Warning: Permanently added '[localhost]:25985' (ECDSA) to the list of known hosts.
2025/01/30 16:06:19 fuzzer started
2025/01/30 16:06:20 dialing manager at localhost:46401
2025/01/30 16:06:20 checking machine...
2025/01/30 16:06:20 checking revisions...
syzkaller login: [ 67.482501] kmemleak: Automatic memory scanning thread ended
2025/01/30 16:06:20 testing simple program...
[ 67.628049] cgroup: Unknown subsys name 'net'
[ 67.724940] cgroup: Unknown subsys name 'cpuset'
[ 67.752238] cgroup: Unknown subsys name 'rlimit'
executing program
executing program
executing program
executing program
executing program
executing program
[ 86.436726] audit: type=1400 audit(1738253199.393:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 87.633750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 87.636717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 87.640642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 87.648756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 87.651923] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 87.654917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
executing program
[ 89.720957] Bluetooth: hci0: command tx timeout
executing program
[ 91.770026] Bluetooth: hci0: command tx timeout
[ 93.816477] Bluetooth: hci0: command tx timeout
executing program
[ 95.864619] Bluetooth: hci0: command tx timeout
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 115.190145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.191684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 115.242868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 115.244179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/01/30 16:07:08 building call list...
[ 116.202721]
[ 116.203093] ======================================================
[ 116.204039] WARNING: possible circular locking dependency detected
[ 116.204957] 6.13.0-next-20250130 #1 Not tainted
[ 116.206227] ------------------------------------------------------
[ 116.207885] kworker/u8:2/726 is trying to acquire lock:
[ 116.209205] ffffffff86219b68 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[ 116.211630]
[ 116.211630] but task is already holding lock:
[ 116.213006] ffff888018b50768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 116.215678]
[ 116.215678] which lock already depends on the new lock.
[ 116.215678]
[ 116.217353]
[ 116.217353] the existing dependency chain (in reverse order) is:
[ 116.218936]
[ 116.218936] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 116.220376] __mutex_lock+0x13d/0xb50
[ 116.221403] wiphy_register+0x1b2e/0x25d0
[ 116.222527] ieee80211_register_hw+0x23a4/0x3d60
[ 116.224226] mac80211_hwsim_new_radio+0x2759/0x4d60
[ 116.225136] init_mac80211_hwsim+0x389/0x870
[ 116.225970] do_one_initcall+0xf9/0x640
[ 116.226745] kernel_init_freeable+0x53d/0x7a0
[ 116.227597] kernel_init+0x1e/0x2d0
[ 116.228266] ret_from_fork+0x48/0x80
[ 116.228950] ret_from_fork_asm+0x1a/0x30
[ 116.229738]
[ 116.229738] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 116.230699] __lock_acquire+0x29fd/0x4580
[ 116.231470] lock_acquire+0x19b/0x520
[ 116.232170] __mutex_lock+0x13d/0xb50
[ 116.232909] unregister_netdevice_many_notify+0x1612/0x1c80
[ 116.233888] unregister_netdevice_queue+0x224/0x2e0
[ 116.234765] _cfg80211_unregister_wdev+0x57b/0x700
[ 116.235639] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 116.236528] ieee80211_unregister_hw+0x55/0x3a0
[ 116.237347] hwsim_exit_net+0x3a0/0x730
[ 116.238083] ops_exit_list+0xb3/0x180
[ 116.238789] cleanup_net+0x546/0xad0
[ 116.239497] process_one_work+0x8ee/0x1a10
[ 116.240309] worker_thread+0x674/0xe70
[ 116.241072] kthread+0x3ab/0x720
[ 116.241730] ret_from_fork+0x48/0x80
[ 116.242396] ret_from_fork_asm+0x1a/0x30
[ 116.243165]
[ 116.243165] other info that might help us debug this:
[ 116.243165]
[ 116.244323] Possible unsafe locking scenario:
[ 116.244323]
[ 116.245210] CPU0 CPU1
[ 116.245914] ---- ----
[ 116.246621] lock(&rdev->wiphy.mtx);
[ 116.247262] lock(rtnl_mutex);
[ 116.248166] lock(&rdev->wiphy.mtx);
[ 116.249144] lock(rtnl_mutex);
[ 116.249699]
[ 116.249699] *** DEADLOCK ***
[ 116.249699]
[ 116.250597] 4 locks held by kworker/u8:2/726:
[ 116.251297] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[ 116.252864] #1: ffff88800f34fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[ 116.254359] #2: ffffffff8620db90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[ 116.255759] #3: ffff888018b50768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[ 116.257310]
[ 116.257310] stack backtrace:
[ 116.257991] CPU: 1 UID: 0 PID: 726 Comm: kworker/u8:2 Not tainted 6.13.0-next-20250130 #1
[ 116.258057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 116.258097] Workqueue: netns cleanup_net
[ 116.258170] Call Trace:
[ 116.258187] <TASK>
[ 116.258207] dump_stack_lvl+0xca/0x120
[ 116.258311] print_circular_bug+0x47b/0x750
[ 116.258395] check_noncircular+0x2e9/0x3c0
[ 116.258472] ? __pfx_check_noncircular+0x10/0x10
[ 116.258548] ? hlock_class+0x4e/0x130
[ 116.258603] ? mark_lock+0xac/0xed0
[ 116.258675] ? __pfx_lock_repin_lock+0x10/0x10
[ 116.258793] ? lockdep_lock+0x183/0x1b0
[ 116.258899] ? __pfx_lockdep_lock+0x10/0x10
[ 116.259014] __lock_acquire+0x29fd/0x4580
[ 116.259113] ? __pfx___lock_acquire+0x10/0x10
[ 116.259205] ? lock_release+0x20f/0x6f0
[ 116.259286] ? __pfx_lock_release+0x10/0x10
[ 116.259374] lock_acquire+0x19b/0x520
[ 116.259453] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 116.259541] ? __pfx_lock_acquire+0x10/0x10
[ 116.259624] ? srso_return_thunk+0x5/0x5f
[ 116.259725] ? lock_release+0x20f/0x6f0
[ 116.259805] ? srso_return_thunk+0x5/0x5f
[ 116.259906] ? lock_is_held_type+0x9e/0x120
[ 116.260006] ? srso_return_thunk+0x5/0x5f
[ 116.260113] __mutex_lock+0x13d/0xb50
[ 116.260208] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 116.260289] ? unregister_netdevice_many_notify+0x1612/0x1c80
[ 116.260372] ? srso_return_thunk+0x5/0x5f
[ 116.260473] ? synchronize_rcu_expedited+0x38a/0x420
[ 116.260553] ? __pfx___mutex_lock+0x10/0x10
[ 116.260651] ? __pfx_autoremove_wake_function+0x10/0x10
[ 116.260756] ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 116.260828] unregister_netdevice_many_notify+0x1612/0x1c80
[ 116.260910] ? __virt_addr_valid+0x2e8/0x5d0
[ 116.261007] ? __pfx_lock_release+0x10/0x10
[ 116.261089] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 116.261171] ? find_held_lock+0x2c/0x110
[ 116.261279] ? srso_return_thunk+0x5/0x5f
[ 116.261384] ? kernfs_remove_by_name_ns+0xc7/0x130
[ 116.261492] ? srso_return_thunk+0x5/0x5f
[ 116.261593] ? lock_release+0x20f/0x6f0
[ 116.261674] ? __pfx_lock_release+0x10/0x10
[ 116.261753] ? srso_return_thunk+0x5/0x5f
[ 116.261854] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 116.261941] ? srso_return_thunk+0x5/0x5f
[ 116.262051] unregister_netdevice_queue+0x224/0x2e0
[ 116.262130] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 116.262208] ? up_write+0x195/0x520
[ 116.262309] _cfg80211_unregister_wdev+0x57b/0x700
[ 116.262404] ? srso_return_thunk+0x5/0x5f
[ 116.262511] ieee80211_remove_interfaces+0x2f2/0x6b0
[ 116.262580] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 116.262648] ? srso_return_thunk+0x5/0x5f
[ 116.262749] ? srso_return_thunk+0x5/0x5f
[ 116.262850] ? synchronize_rcu+0x1ff/0x260
[ 116.262927] ieee80211_unregister_hw+0x55/0x3a0
[ 116.263008] hwsim_exit_net+0x3a0/0x730
[ 116.263083] ? __pfx_hwsim_exit_net+0x10/0x10
[ 116.263165] ? srso_return_thunk+0x5/0x5f
[ 116.263266] ? netdev_run_todo+0x788/0x1040
[ 116.263354] ? __pfx_hwsim_exit_net+0x10/0x10
[ 116.263431] ops_exit_list+0xb3/0x180
[ 116.263507] cleanup_net+0x546/0xad0
[ 116.263587] ? __pfx_cleanup_net+0x10/0x10
[ 116.263684] process_one_work+0x8ee/0x1a10
[ 116.263805] ? __pfx_lock_acquire+0x10/0x10
[ 116.263888] ? __pfx_process_one_work+0x10/0x10
[ 116.263996] ? srso_return_thunk+0x5/0x5f
[ 116.264096] ? move_linked_works+0x172/0x270
[ 116.264178] ? srso_return_thunk+0x5/0x5f
[ 116.264278] ? assign_work+0x196/0x240
[ 116.264384] worker_thread+0x674/0xe70
[ 116.264492] ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[ 116.264587] ? srso_return_thunk+0x5/0x5f
[ 116.264688] ? __pfx_worker_thread+0x10/0x10
[ 116.264798] kthread+0x3ab/0x720
[ 116.264894] ? __pfx_kthread+0x10/0x10
[ 116.264990] ? srso_return_thunk+0x5/0x5f
[ 116.265090] ? finish_task_switch.isra.0+0x206/0x840
[ 116.265184] ? __pfx_kthread+0x10/0x10
[ 116.265283] ret_from_fork+0x48/0x80
[ 116.265340] ? __pfx_kthread+0x10/0x10
[ 116.265437] ret_from_fork_asm+0x1a/0x30
[ 116.265560] </TASK>
executing program
executing program
[ 122.002315] audit: type=1400 audit(1738253234.958:8): avc: denied { create } for pid=253 comm="syz-fuzzer" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1
[ 122.878576] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 123.957657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
executing program
2025/01/30 16:07:18 syscalls: 2217
2025/01/30 16:07:18 code coverage: enabled
2025/01/30 16:07:18 comparison tracing: enabled
2025/01/30 16:07:18 extra coverage: enabled
2025/01/30 16:07:18 setuid sandbox: enabled
2025/01/30 16:07:18 namespace sandbox: enabled
2025/01/30 16:07:18 Android sandbox: enabled
2025/01/30 16:07:18 fault injection: enabled
2025/01/30 16:07:18 leak checking: enabled
2025/01/30 16:07:18 net packet injection: enabled
2025/01/30 16:07:18 net device setup: enabled
2025/01/30 16:07:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/30 16:07:18 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/30 16:07:18 USB emulation: enabled
2025/01/30 16:07:18 hci packet injection: enabled
2025/01/30 16:07:18 wifi device emulation: enabled
2025/01/30 16:07:18 802.15.4 emulation: enabled
2025/01/30 16:07:18 fetching corpus: 0, signal 0/0 (executing program)
2025/01/30 16:07:18 fetching corpus: 0, signal 0/0 (executing program)
VM DIAGNOSIS:
16:07:09 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=00000000fffffffe RCX=ffffffff84a53b1f RDX=ffff8880169f1bc0
RSI=ffffffff84a53aaf RDI=0000000000000005 RBP=0000000000000009 RSP=ffff888015d476f0
R8 =0000000000000007 R9 =ffffed1002b40524 R10=0000000000000009 R11=0000000000000000
R12=ffff888015a0292a R13=ffff888015d47791 R14=ffff888015a03000 R15=ffff888015a02924
RIP=ffffffff8171a438 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000000c000030b10 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000000c0007c2000 CR3=00000000160b4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=38363733313866666666666666660a77
XMM02=3866666666666666660a776f68735f65 XMM03=6464615f656c6261745f73695f696665
XMM04=30303030303030303030303030303030 XMM05=6464615f656c6261745f73695f696665
XMM06=33313866666666666666660a73736572 XMM07=745f73695f6966652054203035383637
XMM08=6666660a737365726464615f656c6261 XMM09=20542030303936373331386666666666
XMM10=695f727474615f6966655f7866705f5f XMM11=6666666666660a656c62697369765f73
XMM12=69666520542030313936373331386666 XMM13=00000000008a4dee00000000008a69cf
XMM14=000000000089d9b900000000008a4694 XMM15=00000000004643c100000000004360f2
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff8283d240 RDI=ffffffff88693060 RBP=ffffffff88693020 RSP=ffff88800f34ec08
R8 =0000000000000000 R9 =ffffed1001807046 R10=00000000000fe503 R11=6920202020202020
R12=0000000000000823 R13=0000000000000060 R14=fffffbfff10d265e R15=dffffc0000000000
RIP=ffffffff8283d295 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005600ea8d58c0 CR3=00000000160b4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004104b88000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000