Warning: Permanently added '[localhost]:5693' (ECDSA) to the list of known hosts. 2025/01/18 00:01:11 fuzzer started 2025/01/18 00:01:11 dialing manager at localhost:44245 syzkaller login: [ 69.264017] cgroup: Unknown subsys name 'net' [ 69.364292] cgroup: Unknown subsys name 'cpuset' [ 69.404202] cgroup: Unknown subsys name 'rlimit' [ 74.850726] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 84.644658] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/18 00:01:27 syscalls: 2217 2025/01/18 00:01:27 code coverage: enabled 2025/01/18 00:01:27 comparison tracing: enabled 2025/01/18 00:01:27 extra coverage: enabled 2025/01/18 00:01:27 setuid sandbox: enabled 2025/01/18 00:01:27 namespace sandbox: enabled 2025/01/18 00:01:27 Android sandbox: enabled 2025/01/18 00:01:27 fault injection: enabled 2025/01/18 00:01:27 leak checking: enabled 2025/01/18 00:01:27 net packet injection: enabled 2025/01/18 00:01:27 net device setup: enabled 2025/01/18 00:01:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/18 00:01:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/18 00:01:27 USB emulation: enabled 2025/01/18 00:01:27 hci packet injection: enabled 2025/01/18 00:01:27 wifi device emulation: enabled 2025/01/18 00:01:27 802.15.4 emulation: enabled 2025/01/18 00:01:27 fetching corpus: 0, signal 0/2000 (executing program) 2025/01/18 00:01:28 fetching corpus: 50, signal 31162/33613 (executing program) 2025/01/18 00:01:28 fetching corpus: 100, signal 45425/48046 (executing program) 2025/01/18 00:01:28 fetching corpus: 150, signal 51754/54638 (executing program) 2025/01/18 00:01:28 fetching corpus: 200, signal 59614/62276 (executing program) 2025/01/18 00:01:28 fetching corpus: 250, signal 63712/66319 (executing program) 2025/01/18 00:01:29 fetching corpus: 300, signal 67202/69620 (executing program) 2025/01/18 00:01:29 fetching corpus: 350, signal 69233/71571 (executing program) 2025/01/18 00:01:29 fetching corpus: 400, signal 71845/73859 (executing program) 2025/01/18 00:01:29 fetching corpus: 450, signal 74497/76043 (executing program) 2025/01/18 00:01:29 fetching corpus: 500, signal 77891/78650 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79444 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79486 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79522 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79556 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79595 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79643 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79689 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79728 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79776 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79825 (executing program) 2025/01/18 00:01:29 fetching corpus: 525, signal 78887/79867 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/79927 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/79970 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80013 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80041 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80079 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80135 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80176 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80231 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80272 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80320 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80369 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80414 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80466 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80512 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80550 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80595 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80641 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80691 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80705 (executing program) 2025/01/18 00:01:30 fetching corpus: 525, signal 78887/80705 (executing program) 2025/01/18 00:01:33 starting 8 fuzzer processes 00:01:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x42) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0xfffffffffffffd92) 00:01:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000040)=0x9, 0x4) 00:01:33 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 00:01:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f00000002c0)=""/4096) [ 90.538097] audit: type=1400 audit(1737158493.132:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:01:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) 00:01:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x14, 0x1a, 0x101, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/246, 0xf6}], 0x1) 00:01:33 executing program 6: getrandom(0x0, 0x600, 0x0) 00:01:33 executing program 7: stat(&(0x7f0000000180)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r1, 0x0) [ 91.979049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.980833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.982017] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.983496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.984402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.987604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.988590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.991111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.992031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.001154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.023402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.025849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.098002] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.099944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.101472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.108285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.108667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.110233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.112091] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.116569] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.119324] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.123784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.125522] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.127089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.129000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.130762] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.134278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.136179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.138517] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.139224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.140328] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.142724] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.150136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.150812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.155324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.159387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.161967] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.169118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.170269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.176866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.179068] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.184213] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.190776] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.192971] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.194668] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.195141] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.207663] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.221740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.039119] Bluetooth: hci1: command tx timeout [ 94.102719] Bluetooth: hci0: command tx timeout [ 94.230718] Bluetooth: hci4: command tx timeout [ 94.232344] Bluetooth: hci3: command tx timeout [ 94.232708] Bluetooth: hci2: command tx timeout [ 94.294854] Bluetooth: hci7: command tx timeout [ 94.296385] Bluetooth: hci6: command tx timeout [ 94.296785] Bluetooth: hci5: command tx timeout [ 96.087106] Bluetooth: hci1: command tx timeout [ 96.150797] Bluetooth: hci0: command tx timeout [ 96.278654] Bluetooth: hci2: command tx timeout [ 96.278763] Bluetooth: hci3: command tx timeout [ 96.278856] Bluetooth: hci4: command tx timeout [ 96.342542] Bluetooth: hci5: command tx timeout [ 96.343119] Bluetooth: hci6: command tx timeout [ 96.343219] Bluetooth: hci7: command tx timeout [ 98.136043] Bluetooth: hci1: command tx timeout [ 98.198523] Bluetooth: hci0: command tx timeout [ 98.327631] Bluetooth: hci4: command tx timeout [ 98.327797] Bluetooth: hci3: command tx timeout [ 98.327950] Bluetooth: hci2: command tx timeout [ 98.391104] Bluetooth: hci5: command tx timeout [ 98.391282] Bluetooth: hci7: command tx timeout [ 98.391523] Bluetooth: hci6: command tx timeout [ 100.183761] Bluetooth: hci1: command tx timeout [ 100.247663] Bluetooth: hci0: command tx timeout [ 100.375514] Bluetooth: hci4: command tx timeout [ 100.376157] Bluetooth: hci2: command tx timeout [ 100.376775] Bluetooth: hci3: command tx timeout [ 100.441617] Bluetooth: hci5: command tx timeout [ 100.441713] Bluetooth: hci6: command tx timeout [ 100.441804] Bluetooth: hci7: command tx timeout [ 152.312958] syz-executor.1 (281) used greatest stack depth: 23552 bytes left [ 155.513175] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.520750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.525940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.531632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.535280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.538135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.568183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.571156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.572206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.573091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.575922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.576946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.591125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.591867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.592701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.594238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.594887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.596945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.597375] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.598782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.602269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.603719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.614647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.617759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.620376] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.626033] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.627227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.632150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.632247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.637751] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.639282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.639874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.645427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.645740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.650287] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.653992] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.679806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.680172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.700786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.723078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.725785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.729899] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.756036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.771750] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.775739] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.791864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.810121] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.815825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.590515] Bluetooth: hci0: command tx timeout [ 157.718493] Bluetooth: hci3: command tx timeout [ 157.718677] Bluetooth: hci5: command tx timeout [ 157.782654] Bluetooth: hci6: command tx timeout [ 157.782819] Bluetooth: hci1: command tx timeout [ 157.782937] Bluetooth: hci2: command tx timeout [ 157.783051] Bluetooth: hci4: command tx timeout [ 157.910675] Bluetooth: hci7: command tx timeout [ 159.638517] Bluetooth: hci0: command tx timeout [ 159.767323] Bluetooth: hci5: command tx timeout [ 159.767451] Bluetooth: hci3: command tx timeout [ 159.830583] Bluetooth: hci4: command tx timeout [ 159.830708] Bluetooth: hci2: command tx timeout [ 159.830818] Bluetooth: hci1: command tx timeout [ 159.830894] Bluetooth: hci6: command tx timeout [ 159.959051] Bluetooth: hci7: command tx timeout [ 161.686518] Bluetooth: hci0: command tx timeout [ 161.814723] Bluetooth: hci5: command tx timeout [ 161.814948] Bluetooth: hci3: command tx timeout [ 161.878522] Bluetooth: hci4: command tx timeout [ 161.878615] Bluetooth: hci6: command tx timeout [ 161.878701] Bluetooth: hci1: command tx timeout [ 161.878763] Bluetooth: hci2: command tx timeout [ 162.006500] Bluetooth: hci7: command tx timeout [ 163.734555] Bluetooth: hci0: command tx timeout [ 163.862496] Bluetooth: hci5: command tx timeout [ 163.863141] Bluetooth: hci3: command tx timeout [ 163.926569] Bluetooth: hci4: command tx timeout [ 163.926674] Bluetooth: hci2: command tx timeout [ 163.926773] Bluetooth: hci1: command tx timeout [ 163.926842] Bluetooth: hci6: command tx timeout [ 164.055461] Bluetooth: hci7: command tx timeout [ 215.415274] [ 215.415543] ====================================================== [ 215.416166] WARNING: possible circular locking dependency detected [ 215.416768] 6.13.0-rc7-next-20250117 #1 Not tainted [ 215.417257] ------------------------------------------------------ [ 215.418690] kworker/u8:1/66 is trying to acquire lock: [ 215.419809] ffffffff8621b968 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.421705] [ 215.421705] but task is already holding lock: [ 215.423262] ffff88803be18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.425060] [ 215.425060] which lock already depends on the new lock. [ 215.425060] [ 215.426799] [ 215.426799] the existing dependency chain (in reverse order) is: [ 215.427505] [ 215.427505] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 215.428164] __mutex_lock+0x13d/0xb50 [ 215.428619] wiphy_register+0x1b2e/0x25d0 [ 215.429097] ieee80211_register_hw+0x23a4/0x3d60 [ 215.429624] mac80211_hwsim_new_radio+0x2759/0x4d50 [ 215.430178] init_mac80211_hwsim+0x389/0x870 [ 215.430695] do_one_initcall+0xf9/0x640 [ 215.431169] kernel_init_freeable+0x53d/0x7a0 [ 215.431699] kernel_init+0x1e/0x2d0 [ 215.432118] ret_from_fork+0x48/0x80 [ 215.432547] ret_from_fork_asm+0x1a/0x30 [ 215.433024] [ 215.433024] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 215.433636] __lock_acquire+0x29fd/0x4580 [ 215.434118] lock_acquire+0x19b/0x520 [ 215.434567] __mutex_lock+0x13d/0xb50 [ 215.435015] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.435635] unregister_netdevice_queue+0x224/0x2e0 [ 215.436183] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.436730] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.437270] ieee80211_unregister_hw+0x55/0x3a0 [ 215.437803] hwsim_exit_net+0x3a0/0x730 [ 215.438270] ops_exit_list+0xb3/0x180 [ 215.438714] cleanup_net+0x546/0xad0 [ 215.439164] process_one_work+0x8ee/0x1a10 [ 215.439691] worker_thread+0x674/0xe70 [ 215.440165] kthread+0x3ab/0x720 [ 215.440582] ret_from_fork+0x48/0x80 [ 215.441013] ret_from_fork_asm+0x1a/0x30 [ 215.441507] [ 215.441507] other info that might help us debug this: [ 215.441507] [ 215.442255] Possible unsafe locking scenario: [ 215.442255] [ 215.442819] CPU0 CPU1 [ 215.443258] ---- ---- [ 215.443704] lock(&rdev->wiphy.mtx); [ 215.444109] lock(rtnl_mutex); [ 215.444685] lock(&rdev->wiphy.mtx); [ 215.445312] lock(rtnl_mutex); [ 215.445673] [ 215.445673] *** DEADLOCK *** [ 215.445673] [ 215.446240] 4 locks held by kworker/u8:1/66: [ 215.446685] #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10 [ 215.447696] #1: ffff88800ed47d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10 [ 215.448670] #2: ffffffff8620f810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0 [ 215.449573] #3: ffff88803be18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0 [ 215.450593] [ 215.450593] stack backtrace: [ 215.451035] CPU: 1 UID: 0 PID: 66 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-next-20250117 #1 [ 215.451832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 215.452604] Workqueue: netns cleanup_net [ 215.453017] Call Trace: [ 215.453270] [ 215.453499] dump_stack_lvl+0xca/0x120 [ 215.453915] print_circular_bug+0x47b/0x750 [ 215.454359] check_noncircular+0x2e9/0x3c0 [ 215.454789] ? __pfx_check_noncircular+0x10/0x10 [ 215.455263] ? hlock_class+0x4e/0x130 [ 215.455650] ? mark_lock+0xac/0xed0 [ 215.456026] ? srso_return_thunk+0x5/0x5f [ 215.456459] ? dl_scaled_delta_exec+0xd4/0x2c0 [ 215.456923] ? lockdep_lock+0xba/0x1b0 [ 215.457334] ? __pfx_lockdep_lock+0x10/0x10 [ 215.457784] __lock_acquire+0x29fd/0x4580 [ 215.458213] ? __pfx___lock_acquire+0x10/0x10 [ 215.458672] ? lock_release+0x20f/0x6f0 [ 215.459074] ? __pfx_lock_release+0x10/0x10 [ 215.459509] lock_acquire+0x19b/0x520 [ 215.459915] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.460490] ? __pfx_lock_acquire+0x10/0x10 [ 215.460929] ? srso_return_thunk+0x5/0x5f [ 215.461366] ? lock_release+0x20f/0x6f0 [ 215.461779] ? srso_return_thunk+0x5/0x5f [ 215.462213] ? lock_is_held_type+0x9e/0x120 [ 215.462656] ? srso_return_thunk+0x5/0x5f [ 215.463104] __mutex_lock+0x13d/0xb50 [ 215.463512] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.464092] ? unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.464659] ? srso_return_thunk+0x5/0x5f [ 215.465082] ? synchronize_rcu_expedited+0x38a/0x420 [ 215.465581] ? __pfx___mutex_lock+0x10/0x10 [ 215.466019] ? __pfx_autoremove_wake_function+0x10/0x10 [ 215.466547] ? srso_return_thunk+0x5/0x5f [ 215.466976] ? kasan_quarantine_put+0x84/0x1e0 [ 215.467460] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 215.467923] ? srso_return_thunk+0x5/0x5f [ 215.468353] unregister_netdevice_many_notify+0x1612/0x1c80 [ 215.468911] ? __virt_addr_valid+0x2e8/0x5d0 [ 215.469374] ? __pfx_lock_release+0x10/0x10 [ 215.469820] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 215.470428] ? find_held_lock+0x2c/0x110 [ 215.470865] ? srso_return_thunk+0x5/0x5f [ 215.471292] ? kernfs_remove_by_name_ns+0xc7/0x130 [ 215.471806] ? srso_return_thunk+0x5/0x5f [ 215.472232] ? lock_release+0x20f/0x6f0 [ 215.472647] ? __pfx_lock_release+0x10/0x10 [ 215.473095] ? srso_return_thunk+0x5/0x5f [ 215.473537] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.474050] ? srso_return_thunk+0x5/0x5f [ 215.474489] unregister_netdevice_queue+0x224/0x2e0 [ 215.474990] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 215.475534] ? up_write+0x195/0x520 [ 215.475923] _cfg80211_unregister_wdev+0x57b/0x700 [ 215.476412] ? srso_return_thunk+0x5/0x5f [ 215.476841] ieee80211_remove_interfaces+0x2f2/0x6b0 [ 215.477330] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 215.477860] ? srso_return_thunk+0x5/0x5f [ 215.478303] ? srso_return_thunk+0x5/0x5f [ 215.478747] ? synchronize_rcu+0x1ff/0x260 [ 215.479175] ieee80211_unregister_hw+0x55/0x3a0 [ 215.479652] hwsim_exit_net+0x3a0/0x730 [ 215.480052] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.480499] ? srso_return_thunk+0x5/0x5f [ 215.480937] ? netdev_run_todo+0x788/0x1040 [ 215.481387] ? __pfx_hwsim_exit_net+0x10/0x10 [ 215.481841] ops_exit_list+0xb3/0x180 [ 215.482223] cleanup_net+0x546/0xad0 [ 215.482605] ? __pfx_cleanup_net+0x10/0x10 [ 215.483054] process_one_work+0x8ee/0x1a10 [ 215.483510] ? __pfx_lock_acquire+0x10/0x10 [ 215.483960] ? __pfx_process_one_work+0x10/0x10 [ 215.484445] ? srso_return_thunk+0x5/0x5f [ 215.484879] ? move_linked_works+0x172/0x270 [ 215.485328] ? srso_return_thunk+0x5/0x5f [ 215.485765] ? assign_work+0x196/0x240 [ 215.486184] worker_thread+0x674/0xe70 [ 215.486606] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 215.487142] ? srso_return_thunk+0x5/0x5f [ 215.487583] ? __pfx_worker_thread+0x10/0x10 [ 215.488061] kthread+0x3ab/0x720 [ 215.488428] ? __pfx_kthread+0x10/0x10 [ 215.488836] ? srso_return_thunk+0x5/0x5f [ 215.489270] ? finish_task_switch.isra.0+0x206/0x840 [ 215.489793] ? __pfx_kthread+0x10/0x10 [ 215.490207] ret_from_fork+0x48/0x80 [ 215.490585] ? __pfx_kthread+0x10/0x10 [ 215.490999] ret_from_fork_asm+0x1a/0x30 [ 215.491433] [ 216.927958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.930898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.935102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.942349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.945932] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.948809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.122202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.124735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.127831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.131049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.135255] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.137358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.245518] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.256044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.256285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.257900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.258111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.259333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.262507] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.264550] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.265682] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 217.268501] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.268696] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.272055] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.382778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.392521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.396534] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.406523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.412780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.417946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.458632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.466541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.480984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.488555] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.492801] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.498497] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.511237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.515409] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.515934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.528541] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.557670] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.569794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.605539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.608609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.614619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.619239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.631484] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.633492] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.030563] Bluetooth: hci0: command tx timeout [ 219.158602] Bluetooth: hci1: command tx timeout [ 219.286642] Bluetooth: hci2: command tx timeout [ 219.350532] Bluetooth: hci3: command tx timeout [ 219.478539] Bluetooth: hci4: command tx timeout [ 219.544466] Bluetooth: hci5: command tx timeout [ 219.606498] Bluetooth: hci6: command tx timeout [ 219.799482] Bluetooth: hci7: command tx timeout [ 221.079474] Bluetooth: hci0: command tx timeout [ 221.208407] Bluetooth: hci1: command tx timeout [ 221.334465] Bluetooth: hci2: command tx timeout [ 221.398430] Bluetooth: hci3: command tx timeout [ 221.527412] Bluetooth: hci4: command tx timeout [ 221.590564] Bluetooth: hci5: command tx timeout [ 221.655408] Bluetooth: hci6: command tx timeout [ 221.847497] Bluetooth: hci7: command tx timeout [ 223.127452] Bluetooth: hci0: command tx timeout [ 223.256095] Bluetooth: hci1: command tx timeout [ 223.382478] Bluetooth: hci2: command tx timeout [ 223.448417] Bluetooth: hci3: command tx timeout [ 223.574482] Bluetooth: hci4: command tx timeout [ 223.638568] Bluetooth: hci5: command tx timeout [ 223.702646] Bluetooth: hci6: command tx timeout [ 223.894521] Bluetooth: hci7: command tx timeout [ 225.174473] Bluetooth: hci0: command tx timeout [ 225.304443] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 00:03:38 Registers: info registers vcpu 0 RAX=ffff88801238fb90 RBX=ffffffff88618798 RCX=ffffffff81429a4a RDX=ffff88801238fba8 RSI=0000000000000001 RDI=ffff88806c631bc0 RBP=ffff88806c631bc0 RSP=ffff88800f23fda0 R8 =0000000000000000 R9 =ffffed1001d97280 R10=ffff88800ecb9407 R11=0000000000000001 R12=ffff8880123953e0 R13=ffffffff88618798 R14=ffff88800ed33780 R15=0000000000000086 RIP=ffffffff81aecef4 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8ebf247000 CR3=000000000bfe0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=23b764b717cfc7b61349d4cf1e6620fb XMM02=a3797342f9eb3dd900000000000ff368 XMM03=711fbe8126c5d3440000000000137300 XMM04=ff5c3511d438665900000000000ae988 XMM05=2c8db4ec30e1e773000000000013f7a0 XMM06=9f165a4fe6c971ad0000000000137408 XMM07=711fbe8126c5d3440000000000137300 XMM08=a3797342f9eb3dd900000000000ff368 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8283cdc5 RDI=ffffffff886930a0 RBP=ffffffff88693060 RSP=ffff88800ed46bb8 R8 =0000000000000001 R9 =ffffed1001da8d67 R10=0000000000000032 R11=6f6c206863696877 R12=0000000000000032 R13=0000000000000001 R14=ffff888008fea04f R15=ffff88800ed46eb8 RIP=ffffffff8283ce1d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000001f27f60 CR3=00000000097fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=73732f6563696c732e6d65747379732f XMM03=00656369767265732e6873732f656369 XMM04=0000557dac0f3cc00000557dac0d9b40 XMM05=00000002000000040000557dac108610 XMM06=000034623461006563697665642e3069 XMM07=00000000000000000000000000000000 XMM08=7368746150796c6e4f64616552646e69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000