Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:47167' (ECDSA) to the list of known hosts. 2025/01/29 17:18:51 fuzzer started 2025/01/29 17:18:52 dialing manager at localhost:36977 syzkaller login: [ 68.808238] cgroup: Unknown subsys name 'net' [ 68.899910] cgroup: Unknown subsys name 'cpuset' [ 68.933373] cgroup: Unknown subsys name 'rlimit' 2025/01/29 17:19:09 syscalls: 2217 2025/01/29 17:19:09 code coverage: enabled 2025/01/29 17:19:09 comparison tracing: enabled 2025/01/29 17:19:09 extra coverage: enabled 2025/01/29 17:19:09 setuid sandbox: enabled 2025/01/29 17:19:09 namespace sandbox: enabled 2025/01/29 17:19:09 Android sandbox: enabled 2025/01/29 17:19:09 fault injection: enabled 2025/01/29 17:19:09 leak checking: enabled 2025/01/29 17:19:09 net packet injection: enabled 2025/01/29 17:19:09 net device setup: enabled 2025/01/29 17:19:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/29 17:19:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/29 17:19:09 USB emulation: enabled 2025/01/29 17:19:09 hci packet injection: enabled 2025/01/29 17:19:09 wifi device emulation: enabled 2025/01/29 17:19:09 802.15.4 emulation: enabled 2025/01/29 17:19:09 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 17:19:09 fetching corpus: 0, signal 0/0 (executing program) 2025/01/29 17:19:11 starting 8 fuzzer processes 17:19:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2081, 0x4) 17:19:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/diskstats\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:19:11 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x180800) [ 88.466800] audit: type=1400 audit(1738171152.013:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:19:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@nomblk_io_submit}, {@journal_dev}]}) 17:19:12 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fsetxattr$security_evm(r0, &(0x7f00000003c0), 0x0, 0x0, 0x0) 17:19:12 executing program 5: prctl$PR_MCE_KILL(0x42, 0x0, 0x0) 17:19:12 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 17:19:12 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) [ 89.914530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.918529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.921902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.929162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.935392] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.937936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.108573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.113204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.118142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.127844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.131400] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.138321] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.144303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.158347] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.167625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.173071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.184339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.189289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.191860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.198988] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.205580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.215231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.216350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.218081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.224501] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.226949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.231348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.234209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.236414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.239965] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.244191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.251316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.256451] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.263175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.266163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.274200] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.274260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.277190] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.292043] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.293541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.296622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.299090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.301055] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.307900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.312153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.312854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.320485] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.322632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.997579] Bluetooth: hci0: command tx timeout [ 92.188806] Bluetooth: hci1: command tx timeout [ 92.316904] Bluetooth: hci3: command tx timeout [ 92.316939] Bluetooth: hci2: command tx timeout [ 92.380875] Bluetooth: hci6: command tx timeout [ 92.380959] Bluetooth: hci5: command tx timeout [ 92.381954] Bluetooth: hci4: command tx timeout [ 92.382609] Bluetooth: hci7: command tx timeout [ 94.044948] Bluetooth: hci0: command tx timeout [ 94.236884] Bluetooth: hci1: command tx timeout [ 94.364850] Bluetooth: hci2: command tx timeout [ 94.365390] Bluetooth: hci3: command tx timeout [ 94.428824] Bluetooth: hci5: command tx timeout [ 94.429321] Bluetooth: hci7: command tx timeout [ 94.430432] Bluetooth: hci4: command tx timeout [ 94.430987] Bluetooth: hci6: command tx timeout [ 96.092755] Bluetooth: hci0: command tx timeout [ 96.285008] Bluetooth: hci1: command tx timeout [ 96.412746] Bluetooth: hci2: command tx timeout [ 96.412772] Bluetooth: hci3: command tx timeout [ 96.476779] Bluetooth: hci4: command tx timeout [ 96.476926] Bluetooth: hci5: command tx timeout [ 96.477239] Bluetooth: hci6: command tx timeout [ 96.477609] Bluetooth: hci7: command tx timeout [ 98.140861] Bluetooth: hci0: command tx timeout [ 98.332887] Bluetooth: hci1: command tx timeout [ 98.460823] Bluetooth: hci2: command tx timeout [ 98.461957] Bluetooth: hci3: command tx timeout [ 98.524892] Bluetooth: hci7: command tx timeout [ 98.525960] Bluetooth: hci5: command tx timeout [ 98.527004] Bluetooth: hci6: command tx timeout [ 98.528002] Bluetooth: hci4: command tx timeout [ 152.172495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.175549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.177848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.182581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.185413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.187981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.248624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.250376] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.256089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.257624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.264047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.266254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.273110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.274530] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.279200] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.282073] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.283543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.286108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.326226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.353351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.359911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.366129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.369567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.384032] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.392131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.403457] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.407974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.408021] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.413247] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.419911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.424530] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.428258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.430562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.431166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.432278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.436170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.439968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.444430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.451777] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.454040] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.456344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.462985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.489576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.490257] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.511061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.512894] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.527940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.531066] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.270708] Bluetooth: hci0: command tx timeout [ 154.332794] Bluetooth: hci2: command tx timeout [ 154.397391] Bluetooth: hci1: command tx timeout [ 154.460759] Bluetooth: hci3: command tx timeout [ 154.588910] Bluetooth: hci5: command tx timeout [ 154.653766] Bluetooth: hci6: command tx timeout [ 154.717932] Bluetooth: hci7: command tx timeout [ 154.719429] Bluetooth: hci4: command tx timeout [ 156.316766] Bluetooth: hci0: command tx timeout [ 156.381670] Bluetooth: hci2: command tx timeout [ 156.444941] Bluetooth: hci1: command tx timeout [ 156.508820] Bluetooth: hci3: command tx timeout [ 156.637724] Bluetooth: hci5: command tx timeout [ 156.700740] Bluetooth: hci6: command tx timeout [ 156.765716] Bluetooth: hci4: command tx timeout [ 156.766198] Bluetooth: hci7: command tx timeout [ 158.365771] Bluetooth: hci0: command tx timeout [ 158.428828] Bluetooth: hci2: command tx timeout [ 158.492717] Bluetooth: hci1: command tx timeout [ 158.556704] Bluetooth: hci3: command tx timeout [ 158.685725] Bluetooth: hci5: command tx timeout [ 158.748913] Bluetooth: hci6: command tx timeout [ 158.813711] Bluetooth: hci7: command tx timeout [ 158.814212] Bluetooth: hci4: command tx timeout [ 160.412726] Bluetooth: hci0: command tx timeout [ 160.476874] Bluetooth: hci2: command tx timeout [ 160.540717] Bluetooth: hci1: command tx timeout [ 160.604727] Bluetooth: hci3: command tx timeout [ 160.732855] Bluetooth: hci5: command tx timeout [ 160.796764] Bluetooth: hci6: command tx timeout [ 160.860713] Bluetooth: hci4: command tx timeout [ 160.861150] Bluetooth: hci7: command tx timeout [ 214.132533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.136534] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.140762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.149418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.153931] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.162302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.245469] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.249995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.254984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.261809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.269969] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.271768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.373457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.384931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.386738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.398810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.412098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.413901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.442476] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.445300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.452009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.464998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.470146] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.474025] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.520579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.527040] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.529573] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.531739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.537120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.539732] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.542026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.543945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.554596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.561435] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.566810] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.570836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.574458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.585175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.634037] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.704837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.721705] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.747821] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.752986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.754818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.764175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.789882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.796198] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.797325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.221878] Bluetooth: hci0: command tx timeout [ 216.348730] Bluetooth: hci1: command tx timeout [ 216.477760] Bluetooth: hci2: command tx timeout [ 216.542024] Bluetooth: hci3: command tx timeout [ 216.669782] Bluetooth: hci4: command tx timeout [ 216.670808] Bluetooth: hci5: command tx timeout [ 216.860900] Bluetooth: hci6: command tx timeout [ 216.926106] Bluetooth: hci7: command tx timeout [ 218.270701] Bluetooth: hci0: command tx timeout [ 218.398719] Bluetooth: hci1: command tx timeout [ 218.525709] Bluetooth: hci2: command tx timeout [ 218.589719] Bluetooth: hci3: command tx timeout [ 218.716748] Bluetooth: hci4: command tx timeout [ 218.717237] Bluetooth: hci5: command tx timeout [ 218.908815] Bluetooth: hci6: command tx timeout [ 218.972727] Bluetooth: hci7: command tx timeout [ 220.316832] Bluetooth: hci0: command tx timeout [ 220.444832] Bluetooth: hci1: command tx timeout [ 220.572940] Bluetooth: hci2: command tx timeout [ 220.636787] Bluetooth: hci3: command tx timeout [ 220.765532] Bluetooth: hci5: command tx timeout [ 220.766218] Bluetooth: hci4: command tx timeout [ 220.956714] Bluetooth: hci6: command tx timeout [ 221.022823] Bluetooth: hci7: command tx timeout [ 222.364693] Bluetooth: hci0: command tx timeout [ 222.492752] Bluetooth: hci1: command tx timeout [ 222.620688] Bluetooth: hci2: command tx timeout [ 222.684697] Bluetooth: hci3: command tx timeout [ 222.812736] Bluetooth: hci4: command tx timeout [ 222.813195] Bluetooth: hci5: command tx timeout [ 223.004706] Bluetooth: hci6: command tx timeout [ 223.068692] Bluetooth: hci7: command tx timeout [ 272.370711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.371457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.660381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.661053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.392672] [ 274.392897] ====================================================== [ 274.393426] WARNING: possible circular locking dependency detected [ 274.393975] 6.13.0-next-20250129 #1 Not tainted [ 274.396357] ------------------------------------------------------ [ 274.399025] kworker/u8:0/11 is trying to acquire lock: [ 274.399835] ffffffff8621d8a8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.401482] [ 274.401482] but task is already holding lock: [ 274.402486] ffff888033918768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 274.404119] [ 274.404119] which lock already depends on the new lock. [ 274.404119] [ 274.405441] [ 274.405441] the existing dependency chain (in reverse order) is: [ 274.406805] [ 274.406805] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 274.407940] __mutex_lock+0x13d/0xb50 [ 274.408733] wiphy_register+0x1b2e/0x25d0 [ 274.409562] ieee80211_register_hw+0x23a4/0x3d60 [ 274.410479] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 274.411427] init_mac80211_hwsim+0x389/0x870 [ 274.412311] do_one_initcall+0xf9/0x640 [ 274.413133] kernel_init_freeable+0x53d/0x7a0 [ 274.414040] kernel_init+0x1e/0x2d0 [ 274.414763] ret_from_fork+0x48/0x80 [ 274.415488] ret_from_fork_asm+0x1a/0x30 [ 274.416327] [ 274.416327] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 274.417353] __lock_acquire+0x29fd/0x4580 [ 274.418214] lock_acquire+0x19b/0x520 [ 274.419022] __mutex_lock+0x13d/0xb50 [ 274.419833] unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.420920] unregister_netdevice_queue+0x224/0x2e0 [ 274.421918] _cfg80211_unregister_wdev+0x57b/0x700 [ 274.422888] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 274.423819] ieee80211_unregister_hw+0x55/0x3a0 [ 274.424695] hwsim_exit_net+0x3a0/0x730 [ 274.425480] ops_exit_list+0xb3/0x180 [ 274.426236] cleanup_net+0x546/0xad0 [ 274.426982] process_one_work+0x8ee/0x1a10 [ 274.427937] worker_thread+0x674/0xe70 [ 274.428735] kthread+0x3ab/0x720 [ 274.429453] ret_from_fork+0x48/0x80 [ 274.430237] ret_from_fork_asm+0x1a/0x30 [ 274.431094] [ 274.431094] other info that might help us debug this: [ 274.431094] [ 274.432344] Possible unsafe locking scenario: [ 274.432344] [ 274.433317] CPU0 CPU1 [ 274.434250] ---- ---- [ 274.435094] lock(&rdev->wiphy.mtx); [ 274.435878] lock(rtnl_mutex); [ 274.437095] lock(&rdev->wiphy.mtx); [ 274.438421] lock(rtnl_mutex); [ 274.439105] [ 274.439105] *** DEADLOCK *** [ 274.439105] [ 274.440115] 4 locks held by kworker/u8:0/11: [ 274.440866] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 274.442630] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 274.444307] #2: ffffffff862118d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 274.445942] #3: ffff888033918768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 274.447705] [ 274.447705] stack backtrace: [ 274.448454] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250129 #1 [ 274.448540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 274.448584] Workqueue: netns cleanup_net [ 274.448665] Call Trace: [ 274.448686] [ 274.448710] dump_stack_lvl+0xca/0x120 [ 274.448823] print_circular_bug+0x47b/0x750 [ 274.448916] check_noncircular+0x2e9/0x3c0 [ 274.448998] ? srso_return_thunk+0x5/0x5f [ 274.449111] ? __pfx_check_noncircular+0x10/0x10 [ 274.449195] ? hlock_class+0x4e/0x130 [ 274.449256] ? mark_lock+0xac/0xed0 [ 274.449336] ? srso_return_thunk+0x5/0x5f [ 274.449446] ? sched_clock+0x37/0x60 [ 274.449572] ? lockdep_lock+0xba/0x1b0 [ 274.449688] ? __pfx_lockdep_lock+0x10/0x10 [ 274.449814] __lock_acquire+0x29fd/0x4580 [ 274.449943] ? __pfx___lock_acquire+0x10/0x10 [ 274.450030] ? lock_release+0x20f/0x6f0 [ 274.450120] ? __pfx_lock_release+0x10/0x10 [ 274.450217] lock_acquire+0x19b/0x520 [ 274.450305] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.450403] ? __pfx_lock_acquire+0x10/0x10 [ 274.450504] ? srso_return_thunk+0x5/0x5f [ 274.450614] ? lock_release+0x20f/0x6f0 [ 274.450703] ? srso_return_thunk+0x5/0x5f [ 274.450813] ? lock_is_held_type+0x9e/0x120 [ 274.450921] ? srso_return_thunk+0x5/0x5f [ 274.451039] __mutex_lock+0x13d/0xb50 [ 274.451143] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.451233] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.451325] ? srso_return_thunk+0x5/0x5f [ 274.451435] ? synchronize_rcu_expedited+0x38a/0x420 [ 274.451541] ? __pfx___mutex_lock+0x10/0x10 [ 274.451651] ? __pfx_autoremove_wake_function+0x10/0x10 [ 274.451760] ? srso_return_thunk+0x5/0x5f [ 274.451870] ? kasan_quarantine_put+0x84/0x1e0 [ 274.451991] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 274.452062] ? srso_return_thunk+0x5/0x5f [ 274.452180] unregister_netdevice_many_notify+0x1612/0x1c80 [ 274.452272] ? __virt_addr_valid+0x2e8/0x5d0 [ 274.452378] ? __pfx_lock_release+0x10/0x10 [ 274.452473] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 274.452571] ? find_held_lock+0x2c/0x110 [ 274.452690] ? srso_return_thunk+0x5/0x5f [ 274.452804] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 274.452922] ? srso_return_thunk+0x5/0x5f [ 274.453032] ? lock_release+0x20f/0x6f0 [ 274.453121] ? __pfx_lock_release+0x10/0x10 [ 274.453209] ? srso_return_thunk+0x5/0x5f [ 274.453318] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 274.453415] ? srso_return_thunk+0x5/0x5f [ 274.453545] unregister_netdevice_queue+0x224/0x2e0 [ 274.453632] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 274.453719] ? up_write+0x195/0x520 [ 274.453847] _cfg80211_unregister_wdev+0x57b/0x700 [ 274.453952] ? srso_return_thunk+0x5/0x5f [ 274.454069] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 274.454146] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 274.454278] ? srso_return_thunk+0x5/0x5f [ 274.454388] ? srso_return_thunk+0x5/0x5f [ 274.454508] ? synchronize_rcu+0x1ff/0x260 [ 274.454594] ieee80211_unregister_hw+0x55/0x3a0 [ 274.454684] hwsim_exit_net+0x3a0/0x730 [ 274.454768] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.454848] ? srso_return_thunk+0x5/0x5f [ 274.454958] ? netdev_run_todo+0x788/0x1040 [ 274.455056] ? __pfx_hwsim_exit_net+0x10/0x10 [ 274.455141] ops_exit_list+0xb3/0x180 [ 274.455226] cleanup_net+0x546/0xad0 [ 274.455315] ? __pfx_cleanup_net+0x10/0x10 [ 274.455422] process_one_work+0x8ee/0x1a10 [ 274.455575] ? __pfx_lock_acquire+0x10/0x10 [ 274.455667] ? __pfx_process_one_work+0x10/0x10 [ 274.455785] ? srso_return_thunk+0x5/0x5f [ 274.455895] ? move_linked_works+0x172/0x270 [ 274.455985] ? srso_return_thunk+0x5/0x5f [ 274.456094] ? assign_work+0x196/0x240 [ 274.456211] worker_thread+0x674/0xe70 [ 274.456329] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 274.456435] ? __pfx_worker_thread+0x10/0x10 [ 274.456570] kthread+0x3ab/0x720 [ 274.456676] ? __pfx_kthread+0x10/0x10 [ 274.456781] ? srso_return_thunk+0x5/0x5f [ 274.456891] ? finish_task_switch.isra.0+0x206/0x840 [ 274.456993] ? __pfx_kthread+0x10/0x10 [ 274.457103] ret_from_fork+0x48/0x80 [ 274.457166] ? __pfx_kthread+0x10/0x10 [ 274.457273] ret_from_fork_asm+0x1a/0x30 [ 274.457408] [ 276.390731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.394164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.397218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.399576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.401115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.403786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.407581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.410169] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.411841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.413772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.416215] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.417756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.537024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.539445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.553959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.556275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.558256] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.561838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.565712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.567668] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.569854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.582271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.590528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.590785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.597363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.611906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.611989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.616549] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.624909] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.631004] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.643781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.644832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.648944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.663312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.666004] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.668196] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.728119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.734441] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.742081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.747975] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.769334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.828988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.844977] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.859386] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.869155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.875901] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.878964] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.884038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.428669] Bluetooth: hci0: command tx timeout [ 278.492793] Bluetooth: hci1: command tx timeout [ 278.620654] Bluetooth: hci2: command tx timeout [ 278.685874] Bluetooth: hci4: command tx timeout [ 278.685941] Bluetooth: hci3: command tx timeout [ 278.748800] Bluetooth: hci5: command tx timeout [ 279.004680] Bluetooth: hci6: command tx timeout [ 279.068680] Bluetooth: hci7: command tx timeout [ 280.477307] Bluetooth: hci0: command tx timeout [ 280.540668] Bluetooth: hci1: command tx timeout [ 280.669656] Bluetooth: hci2: command tx timeout [ 280.733072] Bluetooth: hci3: command tx timeout [ 280.733515] Bluetooth: hci4: command tx timeout [ 280.799704] Bluetooth: hci5: command tx timeout [ 281.052673] Bluetooth: hci6: command tx timeout [ 281.116701] Bluetooth: hci7: command tx timeout [ 282.526723] Bluetooth: hci0: command tx timeout [ 282.589794] Bluetooth: hci1: command tx timeout [ 282.717704] Bluetooth: hci2: command tx timeout [ 282.780705] Bluetooth: hci4: command tx timeout [ 282.780730] Bluetooth: hci3: command tx timeout [ 282.844681] Bluetooth: hci5: command tx timeout [ 283.100680] Bluetooth: hci6: command tx timeout [ 283.165923] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:22:18 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff815ec750 RCX=0000000000000001 RDX=1ffff11001832f74 RSI=ffffffff81af0270 RDI=ffff88800c197b1c RBP=ffff88800c197ae0 RSP=ffff88800c197a48 R8 =0000000000000001 R9 =ffff88800c197a88 R10=000000000003ab5c R11=000000000002531d R12=ffff88800c197b10 R13=0000000000000000 R14=ffff88800edb9bc0 R15=ffff888035f5fb90 RIP=ffffffff812d1afb RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562c64be3300 CR3=000000000bcf2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=00000003000000010000562c64c68d70 XMM05=0000562c64c3f3100000562c64c3fa20 XMM06=00000000006563697665642e36696368 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283c595 RDI=ffffffff886970a0 RBP=ffffffff88697060 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001d6c046 R10=0000000000000032 R11=2d2d2d2d2d2d2d2d R12=0000000000000032 R13=0000000000000010 R14=ffffffff88697060 R15=ffffffff8283c580 RIP=ffffffff8283c5ed RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555d7a188090 CR3=0000000018e16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000c0000621e0000000c000478000 XMM01=000000c0000a8c60000000c00006e4e0 XMM02=000000c000091e60000000c000091e30 XMM03=000000c00010c420000000c000091e90 XMM04=000000c00010e090000000c00010e060 XMM05=000000c00010e0f0000000c00010e0c0 XMM06=000000c00010e150000000c00010e120 XMM07=000000c00010d760000000c0000634d0 XMM08=000000c00010e4b0000000c00010e480 XMM09=000000c00010e510000000c00010e4e0 XMM10=000000c00010e540000000c000063530 XMM11=000000c00010e5a0000000c00010e570 XMM12=000000c00010e600000000c00010e5d0 XMM13=000000c00010e660000000c00010e630 XMM14=000000c00010e6c0000000c00010e690 XMM15=000000c0000b1080000000c00010e6f0