Warning: Permanently added '[localhost]:43828' (ECDSA) to the list of known hosts. 2025/01/17 20:48:20 fuzzer started 2025/01/17 20:48:20 dialing manager at localhost:44245 syzkaller login: [ 77.732573] cgroup: Unknown subsys name 'net' [ 77.815848] cgroup: Unknown subsys name 'cpuset' [ 77.832154] cgroup: Unknown subsys name 'rlimit' [ 82.320209] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 20:48:38 syscalls: 2217 2025/01/17 20:48:38 code coverage: enabled 2025/01/17 20:48:38 comparison tracing: enabled 2025/01/17 20:48:38 extra coverage: enabled 2025/01/17 20:48:38 setuid sandbox: enabled 2025/01/17 20:48:38 namespace sandbox: enabled 2025/01/17 20:48:38 Android sandbox: enabled 2025/01/17 20:48:38 fault injection: enabled 2025/01/17 20:48:38 leak checking: enabled 2025/01/17 20:48:38 net packet injection: enabled 2025/01/17 20:48:38 net device setup: enabled 2025/01/17 20:48:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 20:48:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 20:48:38 USB emulation: enabled 2025/01/17 20:48:38 hci packet injection: enabled 2025/01/17 20:48:38 wifi device emulation: enabled 2025/01/17 20:48:38 802.15.4 emulation: enabled 2025/01/17 20:48:38 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/17 20:48:38 fetching corpus: 1, signal 573/2047 (executing program) 2025/01/17 20:48:38 fetching corpus: 1, signal 573/2047 (executing program) 2025/01/17 20:48:41 starting 8 fuzzer processes 20:48:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x34, 0x0, 0x0) 20:48:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 20:48:41 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) 20:48:41 executing program 3: ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @local}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x0, @remote}, 'macsec0\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) [ 98.485922] audit: type=1400 audit(1737146921.749:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:48:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = openat(r0, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r2, &(0x7f0000000400)=""/4109, 0xfffffdef, 0x10) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) renameat2(r2, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./file1\x00', 0x1) write(r1, 0x0, 0x0) 20:48:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr\x00') getdents(r0, &(0x7f0000000000)=""/95, 0x5f) 20:48:41 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000240)=0x100000) 20:48:41 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wlan0\x00', {0x2, 0x0, @loopback}}) [ 99.886327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.891983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.894380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.903228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.908652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.913287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.944882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.948473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.951566] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.954726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.956798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.968153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.969926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.976785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.980854] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.992551] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.995485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.996788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.016555] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.026996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.036061] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.046443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.063638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.073880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.076277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.081627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.085744] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.091331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.091653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.107387] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 100.109582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.113987] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 100.117046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 100.117649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.123020] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 100.127829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 100.150532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.152297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 100.157637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.159160] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 100.193000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 100.206559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 100.208368] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.208697] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.212018] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 100.213347] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.213719] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 100.216201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.958473] Bluetooth: hci0: command tx timeout [ 102.021438] Bluetooth: hci2: command tx timeout [ 102.086179] Bluetooth: hci1: command tx timeout [ 102.217372] Bluetooth: hci5: command tx timeout [ 102.217394] Bluetooth: hci3: command tx timeout [ 102.277207] Bluetooth: hci4: command tx timeout [ 102.277282] Bluetooth: hci6: command tx timeout [ 102.342438] Bluetooth: hci7: command tx timeout [ 104.007150] Bluetooth: hci0: command tx timeout [ 104.069359] Bluetooth: hci2: command tx timeout [ 104.133369] Bluetooth: hci1: command tx timeout [ 104.262473] Bluetooth: hci5: command tx timeout [ 104.262900] Bluetooth: hci3: command tx timeout [ 104.326224] Bluetooth: hci4: command tx timeout [ 104.326316] Bluetooth: hci6: command tx timeout [ 104.390213] Bluetooth: hci7: command tx timeout [ 106.053165] Bluetooth: hci0: command tx timeout [ 106.118247] Bluetooth: hci2: command tx timeout [ 106.182424] Bluetooth: hci1: command tx timeout [ 106.310194] Bluetooth: hci3: command tx timeout [ 106.310292] Bluetooth: hci5: command tx timeout [ 106.373286] Bluetooth: hci4: command tx timeout [ 106.374620] Bluetooth: hci6: command tx timeout [ 106.437778] Bluetooth: hci7: command tx timeout [ 108.101179] Bluetooth: hci0: command tx timeout [ 108.166126] Bluetooth: hci2: command tx timeout [ 108.229533] Bluetooth: hci1: command tx timeout [ 108.357269] Bluetooth: hci3: command tx timeout [ 108.357393] Bluetooth: hci5: command tx timeout [ 108.421433] Bluetooth: hci6: command tx timeout [ 108.421505] Bluetooth: hci4: command tx timeout [ 108.485243] Bluetooth: hci7: command tx timeout [ 163.088596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.091293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.095689] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.099661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.101945] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.103676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.160772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.163038] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.163620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.169895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.174209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.177774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.179006] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.185221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.187611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.189451] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.190996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.191708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.192880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.193333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.194506] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.196720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.202688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.204098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.213337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.220974] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.235862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.239919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.244542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.244978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.245294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.248345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.250519] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.252601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.254563] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.258619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.261368] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.262697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.268394] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.275193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.276999] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.278332] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.278584] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.317703] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.319172] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.330298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.355215] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.369214] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 165.189151] Bluetooth: hci0: command tx timeout [ 165.253184] Bluetooth: hci3: command tx timeout [ 165.381370] Bluetooth: hci6: command tx timeout [ 165.381932] Bluetooth: hci1: command tx timeout [ 165.382192] Bluetooth: hci5: command tx timeout [ 165.382311] Bluetooth: hci2: command tx timeout [ 165.382425] Bluetooth: hci4: command tx timeout [ 165.448208] Bluetooth: hci7: command tx timeout [ 167.237490] Bluetooth: hci0: command tx timeout [ 167.302562] Bluetooth: hci3: command tx timeout [ 167.430116] Bluetooth: hci4: command tx timeout [ 167.430247] Bluetooth: hci6: command tx timeout [ 167.430355] Bluetooth: hci2: command tx timeout [ 167.430434] Bluetooth: hci5: command tx timeout [ 167.430511] Bluetooth: hci1: command tx timeout [ 167.494159] Bluetooth: hci7: command tx timeout [ 169.287206] Bluetooth: hci0: command tx timeout [ 169.351328] Bluetooth: hci3: command tx timeout [ 169.479169] Bluetooth: hci4: command tx timeout [ 169.479420] Bluetooth: hci1: command tx timeout [ 169.479481] Bluetooth: hci5: command tx timeout [ 169.479531] Bluetooth: hci2: command tx timeout [ 169.479580] Bluetooth: hci6: command tx timeout [ 169.541155] Bluetooth: hci7: command tx timeout [ 171.334233] Bluetooth: hci0: command tx timeout [ 171.398212] Bluetooth: hci3: command tx timeout [ 171.526317] Bluetooth: hci6: command tx timeout [ 171.526641] Bluetooth: hci2: command tx timeout [ 171.526749] Bluetooth: hci5: command tx timeout [ 171.526825] Bluetooth: hci1: command tx timeout [ 171.526903] Bluetooth: hci4: command tx timeout [ 171.590121] Bluetooth: hci7: command tx timeout [ 220.646982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.647156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.928969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.929114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.190449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.190815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.586476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.586556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.651055] [ 222.651307] ====================================================== [ 222.651901] WARNING: possible circular locking dependency detected [ 222.652501] 6.13.0-rc7-next-20250117 #1 Not tainted [ 222.652990] ------------------------------------------------------ [ 222.657252] kworker/u8:0/11 is trying to acquire lock: [ 222.657758] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 222.658769] [ 222.658769] but task is already holding lock: [ 222.659336] ffff88803bac0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 222.660321] [ 222.660321] which lock already depends on the new lock. [ 222.660321] [ 222.661088] [ 222.661088] the existing dependency chain (in reverse order) is: [ 222.661790] [ 222.661790] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 222.662453] __mutex_lock+0x13d/0xb50 [ 222.662916] wiphy_register+0x1b2e/0x25d0 [ 222.663408] ieee80211_register_hw+0x23a4/0x3d60 [ 222.663948] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 222.664529] init_mac80211_hwsim+0x389/0x870 [ 222.665054] do_one_initcall+0xf9/0x640 [ 222.665538] kernel_init_freeable+0x53d/0x7a0 [ 222.666070] kernel_init+0x1e/0x2d0 [ 222.666494] ret_from_fork+0x48/0x80 [ 222.666926] ret_from_fork_asm+0x1a/0x30 [ 222.667407] [ 222.667407] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 222.668032] __lock_acquire+0x29fd/0x4580 [ 222.668527] lock_acquire+0x19b/0x520 [ 222.668970] __mutex_lock+0x13d/0xb50 [ 222.669424] unregister_netdevice_many_notify+0x1612/0x1c80 [ 222.670030] unregister_netdevice_queue+0x224/0x2e0 [ 222.670583] _cfg80211_unregister_wdev+0x57b/0x700 [ 222.671142] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 222.671691] ieee80211_unregister_hw+0x55/0x3a0 [ 222.672225] hwsim_exit_net+0x3a0/0x730 [ 222.672687] ops_exit_list+0xb3/0x180 [ 222.673135] cleanup_net+0x546/0xad0 [ 222.673577] process_one_work+0x8ee/0x1a10 [ 222.674082] worker_thread+0x674/0xe70 [ 222.674554] kthread+0x3ab/0x720 [ 222.674977] ret_from_fork+0x48/0x80 [ 222.675409] ret_from_fork_asm+0x1a/0x30 [ 222.675897] [ 222.675897] other info that might help us debug this: [ 222.675897] [ 222.676658] Possible unsafe locking scenario: [ 222.676658] [ 222.677228] CPU0 CPU1 [ 222.677678] ---- ---- [ 222.678124] lock(&rdev->wiphy.mtx); [ 222.678527] lock(rtnl_mutex); [ 222.679113] lock(&rdev->wiphy.mtx); [ 222.679738] lock(rtnl_mutex); [ 222.680102] [ 222.680102] *** DEADLOCK *** [ 222.680102] [ 222.680671] 4 locks held by kworker/u8:0/11: [ 222.681108] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 222.682120] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 222.683089] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 222.684000] #3: ffff88803bac0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 222.685047] [ 222.685047] stack backtrace: [ 222.685485] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 222.686283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 222.687057] Workqueue: netns cleanup_net [ 222.687472] Call Trace: [ 222.687725] [ 222.687949] dump_stack_lvl+0xca/0x120 [ 222.688368] print_circular_bug+0x47b/0x750 [ 222.688812] check_noncircular+0x2e9/0x3c0 [ 222.689241] ? __pfx_check_noncircular+0x10/0x10 [ 222.689721] ? hlock_class+0x4e/0x130 [ 222.690101] ? srso_return_thunk+0x5/0x5f [ 222.690534] ? mark_lock+0xac/0xed0 [ 222.690917] ? lockdep_lock+0xba/0x1b0 [ 222.691333] ? __pfx_lockdep_lock+0x10/0x10 [ 222.691786] __lock_acquire+0x29fd/0x4580 [ 222.692223] ? __pfx___lock_acquire+0x10/0x10 [ 222.692678] ? lock_release+0x20f/0x6f0 [ 222.693094] ? __pfx_lock_release+0x10/0x10 [ 222.693532] ? srso_return_thunk+0x5/0x5f [ 222.693969] lock_acquire+0x19b/0x520 [ 222.694359] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 222.694937] ? __pfx_lock_acquire+0x10/0x10 [ 222.695374] ? __pfx_lock_release+0x10/0x10 [ 222.695809] ? __pfx_try_to_wake_up+0x10/0x10 [ 222.696269] ? srso_return_thunk+0x5/0x5f [ 222.696698] ? lock_is_held_type+0x9e/0x120 [ 222.697149] ? srso_return_thunk+0x5/0x5f [ 222.697582] __mutex_lock+0x13d/0xb50 [ 222.697982] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 222.698557] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 222.699127] ? srso_return_thunk+0x5/0x5f [ 222.699560] ? synchronize_rcu_expedited+0x38a/0x420 [ 222.700067] ? __pfx___mutex_lock+0x10/0x10 [ 222.700526] ? srso_return_thunk+0x5/0x5f [ 222.700964] ? srso_return_thunk+0x5/0x5f [ 222.701395] ? kasan_quarantine_put+0x84/0x1e0 [ 222.701872] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 222.702324] ? srso_return_thunk+0x5/0x5f [ 222.702762] unregister_netdevice_many_notify+0x1612/0x1c80 [ 222.703320] ? lock_release+0x20f/0x6f0 [ 222.703732] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 222.704327] ? srso_return_thunk+0x5/0x5f [ 222.704764] ? srso_return_thunk+0x5/0x5f [ 222.705193] ? wake_up_q+0x9e/0x140 [ 222.705569] ? srso_return_thunk+0x5/0x5f [ 222.706000] ? rwsem_wake.isra.0+0xc3/0x110 [ 222.706443] ? __pfx_rwsem_wake.isra.0+0x10/0x10 [ 222.706929] ? srso_return_thunk+0x5/0x5f [ 222.707365] unregister_netdevice_queue+0x224/0x2e0 [ 222.707861] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 222.708404] ? up_write+0x208/0x520 [ 222.708795] _cfg80211_unregister_wdev+0x57b/0x700 [ 222.709293] ? srso_return_thunk+0x5/0x5f [ 222.709727] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 222.710232] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 222.710777] ? srso_return_thunk+0x5/0x5f [ 222.711206] ? srso_return_thunk+0x5/0x5f [ 222.711639] ? synchronize_rcu+0x1ff/0x260 [ 222.712069] ieee80211_unregister_hw+0x55/0x3a0 [ 222.712543] hwsim_exit_net+0x3a0/0x730 [ 222.712954] ? __pfx_hwsim_exit_net+0x10/0x10 [ 222.713404] ? srso_return_thunk+0x5/0x5f [ 222.713839] ? netdev_run_todo+0x788/0x1040 [ 222.714286] ? __pfx_hwsim_exit_net+0x10/0x10 [ 222.714739] ops_exit_list+0xb3/0x180 [ 222.715129] cleanup_net+0x546/0xad0 [ 222.715515] ? __pfx_cleanup_net+0x10/0x10 [ 222.715955] process_one_work+0x8ee/0x1a10 [ 222.716409] ? __pfx_lock_acquire+0x10/0x10 [ 222.716846] ? __pfx_process_one_work+0x10/0x10 [ 222.717333] ? srso_return_thunk+0x5/0x5f [ 222.717763] ? move_linked_works+0x172/0x270 [ 222.718211] ? srso_return_thunk+0x5/0x5f [ 222.718642] ? assign_work+0x196/0x240 [ 222.719059] worker_thread+0x674/0xe70 [ 222.719472] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 222.720005] ? __pfx_worker_thread+0x10/0x10 [ 222.720473] kthread+0x3ab/0x720 [ 222.720834] ? __pfx_kthread+0x10/0x10 [ 222.721242] ? srso_return_thunk+0x5/0x5f [ 222.721674] ? finish_task_switch.isra.0+0x206/0x840 [ 222.722192] ? __pfx_kthread+0x10/0x10 [ 222.722605] ret_from_fork+0x48/0x80 [ 222.722978] ? __pfx_kthread+0x10/0x10 [ 222.723384] ret_from_fork_asm+0x1a/0x30 [ 222.723820] [ 224.970809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.972591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.974703] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.979692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.981380] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.985293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.165089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.168122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.170236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.174992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.178926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.181511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.298539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.309314] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.309960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.317253] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.320310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.320805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.368158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.377900] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.387144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.389644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.394777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.397280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.401420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.403725] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.405346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.417197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.418195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.423162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.424572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.429012] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.434842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.439009] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.442720] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.450251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.494589] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.494598] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.503275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.518970] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.521172] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.526381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.527174] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.528024] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.528904] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.529210] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 225.532887] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.534385] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 227.013113] Bluetooth: hci0: command tx timeout [ 227.206082] Bluetooth: hci1: command tx timeout [ 227.397101] Bluetooth: hci2: command tx timeout [ 227.525130] Bluetooth: hci5: command tx timeout [ 227.525184] Bluetooth: hci4: command tx timeout [ 227.526167] Bluetooth: hci3: command tx timeout [ 227.590120] Bluetooth: hci6: command tx timeout [ 227.590180] Bluetooth: hci7: command tx timeout [ 229.063140] Bluetooth: hci0: command tx timeout [ 229.254417] Bluetooth: hci1: command tx timeout [ 229.445369] Bluetooth: hci2: command tx timeout [ 229.574237] Bluetooth: hci3: command tx timeout [ 229.574390] Bluetooth: hci5: command tx timeout [ 229.575522] Bluetooth: hci4: command tx timeout [ 229.639115] Bluetooth: hci6: command tx timeout [ 229.639227] Bluetooth: hci7: command tx timeout [ 231.109140] Bluetooth: hci0: command tx timeout [ 231.301156] Bluetooth: hci1: command tx timeout [ 231.493168] Bluetooth: hci2: command tx timeout [ 231.621120] Bluetooth: hci3: command tx timeout [ 231.622220] Bluetooth: hci4: command tx timeout [ 231.622814] Bluetooth: hci5: command tx timeout [ 231.685157] Bluetooth: hci7: command tx timeout [ 231.685172] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 20:50:46 Registers: info registers vcpu 0 RAX=ffff888034c78001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888034c77d01 RSI=ffff888034c77d00 RDI=ffff888034c775e8 RBP=ffff888034c77630 RSP=ffff888034c77568 R8 =ffffffff867a15dc R9 =ffff888034c77618 R10=000000000003ab4d R11=00000000000081e8 R12=ffff888034c77638 R13=ffff888034c77620 R14=ffff888034c77d08 R15=ffff888034c775d8 RIP=ffffffff813498b0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fef13172f60 CR3=0000000016954000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004161bd8d00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=000000000000002d R11=2d2d2d2d2d2d2d2d R12=000000000000002d R13=0000000000000001 R14=ffff888008fea041 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d379f121b8 CR3=0000000016954000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=34303338353034383872696474736574 XMM02=2f343033383530343838726964747365 XMM03=3961447565412e72656c6c616b7a7973 XMM04=657220726f7475636578651100736465 XMM05=7a756620636578650900737472617473 XMM06=74616469646e616320636578650e007a XMM07=0d0065676169727420636578650b0065 XMM08=6e6567206365786508006c61746f7420 XMM09=78651100736465657320636578650a00 XMM10=00737472617473657220726f74756365 XMM11=636578650e007a7a7566206365786509 XMM12=636578650b006574616469646e616320 XMM13=696d20636578650d0065676169727420 XMM14=616d7320636578650a00657a696d696e XMM15=000073746e696820636578650a006873