Warning: Permanently added '[localhost]:1484' (ECDSA) to the list of known hosts. 2025/01/17 18:29:03 fuzzer started 2025/01/17 18:29:04 dialing manager at localhost:44245 syzkaller login: [ 74.047768] cgroup: Unknown subsys name 'net' [ 74.169880] cgroup: Unknown subsys name 'cpuset' [ 74.205864] cgroup: Unknown subsys name 'rlimit' [ 82.003751] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 93.184812] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 18:29:24 syscalls: 2217 2025/01/17 18:29:24 code coverage: enabled 2025/01/17 18:29:24 comparison tracing: enabled 2025/01/17 18:29:24 extra coverage: enabled 2025/01/17 18:29:24 setuid sandbox: enabled 2025/01/17 18:29:24 namespace sandbox: enabled 2025/01/17 18:29:24 Android sandbox: enabled 2025/01/17 18:29:24 fault injection: enabled 2025/01/17 18:29:24 leak checking: enabled 2025/01/17 18:29:24 net packet injection: enabled 2025/01/17 18:29:24 net device setup: enabled 2025/01/17 18:29:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 18:29:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 18:29:24 USB emulation: enabled 2025/01/17 18:29:24 hci packet injection: enabled 2025/01/17 18:29:24 wifi device emulation: enabled 2025/01/17 18:29:24 802.15.4 emulation: enabled 2025/01/17 18:29:24 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 18:29:24 fetching corpus: 0, signal 0/0 (executing program) 2025/01/17 18:29:27 starting 8 fuzzer processes 18:29:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xa01) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 18:29:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000000)=0xe6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) 18:29:27 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) sendfile(r0, r1, 0x0, 0x8) 18:29:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x30, 0x0, &(0x7f0000000100)) [ 96.975758] audit: type=1400 audit(1737138567.287:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:29:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0), 0x4) 18:29:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 18:29:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 18:29:27 executing program 7: io_setup(0x7, &(0x7f0000000a80)) io_setup(0x3, &(0x7f0000000280)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/176, 0xb0, 0x3ff800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="044800018000c80008004b05c80003006a08c8000600ff03c9000800e799c8e51d1052643ef927d533a16cbc5c57dada"], 0x20) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3f}}}, 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_WRITE_DEF_DATA_LEN={{}, 0x40}}}, 0x7) syz_emit_vhci(&(0x7f0000000280)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040504fd2b2d000071070000b6954bc0c270bc8f606f8c0000000000004007b1dd8fcb9722f154ddd60500000000000000b08351cf13d116bd8f"], 0x7) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc9}}}, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="24a41cbf6d04407a6a7f"], 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0xfc, 0xc}, {0xef, 0x3, 0x100, 0x7fff, [0x1000, 0x3]}}}}, 0x19) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x7) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04060101c800"], 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) [ 98.378225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.378647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.379410] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.387233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.388102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.394834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.401092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.403824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.404249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.406766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.412286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.417915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.422504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.422734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.424560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.426041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.428933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.429094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.433614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.437180] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.437628] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.438196] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.441852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.443482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.444251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.445010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.455907] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.456276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.457673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.462891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.511784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.520703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.529698] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.549621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.549958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.553918] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.555704] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.558590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.564153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.566860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.569107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.570036] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.575781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.583062] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.585232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.601274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.604938] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.607797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.514616] Bluetooth: hci3: command tx timeout [ 100.514871] Bluetooth: hci0: command tx timeout [ 100.578709] Bluetooth: hci1: command tx timeout [ 100.579990] Bluetooth: hci5: command tx timeout [ 100.580962] Bluetooth: hci2: command tx timeout [ 100.581412] Bluetooth: hci4: command tx timeout [ 100.643487] Bluetooth: hci6: command tx timeout [ 100.706374] Bluetooth: hci7: command tx timeout [ 102.565360] Bluetooth: hci3: command tx timeout [ 102.565464] Bluetooth: hci0: command tx timeout [ 102.626809] Bluetooth: hci1: command tx timeout [ 102.626957] Bluetooth: hci4: command tx timeout [ 102.627046] Bluetooth: hci2: command tx timeout [ 102.627139] Bluetooth: hci5: command tx timeout [ 102.690432] Bluetooth: hci6: command tx timeout [ 102.755188] Bluetooth: hci7: command tx timeout [ 104.610484] Bluetooth: hci0: command tx timeout [ 104.610519] Bluetooth: hci3: command tx timeout [ 104.675502] Bluetooth: hci1: command tx timeout [ 104.675706] Bluetooth: hci5: command tx timeout [ 104.675840] Bluetooth: hci2: command tx timeout [ 104.675931] Bluetooth: hci4: command tx timeout [ 104.739716] Bluetooth: hci6: command tx timeout [ 104.803413] Bluetooth: hci7: command tx timeout [ 106.659385] Bluetooth: hci3: command tx timeout [ 106.659479] Bluetooth: hci0: command tx timeout [ 106.722481] Bluetooth: hci2: command tx timeout [ 106.722581] Bluetooth: hci5: command tx timeout [ 106.722669] Bluetooth: hci1: command tx timeout [ 106.722731] Bluetooth: hci4: command tx timeout [ 106.787599] Bluetooth: hci6: command tx timeout [ 106.852371] Bluetooth: hci7: command tx timeout [ 160.641806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.645504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.649242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.657394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.663722] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.665263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.691694] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.694614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.698489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.700675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.701870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.704168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.705619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.713031] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.716133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 160.717917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.719884] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.724672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.835240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.838963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.840556] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.843844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.848005] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.849906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.900743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.913550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.930054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.934935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.938426] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.938605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.940241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.945346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.947547] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.949798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.950492] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.951237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.952089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.952160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.971493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.988006] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.004264] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.006445] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.007503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 161.026469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.033951] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 161.037483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 161.094529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.100568] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.722625] Bluetooth: hci0: command tx timeout [ 162.786418] Bluetooth: hci2: command tx timeout [ 162.786713] Bluetooth: hci1: command tx timeout [ 162.914384] Bluetooth: hci3: command tx timeout [ 162.978493] Bluetooth: hci4: command tx timeout [ 163.042608] Bluetooth: hci5: command tx timeout [ 163.106582] Bluetooth: hci6: command tx timeout [ 163.299449] Bluetooth: hci7: command tx timeout [ 164.772367] Bluetooth: hci0: command tx timeout [ 164.834710] Bluetooth: hci1: command tx timeout [ 164.834820] Bluetooth: hci2: command tx timeout [ 164.963524] Bluetooth: hci3: command tx timeout [ 165.027453] Bluetooth: hci4: command tx timeout [ 165.091538] Bluetooth: hci5: command tx timeout [ 165.156356] Bluetooth: hci6: command tx timeout [ 165.346412] Bluetooth: hci7: command tx timeout [ 166.819365] Bluetooth: hci0: command tx timeout [ 166.882463] Bluetooth: hci2: command tx timeout [ 166.882657] Bluetooth: hci1: command tx timeout [ 167.011380] Bluetooth: hci3: command tx timeout [ 167.075560] Bluetooth: hci4: command tx timeout [ 167.139435] Bluetooth: hci5: command tx timeout [ 167.202477] Bluetooth: hci6: command tx timeout [ 167.394389] Bluetooth: hci7: command tx timeout [ 168.868047] Bluetooth: hci0: command tx timeout [ 168.931866] Bluetooth: hci2: command tx timeout [ 168.931969] Bluetooth: hci1: command tx timeout [ 169.058408] Bluetooth: hci3: command tx timeout [ 169.123032] Bluetooth: hci4: command tx timeout [ 169.187345] Bluetooth: hci5: command tx timeout [ 169.250466] Bluetooth: hci6: command tx timeout [ 169.444350] Bluetooth: hci7: command tx timeout [ 221.083861] [ 221.084128] ====================================================== [ 221.084753] WARNING: possible circular locking dependency detected [ 221.085370] 6.13.0-rc7-next-20250117 #1 Not tainted [ 221.085868] ------------------------------------------------------ [ 221.087316] kworker/u8:0/11 is trying to acquire lock: [ 221.088581] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.090464] [ 221.090464] but task is already holding lock: [ 221.092033] ffff88800f0b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 221.093870] [ 221.093870] which lock already depends on the new lock. [ 221.093870] [ 221.095656] [ 221.095656] the existing dependency chain (in reverse order) is: [ 221.096593] [ 221.096593] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 221.097271] __mutex_lock+0x13d/0xb50 [ 221.097742] wiphy_register+0x1b2e/0x25d0 [ 221.098237] ieee80211_register_hw+0x23a4/0x3d60 [ 221.098780] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 221.099362] init_mac80211_hwsim+0x389/0x870 [ 221.099902] do_one_initcall+0xf9/0x640 [ 221.100402] kernel_init_freeable+0x53d/0x7a0 [ 221.100940] kernel_init+0x1e/0x2d0 [ 221.101375] ret_from_fork+0x48/0x80 [ 221.101815] ret_from_fork_asm+0x1a/0x30 [ 221.102314] [ 221.102314] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 221.102934] __lock_acquire+0x29fd/0x4580 [ 221.103418] lock_acquire+0x19b/0x520 [ 221.103874] __mutex_lock+0x13d/0xb50 [ 221.104348] unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.104982] unregister_netdevice_queue+0x224/0x2e0 [ 221.105544] _cfg80211_unregister_wdev+0x57b/0x700 [ 221.106109] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 221.106680] ieee80211_unregister_hw+0x55/0x3a0 [ 221.107210] hwsim_exit_net+0x3a0/0x730 [ 221.107682] ops_exit_list+0xb3/0x180 [ 221.108140] cleanup_net+0x546/0xad0 [ 221.108596] process_one_work+0x8ee/0x1a10 [ 221.109114] worker_thread+0x674/0xe70 [ 221.109600] kthread+0x3ab/0x720 [ 221.110026] ret_from_fork+0x48/0x80 [ 221.110461] ret_from_fork_asm+0x1a/0x30 [ 221.110958] [ 221.110958] other info that might help us debug this: [ 221.110958] [ 221.111728] Possible unsafe locking scenario: [ 221.111728] [ 221.112311] CPU0 CPU1 [ 221.112762] ---- ---- [ 221.113216] lock(&rdev->wiphy.mtx); [ 221.113619] lock(rtnl_mutex); [ 221.114198] lock(&rdev->wiphy.mtx); [ 221.114822] lock(rtnl_mutex); [ 221.115182] [ 221.115182] *** DEADLOCK *** [ 221.115182] [ 221.115755] 4 locks held by kworker/u8:0/11: [ 221.116194] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 221.117213] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 221.118205] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 221.119127] #3: ffff88800f0b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 221.120156] [ 221.120156] stack backtrace: [ 221.120610] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 221.121408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 221.122170] Workqueue: netns cleanup_net [ 221.122585] Call Trace: [ 221.122834] [ 221.123066] dump_stack_lvl+0xca/0x120 [ 221.123484] print_circular_bug+0x47b/0x750 [ 221.123925] check_noncircular+0x2e9/0x3c0 [ 221.124363] ? lock_repin_lock+0x207/0x320 [ 221.124812] ? __pfx_check_noncircular+0x10/0x10 [ 221.125290] ? hlock_class+0x4e/0x130 [ 221.125677] ? mark_lock+0xac/0xed0 [ 221.126052] ? __pfx_lock_repin_lock+0x10/0x10 [ 221.126532] ? lockdep_lock+0xba/0x1b0 [ 221.126949] ? __pfx_lockdep_lock+0x10/0x10 [ 221.127427] __lock_acquire+0x29fd/0x4580 [ 221.127864] ? __pfx___lock_acquire+0x10/0x10 [ 221.128331] ? lock_release+0x20f/0x6f0 [ 221.128734] ? __pfx_lock_release+0x10/0x10 [ 221.129170] lock_acquire+0x19b/0x520 [ 221.129568] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.130156] ? __pfx_lock_acquire+0x10/0x10 [ 221.130590] ? srso_return_thunk+0x5/0x5f [ 221.131025] ? lock_release+0x20f/0x6f0 [ 221.131438] ? srso_return_thunk+0x5/0x5f [ 221.131878] ? lock_is_held_type+0x9e/0x120 [ 221.132342] ? srso_return_thunk+0x5/0x5f [ 221.132780] __mutex_lock+0x13d/0xb50 [ 221.133186] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.133766] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.134351] ? srso_return_thunk+0x5/0x5f [ 221.134788] ? synchronize_rcu_expedited+0x38a/0x420 [ 221.135284] ? __pfx___mutex_lock+0x10/0x10 [ 221.135733] ? __pfx_autoremove_wake_function+0x10/0x10 [ 221.136285] ? srso_return_thunk+0x5/0x5f [ 221.136721] ? kasan_quarantine_put+0x84/0x1e0 [ 221.137201] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 221.137658] ? srso_return_thunk+0x5/0x5f [ 221.138094] unregister_netdevice_many_notify+0x1612/0x1c80 [ 221.138680] ? __virt_addr_valid+0x2e8/0x5d0 [ 221.139148] ? __pfx_lock_release+0x10/0x10 [ 221.139590] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 221.140188] ? find_held_lock+0x2c/0x110 [ 221.140629] ? srso_return_thunk+0x5/0x5f [ 221.141085] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 221.141598] ? srso_return_thunk+0x5/0x5f [ 221.142034] ? lock_release+0x20f/0x6f0 [ 221.142445] ? __pfx_lock_release+0x10/0x10 [ 221.142889] ? srso_return_thunk+0x5/0x5f [ 221.143326] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 221.143875] ? srso_return_thunk+0x5/0x5f [ 221.144324] unregister_netdevice_queue+0x224/0x2e0 [ 221.144809] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 221.145366] ? up_write+0x195/0x520 [ 221.145751] _cfg80211_unregister_wdev+0x57b/0x700 [ 221.146244] ? srso_return_thunk+0x5/0x5f [ 221.146672] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 221.147163] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 221.147713] ? srso_return_thunk+0x5/0x5f [ 221.148135] ? srso_return_thunk+0x5/0x5f [ 221.148599] ? synchronize_rcu+0x1ff/0x260 [ 221.149026] ieee80211_unregister_hw+0x55/0x3a0 [ 221.149514] hwsim_exit_net+0x3a0/0x730 [ 221.149920] ? __pfx_hwsim_exit_net+0x10/0x10 [ 221.150378] ? srso_return_thunk+0x5/0x5f [ 221.150814] ? netdev_run_todo+0x788/0x1040 [ 221.151278] ? __pfx_hwsim_exit_net+0x10/0x10 [ 221.151734] ops_exit_list+0xb3/0x180 [ 221.152131] cleanup_net+0x546/0xad0 [ 221.152569] ? __pfx_cleanup_net+0x10/0x10 [ 221.153015] process_one_work+0x8ee/0x1a10 [ 221.153472] ? __pfx_lock_acquire+0x10/0x10 [ 221.153910] ? __pfx_process_one_work+0x10/0x10 [ 221.154394] ? srso_return_thunk+0x5/0x5f [ 221.154825] ? move_linked_works+0x172/0x270 [ 221.155277] ? srso_return_thunk+0x5/0x5f [ 221.155709] ? assign_work+0x196/0x240 [ 221.156123] worker_thread+0x674/0xe70 [ 221.156551] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 221.157081] ? __pfx_worker_thread+0x10/0x10 [ 221.157544] kthread+0x3ab/0x720 [ 221.157909] ? __pfx_kthread+0x10/0x10 [ 221.158322] ? srso_return_thunk+0x5/0x5f [ 221.158757] ? finish_task_switch.isra.0+0x206/0x840 [ 221.159272] ? __pfx_kthread+0x10/0x10 [ 221.159684] ret_from_fork+0x48/0x80 [ 221.160056] ? __pfx_kthread+0x10/0x10 [ 221.160466] ret_from_fork_asm+0x1a/0x30 [ 221.160894] [ 222.765569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.768040] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.769542] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.772478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.774420] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 222.776502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.893841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.898553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.901603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.905094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.908683] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.910218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.967842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.969564] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.974159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.979075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.985769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 222.990865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.149872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.153580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.157617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.168119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.171633] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.177562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.216782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.220546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.229746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.232036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.236567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.242843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.243228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 223.246705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.258443] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 223.269955] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 223.271130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 223.272813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.314031] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.330754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.363603] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.366874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.375578] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.417630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.430495] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.431528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.433882] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.434567] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.452444] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 223.463541] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.802496] Bluetooth: hci0: command tx timeout [ 224.930338] Bluetooth: hci1: command tx timeout [ 225.058351] Bluetooth: hci2: command tx timeout [ 225.254297] Bluetooth: hci3: command tx timeout [ 225.314439] Bluetooth: hci5: command tx timeout [ 225.315352] Bluetooth: hci4: command tx timeout [ 225.507477] Bluetooth: hci6: command tx timeout [ 225.507634] Bluetooth: hci7: command tx timeout [ 226.851394] Bluetooth: hci0: command tx timeout [ 226.980324] Bluetooth: hci1: command tx timeout [ 227.106338] Bluetooth: hci2: command tx timeout [ 227.299394] Bluetooth: hci3: command tx timeout [ 227.363413] Bluetooth: hci4: command tx timeout [ 227.363491] Bluetooth: hci5: command tx timeout [ 227.555356] Bluetooth: hci7: command tx timeout [ 227.555431] Bluetooth: hci6: command tx timeout [ 228.898431] Bluetooth: hci0: command tx timeout [ 229.026334] Bluetooth: hci1: command tx timeout [ 229.155306] Bluetooth: hci2: command tx timeout [ 229.346331] Bluetooth: hci3: command tx timeout [ 229.413201] Bluetooth: hci5: command tx timeout [ 229.413316] Bluetooth: hci4: command tx timeout [ 229.602388] Bluetooth: hci6: command tx timeout [ 229.602667] Bluetooth: hci7: command tx timeout [ 230.946611] Bluetooth: hci0: command tx timeout [ 231.075381] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 18:31:31 Registers: info registers vcpu 0 RAX=ffffffff85a00000 RBX=ffff88800c419a68 RCX=ffffffff81429a4a RDX=0000000000a0b940 RSI=0000000000000001 RDI=ffffffff85cf0d38 RBP=ffffffff85cf0d38 RSP=ffff88800ef3fda0 R8 =0000000000000000 R9 =ffffed1001da9100 R10=ffff88800ed48807 R11=ffff888009a457f8 R12=ffff888008c503e0 R13=ffff88800c419a68 R14=ffff888009a45340 R15=0000000000000082 RIP=ffffffff81aeceee RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe81cca4138 CR3=000000000a1b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=de56fc1257de7c9b58426a4a1b2475b8 XMM02=ee7587d5db12e8e300000000000fd0c8 XMM03=711fbe8126c5d34400000000001380a0 XMM04=ccdaa675baae137500000000000ae988 XMM05=3cc027b654ebc50600000000001406a0 XMM06=9f165a4fe6c971ad00000000001381a8 XMM07=711fbe8126c5d34400000000001380a0 XMM08=ee7587d5db12e8e300000000000fd0c8 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000000 R9 =fffffbfff0be1544 R10=0000000000000000 R11=6f6c206863696877 R12=0000000000000005 R13=ffff8880095deeb8 R14=000000000000000e R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556dc4803468 CR3=000000000e892000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffffffffffffffffffffff XMM03=742d626f6a0064656465656363757320 XMM04=0000556dc47e7ea00000556dc47e7e80 XMM05=00000005ffffffff0000556dc484be50 XMM06=000000003130006563697665642e3469 XMM07=00000000000000000000000000000000 XMM08=00000000003638323032646161383334 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000