x2d0 [ 217.156119] ret_from_fork+0x48/0x80 [ 217.156538] ret_from_fork_asm+0x1a/0x30 [ 217.157014] [ 217.157014] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 217.157620] __lock_acquire+0x29fd/0x4580 [ 217.158096] lock_acquire+0x19b/0x520 [ 217.158534] __mutex_lock+0x13d/0xb50 [ 217.158989] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.159584] unregister_netdevice_queue+0x224/0x2e0 [ 217.160120] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.160664] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.161202] ieee80211_unregister_hw+0x55/0x3a0 [ 217.161722] hwsim_exit_net+0x3a0/0x730 [ 217.162175] ops_exit_list+0xb3/0x180 [ 217.162621] cleanup_net+0x546/0xad0 [ 217.163050] process_one_work+0x8ee/0x1a10 [ 217.163547] worker_thread+0x674/0xe70 [ 217.164014] kthread+0x3ab/0x720 [ 217.164426] ret_from_fork+0x48/0x80 [ 217.164849] ret_from_fork_asm+0x1a/0x30 [ 217.165325] [ 217.165325] other info that might help us debug this: [ 217.165325] [ 217.166060] Possible unsafe locking scenario: [ 217.166060] [ 217.166625] CPU0 CPU1 [ 217.167064] ---- ---- [ 217.167496] lock(&rdev->wiphy.mtx); [ 217.167892] lock(rtnl_mutex); [ 217.168453] lock(&rdev->wiphy.mtx); [ 217.169059] lock(rtnl_mutex); [ 217.169413] [ 217.169413] *** DEADLOCK *** [ 217.169413] [ 217.169969] 4 locks held by kworker/u8:0/11: [ 217.170395] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 217.171393] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 217.172340] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 217.173229] #3: ffff888015f40768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.174229] [ 217.174229] stack backtrace: [ 217.174685] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 217.175461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 217.176217] Workqueue: netns cleanup_net [ 217.176627] Call Trace: [ 217.176875] [ 217.177095] dump_stack_lvl+0xca/0x120 [ 217.177485] print_circular_bug+0x47b/0x750 [ 217.177899] check_noncircular+0x2e9/0x3c0 [ 217.178324] ? __pfx_check_noncircular+0x10/0x10 [ 217.178863] ? hlock_class+0x4e/0x130 [ 217.179338] ? srso_return_thunk+0x5/0x5f [ 217.179822] ? mark_lock+0xac/0xed0 [ 217.180233] ? lockdep_lock+0xba/0x1b0 [ 217.180704] ? __pfx_lockdep_lock+0x10/0x10 [ 217.181222] __lock_acquire+0x29fd/0x4580 [ 217.181712] ? __pfx___lock_acquire+0x10/0x10 [ 217.182199] ? lock_release+0x20f/0x6f0 [ 217.182635] ? __pfx_lock_release+0x10/0x10 [ 217.183092] ? srso_return_thunk+0x5/0x5f [ 217.183583] lock_acquire+0x19b/0x520 [ 217.184015] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.184744] ? __pfx_lock_acquire+0x10/0x10 [ 217.185245] ? srso_return_thunk+0x5/0x5f [ 217.185759] ? lock_is_held_type+0x9e/0x120 [ 217.186271] ? srso_return_thunk+0x5/0x5f [ 217.186772] __mutex_lock+0x13d/0xb50 [ 217.187218] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.187863] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.188492] ? srso_return_thunk+0x5/0x5f [ 217.188985] ? synchronize_rcu_expedited+0x38a/0x420 [ 217.189575] ? __pfx___mutex_lock+0x10/0x10 [ 217.190061] ? srso_return_thunk+0x5/0x5f [ 217.190499] ? srso_return_thunk+0x5/0x5f [ 217.191022] ? kasan_quarantine_put+0x84/0x1e0 [ 217.191565] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 217.191995] ? srso_return_thunk+0x5/0x5f [ 217.192402] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.192915] ? __virt_addr_valid+0x2e8/0x5d0 [ 217.193339] ? __pfx_lock_release+0x10/0x10 [ 217.193749] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 217.194385] ? find_held_lock+0x2c/0x110 [ 217.194905] ? srso_return_thunk+0x5/0x5f [ 217.195415] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 217.196001] ? srso_return_thunk+0x5/0x5f [ 217.196514] ? lock_release+0x20f/0x6f0 [ 217.196990] ? __pfx_lock_release+0x10/0x10 [ 217.197486] ? srso_return_thunk+0x5/0x5f [ 217.197976] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.198606] ? srso_return_thunk+0x5/0x5f [ 217.199117] unregister_netdevice_queue+0x224/0x2e0 [ 217.199695] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 217.200316] ? up_write+0x195/0x520 [ 217.200776] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.201362] ? srso_return_thunk+0x5/0x5f [ 217.201872] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.202445] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 217.203084] ? srso_return_thunk+0x5/0x5f [ 217.203581] ? srso_return_thunk+0x5/0x5f [ 217.204093] ? synchronize_rcu+0x1ff/0x260 [ 217.204575] ieee80211_unregister_hw+0x55/0x3a0 [ 217.205127] hwsim_exit_net+0x3a0/0x730 [ 217.205583] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.206092] ? srso_return_thunk+0x5/0x5f [ 217.206567] ? netdev_run_todo+0x788/0x1040 [ 217.207045] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.207558] ops_exit_list+0xb3/0x180 [ 217.207976] cleanup_net+0x546/0xad0 [ 217.208366] ? __pfx_cleanup_net+0x10/0x10 [ 217.208810] process_one_work+0x8ee/0x1a10 [ 217.209280] ? __pfx_lock_acquire+0x10/0x10 [ 217.209753] ? __pfx_process_one_work+0x10/0x10 [ 217.210295] ? srso_return_thunk+0x5/0x5f [ 217.210777] ? move_linked_works+0x172/0x270 [ 217.211245] ? srso_return_thunk+0x5/0x5f [ 217.211737] ? assign_work+0x196/0x240 [ 217.212194] worker_thread+0x674/0xe70 [ 217.212644] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.213175] ? __pfx_worker_thread+0x10/0x10 [ 217.213649] kthread+0x3ab/0x720 [ 217.214079] ? __pfx_kthread+0x10/0x10 [ 217.214539] ? srso_return_thunk+0x5/0x5f [ 217.215039] ? finish_task_switch.isra.0+0x206/0x840 [ 217.215620] ? __pfx_kthread+0x10/0x10 [ 217.216085] ret_from_fork+0x48/0x80 [ 217.216515] ? __pfx_kthread+0x10/0x10 [ 217.216983] ret_from_fork_asm+0x1a/0x30 [ 217.217495] [ 219.200292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.201092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.202222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.205554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.207685] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.208949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.391412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.397031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.405365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.410489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.417043] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.419849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.459673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.481439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.485078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.495378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.498489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.500313] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.504923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.508410] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.510164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.516359] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.519234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.521379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.529116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.536044] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.542257] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.549247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.551087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.551675] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.553947] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.554357] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.555446] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.556270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.564404] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.568107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.568500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.577452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.577656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.578255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.581525] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.584084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.584640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.588474] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.590224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.612543] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.618971] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.622461] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.240842] Bluetooth: hci0: command tx timeout [ 221.495768] Bluetooth: hci1: command tx timeout [ 221.560725] Bluetooth: hci3: command tx timeout [ 221.624803] Bluetooth: hci7: command tx timeout [ 221.624877] Bluetooth: hci4: command tx timeout [ 221.624938] Bluetooth: hci2: command tx timeout [ 221.687755] Bluetooth: hci6: command tx timeout [ 221.751804] Bluetooth: hci5: command tx timeout [ 223.288354] Bluetooth: hci0: command tx timeout [ 223.546742] Bluetooth: hci1: command tx timeout [ 223.609757] Bluetooth: hci3: command tx timeout [ 223.672921] Bluetooth: hci2: command tx timeout [ 223.673189] Bluetooth: hci4: command tx timeout [ 223.673289] Bluetooth: hci7: command tx timeout [ 223.735987] Bluetooth: hci6: command tx timeout [ 223.799758] Bluetooth: hci5: command tx timeout [ 225.336803] Bluetooth: hci0: command tx timeout [ 225.592760] Bluetooth: hci1: command tx timeout [ 225.655759] Bluetooth: hci3: command tx timeout [ 225.719878] Bluetooth: hci7: command tx timeout [ 225.720418] Bluetooth: hci4: command tx timeout [ 225.720491] Bluetooth: hci2: command tx timeout [ 225.783779] Bluetooth: hci6: command tx timeout [ 225.847926] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 17:04:46 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88800d20de18 RCX=ffffffff81429a4a RDX=1ffff1100176aa00 RSI=0000000000000008 RDI=ffff88800bb55000 RBP=0000000000000000 RSP=ffff88800f217dd0 R8 =0000000000000000 R9 =ffffed100176aa00 R10=ffff88800bb55007 R11=0000000000000532 R12=ffff88800d20de59 R13=ffff88800cf59de0 R14=ffff88800ec31bc0 R15=0000000000000086 RIP=ffffffff81aeddef RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff9c1394e78 CR3=000000000bf90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c00000c060000000c000130000 XMM04=000000c00005b500000000c000086330 XMM05=000000c000086390000000c000086360 XMM06=000000c0000863f0000000c0000863c0 XMM07=000000c000086450000000c000086420 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000005b R11=6f6c206863696877 R12=000000000000005b R13=0000000000000001 R14=ffff888008fea001 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcf4abd000 CR3=000000000bf90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041168e2000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000