Warning: Permanently added '[localhost]:13885' (ECDSA) to the list of known hosts. 2025/01/19 00:48:03 fuzzer started 2025/01/19 00:48:04 dialing manager at localhost:44245 syzkaller login: [ 70.526616] cgroup: Unknown subsys name 'net' [ 70.651330] cgroup: Unknown subsys name 'cpuset' [ 70.671757] cgroup: Unknown subsys name 'rlimit' [ 76.667843] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 00:48:21 syscalls: 2217 2025/01/19 00:48:21 code coverage: enabled 2025/01/19 00:48:21 comparison tracing: enabled 2025/01/19 00:48:21 extra coverage: enabled 2025/01/19 00:48:21 setuid sandbox: enabled 2025/01/19 00:48:21 namespace sandbox: enabled 2025/01/19 00:48:21 Android sandbox: enabled 2025/01/19 00:48:21 fault injection: enabled 2025/01/19 00:48:21 leak checking: enabled 2025/01/19 00:48:21 net packet injection: enabled 2025/01/19 00:48:21 net device setup: enabled 2025/01/19 00:48:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 00:48:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 00:48:21 USB emulation: enabled 2025/01/19 00:48:21 hci packet injection: enabled 2025/01/19 00:48:21 wifi device emulation: enabled 2025/01/19 00:48:21 802.15.4 emulation: enabled 2025/01/19 00:48:21 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/19 00:48:21 fetching corpus: 50, signal 27560/30529 (executing program) 2025/01/19 00:48:21 fetching corpus: 100, signal 34462/38554 (executing program) 2025/01/19 00:48:21 fetching corpus: 150, signal 42570/47430 (executing program) 2025/01/19 00:48:21 fetching corpus: 200, signal 52204/57311 (executing program) 2025/01/19 00:48:21 fetching corpus: 250, signal 57455/63009 (executing program) 2025/01/19 00:48:21 fetching corpus: 300, signal 61617/67545 (executing program) 2025/01/19 00:48:22 fetching corpus: 350, signal 65360/71631 (executing program) 2025/01/19 00:48:22 fetching corpus: 400, signal 69378/75714 (executing program) 2025/01/19 00:48:22 fetching corpus: 450, signal 72859/79220 (executing program) 2025/01/19 00:48:22 fetching corpus: 500, signal 76241/82547 (executing program) 2025/01/19 00:48:22 fetching corpus: 550, signal 78943/85221 (executing program) 2025/01/19 00:48:23 fetching corpus: 600, signal 81507/87702 (executing program) 2025/01/19 00:48:23 fetching corpus: 650, signal 83152/89399 (executing program) 2025/01/19 00:48:23 fetching corpus: 700, signal 85372/91437 (executing program) 2025/01/19 00:48:23 fetching corpus: 750, signal 87621/93433 (executing program) 2025/01/19 00:48:23 fetching corpus: 800, signal 89609/95184 (executing program) 2025/01/19 00:48:23 fetching corpus: 850, signal 91955/97080 (executing program) 2025/01/19 00:48:24 fetching corpus: 900, signal 93499/98305 (executing program) 2025/01/19 00:48:24 fetching corpus: 950, signal 95216/99649 (executing program) 2025/01/19 00:48:24 fetching corpus: 1000, signal 96741/100805 (executing program) 2025/01/19 00:48:24 fetching corpus: 1050, signal 97952/101702 (executing program) 2025/01/19 00:48:24 fetching corpus: 1100, signal 99658/102844 (executing program) 2025/01/19 00:48:24 fetching corpus: 1150, signal 101850/104158 (executing program) 2025/01/19 00:48:24 fetching corpus: 1200, signal 102871/104767 (executing program) 2025/01/19 00:48:25 fetching corpus: 1250, signal 104523/105647 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/105924 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/105947 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/105981 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106030 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106070 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106100 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106140 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106180 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106223 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106267 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106301 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106327 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106367 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106406 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106447 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106488 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106529 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106559 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106602 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106634 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106667 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106712 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106740 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106779 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106819 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106858 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106889 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106905 (executing program) 2025/01/19 00:48:25 fetching corpus: 1275, signal 104999/106905 (executing program) 2025/01/19 00:48:29 starting 8 fuzzer processes 00:48:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:48:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x54}}, 0x0) 00:48:29 executing program 2: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "4594587054c929f98bd655543a53dd47cfaf31cd21bb4ea0d5b7a7889450b92d3d18b605cf723f209da8663910d7baa49842b7ac5c04c10deda505abe65f012d"}, 0x48, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0c0583b, &(0x7f0000000340)) 00:48:29 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='\x00', 0x0, 0x0, 0x0) 00:48:29 executing program 4: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) keyctl$link(0x8, 0x0, r0) [ 95.516804] audit: type=1400 audit(1737247709.631:7): avc: denied { execmem } for pid=278 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:48:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x16}]}) 00:48:29 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 00:48:29 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) [ 96.886107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.888380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.890294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.896174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.899141] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.902482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.138301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.140326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.143863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.156964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.173608] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.177341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.202840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.205912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.210678] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.216666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.218495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.220245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.221907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.229678] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.230811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.234590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.236280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.237393] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.309999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.319613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.339380] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.354674] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.359667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.370761] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.378071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.387036] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.393052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.399091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.399862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.400255] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.404194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.409845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.413785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.419453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.423722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.444831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.460949] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.463186] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.464387] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.464876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.473700] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.481980] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.977335] Bluetooth: hci0: command tx timeout [ 99.231527] Bluetooth: hci1: command tx timeout [ 99.295585] Bluetooth: hci3: command tx timeout [ 99.295609] Bluetooth: hci2: command tx timeout [ 99.487553] Bluetooth: hci4: command tx timeout [ 99.487580] Bluetooth: hci5: command tx timeout [ 99.551587] Bluetooth: hci6: command tx timeout [ 99.615605] Bluetooth: hci7: command tx timeout [ 101.023679] Bluetooth: hci0: command tx timeout [ 101.280273] Bluetooth: hci1: command tx timeout [ 101.345674] Bluetooth: hci3: command tx timeout [ 101.345775] Bluetooth: hci2: command tx timeout [ 101.535720] Bluetooth: hci5: command tx timeout [ 101.535757] Bluetooth: hci4: command tx timeout [ 101.602494] Bluetooth: hci6: command tx timeout [ 101.664756] Bluetooth: hci7: command tx timeout [ 103.071828] Bluetooth: hci0: command tx timeout [ 103.328647] Bluetooth: hci1: command tx timeout [ 103.391677] Bluetooth: hci2: command tx timeout [ 103.393211] Bluetooth: hci3: command tx timeout [ 103.583584] Bluetooth: hci5: command tx timeout [ 103.583691] Bluetooth: hci4: command tx timeout [ 103.647540] Bluetooth: hci6: command tx timeout [ 103.711652] Bluetooth: hci7: command tx timeout [ 105.119679] Bluetooth: hci0: command tx timeout [ 105.375585] Bluetooth: hci1: command tx timeout [ 105.439572] Bluetooth: hci2: command tx timeout [ 105.440758] Bluetooth: hci3: command tx timeout [ 105.631565] Bluetooth: hci4: command tx timeout [ 105.632780] Bluetooth: hci5: command tx timeout [ 105.695587] Bluetooth: hci6: command tx timeout [ 105.759550] Bluetooth: hci7: command tx timeout [ 159.280914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.282908] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.284383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.290820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.292998] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.294602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.407361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.412570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.414108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.417878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.420817] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.422241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.490075] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.497733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.498305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.503619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.505905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.514788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.514902] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.525851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.545961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.550056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.552095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.553708] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.554931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.560265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.563610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.565167] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.566610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.569760] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.571276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.572778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.576861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.581307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.583714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.584904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 159.586532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.604242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 159.605388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.607191] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 159.608576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.649093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.666783] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 159.686532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.691193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 159.738120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 159.739917] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 159.740818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.375510] Bluetooth: hci0: command tx timeout [ 161.439546] Bluetooth: hci1: command tx timeout [ 161.632571] Bluetooth: hci2: command tx timeout [ 161.695616] Bluetooth: hci3: command tx timeout [ 161.695966] Bluetooth: hci5: command tx timeout [ 161.696132] Bluetooth: hci4: command tx timeout [ 161.824500] Bluetooth: hci6: command tx timeout [ 161.824834] Bluetooth: hci7: command tx timeout [ 163.423541] Bluetooth: hci0: command tx timeout [ 163.488540] Bluetooth: hci1: command tx timeout [ 163.680478] Bluetooth: hci2: command tx timeout [ 163.743568] Bluetooth: hci4: command tx timeout [ 163.743697] Bluetooth: hci5: command tx timeout [ 163.743804] Bluetooth: hci3: command tx timeout [ 163.871602] Bluetooth: hci7: command tx timeout [ 163.871884] Bluetooth: hci6: command tx timeout [ 165.472572] Bluetooth: hci0: command tx timeout [ 165.536530] Bluetooth: hci1: command tx timeout [ 165.727467] Bluetooth: hci2: command tx timeout [ 165.792873] Bluetooth: hci3: command tx timeout [ 165.792972] Bluetooth: hci5: command tx timeout [ 165.793055] Bluetooth: hci4: command tx timeout [ 165.919524] Bluetooth: hci7: command tx timeout [ 165.919553] Bluetooth: hci6: command tx timeout [ 167.521501] Bluetooth: hci0: command tx timeout [ 167.583513] Bluetooth: hci1: command tx timeout [ 167.775555] Bluetooth: hci2: command tx timeout [ 167.840458] Bluetooth: hci3: command tx timeout [ 167.840557] Bluetooth: hci4: command tx timeout [ 167.840648] Bluetooth: hci5: command tx timeout [ 167.968643] Bluetooth: hci7: command tx timeout [ 167.968938] Bluetooth: hci6: command tx timeout [ 219.233383] [ 219.233651] ====================================================== [ 219.234261] WARNING: possible circular locking dependency detected [ 219.234869] 6.13.0-rc7-next-20250117 #1 Not tainted [ 219.235359] ------------------------------------------------------ [ 219.239436] kworker/u8:1/67 is trying to acquire lock: [ 219.239953] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.240967] [ 219.240967] but task is already holding lock: [ 219.241538] ffff88803ccb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 219.242534] [ 219.242534] which lock already depends on the new lock. [ 219.242534] [ 219.243306] [ 219.243306] the existing dependency chain (in reverse order) is: [ 219.244022] [ 219.244022] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 219.244691] __mutex_lock+0x13d/0xb50 [ 219.245149] wiphy_register+0x1b2e/0x25d0 [ 219.245643] ieee80211_register_hw+0x23a4/0x3d60 [ 219.246186] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 219.246750] init_mac80211_hwsim+0x389/0x870 [ 219.247286] do_one_initcall+0xf9/0x640 [ 219.247776] kernel_init_freeable+0x53d/0x7a0 [ 219.248303] kernel_init+0x1e/0x2d0 [ 219.248728] ret_from_fork+0x48/0x80 [ 219.249163] ret_from_fork_asm+0x1a/0x30 [ 219.249652] [ 219.249652] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 219.250285] __lock_acquire+0x29fd/0x4580 [ 219.250773] lock_acquire+0x19b/0x520 [ 219.251231] __mutex_lock+0x13d/0xb50 [ 219.251697] unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.252315] unregister_netdevice_queue+0x224/0x2e0 [ 219.252875] _cfg80211_unregister_wdev+0x57b/0x700 [ 219.253436] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 219.254007] ieee80211_unregister_hw+0x55/0x3a0 [ 219.254534] hwsim_exit_net+0x3a0/0x730 [ 219.254996] ops_exit_list+0xb3/0x180 [ 219.255452] cleanup_net+0x546/0xad0 [ 219.255903] process_one_work+0x8ee/0x1a10 [ 219.256412] worker_thread+0x674/0xe70 [ 219.256892] kthread+0x3ab/0x720 [ 219.257327] ret_from_fork+0x48/0x80 [ 219.257755] ret_from_fork_asm+0x1a/0x30 [ 219.258254] [ 219.258254] other info that might help us debug this: [ 219.258254] [ 219.259014] Possible unsafe locking scenario: [ 219.259014] [ 219.259590] CPU0 CPU1 [ 219.260039] ---- ---- [ 219.260494] lock(&rdev->wiphy.mtx); [ 219.260892] lock(rtnl_mutex); [ 219.261475] lock(&rdev->wiphy.mtx); [ 219.262114] lock(rtnl_mutex); [ 219.262484] [ 219.262484] *** DEADLOCK *** [ 219.262484] [ 219.263068] 4 locks held by kworker/u8:1/67: [ 219.263517] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 219.264560] #1: ffff88800bb6fd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 219.265550] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 219.266476] #3: ffff88803ccb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 219.267507] [ 219.267507] stack backtrace: [ 219.267957] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 219.268771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 219.269559] Workqueue: netns cleanup_net [ 219.269982] Call Trace: [ 219.270242] [ 219.270475] dump_stack_lvl+0xca/0x120 [ 219.270901] print_circular_bug+0x47b/0x750 [ 219.271347] check_noncircular+0x2e9/0x3c0 [ 219.271779] ? srso_return_thunk+0x5/0x5f [ 219.272220] ? __pfx_check_noncircular+0x10/0x10 [ 219.272692] ? hlock_class+0x4e/0x130 [ 219.273078] ? mark_lock+0xac/0xed0 [ 219.273459] ? srso_return_thunk+0x5/0x5f [ 219.273907] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 219.274380] ? lockdep_lock+0xba/0x1b0 [ 219.274806] ? __pfx_lockdep_lock+0x10/0x10 [ 219.275271] __lock_acquire+0x29fd/0x4580 [ 219.275706] ? __pfx___lock_acquire+0x10/0x10 [ 219.276160] ? lock_release+0x20f/0x6f0 [ 219.276578] ? __pfx_lock_release+0x10/0x10 [ 219.277021] lock_acquire+0x19b/0x520 [ 219.277418] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.278004] ? __pfx_lock_acquire+0x10/0x10 [ 219.278444] ? srso_return_thunk+0x5/0x5f [ 219.278885] ? lock_release+0x20f/0x6f0 [ 219.279297] ? srso_return_thunk+0x5/0x5f [ 219.279732] ? lock_is_held_type+0x9e/0x120 [ 219.280183] ? srso_return_thunk+0x5/0x5f [ 219.280620] __mutex_lock+0x13d/0xb50 [ 219.281027] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.281603] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.282187] ? srso_return_thunk+0x5/0x5f [ 219.282630] ? synchronize_rcu_expedited+0x38a/0x420 [ 219.283137] ? __pfx___mutex_lock+0x10/0x10 [ 219.283596] ? __pfx_autoremove_wake_function+0x10/0x10 [ 219.284138] ? srso_return_thunk+0x5/0x5f [ 219.284575] ? kasan_quarantine_put+0x84/0x1e0 [ 219.285061] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 219.285524] ? srso_return_thunk+0x5/0x5f [ 219.285974] unregister_netdevice_many_notify+0x1612/0x1c80 [ 219.286537] ? __virt_addr_valid+0x2e8/0x5d0 [ 219.287003] ? __pfx_lock_release+0x10/0x10 [ 219.287445] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 219.288036] ? find_held_lock+0x2c/0x110 [ 219.288481] ? srso_return_thunk+0x5/0x5f [ 219.288915] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 219.289431] ? srso_return_thunk+0x5/0x5f [ 219.289870] ? lock_release+0x20f/0x6f0 [ 219.290284] ? __pfx_lock_release+0x10/0x10 [ 219.290717] ? srso_return_thunk+0x5/0x5f [ 219.291154] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 219.291693] ? srso_return_thunk+0x5/0x5f [ 219.292138] unregister_netdevice_queue+0x224/0x2e0 [ 219.292640] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 219.293183] ? up_write+0x195/0x520 [ 219.293577] _cfg80211_unregister_wdev+0x57b/0x700 [ 219.294089] ? srso_return_thunk+0x5/0x5f [ 219.294534] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 219.295040] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 219.295593] ? srso_return_thunk+0x5/0x5f [ 219.296040] ? srso_return_thunk+0x5/0x5f [ 219.296475] ? synchronize_rcu+0x1ff/0x260 [ 219.296909] ieee80211_unregister_hw+0x55/0x3a0 [ 219.297380] hwsim_exit_net+0x3a0/0x730 [ 219.297802] ? __pfx_hwsim_exit_net+0x10/0x10 [ 219.298265] ? srso_return_thunk+0x5/0x5f [ 219.298709] ? netdev_run_todo+0x788/0x1040 [ 219.299147] ? srso_return_thunk+0x5/0x5f [ 219.299586] ? __pfx_hwsim_exit_net+0x10/0x10 [ 219.300051] ops_exit_list+0xb3/0x180 [ 219.300448] cleanup_net+0x546/0xad0 [ 219.300836] ? __pfx_cleanup_net+0x10/0x10 [ 219.301278] process_one_work+0x8ee/0x1a10 [ 219.301737] ? __pfx_lock_acquire+0x10/0x10 [ 219.302187] ? __pfx_process_one_work+0x10/0x10 [ 219.302674] ? srso_return_thunk+0x5/0x5f [ 219.303107] ? move_linked_works+0x172/0x270 [ 219.303560] ? srso_return_thunk+0x5/0x5f [ 219.304010] ? assign_work+0x196/0x240 [ 219.304431] worker_thread+0x674/0xe70 [ 219.304854] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 219.305386] ? srso_return_thunk+0x5/0x5f [ 219.305824] ? __pfx_worker_thread+0x10/0x10 [ 219.306294] kthread+0x3ab/0x720 [ 219.306666] ? __pfx_kthread+0x10/0x10 [ 219.307079] ? srso_return_thunk+0x5/0x5f [ 219.307523] ? finish_task_switch.isra.0+0x206/0x840 [ 219.308039] ? __pfx_kthread+0x10/0x10 [ 219.308455] ret_from_fork+0x48/0x80 [ 219.308836] ? __pfx_kthread+0x10/0x10 [ 219.309247] ret_from_fork_asm+0x1a/0x30 [ 219.309686] [ 221.226214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.226955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.227719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.229925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.231039] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.231645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.243014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.248039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.255508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.261176] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.265698] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.267635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.300850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.304686] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.313061] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.322414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.340521] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.343737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.399542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.399791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.417735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.420688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.422276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.426718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.438121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.442790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.465302] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 221.471771] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 221.481691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 221.485623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.491844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.498189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.499233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.505768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.513980] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 221.535971] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 221.545551] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 221.546981] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.548264] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.549020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.555921] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 221.558531] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 221.560030] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 221.560782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.561972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.568346] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.569055] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.575986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.263510] Bluetooth: hci0: command tx timeout [ 223.328042] Bluetooth: hci1: command tx timeout [ 223.457440] Bluetooth: hci2: command tx timeout [ 223.519614] Bluetooth: hci4: command tx timeout [ 223.647757] Bluetooth: hci7: command tx timeout [ 223.648275] Bluetooth: hci5: command tx timeout [ 223.711695] Bluetooth: hci6: command tx timeout [ 223.713969] Bluetooth: hci3: command tx timeout [ 225.312524] Bluetooth: hci0: command tx timeout [ 225.375448] Bluetooth: hci1: command tx timeout [ 225.505251] Bluetooth: hci2: command tx timeout [ 225.567596] Bluetooth: hci4: command tx timeout [ 225.696578] Bluetooth: hci5: command tx timeout [ 225.696842] Bluetooth: hci7: command tx timeout [ 225.760113] Bluetooth: hci3: command tx timeout [ 225.760183] Bluetooth: hci6: command tx timeout [ 227.360521] Bluetooth: hci0: command tx timeout [ 227.425462] Bluetooth: hci1: command tx timeout [ 227.552405] Bluetooth: hci2: command tx timeout [ 227.616426] Bluetooth: hci4: command tx timeout [ 227.744485] Bluetooth: hci7: command tx timeout [ 227.745068] Bluetooth: hci5: command tx timeout [ 227.808766] Bluetooth: hci6: command tx timeout [ 227.809758] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 00:50:33 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800bb61bc0 RCX=ffffffff81429a4a RDX=0000000000000000 RSI=ffffffff814299d3 RDI=ffff88800bb61bec RBP=0000000000000000 RSP=ffff88800f307db8 R8 =0000000000000000 R9 =ffffed1001e16d80 R10=ffff88800f0b6c07 R11=0000000000000001 R12=ffff88800ca76af9 R13=ffff88800ca72de0 R14=ffff88800bb61bc0 R15=0000000000000086 RIP=ffffffff814299ec RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1ff0c94630 CR3=0000000018e3a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183d79f80000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8283cd30 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800bb6eb60 R8 =0000000000000000 R9 =fffffbfff0be1544 R10=00000000000fe503 R11=2d2d2d2d2d2d2d2d R12=0000000000000823 R13=0000000000000020 R14=fffffbfff10d2666 R15=dffffc0000000000 RIP=ffffffff8283cd85 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005596bcceb018 CR3=000000003cf04000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffffffff XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055d0640c6f40000055d0640bbc20 XMM06=000000000000000000000000ffffffff XMM07=00000000000000000000000000000000 XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000