Warning: Permanently added '[localhost]:24220' (ECDSA) to the list of known hosts. 2025/01/18 18:43:54 fuzzer started 2025/01/18 18:43:54 dialing manager at localhost:44245 syzkaller login: [ 69.347859] cgroup: Unknown subsys name 'net' [ 69.443973] cgroup: Unknown subsys name 'cpuset' [ 69.477653] cgroup: Unknown subsys name 'rlimit' [ 73.987649] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 18:44:10 syscalls: 2217 2025/01/18 18:44:10 code coverage: enabled 2025/01/18 18:44:10 comparison tracing: enabled 2025/01/18 18:44:10 extra coverage: enabled 2025/01/18 18:44:10 setuid sandbox: enabled 2025/01/18 18:44:10 namespace sandbox: enabled 2025/01/18 18:44:10 Android sandbox: enabled 2025/01/18 18:44:10 fault injection: enabled 2025/01/18 18:44:10 leak checking: enabled 2025/01/18 18:44:10 net packet injection: enabled 2025/01/18 18:44:10 net device setup: enabled 2025/01/18 18:44:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 18:44:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 18:44:10 USB emulation: enabled 2025/01/18 18:44:10 hci packet injection: enabled 2025/01/18 18:44:10 wifi device emulation: enabled 2025/01/18 18:44:10 802.15.4 emulation: enabled 2025/01/18 18:44:10 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 18:44:10 fetching corpus: 50, signal 24140/27255 (executing program) 2025/01/18 18:44:10 fetching corpus: 100, signal 35698/39700 (executing program) 2025/01/18 18:44:10 fetching corpus: 150, signal 43816/48487 (executing program) 2025/01/18 18:44:10 fetching corpus: 200, signal 49161/54494 (executing program) 2025/01/18 18:44:10 fetching corpus: 250, signal 54931/60721 (executing program) 2025/01/18 18:44:11 fetching corpus: 300, signal 59405/65595 (executing program) 2025/01/18 18:44:11 fetching corpus: 350, signal 64052/70459 (executing program) 2025/01/18 18:44:11 fetching corpus: 400, signal 66403/73224 (executing program) 2025/01/18 18:44:11 fetching corpus: 450, signal 69961/76885 (executing program) 2025/01/18 18:44:11 fetching corpus: 500, signal 73123/80061 (executing program) 2025/01/18 18:44:12 fetching corpus: 550, signal 76576/83330 (executing program) 2025/01/18 18:44:12 fetching corpus: 600, signal 79733/86275 (executing program) 2025/01/18 18:44:12 fetching corpus: 650, signal 80939/87677 (executing program) 2025/01/18 18:44:12 fetching corpus: 700, signal 82697/89450 (executing program) 2025/01/18 18:44:12 fetching corpus: 750, signal 84526/91170 (executing program) 2025/01/18 18:44:12 fetching corpus: 800, signal 86286/92795 (executing program) 2025/01/18 18:44:12 fetching corpus: 850, signal 87810/94177 (executing program) 2025/01/18 18:44:13 fetching corpus: 900, signal 91116/96683 (executing program) 2025/01/18 18:44:13 fetching corpus: 950, signal 92294/97702 (executing program) 2025/01/18 18:44:13 fetching corpus: 1000, signal 94372/99249 (executing program) 2025/01/18 18:44:13 fetching corpus: 1050, signal 98592/101920 (executing program) 2025/01/18 18:44:13 fetching corpus: 1100, signal 99576/102633 (executing program) 2025/01/18 18:44:13 fetching corpus: 1150, signal 101923/104057 (executing program) 2025/01/18 18:44:13 fetching corpus: 1200, signal 103268/104843 (executing program) 2025/01/18 18:44:14 fetching corpus: 1250, signal 104372/105478 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/105791 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/105823 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/105854 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/105888 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/105912 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/105957 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/105990 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106018 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106062 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106088 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106125 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106161 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106186 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106229 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106255 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106287 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106320 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106351 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106381 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106420 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106456 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106492 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106523 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106557 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106592 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106615 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106653 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 18:44:14 fetching corpus: 1266, signal 104934/106667 (executing program) 2025/01/18 18:44:18 starting 8 fuzzer processes 18:44:18 executing program 0: iopl(0x20) 18:44:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)) 18:44:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev}}) 18:44:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x38, r1, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 18:44:18 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x17, 0x0, 0x0) [ 93.128842] audit: type=1400 audit(1737225858.659:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:44:18 executing program 5: memfd_create(&(0x7f0000000040)='C\x8b\t\xbe\xa5$\xba\\\xf4b4D\x8d\xa6\xf5r\xe7\xadz\n;\xfc|,\x15\xb8a\xa5\n{\r.\xad\x01du\x04?\x87\x12L`4\xbc\x88T\xdfC\xa6gp\x06r\f\xdb\xedq\x99\xeb\xf7\n\x83\xccQ\v\xcd\xa4`m\xea\xa4\f\xb4b\xa0~?9\b\xe5\x17\xca\xdf\n\b\xc7R\x9d-g>\xa0:\x8c<\x9a24j\x9e&.\xef\x19O\x95Q\xd0l\xc3\xabDc\x8c\xc3\xbd`Q\xf4M\xdc\xdf\x83|6{-!%\xec\xaa\xc3\xed:\xbfR\xb0\xc2\xf7|m,\x8d\xa9/\xabp\xe0M\a\xe4\x1ak\xe0\x86w[\x05\t\xe31\x15\xd4\x8d(N\x15zk\x06\x93\x82\x9aS3\xfaE\xab>2\xa8l8\x17\nd\xa5\x12r2\x95w\x80\x95!(k\x8b\x92E\xfd\x9fHo\xd5\xfb\xfbP\xd2\xa0g(&\'\\\xc8b\xf3\xbd\x02\xacu\xbb\xf0\xd6\xbe\xaa\x86J\xferD\xa1P|\n\x02J\t.\xb0f\x1e\xc1\xf1\xea\x1f\xbb\xa2INAX_\xc46v\xc6', 0x0) 18:44:18 executing program 6: unshare(0x28000200) unshare(0x20020000) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8ac833, 0x0) 18:44:18 executing program 7: migrate_pages(0x0, 0x2, &(0x7f00000017c0)=0x3, &(0x7f0000001800)=0x100000001) [ 94.491513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.495836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.498428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.501860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.507108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.510675] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.512885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.515739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.520950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.531316] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.535074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.538236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.544164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.546934] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.556277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.559721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.563163] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.566589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.626885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.638652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.639210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.654867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.655212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.663596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.669647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.671341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.673787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.679084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.683051] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.683834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.684564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.684926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.685843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.688890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.706660] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.709826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.772659] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.799999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.802009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.818710] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.818934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.841571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.846468] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.857614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.857977] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.859732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.864304] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.876051] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.562902] Bluetooth: hci1: command tx timeout [ 96.626526] Bluetooth: hci0: command tx timeout [ 96.627598] Bluetooth: hci2: command tx timeout [ 96.756594] Bluetooth: hci5: command tx timeout [ 96.757178] Bluetooth: hci4: command tx timeout [ 96.758202] Bluetooth: hci3: command tx timeout [ 96.946545] Bluetooth: hci7: command tx timeout [ 97.018474] Bluetooth: hci6: command tx timeout [ 98.611409] Bluetooth: hci1: command tx timeout [ 98.675597] Bluetooth: hci2: command tx timeout [ 98.675754] Bluetooth: hci0: command tx timeout [ 98.803554] Bluetooth: hci4: command tx timeout [ 98.803637] Bluetooth: hci5: command tx timeout [ 98.803727] Bluetooth: hci3: command tx timeout [ 98.995498] Bluetooth: hci7: command tx timeout [ 99.058463] Bluetooth: hci6: command tx timeout [ 100.658920] Bluetooth: hci1: command tx timeout [ 100.722603] Bluetooth: hci2: command tx timeout [ 100.722681] Bluetooth: hci0: command tx timeout [ 100.850729] Bluetooth: hci3: command tx timeout [ 100.852029] Bluetooth: hci5: command tx timeout [ 100.852039] Bluetooth: hci4: command tx timeout [ 101.043799] Bluetooth: hci7: command tx timeout [ 101.106563] Bluetooth: hci6: command tx timeout [ 102.706452] Bluetooth: hci1: command tx timeout [ 102.770582] Bluetooth: hci2: command tx timeout [ 102.771460] Bluetooth: hci0: command tx timeout [ 102.898458] Bluetooth: hci4: command tx timeout [ 102.898568] Bluetooth: hci3: command tx timeout [ 102.898658] Bluetooth: hci5: command tx timeout [ 103.090471] Bluetooth: hci7: command tx timeout [ 103.154444] Bluetooth: hci6: command tx timeout [ 157.244219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.247721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.250477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.256717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.261632] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.263903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.438782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.441719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.443753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.449485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.455563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.457561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.564071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.579811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.587783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.607759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.611770] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.617788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.624072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.632153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.638155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.642618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.646456] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.650844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.685282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.693534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.720926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.726215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.727406] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.731120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.732224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.736149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.745970] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.749548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.749566] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.758757] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.765000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.765184] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.769063] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.774677] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.776602] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.783602] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.784149] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.787694] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.790511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.796045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.822746] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.827810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.347489] Bluetooth: hci0: command tx timeout [ 159.475457] Bluetooth: hci1: command tx timeout [ 159.796410] Bluetooth: hci3: command tx timeout [ 159.797249] Bluetooth: hci4: command tx timeout [ 159.859461] Bluetooth: hci5: command tx timeout [ 159.859759] Bluetooth: hci6: command tx timeout [ 159.859927] Bluetooth: hci2: command tx timeout [ 159.922438] Bluetooth: hci7: command tx timeout [ 161.395663] Bluetooth: hci0: command tx timeout [ 161.524517] Bluetooth: hci1: command tx timeout [ 161.843643] Bluetooth: hci3: command tx timeout [ 161.844722] Bluetooth: hci4: command tx timeout [ 161.906514] Bluetooth: hci2: command tx timeout [ 161.906602] Bluetooth: hci6: command tx timeout [ 161.906696] Bluetooth: hci5: command tx timeout [ 161.972399] Bluetooth: hci7: command tx timeout [ 163.443395] Bluetooth: hci0: command tx timeout [ 163.571476] Bluetooth: hci1: command tx timeout [ 163.891559] Bluetooth: hci3: command tx timeout [ 163.892206] Bluetooth: hci4: command tx timeout [ 163.954451] Bluetooth: hci5: command tx timeout [ 163.954531] Bluetooth: hci6: command tx timeout [ 163.954611] Bluetooth: hci2: command tx timeout [ 164.021378] Bluetooth: hci7: command tx timeout [ 165.491494] Bluetooth: hci0: command tx timeout [ 165.618423] Bluetooth: hci1: command tx timeout [ 165.938427] Bluetooth: hci4: command tx timeout [ 165.938519] Bluetooth: hci3: command tx timeout [ 166.004607] Bluetooth: hci2: command tx timeout [ 166.004923] Bluetooth: hci6: command tx timeout [ 166.005007] Bluetooth: hci5: command tx timeout [ 166.067431] Bluetooth: hci7: command tx timeout [ 215.794826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.794944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.997591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.997668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.144096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.144171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.324044] [ 217.324297] ====================================================== [ 217.324896] WARNING: possible circular locking dependency detected [ 217.325498] 6.13.0-rc7-next-20250117 #1 Not tainted [ 217.325990] ------------------------------------------------------ [ 217.327366] kworker/u8:1/67 is trying to acquire lock: [ 217.328291] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.329766] [ 217.329766] but task is already holding lock: [ 217.330652] ffff88803a670768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.332119] [ 217.332119] which lock already depends on the new lock. [ 217.332119] [ 217.333296] [ 217.333296] the existing dependency chain (in reverse order) is: [ 217.334754] [ 217.334754] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 217.335791] __mutex_lock+0x13d/0xb50 [ 217.336518] wiphy_register+0x1b2e/0x25d0 [ 217.337314] ieee80211_register_hw+0x23a4/0x3d60 [ 217.338121] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 217.339212] init_mac80211_hwsim+0x389/0x870 [ 217.339746] do_one_initcall+0xf9/0x640 [ 217.340239] kernel_init_freeable+0x53d/0x7a0 [ 217.340783] kernel_init+0x1e/0x2d0 [ 217.341306] ret_from_fork+0x48/0x80 [ 217.341833] ret_from_fork_asm+0x1a/0x30 [ 217.342445] [ 217.342445] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 217.343150] __lock_acquire+0x29fd/0x4580 [ 217.343717] lock_acquire+0x19b/0x520 [ 217.344173] __mutex_lock+0x13d/0xb50 [ 217.344630] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.345257] unregister_netdevice_queue+0x224/0x2e0 [ 217.345805] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.346374] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.346928] ieee80211_unregister_hw+0x55/0x3a0 [ 217.347466] hwsim_exit_net+0x3a0/0x730 [ 217.347941] ops_exit_list+0xb3/0x180 [ 217.348391] cleanup_net+0x546/0xad0 [ 217.348833] process_one_work+0x8ee/0x1a10 [ 217.349342] worker_thread+0x674/0xe70 [ 217.349819] kthread+0x3ab/0x720 [ 217.350248] ret_from_fork+0x48/0x80 [ 217.350678] ret_from_fork_asm+0x1a/0x30 [ 217.351176] [ 217.351176] other info that might help us debug this: [ 217.351176] [ 217.351937] Possible unsafe locking scenario: [ 217.351937] [ 217.352517] CPU0 CPU1 [ 217.352967] ---- ---- [ 217.353428] lock(&rdev->wiphy.mtx); [ 217.353833] lock(rtnl_mutex); [ 217.354420] lock(&rdev->wiphy.mtx); [ 217.355050] lock(rtnl_mutex); [ 217.355425] [ 217.355425] *** DEADLOCK *** [ 217.355425] [ 217.356002] 4 locks held by kworker/u8:1/67: [ 217.356446] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 217.357466] #1: ffff88800f38fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 217.358446] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 217.359365] #3: ffff88803a670768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.360401] [ 217.360401] stack backtrace: [ 217.360835] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 217.361681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 217.362465] Workqueue: netns cleanup_net [ 217.362887] Call Trace: [ 217.363158] [ 217.363390] dump_stack_lvl+0xca/0x120 [ 217.363817] print_circular_bug+0x47b/0x750 [ 217.364307] check_noncircular+0x2e9/0x3c0 [ 217.364748] ? srso_return_thunk+0x5/0x5f [ 217.365191] ? __pfx_check_noncircular+0x10/0x10 [ 217.365663] ? hlock_class+0x4e/0x130 [ 217.366045] ? mark_lock+0xac/0xed0 [ 217.366425] ? srso_return_thunk+0x5/0x5f [ 217.366861] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 217.367330] ? lockdep_lock+0xba/0x1b0 [ 217.367751] ? __pfx_lockdep_lock+0x10/0x10 [ 217.368223] __lock_acquire+0x29fd/0x4580 [ 217.368656] ? __pfx___lock_acquire+0x10/0x10 [ 217.369131] ? lock_release+0x20f/0x6f0 [ 217.369613] ? __pfx_lock_release+0x10/0x10 [ 217.370059] lock_acquire+0x19b/0x520 [ 217.370459] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.371038] ? __pfx_lock_acquire+0x10/0x10 [ 217.371496] ? srso_return_thunk+0x5/0x5f [ 217.371940] ? lock_release+0x20f/0x6f0 [ 217.372350] ? srso_return_thunk+0x5/0x5f [ 217.372790] ? lock_is_held_type+0x9e/0x120 [ 217.373254] ? srso_return_thunk+0x5/0x5f [ 217.373684] __mutex_lock+0x13d/0xb50 [ 217.374081] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.374655] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.375269] ? srso_return_thunk+0x5/0x5f [ 217.375812] ? synchronize_rcu_expedited+0x38a/0x420 [ 217.376442] ? __pfx___mutex_lock+0x10/0x10 [ 217.376996] ? __pfx_autoremove_wake_function+0x10/0x10 [ 217.377672] ? srso_return_thunk+0x5/0x5f [ 217.378217] ? kasan_quarantine_put+0x84/0x1e0 [ 217.378813] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 217.379359] ? srso_return_thunk+0x5/0x5f [ 217.379864] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.380487] ? __virt_addr_valid+0x2e8/0x5d0 [ 217.380993] ? __pfx_lock_release+0x10/0x10 [ 217.381508] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 217.382178] ? find_held_lock+0x2c/0x110 [ 217.382650] ? srso_return_thunk+0x5/0x5f [ 217.383095] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 217.383616] ? srso_return_thunk+0x5/0x5f [ 217.384052] ? lock_release+0x20f/0x6f0 [ 217.384478] ? __pfx_lock_release+0x10/0x10 [ 217.384915] ? srso_return_thunk+0x5/0x5f [ 217.385352] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.385878] ? srso_return_thunk+0x5/0x5f [ 217.386331] unregister_netdevice_queue+0x224/0x2e0 [ 217.386835] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 217.387387] ? up_write+0x195/0x520 [ 217.387803] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.388308] ? srso_return_thunk+0x5/0x5f [ 217.388747] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.389252] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 217.389796] ? srso_return_thunk+0x5/0x5f [ 217.390241] ? srso_return_thunk+0x5/0x5f [ 217.390679] ? synchronize_rcu+0x1ff/0x260 [ 217.391111] ieee80211_unregister_hw+0x55/0x3a0 [ 217.391589] hwsim_exit_net+0x3a0/0x730 [ 217.392009] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.392471] ? srso_return_thunk+0x5/0x5f [ 217.392904] ? netdev_run_todo+0x788/0x1040 [ 217.393347] ? srso_return_thunk+0x5/0x5f [ 217.393787] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.394245] ops_exit_list+0xb3/0x180 [ 217.394641] cleanup_net+0x546/0xad0 [ 217.395026] ? __pfx_cleanup_net+0x10/0x10 [ 217.395475] process_one_work+0x8ee/0x1a10 [ 217.395943] ? __pfx_lock_acquire+0x10/0x10 [ 217.396396] ? __pfx_process_one_work+0x10/0x10 [ 217.396879] ? srso_return_thunk+0x5/0x5f [ 217.397322] ? move_linked_works+0x172/0x270 [ 217.397771] ? srso_return_thunk+0x5/0x5f [ 217.398210] ? assign_work+0x196/0x240 [ 217.398630] worker_thread+0x674/0xe70 [ 217.399047] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.399587] ? srso_return_thunk+0x5/0x5f [ 217.400034] ? __pfx_worker_thread+0x10/0x10 [ 217.400516] kthread+0x3ab/0x720 [ 217.400884] ? __pfx_kthread+0x10/0x10 [ 217.401299] ? srso_return_thunk+0x5/0x5f [ 217.401734] ? finish_task_switch.isra.0+0x206/0x840 [ 217.402261] ? __pfx_kthread+0x10/0x10 [ 217.402674] ret_from_fork+0x48/0x80 [ 217.403052] ? __pfx_kthread+0x10/0x10 [ 217.403472] ret_from_fork_asm+0x1a/0x30 [ 217.403960] [ 219.004935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.007029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.013719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.018090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.037620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.039934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.130845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.134792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.137593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.141112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.145246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.147956] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.330179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.333668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.337541] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.341429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.347099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.348970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.456904] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.462048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.466676] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.469767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.472641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.475614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.491776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.493937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.500168] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.500433] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.506923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.507144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.532242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.538619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.540237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.554661] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.564994] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.570550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.575769] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.577877] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.586003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.593974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.598466] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.605885] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.607774] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.616461] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.629861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.638570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.646576] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.648433] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.106422] Bluetooth: hci0: command tx timeout [ 221.170913] Bluetooth: hci1: command tx timeout [ 221.362536] Bluetooth: hci2: command tx timeout [ 221.556403] Bluetooth: hci4: command tx timeout [ 221.556492] Bluetooth: hci3: command tx timeout [ 221.682488] Bluetooth: hci5: command tx timeout [ 221.746411] Bluetooth: hci7: command tx timeout [ 221.746459] Bluetooth: hci6: command tx timeout [ 223.154503] Bluetooth: hci0: command tx timeout [ 223.218409] Bluetooth: hci1: command tx timeout [ 223.410376] Bluetooth: hci2: command tx timeout [ 223.603381] Bluetooth: hci3: command tx timeout [ 223.603457] Bluetooth: hci4: command tx timeout [ 223.730493] Bluetooth: hci5: command tx timeout [ 223.794526] Bluetooth: hci7: command tx timeout [ 223.794555] Bluetooth: hci6: command tx timeout [ 225.203388] Bluetooth: hci0: command tx timeout [ 225.266414] Bluetooth: hci1: command tx timeout [ 225.458501] Bluetooth: hci2: command tx timeout [ 225.651300] Bluetooth: hci4: command tx timeout [ 225.651552] Bluetooth: hci3: command tx timeout [ 225.778454] Bluetooth: hci5: command tx timeout [ 225.842464] Bluetooth: hci7: command tx timeout [ 225.842756] Bluetooth: hci6: command tx timeout [ 227.250409] Bluetooth: hci0: command tx timeout [ 227.314359] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 18:46:23 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283cd30 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800f38ebc0 R8 =0000000000000001 R9 =ffffed1001e71d67 R10=0000000000000001 R11=7369786520656874 R12=ffffffff886930b0 R13=ffff88800f38eeb8 R14=ffffffff88693320 R15=0000000000000000 RIP=ffffffff8283cd85 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6c9831d5d0 CR3=000000000c32c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=bc38323120a46fbc45483331408ca260 XMM02=d12871896912de2d00000000000fe678 XMM03=f9980df3bdc2dbad00000000001326c8 XMM04=71cd8a06fdf39a0e00000000000ae988 XMM05=3cc027b654ebc5060000000000140ad0 XMM06=9f165a4fe6c971ad0000000000137940 XMM07=711fbe8126c5d3440000000000137838 XMM08=68a8aee3740b9fad00000000000fe798 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000202000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000246 RCX=1ffffffff0c805ee RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff84aae20c RBP=ffff88800e46a5c8 RSP=ffff88800b82fdf0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff864021d7 R11=0000000000000532 R12=ffff88800b820000 R13=ffff888013a03ba0 R14=0000000000000246 R15=ffff888013a03ba0 RIP=ffffffff84aae214 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005625656c73e0 CR3=000000000c3ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c0001358c0000000c00008f1d0 XMM02=000000c0001323f0000000c0001323c0 XMM03=000000c000138000000000c000132420 XMM04=000000c00008f200000000c000132510 XMM05=000000c000132570000000c000132540 XMM06=000000c0001325d0000000c0001325a0 XMM07=000000c000138dc0000000c000132600 XMM08=000000c000132780000000c000132750 XMM09=000000c0001327e0000000c0001327b0 XMM10=000000c000132840000000c000132810 XMM11=000000c0001328a0000000c000132870 XMM12=000000c00008f260000000c0001328d0 XMM13=000000c000132930000000c000132900 XMM14=000000c000132990000000c000132960 XMM15=000000c00013a9a0000000c0001329c0