Warning: Permanently added '[localhost]:39364' (ECDSA) to the list of known hosts. 2025/01/17 22:42:09 fuzzer started 2025/01/17 22:42:10 dialing manager at localhost:44245 syzkaller login: [ 70.948835] cgroup: Unknown subsys name 'net' [ 71.053943] cgroup: Unknown subsys name 'cpuset' [ 71.083677] cgroup: Unknown subsys name 'rlimit' [ 78.145848] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 87.537089] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 22:42:27 syscalls: 2217 2025/01/17 22:42:27 code coverage: enabled 2025/01/17 22:42:27 comparison tracing: enabled 2025/01/17 22:42:27 extra coverage: enabled 2025/01/17 22:42:27 setuid sandbox: enabled 2025/01/17 22:42:27 namespace sandbox: enabled 2025/01/17 22:42:27 Android sandbox: enabled 2025/01/17 22:42:27 fault injection: enabled 2025/01/17 22:42:27 leak checking: enabled 2025/01/17 22:42:27 net packet injection: enabled 2025/01/17 22:42:27 net device setup: enabled 2025/01/17 22:42:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 22:42:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 22:42:27 USB emulation: enabled 2025/01/17 22:42:27 hci packet injection: enabled 2025/01/17 22:42:27 wifi device emulation: enabled 2025/01/17 22:42:27 802.15.4 emulation: enabled 2025/01/17 22:42:27 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/17 22:42:27 fetching corpus: 2, signal 2989/4086 (executing program) 2025/01/17 22:42:27 fetching corpus: 2, signal 2989/4118 (executing program) 2025/01/17 22:42:27 fetching corpus: 2, signal 2989/4118 (executing program) 2025/01/17 22:42:31 starting 8 fuzzer processes 22:42:31 executing program 0: io_uring_setup(0x5b71, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0xa5}) 22:42:31 executing program 1: ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x80000}) io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1257c2, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) 22:42:31 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) fstat(r0, &(0x7f0000012b40)) 22:42:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) sysfs$2(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 91.994737] audit: type=1400 audit(1737153751.575:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:42:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x3, 0x0, [0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000140), 0x80000001, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x18, &(0x7f0000000080)={r2, 0x1, 0x4, @broadcast}, 0x10) shutdown(0xffffffffffffffff, 0x0) 22:42:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x80045432, &(0x7f0000000040)={0x0, 0x0}) 22:42:31 executing program 6: mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x44, 0x0, @thr={0x0, 0x0}}) 22:42:31 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000000000d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x10, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003b40), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(r1, r0, 0x0, 0x8) [ 93.473341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.475429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.477004] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.479239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.481576] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.482836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.540548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.545157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.549819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.552497] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.554019] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.554960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.599709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.606082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.606520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.609925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.611278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.614766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.616114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.617234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.625693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.629846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.631728] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.632879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.675094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.685261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.699967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.708943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.715348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.716982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.734565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.742915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.747078] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.748123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.752266] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.754846] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.761951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.762360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.768259] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.781796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.818029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.866375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.870278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.873042] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.875779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.878924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.889913] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.922256] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.510026] Bluetooth: hci0: command tx timeout [ 95.573692] Bluetooth: hci1: command tx timeout [ 95.701685] Bluetooth: hci3: command tx timeout [ 95.701756] Bluetooth: hci2: command tx timeout [ 95.767261] Bluetooth: hci4: command tx timeout [ 95.830697] Bluetooth: hci7: command tx timeout [ 95.964658] Bluetooth: hci5: command tx timeout [ 96.085738] Bluetooth: hci6: command tx timeout [ 97.557976] Bluetooth: hci0: command tx timeout [ 97.621748] Bluetooth: hci1: command tx timeout [ 97.749666] Bluetooth: hci2: command tx timeout [ 97.749776] Bluetooth: hci3: command tx timeout [ 97.814671] Bluetooth: hci4: command tx timeout [ 97.878624] Bluetooth: hci7: command tx timeout [ 98.006628] Bluetooth: hci5: command tx timeout [ 98.133724] Bluetooth: hci6: command tx timeout [ 99.606689] Bluetooth: hci0: command tx timeout [ 99.671338] Bluetooth: hci1: command tx timeout [ 99.797697] Bluetooth: hci2: command tx timeout [ 99.797805] Bluetooth: hci3: command tx timeout [ 99.861962] Bluetooth: hci4: command tx timeout [ 99.925700] Bluetooth: hci7: command tx timeout [ 100.054673] Bluetooth: hci5: command tx timeout [ 100.182653] Bluetooth: hci6: command tx timeout [ 101.653923] Bluetooth: hci0: command tx timeout [ 101.717699] Bluetooth: hci1: command tx timeout [ 101.845987] Bluetooth: hci2: command tx timeout [ 101.848139] Bluetooth: hci3: command tx timeout [ 101.911641] Bluetooth: hci4: command tx timeout [ 101.973725] Bluetooth: hci7: command tx timeout [ 102.101737] Bluetooth: hci5: command tx timeout [ 102.229728] Bluetooth: hci6: command tx timeout [ 156.065000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.067550] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.073408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.083974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.089792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.092166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.144360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.146400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.149096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.154455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.159473] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.161469] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.171275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.180968] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.196996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.211640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.213536] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.214348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.282260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.285531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.288274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.292207] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.292705] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.297089] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.301135] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.306195] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.307110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.311232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.313891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.313973] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.315277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.316281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.316788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.320629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.325067] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.326991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.328078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.329007] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.336956] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.337266] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.337913] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.347102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.359129] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.365024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.368024] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.392972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.420103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.431176] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.167240] Bluetooth: hci0: command tx timeout [ 158.229686] Bluetooth: hci1: command tx timeout [ 158.293719] Bluetooth: hci2: command tx timeout [ 158.357672] Bluetooth: hci3: command tx timeout [ 158.421706] Bluetooth: hci6: command tx timeout [ 158.422512] Bluetooth: hci7: command tx timeout [ 158.422727] Bluetooth: hci4: command tx timeout [ 158.485687] Bluetooth: hci5: command tx timeout [ 160.216714] Bluetooth: hci0: command tx timeout [ 160.279753] Bluetooth: hci1: command tx timeout [ 160.342673] Bluetooth: hci2: command tx timeout [ 160.406691] Bluetooth: hci3: command tx timeout [ 160.469688] Bluetooth: hci7: command tx timeout [ 160.469803] Bluetooth: hci4: command tx timeout [ 160.469901] Bluetooth: hci6: command tx timeout [ 160.534679] Bluetooth: hci5: command tx timeout [ 162.263638] Bluetooth: hci0: command tx timeout [ 162.326117] Bluetooth: hci1: command tx timeout [ 162.389985] Bluetooth: hci2: command tx timeout [ 162.453735] Bluetooth: hci3: command tx timeout [ 162.517742] Bluetooth: hci7: command tx timeout [ 162.518352] Bluetooth: hci6: command tx timeout [ 162.518449] Bluetooth: hci4: command tx timeout [ 162.582685] Bluetooth: hci5: command tx timeout [ 164.310838] Bluetooth: hci0: command tx timeout [ 164.375689] Bluetooth: hci1: command tx timeout [ 164.438691] Bluetooth: hci2: command tx timeout [ 164.502088] Bluetooth: hci3: command tx timeout [ 164.566919] Bluetooth: hci4: command tx timeout [ 164.567887] Bluetooth: hci6: command tx timeout [ 164.567990] Bluetooth: hci7: command tx timeout [ 164.630683] Bluetooth: hci5: command tx timeout [ 214.299212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.299348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.611313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.611404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.773864] [ 217.774279] ====================================================== [ 217.775363] WARNING: possible circular locking dependency detected [ 217.776436] 6.13.0-rc7-next-20250117 #1 Not tainted [ 217.778713] ------------------------------------------------------ [ 217.782038] kworker/u8:0/11 is trying to acquire lock: [ 217.784732] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.786609] [ 217.786609] but task is already holding lock: [ 217.787666] ffff88803b9d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.789428] [ 217.789428] which lock already depends on the new lock. [ 217.789428] [ 217.790841] [ 217.790841] the existing dependency chain (in reverse order) is: [ 217.792195] [ 217.792195] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 217.793435] __mutex_lock+0x13d/0xb50 [ 217.794313] wiphy_register+0x1b2e/0x25d0 [ 217.795240] ieee80211_register_hw+0x23a4/0x3d60 [ 217.796232] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 217.797268] init_mac80211_hwsim+0x389/0x870 [ 217.798220] do_one_initcall+0xf9/0x640 [ 217.799110] kernel_init_freeable+0x53d/0x7a0 [ 217.800097] kernel_init+0x1e/0x2d0 [ 217.800880] ret_from_fork+0x48/0x80 [ 217.801689] ret_from_fork_asm+0x1a/0x30 [ 217.802569] [ 217.802569] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 217.803735] __lock_acquire+0x29fd/0x4580 [ 217.804640] lock_acquire+0x19b/0x520 [ 217.805460] __mutex_lock+0x13d/0xb50 [ 217.806311] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.807493] unregister_netdevice_queue+0x224/0x2e0 [ 217.808537] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.809595] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.810622] ieee80211_unregister_hw+0x55/0x3a0 [ 217.811612] hwsim_exit_net+0x3a0/0x730 [ 217.812468] ops_exit_list+0xb3/0x180 [ 217.813292] cleanup_net+0x546/0xad0 [ 217.814119] process_one_work+0x8ee/0x1a10 [ 217.815184] worker_thread+0x674/0xe70 [ 217.816220] kthread+0x3ab/0x720 [ 217.817142] ret_from_fork+0x48/0x80 [ 217.818074] ret_from_fork_asm+0x1a/0x30 [ 217.819145] [ 217.819145] other info that might help us debug this: [ 217.819145] [ 217.820769] Possible unsafe locking scenario: [ 217.820769] [ 217.822009] CPU0 CPU1 [ 217.822985] ---- ---- [ 217.823982] lock(&rdev->wiphy.mtx); [ 217.824834] lock(rtnl_mutex); [ 217.825909] lock(&rdev->wiphy.mtx); [ 217.827070] lock(rtnl_mutex); [ 217.827753] [ 217.827753] *** DEADLOCK *** [ 217.827753] [ 217.828807] 4 locks held by kworker/u8:0/11: [ 217.829617] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 217.831504] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 217.833347] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 217.835060] #3: ffff88803b9d8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 217.836964] [ 217.836964] stack backtrace: [ 217.837796] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 217.839359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 217.840811] Workqueue: netns cleanup_net [ 217.841590] Call Trace: [ 217.842069] [ 217.842477] dump_stack_lvl+0xca/0x120 [ 217.843270] print_circular_bug+0x47b/0x750 [ 217.844089] check_noncircular+0x2e9/0x3c0 [ 217.844884] ? __pfx_check_noncircular+0x10/0x10 [ 217.845762] ? hlock_class+0x4e/0x130 [ 217.846463] ? mark_lock+0xac/0xed0 [ 217.847187] ? srso_return_thunk+0x5/0x5f [ 217.848001] ? __dequeue_entity+0x9b1/0x1900 [ 217.848855] ? lockdep_lock+0xba/0x1b0 [ 217.849632] ? __pfx_lockdep_lock+0x10/0x10 [ 217.850465] __lock_acquire+0x29fd/0x4580 [ 217.851302] ? __pfx___lock_acquire+0x10/0x10 [ 217.852151] ? lock_release+0x20f/0x6f0 [ 217.852912] ? __pfx_lock_release+0x10/0x10 [ 217.853744] lock_acquire+0x19b/0x520 [ 217.854469] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.855562] ? __pfx_lock_acquire+0x10/0x10 [ 217.856384] ? srso_return_thunk+0x5/0x5f [ 217.857194] ? lock_release+0x20f/0x6f0 [ 217.857959] ? srso_return_thunk+0x5/0x5f [ 217.858759] ? lock_is_held_type+0x9e/0x120 [ 217.859615] ? srso_return_thunk+0x5/0x5f [ 217.860432] __mutex_lock+0x13d/0xb50 [ 217.861182] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.862249] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.863338] ? srso_return_thunk+0x5/0x5f [ 217.864163] ? synchronize_rcu_expedited+0x38a/0x420 [ 217.865110] ? __pfx___mutex_lock+0x10/0x10 [ 217.865937] ? __pfx_autoremove_wake_function+0x10/0x10 [ 217.866933] ? srso_return_thunk+0x5/0x5f [ 217.867774] ? kasan_quarantine_put+0x84/0x1e0 [ 217.868674] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 217.869504] ? srso_return_thunk+0x5/0x5f [ 217.870326] unregister_netdevice_many_notify+0x1612/0x1c80 [ 217.871365] ? __virt_addr_valid+0x2e8/0x5d0 [ 217.872236] ? __pfx_lock_release+0x10/0x10 [ 217.873050] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 217.874149] ? find_held_lock+0x2c/0x110 [ 217.874948] ? srso_return_thunk+0x5/0x5f [ 217.875799] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 217.876748] ? srso_return_thunk+0x5/0x5f [ 217.877545] ? lock_release+0x20f/0x6f0 [ 217.878306] ? __pfx_lock_release+0x10/0x10 [ 217.879198] ? srso_return_thunk+0x5/0x5f [ 217.880023] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.880998] ? srso_return_thunk+0x5/0x5f [ 217.881829] unregister_netdevice_queue+0x224/0x2e0 [ 217.882742] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 217.883759] ? up_write+0x195/0x520 [ 217.884475] _cfg80211_unregister_wdev+0x57b/0x700 [ 217.885411] ? srso_return_thunk+0x5/0x5f [ 217.886239] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 217.887183] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 217.888186] ? srso_return_thunk+0x5/0x5f [ 217.889001] ? srso_return_thunk+0x5/0x5f [ 217.889829] ? synchronize_rcu+0x1ff/0x260 [ 217.890626] ieee80211_unregister_hw+0x55/0x3a0 [ 217.891500] hwsim_exit_net+0x3a0/0x730 [ 217.892257] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.893106] ? srso_return_thunk+0x5/0x5f [ 217.893912] ? netdev_run_todo+0x788/0x1040 [ 217.894721] ? srso_return_thunk+0x5/0x5f [ 217.895525] ? __pfx_hwsim_exit_net+0x10/0x10 [ 217.896375] ops_exit_list+0xb3/0x180 [ 217.897099] cleanup_net+0x546/0xad0 [ 217.897834] ? __pfx_cleanup_net+0x10/0x10 [ 217.898648] process_one_work+0x8ee/0x1a10 [ 217.899487] ? __pfx_lock_acquire+0x10/0x10 [ 217.900297] ? __pfx_process_one_work+0x10/0x10 [ 217.901194] ? srso_return_thunk+0x5/0x5f [ 217.902007] ? move_linked_works+0x172/0x270 [ 217.902856] ? srso_return_thunk+0x5/0x5f [ 217.903681] ? assign_work+0x196/0x240 [ 217.904448] worker_thread+0x674/0xe70 [ 217.905231] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 217.906214] ? __pfx_worker_thread+0x10/0x10 [ 217.907085] kthread+0x3ab/0x720 [ 217.907791] ? __pfx_kthread+0x10/0x10 [ 217.908545] ? srso_return_thunk+0x5/0x5f [ 217.909353] ? finish_task_switch.isra.0+0x206/0x840 [ 217.910295] ? __pfx_kthread+0x10/0x10 [ 217.911084] ret_from_fork+0x48/0x80 [ 217.911804] ? __pfx_kthread+0x10/0x10 [ 217.912587] ret_from_fork_asm+0x1a/0x30 [ 217.913398] [ 219.182939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.186284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.191645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.196636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.199151] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.200880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.489713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.492649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.495512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.498362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.500241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.501393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.553261] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.557885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.560720] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.566258] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.568392] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.573631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.619240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.622885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.626825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.630512] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.634310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.636065] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.637960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.675147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.676674] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.684087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.685918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.686170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.686861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.690244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.691163] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.696791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.697206] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.698875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.702473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.703394] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.706280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.715811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.720652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.723756] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.823763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.824904] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.826469] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.828805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.830434] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.831466] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.270735] Bluetooth: hci0: command tx timeout [ 221.526714] Bluetooth: hci1: command tx timeout [ 221.589607] Bluetooth: hci2: command tx timeout [ 221.719707] Bluetooth: hci3: command tx timeout [ 221.781711] Bluetooth: hci6: command tx timeout [ 221.781791] Bluetooth: hci5: command tx timeout [ 221.846603] Bluetooth: hci4: command tx timeout [ 221.973827] Bluetooth: hci7: command tx timeout [ 223.319610] Bluetooth: hci0: command tx timeout [ 223.573611] Bluetooth: hci1: command tx timeout [ 223.637710] Bluetooth: hci2: command tx timeout [ 223.766646] Bluetooth: hci3: command tx timeout [ 223.830695] Bluetooth: hci6: command tx timeout [ 223.830872] Bluetooth: hci5: command tx timeout [ 223.895128] Bluetooth: hci4: command tx timeout [ 224.023135] Bluetooth: hci7: command tx timeout [ 225.366649] Bluetooth: hci0: command tx timeout [ 225.622749] Bluetooth: hci1: command tx timeout [ 225.686718] Bluetooth: hci2: command tx timeout [ 225.814611] Bluetooth: hci3: command tx timeout [ 225.877608] Bluetooth: hci6: command tx timeout [ 225.877678] Bluetooth: hci5: command tx timeout [ 225.941655] Bluetooth: hci4: command tx timeout [ 226.069675] Bluetooth: hci7: command tx timeout [ 227.414613] Bluetooth: hci0: command tx timeout [ 227.670680] Bluetooth: hci1: command tx timeout [ 227.734799] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 22:44:37 Registers: info registers vcpu 0 RAX=ffff8880193adcb8 RBX=00000000000000e8 RCX=ffff8880193ad000 RDX=0000000000000080 RSI=ffff8880193adcb8 RDI=ffff888008c4f780 RBP=ffff888008c4f780 RSP=ffff88800f187d98 R8 =0000000000000128 R9 =fffffbfff0c8043a R10=0000000000000000 R11=0000000000000532 R12=ffffffff81aed070 R13=ffff888008ccbe00 R14=ffff88800ab91e38 R15=ffff88800ab91de0 RIP=ffffffff81abae01 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0409d0f040 CR3=000000000bc0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=ff010001020101000000000000000000 XMM06=000000003130006563697665642e3469 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000020 R11=2f72656b726f776b R12=0000000000000020 R13=0000000000000001 R14=ffff888008fea029 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0b63bf7728 CR3=000000000bc0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff000000ff00 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=ff010001020101000000000000000000 XMM06=000000003130006563697665642e3469 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000