syzkaller login: [ 76.879194] sshd (241) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:32908' (ECDSA) to the list of known hosts. 2025/01/30 21:00:33 fuzzer started 2025/01/30 21:00:33 dialing manager at localhost:46401 [ 78.620492] cgroup: Unknown subsys name 'net' [ 78.764780] cgroup: Unknown subsys name 'cpuset' [ 78.803110] cgroup: Unknown subsys name 'rlimit' 2025/01/30 21:00:53 syscalls: 2217 2025/01/30 21:00:53 code coverage: enabled 2025/01/30 21:00:53 comparison tracing: enabled 2025/01/30 21:00:53 extra coverage: enabled 2025/01/30 21:00:53 setuid sandbox: enabled 2025/01/30 21:00:53 namespace sandbox: enabled 2025/01/30 21:00:53 Android sandbox: enabled 2025/01/30 21:00:53 fault injection: enabled 2025/01/30 21:00:53 leak checking: enabled 2025/01/30 21:00:53 net packet injection: enabled 2025/01/30 21:00:53 net device setup: enabled 2025/01/30 21:00:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/30 21:00:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/30 21:00:53 USB emulation: enabled 2025/01/30 21:00:53 hci packet injection: enabled 2025/01/30 21:00:53 wifi device emulation: enabled 2025/01/30 21:00:53 802.15.4 emulation: enabled 2025/01/30 21:00:53 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/30 21:00:53 fetching corpus: 1, signal 2361/4813 (executing program) 2025/01/30 21:00:53 fetching corpus: 1, signal 2361/6050 (executing program) 2025/01/30 21:00:53 fetching corpus: 1, signal 2361/6106 (executing program) 2025/01/30 21:00:53 fetching corpus: 1, signal 2361/6106 (executing program) 2025/01/30 21:00:57 starting 8 fuzzer processes 21:00:57 executing program 0: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\\)\'\x00', 0xfffffffffffffffb) 21:00:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 21:00:57 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000007100), 0x0) 21:00:57 executing program 3: close(0x3) close(0x4) close(0x5) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(0x3) close(0x4) close(0x5) [ 102.656906] audit: type=1400 audit(1738270857.807:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:00:57 executing program 4: keyctl$describe(0x6, 0x0, 0x0, 0x0) 21:00:57 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0) ppoll(&(0x7f0000001600)=[{r0}], 0x1, 0x0, 0x0, 0x0) 21:00:57 executing program 6: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v3, 0x18, 0x0) lsetxattr$security_capability(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640), &(0x7f0000002680)=@v2, 0x14, 0x0) 21:00:57 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) [ 104.012037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.014183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.016086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.021180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.022990] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.026082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.116164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.121017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.122930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.130937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.136739] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.138667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.214932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.218306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.220376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.224691] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.226640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.240055] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.267073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.269095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.272069] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.280166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.283861] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 104.286393] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.288498] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.295472] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.299384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.301103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.317370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.322223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 104.323910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.333935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 104.334676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.335840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 104.344208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.354182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 104.357283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.357304] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 104.363917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 104.378108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 104.383024] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 104.389976] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.397958] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 104.406009] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 104.413923] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 104.419163] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 104.420544] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 104.426003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.109191] Bluetooth: hci0: command tx timeout [ 106.173051] Bluetooth: hci1: command tx timeout [ 106.301009] Bluetooth: hci2: command tx timeout [ 106.363838] Bluetooth: hci3: command tx timeout [ 106.429011] Bluetooth: hci4: command tx timeout [ 106.491985] Bluetooth: hci7: command tx timeout [ 106.493471] Bluetooth: hci6: command tx timeout [ 106.493806] Bluetooth: hci5: command tx timeout [ 108.155815] Bluetooth: hci0: command tx timeout [ 108.219876] Bluetooth: hci1: command tx timeout [ 108.347780] Bluetooth: hci2: command tx timeout [ 108.411781] Bluetooth: hci3: command tx timeout [ 108.475811] Bluetooth: hci4: command tx timeout [ 108.539912] Bluetooth: hci5: command tx timeout [ 108.540223] Bluetooth: hci6: command tx timeout [ 108.540439] Bluetooth: hci7: command tx timeout [ 110.205743] Bluetooth: hci0: command tx timeout [ 110.269748] Bluetooth: hci1: command tx timeout [ 110.395775] Bluetooth: hci2: command tx timeout [ 110.460837] Bluetooth: hci3: command tx timeout [ 110.526195] Bluetooth: hci4: command tx timeout [ 110.588197] Bluetooth: hci7: command tx timeout [ 110.588967] Bluetooth: hci6: command tx timeout [ 110.589770] Bluetooth: hci5: command tx timeout [ 112.251819] Bluetooth: hci0: command tx timeout [ 112.315796] Bluetooth: hci1: command tx timeout [ 112.443863] Bluetooth: hci2: command tx timeout [ 112.508499] Bluetooth: hci3: command tx timeout [ 112.571767] Bluetooth: hci4: command tx timeout [ 112.637770] Bluetooth: hci7: command tx timeout [ 112.637817] Bluetooth: hci6: command tx timeout [ 112.638192] Bluetooth: hci5: command tx timeout [ 164.246309] syz-executor.4 (284) used greatest stack depth: 23504 bytes left [ 166.733124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.738200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.740944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.749035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.753073] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.755295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.872573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.883892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.891868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.898053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.899900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.909989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.916854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.924821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.927056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.947175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.952225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.963996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.979674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.983602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.993076] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.995386] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.996856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.000442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.011572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.023622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.026600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.036908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.050811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 167.052787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.168264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 167.172184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.178513] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.180048] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 167.183829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.184633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 167.188460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.191370] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.201242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.201516] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 167.209112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.215117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.215108] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 167.220548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 167.231118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.256356] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 167.265417] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.266141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.828792] Bluetooth: hci0: command tx timeout [ 169.020865] Bluetooth: hci1: command tx timeout [ 169.083805] Bluetooth: hci3: command tx timeout [ 169.084405] Bluetooth: hci2: command tx timeout [ 169.149653] Bluetooth: hci4: command tx timeout [ 169.275802] Bluetooth: hci7: command tx timeout [ 169.341298] Bluetooth: hci6: command tx timeout [ 169.404757] Bluetooth: hci5: command tx timeout [ 170.875890] Bluetooth: hci0: command tx timeout [ 171.067812] Bluetooth: hci1: command tx timeout [ 171.131945] Bluetooth: hci3: command tx timeout [ 171.133037] Bluetooth: hci2: command tx timeout [ 171.195807] Bluetooth: hci4: command tx timeout [ 171.324003] Bluetooth: hci7: command tx timeout [ 171.387981] Bluetooth: hci6: command tx timeout [ 171.452257] Bluetooth: hci5: command tx timeout [ 172.923845] Bluetooth: hci0: command tx timeout [ 173.115757] Bluetooth: hci1: command tx timeout [ 173.179839] Bluetooth: hci3: command tx timeout [ 173.180279] Bluetooth: hci2: command tx timeout [ 173.243752] Bluetooth: hci4: command tx timeout [ 173.371776] Bluetooth: hci7: command tx timeout [ 173.436734] Bluetooth: hci6: command tx timeout [ 173.499818] Bluetooth: hci5: command tx timeout [ 174.972782] Bluetooth: hci0: command tx timeout [ 175.164085] Bluetooth: hci1: command tx timeout [ 175.228267] Bluetooth: hci2: command tx timeout [ 175.229642] Bluetooth: hci3: command tx timeout [ 175.292009] Bluetooth: hci4: command tx timeout [ 175.420794] Bluetooth: hci7: command tx timeout [ 175.484543] Bluetooth: hci6: command tx timeout [ 175.547799] Bluetooth: hci5: command tx timeout [ 229.265594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.269601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.273512] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.286206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.292195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.297316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.421500] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.426434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.433134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.436067] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 229.441446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.444105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.446068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.461792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 229.464539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 229.499047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 229.504790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 229.508113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.529088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.554242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.571022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.581350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.591419] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.593920] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.662960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.674129] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.692645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.694549] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.708209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.718807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 229.727075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 229.729273] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 229.731923] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.733935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.738355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.741179] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.741743] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.744884] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.747399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 229.773495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.783328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.809908] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.825365] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 229.830102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 229.835995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.851017] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.853168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.861229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.355805] Bluetooth: hci0: command tx timeout [ 231.484809] Bluetooth: hci1: command tx timeout [ 231.547825] Bluetooth: hci2: command tx timeout [ 231.676911] Bluetooth: hci3: command tx timeout [ 231.867827] Bluetooth: hci5: command tx timeout [ 231.932460] Bluetooth: hci6: command tx timeout [ 231.996777] Bluetooth: hci4: command tx timeout [ 231.997511] Bluetooth: hci7: command tx timeout [ 233.403900] Bluetooth: hci0: command tx timeout [ 233.531904] Bluetooth: hci1: command tx timeout [ 233.595765] Bluetooth: hci2: command tx timeout [ 233.723826] Bluetooth: hci3: command tx timeout [ 233.916095] Bluetooth: hci5: command tx timeout [ 233.979997] Bluetooth: hci6: command tx timeout [ 234.043827] Bluetooth: hci7: command tx timeout [ 234.044287] Bluetooth: hci4: command tx timeout [ 235.452732] Bluetooth: hci0: command tx timeout [ 235.580781] Bluetooth: hci1: command tx timeout [ 235.643720] Bluetooth: hci2: command tx timeout [ 235.772962] Bluetooth: hci3: command tx timeout [ 235.963734] Bluetooth: hci5: command tx timeout [ 236.027817] Bluetooth: hci6: command tx timeout [ 236.091894] Bluetooth: hci4: command tx timeout [ 236.092382] Bluetooth: hci7: command tx timeout [ 237.499783] Bluetooth: hci0: command tx timeout [ 237.627738] Bluetooth: hci1: command tx timeout [ 237.693758] Bluetooth: hci2: command tx timeout [ 237.819963] Bluetooth: hci3: command tx timeout [ 238.012864] Bluetooth: hci5: command tx timeout [ 238.076900] Bluetooth: hci6: command tx timeout [ 238.140943] Bluetooth: hci7: command tx timeout [ 238.141460] Bluetooth: hci4: command tx timeout [ 289.580231] [ 289.580509] ====================================================== [ 289.581143] WARNING: possible circular locking dependency detected [ 289.581774] 6.13.0-next-20250130 #1 Not tainted [ 289.582256] ------------------------------------------------------ [ 289.583683] kworker/u8:0/11 is trying to acquire lock: [ 289.584958] ffffffff86219b68 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 289.587101] [ 289.587101] but task is already holding lock: [ 289.588891] ffff88803aa88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 289.590946] [ 289.590946] which lock already depends on the new lock. [ 289.590946] [ 289.592908] [ 289.592908] the existing dependency chain (in reverse order) is: [ 289.593651] [ 289.593651] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 289.594339] __mutex_lock+0x13d/0xb50 [ 289.594832] wiphy_register+0x1b2e/0x25d0 [ 289.595366] ieee80211_register_hw+0x23a4/0x3d60 [ 289.595936] mac80211_hwsim_new_radio+0x2759/0x4d60 [ 289.596533] init_mac80211_hwsim+0x389/0x870 [ 289.597087] do_one_initcall+0xf9/0x640 [ 289.597600] kernel_init_freeable+0x53d/0x7a0 [ 289.598158] kernel_init+0x1e/0x2d0 [ 289.598610] ret_from_fork+0x48/0x80 [ 289.599069] ret_from_fork_asm+0x1a/0x30 [ 289.599604] [ 289.599604] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 289.600254] __lock_acquire+0x29fd/0x4580 [ 289.600783] lock_acquire+0x19b/0x520 [ 289.601266] __mutex_lock+0x13d/0xb50 [ 289.601761] unregister_netdevice_many_notify+0x1612/0x1c80 [ 289.602417] unregister_netdevice_queue+0x224/0x2e0 [ 289.603008] _cfg80211_unregister_wdev+0x57b/0x700 [ 289.603617] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 289.604211] ieee80211_unregister_hw+0x55/0x3a0 [ 289.604767] hwsim_exit_net+0x3a0/0x730 [ 289.605263] ops_exit_list+0xb3/0x180 [ 289.605737] cleanup_net+0x546/0xad0 [ 289.606217] process_one_work+0x8ee/0x1a10 [ 289.606743] worker_thread+0x674/0xe70 [ 289.607232] kthread+0x3ab/0x720 [ 289.607701] ret_from_fork+0x48/0x80 [ 289.608157] ret_from_fork_asm+0x1a/0x30 [ 289.608669] [ 289.608669] other info that might help us debug this: [ 289.608669] [ 289.609426] Possible unsafe locking scenario: [ 289.609426] [ 289.609997] CPU0 CPU1 [ 289.610457] ---- ---- [ 289.610913] lock(&rdev->wiphy.mtx); [ 289.611338] lock(rtnl_mutex); [ 289.611928] lock(&rdev->wiphy.mtx); [ 289.612565] lock(rtnl_mutex); [ 289.612933] [ 289.612933] *** DEADLOCK *** [ 289.612933] [ 289.613505] 4 locks held by kworker/u8:0/11: [ 289.613948] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 289.614991] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 289.616008] #2: ffffffff8620db90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 289.616940] #3: ffff88803aa88768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 289.618085] [ 289.618085] stack backtrace: [ 289.618517] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-next-20250130 #1 [ 289.618565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 289.618593] Workqueue: netns cleanup_net [ 289.618644] Call Trace: [ 289.618658] [ 289.618673] dump_stack_lvl+0xca/0x120 [ 289.618746] print_circular_bug+0x47b/0x750 [ 289.618806] check_noncircular+0x2e9/0x3c0 [ 289.618860] ? __pfx_check_noncircular+0x10/0x10 [ 289.618915] ? hlock_class+0x4e/0x130 [ 289.618953] ? srso_return_thunk+0x5/0x5f [ 289.619023] ? mark_lock+0xac/0xed0 [ 289.619080] ? lockdep_lock+0xba/0x1b0 [ 289.619153] ? __pfx_lockdep_lock+0x10/0x10 [ 289.619233] __lock_acquire+0x29fd/0x4580 [ 289.619315] ? __pfx___lock_acquire+0x10/0x10 [ 289.619370] ? lock_release+0x20f/0x6f0 [ 289.619427] ? __pfx_lock_release+0x10/0x10 [ 289.619482] ? srso_return_thunk+0x5/0x5f [ 289.619558] lock_acquire+0x19b/0x520 [ 289.619613] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 289.619676] ? __pfx_lock_acquire+0x10/0x10 [ 289.619733] ? __pfx_lock_release+0x10/0x10 [ 289.619788] ? __pfx_try_to_wake_up+0x10/0x10 [ 289.619843] ? srso_return_thunk+0x5/0x5f [ 289.619913] ? lock_is_held_type+0x9e/0x120 [ 289.619983] ? srso_return_thunk+0x5/0x5f [ 289.620058] __mutex_lock+0x13d/0xb50 [ 289.620124] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 289.620181] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 289.620239] ? srso_return_thunk+0x5/0x5f [ 289.620309] ? synchronize_rcu_expedited+0x38a/0x420 [ 289.620364] ? __pfx___mutex_lock+0x10/0x10 [ 289.620433] ? srso_return_thunk+0x5/0x5f [ 289.620506] ? srso_return_thunk+0x5/0x5f [ 289.620575] ? kasan_quarantine_put+0x84/0x1e0 [ 289.620653] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 289.620698] ? srso_return_thunk+0x5/0x5f [ 289.620773] unregister_netdevice_many_notify+0x1612/0x1c80 [ 289.620831] ? __virt_addr_valid+0x2e8/0x5d0 [ 289.620899] ? __pfx_lock_release+0x10/0x10 [ 289.620956] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 289.621014] ? find_held_lock+0x2c/0x110 [ 289.621089] ? srso_return_thunk+0x5/0x5f [ 289.621161] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 289.621236] ? srso_return_thunk+0x5/0x5f [ 289.621306] ? lock_release+0x20f/0x6f0 [ 289.621362] ? __pfx_lock_release+0x10/0x10 [ 289.621418] ? srso_return_thunk+0x5/0x5f [ 289.621488] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 289.621548] ? srso_return_thunk+0x5/0x5f [ 289.621626] unregister_netdevice_queue+0x224/0x2e0 [ 289.621680] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 289.621735] ? up_write+0x195/0x520 [ 289.621806] _cfg80211_unregister_wdev+0x57b/0x700 [ 289.621873] ? srso_return_thunk+0x5/0x5f [ 289.621948] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 289.621996] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 289.622044] ? srso_return_thunk+0x5/0x5f [ 289.622114] ? srso_return_thunk+0x5/0x5f [ 289.622184] ? synchronize_rcu+0x1ff/0x260 [ 289.622238] ieee80211_unregister_hw+0x55/0x3a0 [ 289.622296] hwsim_exit_net+0x3a0/0x730 [ 289.622349] ? __pfx_hwsim_exit_net+0x10/0x10 [ 289.622400] ? srso_return_thunk+0x5/0x5f [ 289.622470] ? netdev_run_todo+0x788/0x1040 [ 289.622532] ? __pfx_hwsim_exit_net+0x10/0x10 [ 289.622586] ops_exit_list+0xb3/0x180 [ 289.622640] cleanup_net+0x546/0xad0 [ 289.622696] ? __pfx_cleanup_net+0x10/0x10 [ 289.622765] process_one_work+0x8ee/0x1a10 [ 289.622850] ? __pfx_lock_acquire+0x10/0x10 [ 289.622907] ? __pfx_process_one_work+0x10/0x10 [ 289.622982] ? srso_return_thunk+0x5/0x5f [ 289.623052] ? move_linked_works+0x172/0x270 [ 289.623109] ? srso_return_thunk+0x5/0x5f [ 289.623179] ? assign_work+0x196/0x240 [ 289.623262] worker_thread+0x674/0xe70 [ 289.623338] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 289.623405] ? __pfx_worker_thread+0x10/0x10 [ 289.623482] kthread+0x3ab/0x720 [ 289.623549] ? __pfx_kthread+0x10/0x10 [ 289.623616] ? srso_return_thunk+0x5/0x5f [ 289.623686] ? finish_task_switch.isra.0+0x206/0x840 [ 289.623750] ? __pfx_kthread+0x10/0x10 [ 289.623820] ret_from_fork+0x48/0x80 [ 289.623860] ? __pfx_kthread+0x10/0x10 [ 289.623928] ret_from_fork_asm+0x1a/0x30 [ 289.624015] [ 291.271248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.273401] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.279846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.284619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.287909] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.290952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.335808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.341479] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.343304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.347343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.350426] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.352306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.464278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.470912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.477277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.485503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.487942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.491482] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.496444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.498961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.501528] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.503096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.504640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.506531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.530274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.532454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.537603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.553009] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.598929] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.600871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 291.607838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.611884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.620534] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 291.628911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.642297] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.644006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 291.645758] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.649845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.651588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.655994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.673038] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 291.676182] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.690065] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.692421] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 291.694108] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 291.695542] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.697078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 291.700640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.308738] Bluetooth: hci0: command tx timeout [ 293.371800] Bluetooth: hci1: command tx timeout [ 293.563953] Bluetooth: hci2: command tx timeout [ 293.565191] Bluetooth: hci3: command tx timeout [ 293.693677] Bluetooth: hci4: command tx timeout [ 293.819781] Bluetooth: hci6: command tx timeout [ 293.820560] Bluetooth: hci5: command tx timeout [ 293.821352] Bluetooth: hci7: command tx timeout [ 295.355768] Bluetooth: hci0: command tx timeout [ 295.420325] Bluetooth: hci1: command tx timeout [ 295.611709] Bluetooth: hci2: command tx timeout [ 295.612196] Bluetooth: hci3: command tx timeout [ 295.739700] Bluetooth: hci4: command tx timeout [ 295.868759] Bluetooth: hci5: command tx timeout [ 295.869215] Bluetooth: hci7: command tx timeout [ 295.869594] Bluetooth: hci6: command tx timeout [ 297.404009] Bluetooth: hci0: command tx timeout [ 297.467718] Bluetooth: hci1: command tx timeout [ 297.659807] Bluetooth: hci2: command tx timeout [ 297.660300] Bluetooth: hci3: command tx timeout [ 297.787754] Bluetooth: hci4: command tx timeout [ 297.915753] Bluetooth: hci6: command tx timeout [ 297.916233] Bluetooth: hci7: command tx timeout [ 297.916697] Bluetooth: hci5: command tx timeout [ 299.452117] Bluetooth: hci0: command tx timeout [ 299.517790] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 21:04:04 Registers: info registers vcpu 0 RAX=000000000004d59d RBX=0000000000000000 RCX=ffffffff84a8da17 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b1dba RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c52 R10=ffff88806ce36293 R11=0000000000000001 R12=ffffffff864006d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a8e9be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005558aedb6600 CR3=0000000013510000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2034303a34303a3132203033206e614a XMM01=617420646570706f7453203a5d315b64 XMM02=6c6c694b20465220657661532f64616f XMM03=65747379732072656c6c616b7a797320 XMM04=2037353a30303a3132203033206e614a XMM05=65636f72703d7373616c63742030733a XMM06=733a755f6d65747379733d747865746e XMM07=725f6d65747379733a755f6d65747379 XMM08=7475636578652d7a7973223d6d6d6f63 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283d2d5 RDI=ffffffff88693060 RBP=ffffffff88693020 RSP=ffff8880095ded20 R8 =0000000000000000 R9 =ffffed1001d4e046 R10=0000000000000065 R11=6f6c206863696877 R12=0000000000000065 R13=0000000000000010 R14=ffffffff88693020 R15=ffffffff8283d2c0 RIP=ffffffff8283d32d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe4c87faa08 CR3=00000000135ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=d08b13567e980ca32144600ffe944f71 XMM02=00000000000ff590a3797342f9eb3dd9 XMM03=0000000000133d7068a8aee3740b9fad XMM04=78f56d363a797da700000000000ae988 XMM05=92131ea6c061e6d60000000000147a38 XMM06=9f165a4fe6c971ad0000000000137ec0 XMM07=711fbe8126c5d3440000000000137db8 XMM08=68a8aee3740b9fad00000000000ff6c0 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000