Warning: Permanently added '[localhost]:49910' (ECDSA) to the list of known hosts. 2025/01/30 19:53:14 fuzzer started 2025/01/30 19:53:14 dialing manager at localhost:46401 syzkaller login: [ 67.474411] cgroup: Unknown subsys name 'net' [ 67.571165] cgroup: Unknown subsys name 'cpuset' [ 67.601778] cgroup: Unknown subsys name 'rlimit' 2025/01/30 19:53:32 syscalls: 2217 2025/01/30 19:53:32 code coverage: enabled 2025/01/30 19:53:32 comparison tracing: enabled 2025/01/30 19:53:32 extra coverage: enabled 2025/01/30 19:53:32 setuid sandbox: enabled 2025/01/30 19:53:32 namespace sandbox: enabled 2025/01/30 19:53:32 Android sandbox: enabled 2025/01/30 19:53:32 fault injection: enabled 2025/01/30 19:53:32 leak checking: enabled 2025/01/30 19:53:32 net packet injection: enabled 2025/01/30 19:53:32 net device setup: enabled 2025/01/30 19:53:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 19:53:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 19:53:32 USB emulation: enabled 2025/01/30 19:53:32 hci packet injection: enabled 2025/01/30 19:53:32 wifi device emulation: enabled 2025/01/30 19:53:32 802.15.4 emulation: enabled 2025/01/30 19:53:32 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/30 19:53:32 fetching corpus: 1, signal 2361/4819 (executing program) 2025/01/30 19:53:32 fetching corpus: 1, signal 2361/6042 (executing program) 2025/01/30 19:53:32 fetching corpus: 1, signal 2361/6106 (executing program) 2025/01/30 19:53:32 fetching corpus: 1, signal 2361/6106 (executing program) 2025/01/30 19:53:36 starting 8 fuzzer processes 19:53:36 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[{&(0x7f0000000080)="e7a49f42", 0x4}], 0x0, &(0x7f0000001380)={[], [{@smackfsroot={'smackfsroot', 0x3d, '$'}}, {@uid_lt}]}) 19:53:36 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000005080)={0x3}, 0x8, 0x0) 19:53:36 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2a2000, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x28802, 0x0) 19:53:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, 0x0) 19:53:36 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = getpid() clone3(&(0x7f0000000540)={0x4000300, &(0x7f0000000340), 0x0, 0x0, {}, &(0x7f0000000400)=""/9, 0x9, 0x0, &(0x7f0000000500)=[r0], 0x1}, 0x58) readlink(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001d00)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x450a01, 0x0) 19:53:36 executing program 5: syz_mount_image$nfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[], [{@obj_user={'obj_user', 0x3d, 'wg1\x00'}}]}) [ 88.715239] audit: type=1400 audit(1738266816.217:7): avc: denied { execmem } for pid=272 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:53:36 executing program 6: syz_usb_disconnect(0xffffffffffffffff) 19:53:36 executing program 7: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/104, 0x68) [ 90.043402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.050586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.053706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.061292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.067201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.070946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.113082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.117988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.126047] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.135956] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.139172] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.141034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.142695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.153770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.155338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.163142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.164527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.167892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.175334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.185010] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.189009] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.192414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.194531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.196516] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.198105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.199217] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.202000] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.205436] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.206520] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.207386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.208530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.217724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.218462] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.221017] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.223392] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.229258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.241220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.292544] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.296624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.296650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.298274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.299490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.301220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.302767] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.304086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.314745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.319444] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.324007] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.132723] Bluetooth: hci0: command tx timeout [ 92.195891] Bluetooth: hci1: command tx timeout [ 92.260428] Bluetooth: hci2: command tx timeout [ 92.326116] Bluetooth: hci3: command tx timeout [ 92.326157] Bluetooth: hci4: command tx timeout [ 92.326776] Bluetooth: hci5: command tx timeout [ 92.388001] Bluetooth: hci6: command tx timeout [ 92.388055] Bluetooth: hci7: command tx timeout [ 94.181025] Bluetooth: hci0: command tx timeout [ 94.245071] Bluetooth: hci1: command tx timeout [ 94.309150] Bluetooth: hci2: command tx timeout [ 94.372384] Bluetooth: hci5: command tx timeout [ 94.373857] Bluetooth: hci4: command tx timeout [ 94.373907] Bluetooth: hci3: command tx timeout [ 94.436125] Bluetooth: hci7: command tx timeout [ 94.436302] Bluetooth: hci6: command tx timeout [ 96.228123] Bluetooth: hci0: command tx timeout [ 96.291871] Bluetooth: hci1: command tx timeout [ 96.355876] Bluetooth: hci2: command tx timeout [ 96.419918] Bluetooth: hci5: command tx timeout [ 96.420485] Bluetooth: hci4: command tx timeout [ 96.421170] Bluetooth: hci3: command tx timeout [ 96.484960] Bluetooth: hci6: command tx timeout [ 96.485006] Bluetooth: hci7: command tx timeout [ 98.275891] Bluetooth: hci0: command tx timeout [ 98.339869] Bluetooth: hci1: command tx timeout [ 98.404087] Bluetooth: hci2: command tx timeout [ 98.468008] Bluetooth: hci3: command tx timeout [ 98.468088] Bluetooth: hci4: command tx timeout [ 98.468454] Bluetooth: hci5: command tx timeout [ 98.531911] Bluetooth: hci6: command tx timeout [ 98.532021] Bluetooth: hci7: command tx timeout [ 153.721741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.726140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.730210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.735372] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.744605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.744650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.746144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.751062] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.753978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.757302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.770175] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.771571] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.777020] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.780260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.786276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.789880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.793387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.794174] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.808419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.828035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.828050] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.839429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.849384] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.854161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.877155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.886024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.904581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.911432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.917688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.920184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.922667] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.924425] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.926174] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.935158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.942076] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.956110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.959047] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.963409] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.965314] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.968213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.978634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.983381] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.988538] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.991487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.995585] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.015722] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.022099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.024557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.811944] Bluetooth: hci1: command tx timeout [ 155.812884] Bluetooth: hci0: command tx timeout [ 155.876869] Bluetooth: hci2: command tx timeout [ 155.939878] Bluetooth: hci3: command tx timeout [ 156.004858] Bluetooth: hci4: command tx timeout [ 156.068197] Bluetooth: hci7: command tx timeout [ 156.132370] Bluetooth: hci5: command tx timeout [ 156.134057] Bluetooth: hci6: command tx timeout [ 157.860194] Bluetooth: hci0: command tx timeout [ 157.860219] Bluetooth: hci1: command tx timeout [ 157.923905] Bluetooth: hci2: command tx timeout [ 157.987999] Bluetooth: hci3: command tx timeout [ 158.051898] Bluetooth: hci4: command tx timeout [ 158.115929] Bluetooth: hci7: command tx timeout [ 158.181001] Bluetooth: hci6: command tx timeout [ 158.181450] Bluetooth: hci5: command tx timeout [ 159.909823] Bluetooth: hci1: command tx timeout [ 159.910343] Bluetooth: hci0: command tx timeout [ 159.971857] Bluetooth: hci2: command tx timeout [ 160.036175] Bluetooth: hci3: command tx timeout [ 160.100282] Bluetooth: hci4: command tx timeout [ 160.163881] Bluetooth: hci7: command tx timeout [ 160.227904] Bluetooth: hci5: command tx timeout [ 160.227978] Bluetooth: hci6: command tx timeout [ 161.955901] Bluetooth: hci0: command tx timeout [ 161.957128] Bluetooth: hci1: command tx timeout [ 162.021973] Bluetooth: hci2: command tx timeout [ 162.083956] Bluetooth: hci3: command tx timeout [ 162.147841] Bluetooth: hci4: command tx timeout [ 162.212989] Bluetooth: hci7: command tx timeout [ 162.275872] Bluetooth: hci6: command tx timeout [ 162.275920] Bluetooth: hci5: command tx timeout [ 215.861960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.864700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.868166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.873704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.876735] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.878683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.983697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.991929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.993003] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.995293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.996450] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.999078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.000620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.001928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.003082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.022265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.028074] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.032044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.119191] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.123447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.130364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.170942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.175056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.179329] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.185023] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.195529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.196149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.198310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.218410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.227453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.240512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.247440] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.264271] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.267000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.303912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.318076] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.319478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.335043] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.336794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.340099] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.342279] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.344018] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.369325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.465854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.516341] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.536025] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.581189] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.601346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.956053] Bluetooth: hci0: command tx timeout [ 218.083991] Bluetooth: hci1: command tx timeout [ 218.085245] Bluetooth: hci2: command tx timeout [ 218.276182] Bluetooth: hci3: command tx timeout [ 218.404929] Bluetooth: hci4: command tx timeout [ 218.405970] Bluetooth: hci6: command tx timeout [ 218.406031] Bluetooth: hci5: command tx timeout [ 218.725099] Bluetooth: hci7: command tx timeout [ 220.005480] Bluetooth: hci0: command tx timeout [ 220.133928] Bluetooth: hci1: command tx timeout [ 220.133966] Bluetooth: hci2: command tx timeout [ 220.324902] Bluetooth: hci3: command tx timeout [ 220.453943] Bluetooth: hci5: command tx timeout [ 220.454004] Bluetooth: hci4: command tx timeout [ 220.454574] Bluetooth: hci6: command tx timeout [ 220.772320] Bluetooth: hci7: command tx timeout [ 222.051959] Bluetooth: hci0: command tx timeout [ 222.179813] Bluetooth: hci2: command tx timeout [ 222.180327] Bluetooth: hci1: command tx timeout [ 222.372851] Bluetooth: hci3: command tx timeout [ 222.500924] Bluetooth: hci4: command tx timeout [ 222.501419] Bluetooth: hci5: command tx timeout [ 222.502172] Bluetooth: hci6: command tx timeout [ 222.821006] Bluetooth: hci7: command tx timeout [ 224.101013] Bluetooth: hci0: command tx timeout [ 224.230062] Bluetooth: hci2: command tx timeout [ 224.230537] Bluetooth: hci1: command tx timeout [ 224.420900] Bluetooth: hci3: command tx timeout [ 224.549190] Bluetooth: hci6: command tx timeout [ 224.549710] Bluetooth: hci5: command tx timeout [ 224.550474] Bluetooth: hci4: command tx timeout [ 224.867969] Bluetooth: hci7: command tx timeout [ 276.479233] [ 276.479442] ====================================================== [ 276.479949] WARNING: possible circular locking dependency detected [ 276.480443] 6.13.0-next-20250130 #1 Not tainted [ 276.480849] ------------------------------------------------------ [ 276.481328] kworker/u8:0/11 is trying to acquire lock: [ 276.481745] ffffffff86219b68 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 276.482931] [ 276.482931] but task is already holding lock: [ 276.483900] ffff888015968768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 276.484736] [ 276.484736] which lock already depends on the new lock. [ 276.484736] [ 276.485367] [ 276.485367] the existing dependency chain (in reverse order) is: [ 276.487448] [ 276.487448] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 276.488797] __mutex_lock+0x13d/0xb50 [ 276.489717] wiphy_register+0x1b2e/0x25d0 [ 276.490802] ieee80211_register_hw+0x23a4/0x3d60 [ 276.491285] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 276.491801] init_mac80211_hwsim+0x389/0x870 [ 276.492262] do_one_initcall+0xf9/0x640 [ 276.492748] kernel_init_freeable+0x53d/0x7a0 [ 276.493246] kernel_init+0x1e/0x2d0 [ 276.493628] ret_from_fork+0x48/0x80 [ 276.494000] ret_from_fork_asm+0x1a/0x30 [ 276.494438] [ 276.494438] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 276.494978] __lock_acquire+0x29fd/0x4580 [ 276.495408] lock_acquire+0x19b/0x520 [ 276.495811] __mutex_lock+0x13d/0xb50 [ 276.496223] unregister_netdevice_many_notify+0x1612/0x1c80 [ 276.496773] unregister_netdevice_queue+0x224/0x2e0 [ 276.497260] _cfg80211_unregister_wdev+0x57b/0x700 [ 276.497756] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 276.498253] ieee80211_unregister_hw+0x55/0x3a0 [ 276.498714] hwsim_exit_net+0x3a0/0x730 [ 276.499133] ops_exit_list+0xb3/0x180 [ 276.499524] cleanup_net+0x546/0xad0 [ 276.499915] process_one_work+0x8ee/0x1a10 [ 276.500362] worker_thread+0x674/0xe70 [ 276.500806] kthread+0x3ab/0x720 [ 276.501185] ret_from_fork+0x48/0x80 [ 276.501566] ret_from_fork_asm+0x1a/0x30 [ 276.501987] [ 276.501987] other info that might help us debug this: [ 276.501987] [ 276.502656] Possible unsafe locking scenario: [ 276.502656] [ 276.503166] CPU0 CPU1 [ 276.503562] ---- ---- [ 276.503945] lock(&rdev->wiphy.mtx); [ 276.504298] lock(rtnl_mutex); [ 276.504811] lock(&rdev->wiphy.mtx); [ 276.505346] lock(rtnl_mutex); [ 276.505663] [ 276.505663] *** DEADLOCK *** [ 276.505663] [ 276.506156] 4 locks held by kworker/u8:0/11: [ 276.506544] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 276.507425] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 276.508286] #2: ffffffff8620db90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 276.509087] #3: ffff888015968768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 276.509952] [ 276.509952] stack backtrace: [ 276.510333] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250130 #1 [ 276.510371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 276.510394] Workqueue: netns cleanup_net [ 276.510436] Call Trace: [ 276.510446] [ 276.510458] dump_stack_lvl+0xca/0x120 [ 276.510527] print_circular_bug+0x47b/0x750 [ 276.510576] check_noncircular+0x2e9/0x3c0 [ 276.510619] ? __pfx_check_noncircular+0x10/0x10 [ 276.510662] ? hlock_class+0x4e/0x130 [ 276.510692] ? srso_return_thunk+0x5/0x5f [ 276.510749] ? mark_lock+0xac/0xed0 [ 276.510793] ? lockdep_lock+0xba/0x1b0 [ 276.510853] ? __pfx_lockdep_lock+0x10/0x10 [ 276.510917] __lock_acquire+0x29fd/0x4580 [ 276.510972] ? __pfx___lock_acquire+0x10/0x10 [ 276.511027] ? lock_release+0x20f/0x6f0 [ 276.511079] ? __pfx_lock_release+0x10/0x10 [ 276.511123] ? srso_return_thunk+0x5/0x5f [ 276.511184] lock_acquire+0x19b/0x520 [ 276.511229] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 276.511278] ? __pfx_lock_acquire+0x10/0x10 [ 276.511324] ? __pfx_lock_release+0x10/0x10 [ 276.511368] ? __pfx_try_to_wake_up+0x10/0x10 [ 276.511412] ? srso_return_thunk+0x5/0x5f [ 276.511469] ? lock_is_held_type+0x9e/0x120 [ 276.511538] ? srso_return_thunk+0x5/0x5f [ 276.511600] __mutex_lock+0x13d/0xb50 [ 276.511653] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 276.511698] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 276.511744] ? srso_return_thunk+0x5/0x5f [ 276.511799] ? synchronize_rcu_expedited+0x38a/0x420 [ 276.511843] ? __pfx___mutex_lock+0x10/0x10 [ 276.511898] ? srso_return_thunk+0x5/0x5f [ 276.511955] ? srso_return_thunk+0x5/0x5f [ 276.512018] ? kasan_quarantine_put+0x84/0x1e0 [ 276.512084] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 276.512120] ? srso_return_thunk+0x5/0x5f [ 276.512180] unregister_netdevice_many_notify+0x1612/0x1c80 [ 276.512227] ? __virt_addr_valid+0x2e8/0x5d0 [ 276.512280] ? __pfx_lock_release+0x10/0x10 [ 276.512326] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 276.512372] ? find_held_lock+0x2c/0x110 [ 276.512433] ? srso_return_thunk+0x5/0x5f [ 276.512495] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 276.512565] ? srso_return_thunk+0x5/0x5f [ 276.512621] ? lock_release+0x20f/0x6f0 [ 276.512666] ? __pfx_lock_release+0x10/0x10 [ 276.512721] ? srso_return_thunk+0x5/0x5f [ 276.512778] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 276.512826] ? srso_return_thunk+0x5/0x5f [ 276.512888] unregister_netdevice_queue+0x224/0x2e0 [ 276.512932] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 276.512976] ? up_write+0x195/0x520 [ 276.513043] _cfg80211_unregister_wdev+0x57b/0x700 [ 276.513097] ? srso_return_thunk+0x5/0x5f [ 276.513157] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 276.513195] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 276.513234] ? srso_return_thunk+0x5/0x5f [ 276.513290] ? srso_return_thunk+0x5/0x5f [ 276.513346] ? synchronize_rcu+0x1ff/0x260 [ 276.513390] ieee80211_unregister_hw+0x55/0x3a0 [ 276.513435] hwsim_exit_net+0x3a0/0x730 [ 276.513477] ? __pfx_hwsim_exit_net+0x10/0x10 [ 276.513530] ? srso_return_thunk+0x5/0x5f [ 276.513586] ? netdev_run_todo+0x788/0x1040 [ 276.513636] ? __pfx_hwsim_exit_net+0x10/0x10 [ 276.513679] ops_exit_list+0xb3/0x180 [ 276.513721] cleanup_net+0x546/0xad0 [ 276.513766] ? __pfx_cleanup_net+0x10/0x10 [ 276.513820] process_one_work+0x8ee/0x1a10 [ 276.513888] ? __pfx_lock_acquire+0x10/0x10 [ 276.513945] ? __pfx_process_one_work+0x10/0x10 [ 276.514014] ? srso_return_thunk+0x5/0x5f [ 276.514072] ? move_linked_works+0x172/0x270 [ 276.514117] ? srso_return_thunk+0x5/0x5f [ 276.514172] ? assign_work+0x196/0x240 [ 276.514231] worker_thread+0x674/0xe70 [ 276.514290] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 276.514343] ? __pfx_worker_thread+0x10/0x10 [ 276.514404] kthread+0x3ab/0x720 [ 276.514456] ? __pfx_kthread+0x10/0x10 [ 276.514519] ? srso_return_thunk+0x5/0x5f [ 276.514577] ? finish_task_switch.isra.0+0x206/0x840 [ 276.514629] ? __pfx_kthread+0x10/0x10 [ 276.514685] ret_from_fork+0x48/0x80 [ 276.514717] ? __pfx_kthread+0x10/0x10 [ 276.514771] ret_from_fork_asm+0x1a/0x30 [ 276.514840] [ 277.744212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.746981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.754215] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.759183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.763948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.769452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.873249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.878164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.881070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.891135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.894922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.897071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.066153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.071252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.073213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.082036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.084159] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.086877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.129278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.131606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.135006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.136537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.139600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.141649] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.144057] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.152984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.170579] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.174174] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.176666] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.178686] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.309851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.320233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.333292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.355622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.376232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.402165] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.555952] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.562042] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.565500] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.595241] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.608133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.618916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.634218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.641164] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.652101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.672347] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.683197] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.686572] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.844194] Bluetooth: hci0: command tx timeout [ 279.973774] Bluetooth: hci1: command tx timeout [ 280.163960] Bluetooth: hci4: command tx timeout [ 280.164478] Bluetooth: hci2: command tx timeout [ 280.229847] Bluetooth: hci3: command tx timeout [ 280.547934] Bluetooth: hci5: command tx timeout [ 280.739882] Bluetooth: hci6: command tx timeout [ 280.803916] Bluetooth: hci7: command tx timeout [ 281.891818] Bluetooth: hci0: command tx timeout [ 282.019823] Bluetooth: hci1: command tx timeout [ 282.211918] Bluetooth: hci4: command tx timeout [ 282.212835] Bluetooth: hci2: command tx timeout [ 282.275812] Bluetooth: hci3: command tx timeout [ 282.596934] Bluetooth: hci5: command tx timeout [ 282.788795] Bluetooth: hci6: command tx timeout [ 282.851877] Bluetooth: hci7: command tx timeout [ 283.939799] Bluetooth: hci0: command tx timeout [ 284.067846] Bluetooth: hci1: command tx timeout [ 284.260875] Bluetooth: hci2: command tx timeout [ 284.260896] Bluetooth: hci4: command tx timeout [ 284.324862] Bluetooth: hci3: command tx timeout [ 284.643805] Bluetooth: hci5: command tx timeout [ 284.836791] Bluetooth: hci6: command tx timeout [ 284.900088] Bluetooth: hci7: command tx timeout [ 285.988852] Bluetooth: hci0: command tx timeout [ 286.116872] Bluetooth: hci1: command tx timeout [ 286.307924] Bluetooth: hci2: command tx timeout [ 286.307942] Bluetooth: hci4: command tx timeout [ 286.371916] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 19:56:44 Registers: info registers vcpu 0 RAX=0000000000053cad RBX=0000000000000000 RCX=ffffffff84a8da17 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1dba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c52 R10=ffff88806ce36293 R11=0000000000000001 R12=ffffffff864006d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8e9be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe4816f000 CR3=000000003c738000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000001f701164100000001db710641 XMM01=000000000000000004c0ac6100000000 XMM02=0000000000000000063d35a7464fbb41 XMM03=000000000000000000000000ffffffff XMM04=0000000040dd7e9273041327ce76760c XMM05=000000000000000048b0dcb88d8397a2 XMM06=00000000000000005439d34fc06ec9be XMM07=0000000000000000cff3cc0fff0f3f0c XMM08=0000000000000000cff3cc0fff0f3f0c XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283d2d5 RDI=ffffffff88693060 RBP=ffffffff88693020 RSP=ffff8880095deca0 R8 =0000000000000000 R9 =ffffed1001d59046 R10=0000000000000037 R11=3064353278302020 R12=0000000000000037 R13=0000000000000010 R14=ffffffff88693020 R15=ffffffff8283d2c0 RIP=ffffffff8283d32d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fec44e8ea08 CR3=00000000132ae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=c14a5e13bf72af9d724b461235b609c5 XMM02=d12871896912de2d00000000000fece8 XMM03=ea899072da79512f00000000000fef60 XMM04=ae3e6870a29c421700000000000ae988 XMM05=a7510455a4735ef90000000000146e10 XMM06=6098c19552daab4900000000001159d0 XMM07=ea899072da79512f00000000000fef60 XMM08=d12871896912de2d00000000000fece8 XMM09=00000000000000000000000000000000 XMM10=00000000000000000020000000200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000