Warning: Permanently added '[localhost]:5949' (ECDSA) to the list of known hosts. 2025/01/17 23:18:42 fuzzer started 2025/01/17 23:18:42 dialing manager at localhost:44245 syzkaller login: [ 63.352373] cgroup: Unknown subsys name 'net' [ 63.468605] cgroup: Unknown subsys name 'cpuset' [ 63.502883] cgroup: Unknown subsys name 'rlimit' [ 66.498289] systemd-udevd (123) used greatest stack depth: 23704 bytes left [ 69.572509] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/17 23:18:59 syscalls: 2217 2025/01/17 23:18:59 code coverage: enabled 2025/01/17 23:18:59 comparison tracing: enabled 2025/01/17 23:18:59 extra coverage: enabled 2025/01/17 23:18:59 setuid sandbox: enabled 2025/01/17 23:18:59 namespace sandbox: enabled 2025/01/17 23:18:59 Android sandbox: enabled 2025/01/17 23:18:59 fault injection: enabled 2025/01/17 23:18:59 leak checking: enabled 2025/01/17 23:18:59 net packet injection: enabled 2025/01/17 23:18:59 net device setup: enabled 2025/01/17 23:18:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/17 23:18:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/17 23:18:59 USB emulation: enabled 2025/01/17 23:18:59 hci packet injection: enabled 2025/01/17 23:18:59 wifi device emulation: enabled 2025/01/17 23:18:59 802.15.4 emulation: enabled 2025/01/17 23:18:59 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/17 23:18:59 fetching corpus: 2, signal 2989/4084 (executing program) 2025/01/17 23:18:59 fetching corpus: 2, signal 2989/4118 (executing program) 2025/01/17 23:18:59 fetching corpus: 2, signal 2989/4118 (executing program) 2025/01/17 23:19:02 starting 8 fuzzer processes 23:19:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000018}) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 23:19:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@private1, @private2, @mcast1}) read(r0, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000040)={0x0, 0x1}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:19:02 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x25, 0x4) 23:19:02 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x3) 23:19:02 executing program 3: pkey_mprotect(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 23:19:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 83.206563] audit: type=1400 audit(1737155942.925:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:19:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) 23:19:02 executing program 6: futex(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 84.493853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.497741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.501643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.503636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.509273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.515935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.518522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.520616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.522641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.531956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.541282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.555869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.608026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.620440] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.622785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.624936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.628718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.630025] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.631199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.632044] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.632556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.637736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.639492] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.640551] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.641034] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.641783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.642458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.644791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.646564] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.647301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.659492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.660426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.665933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.670228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.672367] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.679471] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.682908] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.684787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.686739] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.689056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.691666] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.694695] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.697811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.699915] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.711494] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.714505] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.715234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.715927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.566217] Bluetooth: hci1: command tx timeout [ 86.628290] Bluetooth: hci0: command tx timeout [ 86.692453] Bluetooth: hci5: command tx timeout [ 86.756599] Bluetooth: hci4: command tx timeout [ 86.756790] Bluetooth: hci7: command tx timeout [ 86.756956] Bluetooth: hci6: command tx timeout [ 86.757176] Bluetooth: hci2: command tx timeout [ 86.820208] Bluetooth: hci3: command tx timeout [ 88.612475] Bluetooth: hci1: command tx timeout [ 88.676271] Bluetooth: hci0: command tx timeout [ 88.740315] Bluetooth: hci5: command tx timeout [ 88.804679] Bluetooth: hci2: command tx timeout [ 88.806165] Bluetooth: hci6: command tx timeout [ 88.807169] Bluetooth: hci7: command tx timeout [ 88.807292] Bluetooth: hci4: command tx timeout [ 88.868478] Bluetooth: hci3: command tx timeout [ 90.660212] Bluetooth: hci1: command tx timeout [ 90.724189] Bluetooth: hci0: command tx timeout [ 90.788171] Bluetooth: hci5: command tx timeout [ 90.852743] Bluetooth: hci4: command tx timeout [ 90.853700] Bluetooth: hci7: command tx timeout [ 90.854904] Bluetooth: hci6: command tx timeout [ 90.854981] Bluetooth: hci2: command tx timeout [ 90.917261] Bluetooth: hci3: command tx timeout [ 92.708315] Bluetooth: hci1: command tx timeout [ 92.772179] Bluetooth: hci0: command tx timeout [ 92.836169] Bluetooth: hci5: command tx timeout [ 92.900734] Bluetooth: hci6: command tx timeout [ 92.900858] Bluetooth: hci2: command tx timeout [ 92.900921] Bluetooth: hci7: command tx timeout [ 92.900947] Bluetooth: hci4: command tx timeout [ 92.964177] Bluetooth: hci3: command tx timeout [ 147.182228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.185558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.188314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.194004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.198191] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.205580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.253048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.256827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.265597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.273887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.281836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.283986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.343647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.349027] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.351942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.356279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.356628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.361810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.362458] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.363318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.369545] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.371424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.374235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.378765] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.392237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.392326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.392547] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.400028] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.400340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.400508] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.411581] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.415698] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.422406] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.425813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.433831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.434819] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.436346] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.443442] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.445307] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.445701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.446325] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.480676] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.486706] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.487646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.496861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.506282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.512031] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.513933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.284163] Bluetooth: hci0: command tx timeout [ 149.349450] Bluetooth: hci1: command tx timeout [ 149.477236] Bluetooth: hci3: command tx timeout [ 149.542145] Bluetooth: hci4: command tx timeout [ 149.604412] Bluetooth: hci2: command tx timeout [ 149.605317] Bluetooth: hci5: command tx timeout [ 149.605472] Bluetooth: hci6: command tx timeout [ 149.668176] Bluetooth: hci7: command tx timeout [ 151.332370] Bluetooth: hci0: command tx timeout [ 151.398138] Bluetooth: hci1: command tx timeout [ 151.525287] Bluetooth: hci3: command tx timeout [ 151.588378] Bluetooth: hci4: command tx timeout [ 151.653267] Bluetooth: hci2: command tx timeout [ 151.653847] Bluetooth: hci6: command tx timeout [ 151.653945] Bluetooth: hci5: command tx timeout [ 151.717338] Bluetooth: hci7: command tx timeout [ 153.382156] Bluetooth: hci0: command tx timeout [ 153.444281] Bluetooth: hci1: command tx timeout [ 153.572207] Bluetooth: hci3: command tx timeout [ 153.636812] Bluetooth: hci4: command tx timeout [ 153.700280] Bluetooth: hci2: command tx timeout [ 153.700451] Bluetooth: hci5: command tx timeout [ 153.700624] Bluetooth: hci6: command tx timeout [ 153.766243] Bluetooth: hci7: command tx timeout [ 155.428177] Bluetooth: hci0: command tx timeout [ 155.493362] Bluetooth: hci1: command tx timeout [ 155.621181] Bluetooth: hci3: command tx timeout [ 155.684185] Bluetooth: hci4: command tx timeout [ 155.749381] Bluetooth: hci2: command tx timeout [ 155.749476] Bluetooth: hci6: command tx timeout [ 155.749568] Bluetooth: hci5: command tx timeout [ 155.812178] Bluetooth: hci7: command tx timeout [ 209.464777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.467835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.470472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.475207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.479656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.480783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.526627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.529586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.534402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.551318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.554922] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.557988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.662294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.672518] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.690341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.691989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.694543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.698416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.701398] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.705643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.710334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.717464] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.719811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.721957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.739544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.746442] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.751259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.767318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.771248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.795744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.804653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.814525] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.818781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.838017] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.845359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.856529] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.856800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.859683] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.860032] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.870217] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.911890] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.913447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.919443] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.933391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.940956] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.026866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.031006] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.038531] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.558143] Bluetooth: hci0: command tx timeout [ 211.622214] Bluetooth: hci1: command tx timeout [ 211.812379] Bluetooth: hci3: command tx timeout [ 211.813619] Bluetooth: hci2: command tx timeout [ 211.877365] Bluetooth: hci4: command tx timeout [ 211.940184] Bluetooth: hci6: command tx timeout [ 212.004793] Bluetooth: hci5: command tx timeout [ 212.197157] Bluetooth: hci7: command tx timeout [ 213.604136] Bluetooth: hci0: command tx timeout [ 213.668184] Bluetooth: hci1: command tx timeout [ 213.860168] Bluetooth: hci2: command tx timeout [ 213.860261] Bluetooth: hci3: command tx timeout [ 213.924166] Bluetooth: hci4: command tx timeout [ 213.989295] Bluetooth: hci6: command tx timeout [ 214.052165] Bluetooth: hci5: command tx timeout [ 214.244221] Bluetooth: hci7: command tx timeout [ 215.652204] Bluetooth: hci0: command tx timeout [ 215.717548] Bluetooth: hci1: command tx timeout [ 215.908150] Bluetooth: hci3: command tx timeout [ 215.908246] Bluetooth: hci2: command tx timeout [ 215.973126] Bluetooth: hci4: command tx timeout [ 216.036136] Bluetooth: hci6: command tx timeout [ 216.102105] Bluetooth: hci5: command tx timeout [ 216.292376] Bluetooth: hci7: command tx timeout [ 217.700198] Bluetooth: hci0: command tx timeout [ 217.764228] Bluetooth: hci1: command tx timeout [ 217.958315] Bluetooth: hci3: command tx timeout [ 217.958950] Bluetooth: hci2: command tx timeout [ 218.020221] Bluetooth: hci4: command tx timeout [ 218.085121] Bluetooth: hci6: command tx timeout [ 218.148186] Bluetooth: hci5: command tx timeout [ 218.340164] Bluetooth: hci7: command tx timeout [ 268.055908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.056209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.503861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.503939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.150320] [ 270.150586] ====================================================== [ 270.151266] WARNING: possible circular locking dependency detected [ 270.151877] 6.13.0-rc7-next-20250117 #1 Not tainted [ 270.152419] ------------------------------------------------------ [ 270.154949] kworker/u8:0/11 is trying to acquire lock: [ 270.156027] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.158409] [ 270.158409] but task is already holding lock: [ 270.159351] ffff88800b770768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 270.160925] [ 270.160925] which lock already depends on the new lock. [ 270.160925] [ 270.162360] [ 270.162360] the existing dependency chain (in reverse order) is: [ 270.163076] [ 270.163076] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 270.163764] __mutex_lock+0x13d/0xb50 [ 270.164270] wiphy_register+0x1b2e/0x25d0 [ 270.164837] ieee80211_register_hw+0x23a4/0x3d60 [ 270.165443] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 270.166081] init_mac80211_hwsim+0x389/0x870 [ 270.166692] do_one_initcall+0xf9/0x640 [ 270.167268] kernel_init_freeable+0x53d/0x7a0 [ 270.167853] kernel_init+0x1e/0x2d0 [ 270.168351] ret_from_fork+0x48/0x80 [ 270.168853] ret_from_fork_asm+0x1a/0x30 [ 270.169423] [ 270.169423] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 270.170142] __lock_acquire+0x29fd/0x4580 [ 270.170723] lock_acquire+0x19b/0x520 [ 270.171278] __mutex_lock+0x13d/0xb50 [ 270.171822] unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.172518] unregister_netdevice_queue+0x224/0x2e0 [ 270.173182] _cfg80211_unregister_wdev+0x57b/0x700 [ 270.173852] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 270.174498] ieee80211_unregister_hw+0x55/0x3a0 [ 270.175088] hwsim_exit_net+0x3a0/0x730 [ 270.175620] ops_exit_list+0xb3/0x180 [ 270.176116] cleanup_net+0x546/0xad0 [ 270.176614] process_one_work+0x8ee/0x1a10 [ 270.177217] worker_thread+0x674/0xe70 [ 270.177762] kthread+0x3ab/0x720 [ 270.178264] ret_from_fork+0x48/0x80 [ 270.178768] ret_from_fork_asm+0x1a/0x30 [ 270.179342] [ 270.179342] other info that might help us debug this: [ 270.179342] [ 270.180203] Possible unsafe locking scenario: [ 270.180203] [ 270.180871] CPU0 CPU1 [ 270.181415] ---- ---- [ 270.181959] lock(&rdev->wiphy.mtx); [ 270.182445] lock(rtnl_mutex); [ 270.183145] lock(&rdev->wiphy.mtx); [ 270.183865] lock(rtnl_mutex); [ 270.184272] [ 270.184272] *** DEADLOCK *** [ 270.184272] [ 270.184896] 4 locks held by kworker/u8:0/11: [ 270.185384] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 270.186514] #1: ffff8880095dfd30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 270.187619] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 270.188638] #3: ffff88800b770768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 270.189775] [ 270.189775] stack backtrace: [ 270.190268] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-next-20250117 #1 [ 270.191215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 270.192146] Workqueue: netns cleanup_net [ 270.192639] Call Trace: [ 270.192944] [ 270.193212] dump_stack_lvl+0xca/0x120 [ 270.193706] print_circular_bug+0x47b/0x750 [ 270.194223] check_noncircular+0x2e9/0x3c0 [ 270.194729] ? __pfx_check_noncircular+0x10/0x10 [ 270.195300] ? hlock_class+0x4e/0x130 [ 270.195747] ? mark_lock+0xac/0xed0 [ 270.196197] ? srso_return_thunk+0x5/0x5f [ 270.196718] ? sched_clock+0x37/0x60 [ 270.197192] ? lockdep_lock+0xba/0x1b0 [ 270.197668] ? __pfx_lockdep_lock+0x10/0x10 [ 270.198178] __lock_acquire+0x29fd/0x4580 [ 270.198664] ? __pfx___lock_acquire+0x10/0x10 [ 270.199194] ? lock_release+0x20f/0x6f0 [ 270.199698] ? __pfx_lock_release+0x10/0x10 [ 270.200230] lock_acquire+0x19b/0x520 [ 270.200703] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.201402] ? __pfx_lock_acquire+0x10/0x10 [ 270.201925] ? srso_return_thunk+0x5/0x5f [ 270.202437] ? lock_release+0x20f/0x6f0 [ 270.202928] ? srso_return_thunk+0x5/0x5f [ 270.203459] ? lock_is_held_type+0x9e/0x120 [ 270.203998] ? srso_return_thunk+0x5/0x5f [ 270.204517] __mutex_lock+0x13d/0xb50 [ 270.204989] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.205665] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.206334] ? srso_return_thunk+0x5/0x5f [ 270.206850] ? synchronize_rcu_expedited+0x38a/0x420 [ 270.207469] ? __pfx___mutex_lock+0x10/0x10 [ 270.207969] ? __pfx_autoremove_wake_function+0x10/0x10 [ 270.208610] ? srso_return_thunk+0x5/0x5f [ 270.209123] ? kasan_quarantine_put+0x84/0x1e0 [ 270.209695] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 270.210235] ? srso_return_thunk+0x5/0x5f [ 270.210758] unregister_netdevice_many_notify+0x1612/0x1c80 [ 270.211440] ? __virt_addr_valid+0x2e8/0x5d0 [ 270.211994] ? __pfx_lock_release+0x10/0x10 [ 270.212523] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 270.213246] ? find_held_lock+0x2c/0x110 [ 270.213768] ? srso_return_thunk+0x5/0x5f [ 270.214300] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 270.214906] ? srso_return_thunk+0x5/0x5f [ 270.215467] ? lock_release+0x20f/0x6f0 [ 270.215954] ? __pfx_lock_release+0x10/0x10 [ 270.216472] ? srso_return_thunk+0x5/0x5f [ 270.216984] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 270.217600] ? srso_return_thunk+0x5/0x5f [ 270.218119] unregister_netdevice_queue+0x224/0x2e0 [ 270.218653] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 270.219230] ? up_write+0x195/0x520 [ 270.219682] _cfg80211_unregister_wdev+0x57b/0x700 [ 270.220369] ? srso_return_thunk+0x5/0x5f [ 270.220862] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 270.221405] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 270.221959] ? srso_return_thunk+0x5/0x5f [ 270.222426] ? srso_return_thunk+0x5/0x5f [ 270.222895] ? synchronize_rcu+0x1ff/0x260 [ 270.223373] ieee80211_unregister_hw+0x55/0x3a0 [ 270.223887] hwsim_exit_net+0x3a0/0x730 [ 270.224330] ? __pfx_hwsim_exit_net+0x10/0x10 [ 270.224816] ? srso_return_thunk+0x5/0x5f [ 270.225286] ? netdev_run_todo+0x788/0x1040 [ 270.225762] ? __pfx_hwsim_exit_net+0x10/0x10 [ 270.226260] ops_exit_list+0xb3/0x180 [ 270.226689] cleanup_net+0x546/0xad0 [ 270.227109] ? __pfx_cleanup_net+0x10/0x10 [ 270.227601] process_one_work+0x8ee/0x1a10 [ 270.228102] ? __pfx_lock_acquire+0x10/0x10 [ 270.228589] ? __pfx_process_one_work+0x10/0x10 [ 270.229222] ? srso_return_thunk+0x5/0x5f [ 270.229707] ? move_linked_works+0x172/0x270 [ 270.230208] ? srso_return_thunk+0x5/0x5f [ 270.230689] ? assign_work+0x196/0x240 [ 270.231155] worker_thread+0x674/0xe70 [ 270.231634] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 270.232225] ? __pfx_worker_thread+0x10/0x10 [ 270.232741] kthread+0x3ab/0x720 [ 270.233148] ? __pfx_kthread+0x10/0x10 [ 270.233603] ? srso_return_thunk+0x5/0x5f [ 270.234066] ? finish_task_switch.isra.0+0x206/0x840 [ 270.234607] ? __pfx_kthread+0x10/0x10 [ 270.235049] ret_from_fork+0x48/0x80 [ 270.235454] ? __pfx_kthread+0x10/0x10 [ 270.235890] ret_from_fork_asm+0x1a/0x30 [ 270.236354] [ 271.916447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.918620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.922479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.932481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.940464] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.944441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.048834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.050769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.052839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.056714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.064015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.064946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.065326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.068212] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.070909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.072663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.075594] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.077823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.141393] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.145380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.147173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.148453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.151551] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.153526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.153959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.159560] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.170791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.177277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.189641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.194404] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.196480] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.199039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.200883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.236277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.242483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.263368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.272409] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.275579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.286391] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.322400] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.330399] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.333887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.444804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.460420] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.462483] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.477505] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.482270] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.487181] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.020141] Bluetooth: hci0: command tx timeout [ 274.148540] Bluetooth: hci2: command tx timeout [ 274.148643] Bluetooth: hci1: command tx timeout [ 274.276201] Bluetooth: hci4: command tx timeout [ 274.276355] Bluetooth: hci3: command tx timeout [ 274.340211] Bluetooth: hci5: command tx timeout [ 274.405074] Bluetooth: hci6: command tx timeout [ 274.533158] Bluetooth: hci7: command tx timeout [ 276.070197] Bluetooth: hci0: command tx timeout [ 276.196668] Bluetooth: hci1: command tx timeout [ 276.197326] Bluetooth: hci2: command tx timeout [ 276.324130] Bluetooth: hci3: command tx timeout [ 276.324253] Bluetooth: hci4: command tx timeout [ 276.388252] Bluetooth: hci5: command tx timeout [ 276.452476] Bluetooth: hci6: command tx timeout [ 276.580195] Bluetooth: hci7: command tx timeout [ 278.116195] Bluetooth: hci0: command tx timeout [ 278.244289] Bluetooth: hci2: command tx timeout [ 278.244309] Bluetooth: hci1: command tx timeout [ 278.372100] Bluetooth: hci3: command tx timeout [ 278.372159] Bluetooth: hci4: command tx timeout [ 278.437116] Bluetooth: hci5: command tx timeout [ 278.500336] Bluetooth: hci6: command tx timeout [ 278.628221] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 23:22:10 Registers: info registers vcpu 0 RAX=0000000000203000 RBX=00007f81983fa5c0 RCX=0000000000000002 RDX=0000000000000160 RSI=0000000000000002 RDI=000000000000003e RBP=000000c00003df28 RSP=000000c00003dea8 R8 =00007f81985f3fff R9 =000000c0000cb760 R10=000000c000021e98 R11=00000000000000b0 R12=00000000000000f9 R13=0000000001240aa0 R14=0000000000000000 R15=0000000000000000 RIP=000000000041f857 RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000000c000258b10 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f45cadfc9f8 CR3=000000000c09c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000003fd3333333333333 XMM01=00000000000000003fbd802ae70ae110 XMM02=00000000000000004170434cb0000000 XMM03=000000c000320320000000c000320230 XMM04=000000c000086090000000c000086060 XMM05=000000c0000860f0000000c0000860c0 XMM06=000000c000086150000000c000086120 XMM07=000000c000085760000000c00005b4d0 XMM08=000000c0000864b0000000c000086480 XMM09=000000c000086510000000c0000864e0 XMM10=000000c000086540000000c00005b530 XMM11=000000c0000865a0000000c000086570 XMM12=000000c000086600000000c0000865d0 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0 info registers vcpu 1 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff8880095debb8 R8 =0000000000000001 R9 =ffffed10012bbd67 R10=0000000000000077 R11=6f6c206863696877 R12=0000000000000077 R13=0000000000000001 R14=ffff888008fea020 R15=ffff8880095deeb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a180dad008 CR3=000000000c09c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000000000c000300b40 XMM02=0000000000b12758000000000043cd06 XMM03=00000000000000000000000000000000 XMM04=00000000000000080000000000b12868 XMM05=0000000000b12758000000000043cd06 XMM06=00000000000000010000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000004643c60000000000000000 XMM09=0000000000000000000000c0003200a0 XMM10=000000c0003860c000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=000000c000086660000000c000086630 XMM14=000000c0000866c0000000c000086690 XMM15=000000c0000a1080000000c0000866f0