Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:16276' (ECDSA) to the list of known hosts. 2025/01/19 01:45:21 fuzzer started 2025/01/19 01:45:21 dialing manager at localhost:44245 syzkaller login: [ 69.446430] cgroup: Unknown subsys name 'net' [ 69.559290] cgroup: Unknown subsys name 'cpuset' [ 69.584731] cgroup: Unknown subsys name 'rlimit' [ 74.458707] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 84.959783] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/19 01:45:37 syscalls: 2217 2025/01/19 01:45:37 code coverage: enabled 2025/01/19 01:45:37 comparison tracing: enabled 2025/01/19 01:45:37 extra coverage: enabled 2025/01/19 01:45:37 setuid sandbox: enabled 2025/01/19 01:45:37 namespace sandbox: enabled 2025/01/19 01:45:37 Android sandbox: enabled 2025/01/19 01:45:37 fault injection: enabled 2025/01/19 01:45:37 leak checking: enabled 2025/01/19 01:45:37 net packet injection: enabled 2025/01/19 01:45:37 net device setup: enabled 2025/01/19 01:45:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/19 01:45:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/19 01:45:37 USB emulation: enabled 2025/01/19 01:45:37 hci packet injection: enabled 2025/01/19 01:45:37 wifi device emulation: enabled 2025/01/19 01:45:37 802.15.4 emulation: enabled 2025/01/19 01:45:37 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/19 01:45:37 fetching corpus: 50, signal 24917/27989 (executing program) 2025/01/19 01:45:37 fetching corpus: 100, signal 39288/43112 (executing program) 2025/01/19 01:45:38 fetching corpus: 150, signal 46088/50693 (executing program) 2025/01/19 01:45:38 fetching corpus: 200, signal 51415/56655 (executing program) 2025/01/19 01:45:38 fetching corpus: 250, signal 56309/61980 (executing program) 2025/01/19 01:45:38 fetching corpus: 300, signal 60862/66881 (executing program) 2025/01/19 01:45:38 fetching corpus: 350, signal 64976/71268 (executing program) 2025/01/19 01:45:39 fetching corpus: 400, signal 68775/75200 (executing program) 2025/01/19 01:45:39 fetching corpus: 450, signal 71593/78272 (executing program) 2025/01/19 01:45:39 fetching corpus: 500, signal 74594/81311 (executing program) 2025/01/19 01:45:39 fetching corpus: 550, signal 76460/83367 (executing program) 2025/01/19 01:45:39 fetching corpus: 600, signal 78968/85870 (executing program) 2025/01/19 01:45:39 fetching corpus: 650, signal 81355/88138 (executing program) 2025/01/19 01:45:39 fetching corpus: 700, signal 83639/90246 (executing program) 2025/01/19 01:45:39 fetching corpus: 750, signal 86356/92615 (executing program) 2025/01/19 01:45:40 fetching corpus: 800, signal 87959/94066 (executing program) 2025/01/19 01:45:40 fetching corpus: 850, signal 89801/95656 (executing program) 2025/01/19 01:45:40 fetching corpus: 900, signal 91256/96880 (executing program) 2025/01/19 01:45:40 fetching corpus: 950, signal 92648/98038 (executing program) 2025/01/19 01:45:40 fetching corpus: 1000, signal 94416/99374 (executing program) 2025/01/19 01:45:40 fetching corpus: 1050, signal 96660/100909 (executing program) 2025/01/19 01:45:40 fetching corpus: 1100, signal 97734/101671 (executing program) 2025/01/19 01:45:40 fetching corpus: 1150, signal 99692/102940 (executing program) 2025/01/19 01:45:41 fetching corpus: 1200, signal 101420/103997 (executing program) 2025/01/19 01:45:41 fetching corpus: 1250, signal 104584/105713 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/105964 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/105998 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106031 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106062 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106091 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106123 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106152 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106181 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106210 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106247 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106281 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106329 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106371 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106405 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106444 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106486 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106520 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106557 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106590 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106644 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106679 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106705 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106742 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106780 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106822 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106855 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106889 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106905 (executing program) 2025/01/19 01:45:41 fetching corpus: 1275, signal 104999/106905 (executing program) 2025/01/19 01:45:45 starting 8 fuzzer processes 01:45:45 executing program 0: set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, 0x0, 0x1) 01:45:45 executing program 1: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)="0bbd", 0x2) 01:45:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 01:45:45 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x33, 0x2d]}}}}]}) [ 92.929662] audit: type=1400 audit(1737251145.146:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:45:45 executing program 4: madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) mremap(&(0x7f0000d16000/0x2000)=nil, 0x2000, 0x11000, 0x3, &(0x7f0000fed000/0x11000)=nil) 01:45:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 01:45:45 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040), 0x4) 01:45:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) fsetxattr$security_selinux(r0, &(0x7f0000000280), &(0x7f0000000340)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) [ 94.191425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.192680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.193730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.197387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.199005] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.200046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.317617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.328645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.330213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.333340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.334447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.335605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.337684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.339236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.340648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.341948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.350200] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.351438] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.385233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.393627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.397196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.418535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.420579] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.423691] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.523875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.525272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.528735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.533881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.534530] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.538175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.539840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.541398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.543405] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.546508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.546570] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.551662] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.552888] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.553607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.574569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.603727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.606786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.624385] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.625294] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.666924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.667625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.677739] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.686523] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.688340] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.290579] Bluetooth: hci0: command tx timeout [ 96.420024] Bluetooth: hci1: command tx timeout [ 96.420059] Bluetooth: hci2: command tx timeout [ 96.482119] Bluetooth: hci3: command tx timeout [ 96.675224] Bluetooth: hci5: command tx timeout [ 96.738114] Bluetooth: hci7: command tx timeout [ 96.738198] Bluetooth: hci4: command tx timeout [ 96.738908] Bluetooth: hci6: command tx timeout [ 98.339227] Bluetooth: hci0: command tx timeout [ 98.467203] Bluetooth: hci2: command tx timeout [ 98.467417] Bluetooth: hci1: command tx timeout [ 98.531120] Bluetooth: hci3: command tx timeout [ 98.724211] Bluetooth: hci5: command tx timeout [ 98.787297] Bluetooth: hci7: command tx timeout [ 98.787440] Bluetooth: hci4: command tx timeout [ 98.787461] Bluetooth: hci6: command tx timeout [ 100.387145] Bluetooth: hci0: command tx timeout [ 100.514209] Bluetooth: hci2: command tx timeout [ 100.515036] Bluetooth: hci1: command tx timeout [ 100.578229] Bluetooth: hci3: command tx timeout [ 100.772007] Bluetooth: hci5: command tx timeout [ 100.834161] Bluetooth: hci4: command tx timeout [ 100.834877] Bluetooth: hci6: command tx timeout [ 100.835049] Bluetooth: hci7: command tx timeout [ 102.436140] Bluetooth: hci0: command tx timeout [ 102.563400] Bluetooth: hci1: command tx timeout [ 102.563456] Bluetooth: hci2: command tx timeout [ 102.627101] Bluetooth: hci3: command tx timeout [ 102.819054] Bluetooth: hci5: command tx timeout [ 102.882093] Bluetooth: hci7: command tx timeout [ 102.882672] Bluetooth: hci6: command tx timeout [ 102.882841] Bluetooth: hci4: command tx timeout [ 156.784745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.790629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.796500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.799371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.807297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.809584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.811445] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.813048] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.814371] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.819785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.822406] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.823623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.921347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.923541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.927045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.931935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.933530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.933670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.935066] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.935888] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.939091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.940106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.944442] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.945033] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.019059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.035011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.035375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.043327] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.049132] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.050168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.053721] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.055461] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.057078] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.059291] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.060417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.061575] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.067544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.069079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.071385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.076138] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.081064] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.082246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.084171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.085816] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.087410] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.101598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.108792] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.110233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.882072] Bluetooth: hci1: command tx timeout [ 158.882094] Bluetooth: hci0: command tx timeout [ 159.010062] Bluetooth: hci3: command tx timeout [ 159.010430] Bluetooth: hci2: command tx timeout [ 159.138152] Bluetooth: hci4: command tx timeout [ 159.204079] Bluetooth: hci7: command tx timeout [ 159.204123] Bluetooth: hci6: command tx timeout [ 159.204738] Bluetooth: hci5: command tx timeout [ 160.931987] Bluetooth: hci0: command tx timeout [ 160.932113] Bluetooth: hci1: command tx timeout [ 161.058060] Bluetooth: hci3: command tx timeout [ 161.058147] Bluetooth: hci2: command tx timeout [ 161.187107] Bluetooth: hci4: command tx timeout [ 161.250133] Bluetooth: hci6: command tx timeout [ 161.250259] Bluetooth: hci7: command tx timeout [ 161.250344] Bluetooth: hci5: command tx timeout [ 162.979405] Bluetooth: hci1: command tx timeout [ 162.979499] Bluetooth: hci0: command tx timeout [ 163.106694] Bluetooth: hci3: command tx timeout [ 163.106861] Bluetooth: hci2: command tx timeout [ 163.235154] Bluetooth: hci4: command tx timeout [ 163.298065] Bluetooth: hci5: command tx timeout [ 163.298185] Bluetooth: hci7: command tx timeout [ 163.298272] Bluetooth: hci6: command tx timeout [ 165.026167] Bluetooth: hci0: command tx timeout [ 165.026239] Bluetooth: hci1: command tx timeout [ 165.154190] Bluetooth: hci3: command tx timeout [ 165.154308] Bluetooth: hci2: command tx timeout [ 165.282049] Bluetooth: hci4: command tx timeout [ 165.346271] Bluetooth: hci5: command tx timeout [ 165.346327] Bluetooth: hci6: command tx timeout [ 165.346387] Bluetooth: hci7: command tx timeout [ 217.032263] [ 217.032514] ====================================================== [ 217.033070] WARNING: possible circular locking dependency detected [ 217.033670] 6.13.0-rc7-next-20250117 #1 Not tainted [ 217.034126] ------------------------------------------------------ [ 217.035435] kworker/u8:1/65 is trying to acquire lock: [ 217.036595] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.038781] [ 217.038781] but task is already holding lock: [ 217.039605] ffff888031610768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.040532] [ 217.040532] which lock already depends on the new lock. [ 217.040532] [ 217.041282] [ 217.041282] the existing dependency chain (in reverse order) is: [ 217.041947] [ 217.041947] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 217.042590] __mutex_lock+0x13d/0xb50 [ 217.043055] wiphy_register+0x1b2e/0x25d0 [ 217.043546] ieee80211_register_hw+0x23a4/0x3d60 [ 217.044089] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 217.044653] init_mac80211_hwsim+0x389/0x870 [ 217.045179] do_one_initcall+0xf9/0x640 [ 217.045662] kernel_init_freeable+0x53d/0x7a0 [ 217.046176] kernel_init+0x1e/0x2d0 [ 217.046601] ret_from_fork+0x48/0x80 [ 217.047050] ret_from_fork_asm+0x1a/0x30 [ 217.047535] [ 217.047535] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 217.048140] __lock_acquire+0x29fd/0x4580 [ 217.048596] lock_acquire+0x19b/0x520 [ 217.049023] __mutex_lock+0x13d/0xb50 [ 217.049453] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.050049] unregister_netdevice_queue+0x224/0x2e0 [ 217.050591] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.051135] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.051676] ieee80211_unregister_hw+0x55/0x3a0 [ 217.052190] hwsim_exit_net+0x3a0/0x730 [ 217.052624] ops_exit_list+0xb3/0x180 [ 217.053042] cleanup_net+0x546/0xad0 [ 217.053455] process_one_work+0x8ee/0x1a10 [ 217.053929] worker_thread+0x674/0xe70 [ 217.054376] kthread+0x3ab/0x720 [ 217.054773] ret_from_fork+0x48/0x80 [ 217.055177] ret_from_fork_asm+0x1a/0x30 [ 217.055642] [ 217.055642] other info that might help us debug this: [ 217.055642] [ 217.056372] Possible unsafe locking scenario: [ 217.056372] [ 217.056906] CPU0 CPU1 [ 217.057335] ---- ---- [ 217.057787] lock(&rdev->wiphy.mtx); [ 217.058192] lock(rtnl_mutex); [ 217.058767] lock(&rdev->wiphy.mtx); [ 217.059356] lock(rtnl_mutex); [ 217.059691] [ 217.059691] *** DEADLOCK *** [ 217.059691] [ 217.060245] 4 locks held by kworker/u8:1/65: [ 217.060662] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 217.061651] #1: ffff88800c127d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 217.062573] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 217.063434] #3: ffff888031610768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.064429] [ 217.064429] stack backtrace: [ 217.064842] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 217.065597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 217.066325] Workqueue: netns cleanup_net [ 217.066718] Call Trace: [ 217.066961] [ 217.067184] dump_stack_lvl+0xca/0x120 [ 217.067593] print_circular_bug+0x47b/0x750 [ 217.068031] check_noncircular+0x2e9/0x3c0 [ 217.068447] ? __pfx_check_noncircular+0x10/0x10 [ 217.068908] ? hlock_class+0x4e/0x130 [ 217.069279] ? mark_lock+0xac/0xed0 [ 217.069647] ? srso_return_thunk+0x5/0x5f [ 217.070071] ? timerqueue_del+0x83/0x150 [ 217.070479] ? lockdep_lock+0xba/0x1b0 [ 217.070885] ? __pfx_lockdep_lock+0x10/0x10 [ 217.071331] __lock_acquire+0x29fd/0x4580 [ 217.071759] ? __pfx___lock_acquire+0x10/0x10 [ 217.072213] ? lock_release+0x20f/0x6f0 [ 217.072613] ? __pfx_lock_release+0x10/0x10 [ 217.073046] lock_acquire+0x19b/0x520 [ 217.073432] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.074010] ? __pfx_lock_acquire+0x10/0x10 [ 217.074452] ? srso_return_thunk+0x5/0x5f [ 217.074894] ? lock_release+0x20f/0x6f0 [ 217.075311] ? srso_return_thunk+0x5/0x5f [ 217.075748] ? lock_is_held_type+0x9e/0x120 [ 217.076212] ? srso_return_thunk+0x5/0x5f [ 217.076661] __mutex_lock+0x13d/0xb50 [ 217.077067] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.077656] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.078225] ? srso_return_thunk+0x5/0x5f [ 217.078658] ? synchronize_rcu_expedited+0x38a/0x420 [ 217.079174] ? __pfx___mutex_lock+0x10/0x10 [ 217.079621] ? __pfx_autoremove_wake_function+0x10/0x10 [ 217.080158] ? srso_return_thunk+0x5/0x5f [ 217.080593] ? kasan_quarantine_put+0x84/0x1e0 [ 217.081062] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 217.081506] ? srso_return_thunk+0x5/0x5f [ 217.081918] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.082447] ? __virt_addr_valid+0x2e8/0x5d0 [ 217.082883] ? __pfx_lock_release+0x10/0x10 [ 217.083313] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 217.083895] ? find_held_lock+0x2c/0x110 [ 217.084320] ? srso_return_thunk+0x5/0x5f [ 217.084744] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 217.085239] ? srso_return_thunk+0x5/0x5f [ 217.085663] ? lock_release+0x20f/0x6f0 [ 217.086050] ? __pfx_lock_release+0x10/0x10 [ 217.086459] ? srso_return_thunk+0x5/0x5f [ 217.086882] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.087398] ? srso_return_thunk+0x5/0x5f [ 217.087844] unregister_netdevice_queue+0x224/0x2e0 [ 217.088313] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 217.088819] ? up_write+0x195/0x520 [ 217.089205] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.089706] ? srso_return_thunk+0x5/0x5f [ 217.090149] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.090650] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 217.091200] ? srso_return_thunk+0x5/0x5f [ 217.091635] ? srso_return_thunk+0x5/0x5f [ 217.092074] ? synchronize_rcu+0x1ff/0x260 [ 217.092501] ieee80211_unregister_hw+0x55/0x3a0 [ 217.092970] hwsim_exit_net+0x3a0/0x730 [ 217.093376] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.093816] ? srso_return_thunk+0x5/0x5f [ 217.094252] ? netdev_run_todo+0x788/0x1040 [ 217.094683] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.095112] ops_exit_list+0xb3/0x180 [ 217.095488] cleanup_net+0x546/0xad0 [ 217.095872] ? __pfx_cleanup_net+0x10/0x10 [ 217.096305] process_one_work+0x8ee/0x1a10 [ 217.096749] ? __pfx_lock_acquire+0x10/0x10 [ 217.097180] ? __pfx_process_one_work+0x10/0x10 [ 217.097655] ? srso_return_thunk+0x5/0x5f [ 217.098080] ? move_linked_works+0x172/0x270 [ 217.098519] ? srso_return_thunk+0x5/0x5f [ 217.098944] ? assign_work+0x196/0x240 [ 217.099353] worker_thread+0x674/0xe70 [ 217.099769] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.100295] ? srso_return_thunk+0x5/0x5f [ 217.100722] ? __pfx_worker_thread+0x10/0x10 [ 217.101191] kthread+0x3ab/0x720 [ 217.101555] ? __pfx_kthread+0x10/0x10 [ 217.101966] ? srso_return_thunk+0x5/0x5f [ 217.102401] ? finish_task_switch.isra.0+0x206/0x840 [ 217.102918] ? __pfx_kthread+0x10/0x10 [ 217.103334] ret_from_fork+0x48/0x80 [ 217.103713] ? __pfx_kthread+0x10/0x10 [ 217.104133] ret_from_fork_asm+0x1a/0x30 [ 217.104576] [ 218.732971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.735217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.737295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.739330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.741557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.742144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.748752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.753976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.757648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.758200] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.761762] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.770414] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.805872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.811363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.813202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.818542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.820857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.822833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.871296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.877267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.890097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.894559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.903166] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.905274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.951048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.960487] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.967419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.977064] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.987566] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.996102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.061559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.072082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.076260] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.081178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.086107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.086279] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.089509] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.096608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.097673] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.110028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.113357] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.116289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.120266] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.120478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.120503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.121660] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.121784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.122313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.835035] Bluetooth: hci2: command tx timeout [ 220.835107] Bluetooth: hci1: command tx timeout [ 220.835172] Bluetooth: hci0: command tx timeout [ 220.962038] Bluetooth: hci3: command tx timeout [ 221.091047] Bluetooth: hci4: command tx timeout [ 221.284068] Bluetooth: hci7: command tx timeout [ 221.284477] Bluetooth: hci5: command tx timeout [ 221.284516] Bluetooth: hci6: command tx timeout [ 222.883962] Bluetooth: hci0: command tx timeout [ 222.884001] Bluetooth: hci1: command tx timeout [ 222.884069] Bluetooth: hci2: command tx timeout [ 223.010051] Bluetooth: hci3: command tx timeout [ 223.138064] Bluetooth: hci4: command tx timeout [ 223.330094] Bluetooth: hci6: command tx timeout [ 223.330278] Bluetooth: hci5: command tx timeout [ 223.330376] Bluetooth: hci7: command tx timeout [ 224.930168] Bluetooth: hci0: command tx timeout [ 224.930767] Bluetooth: hci2: command tx timeout [ 224.930813] Bluetooth: hci1: command tx timeout [ 225.058284] Bluetooth: hci3: command tx timeout [ 225.187686] Bluetooth: hci4: command tx timeout [ 225.378048] Bluetooth: hci7: command tx timeout [ 225.378081] Bluetooth: hci6: command tx timeout [ 225.378133] Bluetooth: hci5: command tx timeout [ 226.979068] Bluetooth: hci1: command tx timeout [ 226.979259] Bluetooth: hci0: command tx timeout [ 226.979362] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 01:47:49 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800bed2400 RCX=ffffffff81429a4a RDX=1ffff110017d7445 RSI=0000000000000008 RDI=ffff88800bed2400 RBP=0000000000200000 RSP=ffff88800c3b7db0 R8 =0000000000000000 R9 =ffffed10017da480 R10=0000000000200000 R11=0000000000000001 R12=ffff88806d452ff9 R13=ffffffff8862a5f8 R14=ffff88800beb9bc0 R15=0000000000000086 RIP=ffffffff81abb7c8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd26e5e000 CR3=00000000163fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000302750000000c00024bf20 XMM02=000000c00010e6e0000000c000338280 XMM03=000000c000338190000000c000302b70 XMM04=000000c000087230000000c000087200 XMM05=000000c00005bf80000000c00005bf50 XMM06=000000c00005bfb0000000c00005a4b0 XMM07=000000c0000a6030000000c0000a6000 XMM08=000000c0000a6090000000c0000a6060 XMM09=000000c0000a60f0000000c0000a60c0 XMM10=000000c0000a6150000000c0000a6120 XMM11=000000c00005a4e0000000c0000a6180 XMM12=000000c0000a8c60000000c0000a61b0 XMM13=000000c0006cd5c0000000c0006cd440 XMM14=000000c000517800000000c0005177a0 XMM15=000000c0007d3100000000c0007d30e0 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800c126b98 R8 =0000000000000001 R9 =ffffed1001824d67 R10=0000000000000000 R11=3a6b636f6c206762 R12=0000000000000000 R13=ffff88800c126eb8 R14=ffffffff88693320 R15=0000000000000000 RIP=ffffffff8283ce1d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6d0a122038 CR3=00000000163fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004172102080000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000