Warning: Permanently added '[localhost]:30371' (ECDSA) to the list of known hosts.
2025/01/18 23:39:18 fuzzer started
2025/01/18 23:39:19 dialing manager at localhost:44245
syzkaller login: [   69.624091] cgroup: Unknown subsys name 'net'
[   69.729164] cgroup: Unknown subsys name 'cpuset'
[   69.750044] cgroup: Unknown subsys name 'rlimit'
[   75.730788] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/18 23:39:35 syscalls: 2217
2025/01/18 23:39:35 code coverage: enabled
2025/01/18 23:39:35 comparison tracing: enabled
2025/01/18 23:39:35 extra coverage: enabled
2025/01/18 23:39:35 setuid sandbox: enabled
2025/01/18 23:39:35 namespace sandbox: enabled
2025/01/18 23:39:35 Android sandbox: enabled
2025/01/18 23:39:35 fault injection: enabled
2025/01/18 23:39:35 leak checking: enabled
2025/01/18 23:39:35 net packet injection: enabled
2025/01/18 23:39:35 net device setup: enabled
2025/01/18 23:39:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/18 23:39:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/18 23:39:35 USB emulation: enabled
2025/01/18 23:39:35 hci packet injection: enabled
2025/01/18 23:39:35 wifi device emulation: enabled
2025/01/18 23:39:35 802.15.4 emulation: enabled
2025/01/18 23:39:35 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/18 23:39:35 fetching corpus: 50, signal 25537/28559 (executing program)
2025/01/18 23:39:35 fetching corpus: 100, signal 36588/40528 (executing program)
2025/01/18 23:39:36 fetching corpus: 150, signal 43810/48474 (executing program)
2025/01/18 23:39:36 fetching corpus: 200, signal 50658/55847 (executing program)
2025/01/18 23:39:36 fetching corpus: 250, signal 54431/60240 (executing program)
2025/01/18 23:39:36 fetching corpus: 300, signal 58528/64833 (executing program)
2025/01/18 23:39:36 fetching corpus: 350, signal 63560/70032 (executing program)
2025/01/18 23:39:36 fetching corpus: 400, signal 67167/73882 (executing program)
2025/01/18 23:39:37 fetching corpus: 450, signal 70471/77298 (executing program)
2025/01/18 23:39:37 fetching corpus: 500, signal 72897/79861 (executing program)
2025/01/18 23:39:37 fetching corpus: 550, signal 75455/82528 (executing program)
2025/01/18 23:39:37 fetching corpus: 600, signal 77561/84768 (executing program)
2025/01/18 23:39:37 fetching corpus: 650, signal 79498/86727 (executing program)
2025/01/18 23:39:37 fetching corpus: 700, signal 81509/88613 (executing program)
2025/01/18 23:39:37 fetching corpus: 750, signal 84597/91295 (executing program)
2025/01/18 23:39:38 fetching corpus: 800, signal 86260/92874 (executing program)
2025/01/18 23:39:38 fetching corpus: 850, signal 88537/94797 (executing program)
2025/01/18 23:39:38 fetching corpus: 900, signal 90966/96676 (executing program)
2025/01/18 23:39:38 fetching corpus: 950, signal 94423/99093 (executing program)
2025/01/18 23:39:38 fetching corpus: 1000, signal 96405/100512 (executing program)
2025/01/18 23:39:38 fetching corpus: 1050, signal 98254/101816 (executing program)
2025/01/18 23:39:39 fetching corpus: 1100, signal 99758/102843 (executing program)
2025/01/18 23:39:39 fetching corpus: 1150, signal 100915/103609 (executing program)
2025/01/18 23:39:39 fetching corpus: 1200, signal 102228/104407 (executing program)
2025/01/18 23:39:39 fetching corpus: 1250, signal 104478/105625 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/105883 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/105912 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/105944 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/105971 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106004 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106038 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106072 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106108 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106141 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106173 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106207 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106236 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106269 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106300 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106332 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106363 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106396 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106431 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106476 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106513 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106546 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106573 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106620 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106654 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106687 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106731 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106763 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106777 (executing program)
2025/01/18 23:39:39 fetching corpus: 1271, signal 104965/106777 (executing program)
2025/01/18 23:39:43 starting 8 fuzzer processes
23:39:43 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x8932, &(0x7f0000000000)={'sit0\x00', 0x0})

23:39:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1)

23:39:43 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)

23:39:43 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xff, 0x9, 0x400}, 0x20)

[   94.064973] audit: type=1400 audit(1737243583.658:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:39:43 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4842, 0x0)
fallocate(r0, 0x0, 0x0, 0x87ffffc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xcc042, 0x0)
ftruncate(r1, 0x10000)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x7, 0x4})

23:39:43 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10040aa, &(0x7f0000000200)={[{@stripe}]})

23:39:43 executing program 6:
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
io_setup(0x1f, &(0x7f0000000640)=<r0=>0x0)
io_getevents(r0, 0x4, 0x4, &(0x7f0000001880)=[{}, {}, {}, {}], &(0x7f0000001980)={0x0, 0x3938700})

23:39:43 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4)

[   95.369635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.373685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.374225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.376350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.379600] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   95.381361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.498128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.507129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.508475] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.508659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.510445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.511714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.515902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.516725] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   95.517095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.520890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.524422] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.527727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.621850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.632497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.634918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.645163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.650456] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   95.652593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.688937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.698438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.701548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.715196] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   95.738109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   95.772770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.784741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   95.787483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   95.788855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   95.789986] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.808774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   95.817611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   95.826922] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   95.841812] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   95.842494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   95.845191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.861490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   95.863000] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   95.864096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   95.884666] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   95.886288] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   95.935650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   95.972098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   95.975652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   97.400010] Bluetooth: hci0: command tx timeout
[   97.527416] Bluetooth: hci2: command tx timeout
[   97.591470] Bluetooth: hci1: command tx timeout
[   97.719445] Bluetooth: hci3: command tx timeout
[   97.910494] Bluetooth: hci6: command tx timeout
[   97.910694] Bluetooth: hci4: command tx timeout
[   97.974313] Bluetooth: hci5: command tx timeout
[   98.040323] Bluetooth: hci7: command tx timeout
[   99.447916] Bluetooth: hci0: command tx timeout
[   99.574377] Bluetooth: hci2: command tx timeout
[   99.638563] Bluetooth: hci1: command tx timeout
[   99.767806] Bluetooth: hci3: command tx timeout
[   99.959425] Bluetooth: hci4: command tx timeout
[   99.959448] Bluetooth: hci6: command tx timeout
[  100.022656] Bluetooth: hci5: command tx timeout
[  100.086597] Bluetooth: hci7: command tx timeout
[  101.494466] Bluetooth: hci0: command tx timeout
[  101.622361] Bluetooth: hci2: command tx timeout
[  101.686342] Bluetooth: hci1: command tx timeout
[  101.814341] Bluetooth: hci3: command tx timeout
[  102.006490] Bluetooth: hci4: command tx timeout
[  102.007383] Bluetooth: hci6: command tx timeout
[  102.070408] Bluetooth: hci5: command tx timeout
[  102.134430] Bluetooth: hci7: command tx timeout
[  103.542523] Bluetooth: hci0: command tx timeout
[  103.670391] Bluetooth: hci2: command tx timeout
[  103.734411] Bluetooth: hci1: command tx timeout
[  103.862440] Bluetooth: hci3: command tx timeout
[  104.054352] Bluetooth: hci4: command tx timeout
[  104.054957] Bluetooth: hci6: command tx timeout
[  104.118313] Bluetooth: hci5: command tx timeout
[  104.182355] Bluetooth: hci7: command tx timeout
[  158.592034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.595424] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.597096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.602271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.606543] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  158.608073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.621974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.634585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.635784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.638406] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.649626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.649974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.670005] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.674904] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  158.675998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.677553] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.681075] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.684465] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.689207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  158.695947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  158.699621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  158.704610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  158.706463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  158.712141] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  158.713104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.714792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.715057] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  158.717510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  158.720906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  158.725139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.727142] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  158.728527] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  158.749258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  158.786167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  158.793496] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  158.799355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  158.810733] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  158.812004] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  158.814849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  158.816111] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  158.850506] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  158.860886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  158.863626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  158.864958] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  158.865669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  158.875921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  158.942594] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  158.947482] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  160.630372] Bluetooth: hci1: command tx timeout
[  160.759504] Bluetooth: hci3: command tx timeout
[  160.760847] Bluetooth: hci0: command tx timeout
[  160.822328] Bluetooth: hci4: command tx timeout
[  160.886973] Bluetooth: hci6: command tx timeout
[  160.887994] Bluetooth: hci2: command tx timeout
[  161.270360] Bluetooth: hci7: command tx timeout
[  161.271461] Bluetooth: hci5: command tx timeout
[  162.678985] Bluetooth: hci1: command tx timeout
[  162.806479] Bluetooth: hci3: command tx timeout
[  162.807787] Bluetooth: hci0: command tx timeout
[  162.870837] Bluetooth: hci4: command tx timeout
[  162.934486] Bluetooth: hci6: command tx timeout
[  162.934632] Bluetooth: hci2: command tx timeout
[  163.319358] Bluetooth: hci5: command tx timeout
[  163.319458] Bluetooth: hci7: command tx timeout
[  164.727267] Bluetooth: hci1: command tx timeout
[  164.854699] Bluetooth: hci3: command tx timeout
[  164.854728] Bluetooth: hci0: command tx timeout
[  164.918312] Bluetooth: hci4: command tx timeout
[  164.982376] Bluetooth: hci2: command tx timeout
[  164.983300] Bluetooth: hci6: command tx timeout
[  165.366332] Bluetooth: hci5: command tx timeout
[  165.367313] Bluetooth: hci7: command tx timeout
[  166.775328] Bluetooth: hci1: command tx timeout
[  166.902495] Bluetooth: hci3: command tx timeout
[  166.902644] Bluetooth: hci0: command tx timeout
[  166.967512] Bluetooth: hci4: command tx timeout
[  167.031375] Bluetooth: hci6: command tx timeout
[  167.031475] Bluetooth: hci2: command tx timeout
[  167.414468] Bluetooth: hci7: command tx timeout
[  167.414597] Bluetooth: hci5: command tx timeout
[  218.457272] 
[  218.457519] ======================================================
[  218.458117] WARNING: possible circular locking dependency detected
[  218.458699] 6.13.0-rc7-next-20250117 #1 Not tainted
[  218.459185] ------------------------------------------------------
[  218.460899] kworker/u8:0/11 is trying to acquire lock:
[  218.462051] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  218.464688] 
[  218.464688] but task is already holding lock:
[  218.465932] ffff88803d6a8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  218.468045] 
[  218.468045] which lock already depends on the new lock.
[  218.468045] 
[  218.468816] 
[  218.468816] the existing dependency chain (in reverse order) is:
[  218.469529] 
[  218.469529] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  218.470191]        __mutex_lock+0x13d/0xb50
[  218.470653]        wiphy_register+0x1b2e/0x25d0
[  218.471135]        ieee80211_register_hw+0x23a4/0x3d60
[  218.471661]        mac80211_hwsim_new_radio+0x2759/0x4d50
[  218.472246]        init_mac80211_hwsim+0x389/0x870
[  218.472779]        do_one_initcall+0xf9/0x640
[  218.473269]        kernel_init_freeable+0x53d/0x7a0
[  218.473795]        kernel_init+0x1e/0x2d0
[  218.474209]        ret_from_fork+0x48/0x80
[  218.474634]        ret_from_fork_asm+0x1a/0x30
[  218.475116] 
[  218.475116] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  218.475734]        __lock_acquire+0x29fd/0x4580
[  218.476218]        lock_acquire+0x19b/0x520
[  218.476667]        __mutex_lock+0x13d/0xb50
[  218.477120]        unregister_netdevice_many_notify+0x1612/0x1c80
[  218.477737]        unregister_netdevice_queue+0x224/0x2e0
[  218.478293]        _cfg80211_unregister_wdev+0x57b/0x700
[  218.478849]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  218.479406]        ieee80211_unregister_hw+0x55/0x3a0
[  218.479940]        hwsim_exit_net+0x3a0/0x730
[  218.480401]        ops_exit_list+0xb3/0x180
[  218.480847]        cleanup_net+0x546/0xad0
[  218.481288]        process_one_work+0x8ee/0x1a10
[  218.481796]        worker_thread+0x674/0xe70
[  218.482266]        kthread+0x3ab/0x720
[  218.482697]        ret_from_fork+0x48/0x80
[  218.483122]        ret_from_fork_asm+0x1a/0x30
[  218.483610] 
[  218.483610] other info that might help us debug this:
[  218.483610] 
[  218.484387]  Possible unsafe locking scenario:
[  218.484387] 
[  218.484955]        CPU0                    CPU1
[  218.485407]        ----                    ----
[  218.485857]   lock(&rdev->wiphy.mtx);
[  218.486259]                                lock(rtnl_mutex);
[  218.486834]                                lock(&rdev->wiphy.mtx);
[  218.487450]   lock(rtnl_mutex);
[  218.487808] 
[  218.487808]  *** DEADLOCK ***
[  218.487808] 
[  218.488382] 4 locks held by kworker/u8:0/11:
[  218.488822]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  218.489837]  #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  218.490822]  #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  218.491745]  #3: ffff88803d6a8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  218.492783] 
[  218.492783] stack backtrace:
[  218.493226] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1
[  218.494043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  218.494816] Workqueue: netns cleanup_net
[  218.495233] Call Trace:
[  218.495486]  <TASK>
[  218.495720]  dump_stack_lvl+0xca/0x120
[  218.496135]  print_circular_bug+0x47b/0x750
[  218.496580]  check_noncircular+0x2e9/0x3c0
[  218.497015]  ? __pfx_check_noncircular+0x10/0x10
[  218.497493]  ? hlock_class+0x4e/0x130
[  218.497880]  ? mark_lock+0xac/0xed0
[  218.498263]  ? srso_return_thunk+0x5/0x5f
[  218.498700]  ? dl_scaled_delta_exec+0xd4/0x2c0
[  218.499177]  ? lockdep_lock+0xba/0x1b0
[  218.499594]  ? __pfx_lockdep_lock+0x10/0x10
[  218.500057]  __lock_acquire+0x29fd/0x4580
[  218.500503]  ? __pfx___lock_acquire+0x10/0x10
[  218.500956]  ? lock_release+0x20f/0x6f0
[  218.501373]  ? __pfx_lock_release+0x10/0x10
[  218.501817]  lock_acquire+0x19b/0x520
[  218.502219]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  218.502808]  ? __pfx_lock_acquire+0x10/0x10
[  218.503251]  ? srso_return_thunk+0x5/0x5f
[  218.503687]  ? lock_release+0x20f/0x6f0
[  218.504112]  ? srso_return_thunk+0x5/0x5f
[  218.504562]  ? lock_is_held_type+0x9e/0x120
[  218.505014]  ? srso_return_thunk+0x5/0x5f
[  218.505453]  __mutex_lock+0x13d/0xb50
[  218.505856]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  218.506433]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  218.507019]  ? srso_return_thunk+0x5/0x5f
[  218.507468]  ? synchronize_rcu_expedited+0x38a/0x420
[  218.507988]  ? __pfx___mutex_lock+0x10/0x10
[  218.508437]  ? __pfx_autoremove_wake_function+0x10/0x10
[  218.508984]  ? srso_return_thunk+0x5/0x5f
[  218.509420]  ? kasan_quarantine_put+0x84/0x1e0
[  218.509900]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  218.510357]  ? srso_return_thunk+0x5/0x5f
[  218.510795]  unregister_netdevice_many_notify+0x1612/0x1c80
[  218.511354]  ? __virt_addr_valid+0x2e8/0x5d0
[  218.511819]  ? __pfx_lock_release+0x10/0x10
[  218.512258]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  218.512856]  ? find_held_lock+0x2c/0x110
[  218.513297]  ? srso_return_thunk+0x5/0x5f
[  218.513739]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  218.514258]  ? srso_return_thunk+0x5/0x5f
[  218.514703]  ? lock_release+0x20f/0x6f0
[  218.515118]  ? __pfx_lock_release+0x10/0x10
[  218.515561]  ? srso_return_thunk+0x5/0x5f
[  218.516008]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  218.516543]  ? srso_return_thunk+0x5/0x5f
[  218.516995]  unregister_netdevice_queue+0x224/0x2e0
[  218.517502]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  218.518046]  ? up_write+0x195/0x520
[  218.518450]  _cfg80211_unregister_wdev+0x57b/0x700
[  218.518955]  ? srso_return_thunk+0x5/0x5f
[  218.519400]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  218.519910]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  218.520465]  ? srso_return_thunk+0x5/0x5f
[  218.520902]  ? srso_return_thunk+0x5/0x5f
[  218.521347]  ? synchronize_rcu+0x1ff/0x260
[  218.521786]  ieee80211_unregister_hw+0x55/0x3a0
[  218.522259]  hwsim_exit_net+0x3a0/0x730
[  218.522666]  ? __pfx_hwsim_exit_net+0x10/0x10
[  218.523119]  ? srso_return_thunk+0x5/0x5f
[  218.523552]  ? netdev_run_todo+0x788/0x1040
[  218.523996]  ? srso_return_thunk+0x5/0x5f
[  218.524435]  ? __pfx_hwsim_exit_net+0x10/0x10
[  218.524886]  ops_exit_list+0xb3/0x180
[  218.525281]  cleanup_net+0x546/0xad0
[  218.525668]  ? __pfx_cleanup_net+0x10/0x10
[  218.526107]  process_one_work+0x8ee/0x1a10
[  218.526561]  ? __pfx_lock_acquire+0x10/0x10
[  218.527001]  ? __pfx_process_one_work+0x10/0x10
[  218.527488]  ? srso_return_thunk+0x5/0x5f
[  218.527929]  ? move_linked_works+0x172/0x270
[  218.528379]  ? srso_return_thunk+0x5/0x5f
[  218.528816]  ? assign_work+0x196/0x240
[  218.529236]  worker_thread+0x674/0xe70
[  218.529654]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  218.530189]  ? __pfx_worker_thread+0x10/0x10
[  218.530666]  kthread+0x3ab/0x720
[  218.531033]  ? __pfx_kthread+0x10/0x10
[  218.531449]  ? srso_return_thunk+0x5/0x5f
[  218.531898]  ? finish_task_switch.isra.0+0x206/0x840
[  218.532426]  ? __pfx_kthread+0x10/0x10
[  218.532843]  ret_from_fork+0x48/0x80
[  218.533222]  ? __pfx_kthread+0x10/0x10
[  218.533646]  ret_from_fork_asm+0x1a/0x30
[  218.534090]  </TASK>
[  220.288009] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  220.294415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  220.298959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  220.304375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  220.311708] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  220.314397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  220.670161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.674729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.676537] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.679620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.684016] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  220.685794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  220.689800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  220.695065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  220.703583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  220.706415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  220.711352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  220.713727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  220.780536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.785428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.788194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.799862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.809392] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  220.817697] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.820063] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.821510] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.825283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  220.828069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  220.828505] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.834736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  220.836476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.838768] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  220.840685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  220.858658] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  220.867708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  220.868446] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  220.881958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.882360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  220.882518] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  220.883844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  220.885189] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  220.885434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  220.885840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  220.919037] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  220.920106] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  220.920897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  220.936363] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  220.942943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  222.326313] Bluetooth: hci0: command tx timeout
[  222.710298] Bluetooth: hci1: command tx timeout
[  222.774389] Bluetooth: hci2: command tx timeout
[  222.902290] Bluetooth: hci3: command tx timeout
[  222.902854] Bluetooth: hci5: command tx timeout
[  222.966375] Bluetooth: hci4: command tx timeout
[  223.030300] Bluetooth: hci6: command tx timeout
[  223.030368] Bluetooth: hci7: command tx timeout
[  224.376233] Bluetooth: hci0: command tx timeout
[  224.760253] Bluetooth: hci1: command tx timeout
[  224.822390] Bluetooth: hci2: command tx timeout
[  224.951286] Bluetooth: hci5: command tx timeout
[  224.951301] Bluetooth: hci3: command tx timeout
[  225.014346] Bluetooth: hci4: command tx timeout
[  225.078325] Bluetooth: hci7: command tx timeout
[  225.078337] Bluetooth: hci6: command tx timeout
[  226.422398] Bluetooth: hci0: command tx timeout
[  226.808305] Bluetooth: hci1: command tx timeout
[  226.871323] Bluetooth: hci2: command tx timeout
[  226.998419] Bluetooth: hci3: command tx timeout
[  226.999980] Bluetooth: hci5: command tx timeout
[  227.062274] Bluetooth: hci4: command tx timeout
[  227.126298] Bluetooth: hci7: command tx timeout
[  227.126329] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
23:41:48  Registers:
info registers vcpu 0
RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095deb28
R8 =0000000000000001 R9 =ffffed10012bbd55 R10=000000000000006e R11=6666666666666666
R12=000000000000006e R13=0000000000000001 R14=ffff888008fea059 R15=ffff8880095dee28
RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564766afab10 CR3=000000003c8fc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000004000000000000562709062510
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005627090379a00000562709044230
XMM06=000056270906c2f00000000000000000 XMM07=00000000000000000000000000000000
XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000
XMM10=00000000002000000000000000200000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88800bd8b780 RBX=ffff88803c4cf210 RCX=ffffffff81429a4a RDX=1ffff1100172cf80
RSI=0000000000000008 RDI=ffff88800b967c00 RBP=ffff88803c4cf208 RSP=ffff88800f1efdd0
R8 =0000000000000000 R9 =ffffed100172cf80 R10=ffff88800b967c07 R11=0000000000000532
R12=ffff88803c4cf241 R13=ffff8880160e1b90 R14=ffff88800bd8b780 R15=0000000000000082
RIP=ffffffff81aedda6 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564766ac3668 CR3=0000000009506000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=ffffffffffffffffffffffffffffffff XMM03=742d626f6a0064656465656363757320
XMM04=0000564766b093000000564766b2f7b0 XMM05=00010000ffff01000000000000000004
XMM06=000000003030006563697665642e3669 XMM07=00000000000000000000000000000000
XMM08=00000000003638323032646161383334 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000