last executing test programs: 2.859265953s ago: executing program 2 (id=3): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 2.858073296s ago: executing program 1 (id=9): socket(0x1, 0x1, 0x0) 2.857666926s ago: executing program 3 (id=4): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0) 2.84524409s ago: executing program 1 (id=11): getpid() 2.844000443s ago: executing program 2 (id=12): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 2.831533792s ago: executing program 4 (id=5): close(0xffffffffffffffff) 2.775290628s ago: executing program 2 (id=13): gettid() 2.774638997s ago: executing program 3 (id=14): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 2.774536004s ago: executing program 0 (id=15): mkdir(&(0x7f0000000000), 0x0) 2.774456444s ago: executing program 1 (id=16): perf_event_open(&(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.732877123s ago: executing program 0 (id=19): unlink(&(0x7f0000000000)) 2.701278727s ago: executing program 4 (id=21): socket$kcm(0x29, 0x2, 0x0) 2.643383889s ago: executing program 0 (id=22): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 2.230700616s ago: executing program 1 (id=20): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.976242538s ago: executing program 0 (id=24): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.965802514s ago: executing program 3 (id=18): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.952658879s ago: executing program 2 (id=17): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.225919129s ago: executing program 1 (id=26): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.168012821s ago: executing program 4 (id=25): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.10581398s ago: executing program 2 (id=29): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.060192759s ago: executing program 3 (id=28): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 864.090273ms ago: executing program 0 (id=27): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 641.827116ms ago: executing program 4 (id=30): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 382.081564ms ago: executing program 2 (id=31): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 160.27414ms ago: executing program 1 (id=32): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 82.830628ms ago: executing program 4 (id=34): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 0s ago: executing program 0 (id=35): expanding glob: /sys/**/* kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. [ 58.798938][ T5818] cgroup: Unknown subsys name 'net' [ 58.941532][ T5818] cgroup: Unknown subsys name 'cpuset' [ 58.949917][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.355916][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.967596][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.380650][ T5893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.394554][ T5893] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.406272][ T5893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.424122][ T5893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.438492][ T5893] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.448013][ T5893] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.669182][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.678881][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.744293][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.765611][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.175770][ T2989] [ 65.178134][ T2989] ====================================================== [ 65.185155][ T2989] WARNING: possible circular locking dependency detected [ 65.192280][ T2989] 6.13.0-syzkaller-gc03320a6768c #0 Not tainted [ 65.198965][ T2989] ------------------------------------------------------ [ 65.205997][ T2989] kworker/u8:7/2989 is trying to acquire lock: [ 65.212239][ T2989] ffffffff8fcc1608 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 65.222642][ T2989] [ 65.222642][ T2989] but task is already holding lock: [ 65.230276][ T2989] ffff88807a958768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 65.240985][ T2989] [ 65.240985][ T2989] which lock already depends on the new lock. [ 65.240985][ T2989] [ 65.251659][ T2989] [ 65.251659][ T2989] the existing dependency chain (in reverse order) is: [ 65.256348][ T5916] chnl_net:caif_netlink_parms(): no params data found [ 65.260661][ T2989] [ 65.260661][ T2989] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 65.260690][ T2989] lock_acquire+0x1ed/0x550 [ 65.260710][ T2989] __mutex_lock+0x19c/0x1010 [ 65.260731][ T2989] wiphy_register+0x1a49/0x27b0 [ 65.260749][ T2989] ieee80211_register_hw+0x354e/0x4240 [ 65.260769][ T2989] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 65.260784][ T2989] init_mac80211_hwsim+0x87a/0xb00 [ 65.260799][ T2989] do_one_initcall+0x248/0x870 [ 65.260818][ T2989] do_initcall_level+0x157/0x210 [ 65.260833][ T2989] do_initcalls+0x3f/0x80 [ 65.260852][ T2989] kernel_init_freeable+0x435/0x5d0 [ 65.260866][ T2989] kernel_init+0x1d/0x2b0 [ 65.260881][ T2989] ret_from_fork+0x4b/0x80 [ 65.339783][ T2989] ret_from_fork_asm+0x1a/0x30 [ 65.345057][ T2989] [ 65.345057][ T2989] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 65.352252][ T2989] validate_chain+0x18ef/0x5920 [ 65.357610][ T2989] __lock_acquire+0x1397/0x2100 [ 65.362970][ T2989] lock_acquire+0x1ed/0x550 [ 65.367993][ T2989] __mutex_lock+0x19c/0x1010 [ 65.373113][ T2989] unregister_netdevice_many_notify+0xac2/0x2030 [ 65.379956][ T2989] unregister_netdevice_queue+0x303/0x370 [ 65.386199][ T2989] _cfg80211_unregister_wdev+0x163/0x590 [ 65.392344][ T2989] ieee80211_remove_interfaces+0x4ef/0x700 [ 65.398764][ T2989] ieee80211_unregister_hw+0x5d/0x2c0 [ 65.404776][ T2989] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 65.410944][ T2989] hwsim_exit_net+0x5c1/0x670 [ 65.416498][ T2989] cleanup_net+0x812/0xd60 [ 65.421425][ T2989] process_scheduled_works+0xa66/0x1840 [ 65.427478][ T2989] worker_thread+0x870/0xd30 [ 65.432574][ T2989] kthread+0x7a9/0x920 [ 65.437145][ T2989] ret_from_fork+0x4b/0x80 [ 65.442238][ T2989] ret_from_fork_asm+0x1a/0x30 [ 65.447502][ T2989] [ 65.447502][ T2989] other info that might help us debug this: [ 65.447502][ T2989] [ 65.457724][ T2989] Possible unsafe locking scenario: [ 65.457724][ T2989] [ 65.465184][ T2989] CPU0 CPU1 [ 65.470534][ T2989] ---- ---- [ 65.475920][ T2989] lock(&rdev->wiphy.mtx); [ 65.480421][ T2989] lock(rtnl_mutex); [ 65.486920][ T2989] lock(&rdev->wiphy.mtx); [ 65.494017][ T2989] lock(rtnl_mutex); [ 65.497999][ T2989] [ 65.497999][ T2989] *** DEADLOCK *** [ 65.497999][ T2989] [ 65.506415][ T2989] 4 locks held by kworker/u8:7/2989: [ 65.511780][ T2989] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 65.523025][ T2989] #1: ffffc9000beafc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 65.533809][ T2989] #2: ffffffff8fcb5050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 65.543383][ T2989] #3: ffff88807a958768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 65.554160][ T2989] [ 65.554160][ T2989] stack backtrace: [ 65.560222][ T2989] CPU: 1 UID: 0 PID: 2989 Comm: kworker/u8:7 Not tainted 6.13.0-syzkaller-gc03320a6768c #0 [ 65.560234][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.560242][ T2989] Workqueue: netns cleanup_net [ 65.560265][ T2989] Call Trace: [ 65.560271][ T2989] [ 65.560276][ T2989] dump_stack_lvl+0x241/0x360 [ 65.560291][ T2989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.560303][ T2989] ? __pfx__printk+0x10/0x10 [ 65.560317][ T2989] print_circular_bug+0x13a/0x1b0 [ 65.560331][ T2989] check_noncircular+0x36a/0x4a0 [ 65.560344][ T2989] ? __pfx_check_noncircular+0x10/0x10 [ 65.560356][ T2989] ? lockdep_lock+0x123/0x2b0 [ 65.560366][ T2989] ? rcu_read_lock_sched_held+0x8d/0x130 [ 65.560381][ T2989] validate_chain+0x18ef/0x5920 [ 65.560397][ T2989] ? __pfx_validate_chain+0x10/0x10 [ 65.560410][ T2989] ? mark_lock+0x9a/0x360 [ 65.560421][ T2989] ? __lock_acquire+0x1397/0x2100 [ 65.560434][ T2989] ? mark_lock+0x9a/0x360 [ 65.560445][ T2989] __lock_acquire+0x1397/0x2100 [ 65.560458][ T2989] lock_acquire+0x1ed/0x550 [ 65.560467][ T2989] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.560481][ T2989] ? __pfx_lock_acquire+0x10/0x10 [ 65.560491][ T2989] ? __pfx___might_resched+0x10/0x10 [ 65.560501][ T2989] ? finish_wait+0xd4/0x1e0 [ 65.560512][ T2989] __mutex_lock+0x19c/0x1010 [ 65.560525][ T2989] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.560538][ T2989] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.560549][ T2989] ? __pfx___mutex_lock+0x10/0x10 [ 65.560562][ T2989] ? __pfx___might_resched+0x10/0x10 [ 65.560571][ T2989] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 65.560587][ T2989] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 65.560599][ T2989] unregister_netdevice_many_notify+0xac2/0x2030 [ 65.560610][ T2989] ? mark_lock+0x9a/0x360 [ 65.560623][ T2989] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 65.560634][ T2989] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 65.560647][ T2989] ? __pfx_lock_release+0x10/0x10 [ 65.560661][ T2989] unregister_netdevice_queue+0x303/0x370 [ 65.560671][ T2989] ? __pfx_up_write+0x10/0x10 [ 65.560684][ T2989] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 65.560695][ T2989] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 65.560707][ T2989] _cfg80211_unregister_wdev+0x163/0x590 [ 65.560721][ T2989] ieee80211_remove_interfaces+0x4ef/0x700 [ 65.560734][ T2989] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 65.560744][ T2989] ? rcu_is_watching+0x15/0xb0 [ 65.560758][ T2989] ieee80211_unregister_hw+0x5d/0x2c0 [ 65.560772][ T2989] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 65.560786][ T2989] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 65.560798][ T2989] hwsim_exit_net+0x5c1/0x670 [ 65.560807][ T2989] ? __pfx_hwsim_exit_net+0x10/0x10 [ 65.560816][ T2989] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 65.560831][ T2989] cleanup_net+0x812/0xd60 [ 65.560845][ T2989] ? __pfx_cleanup_net+0x10/0x10 [ 65.560887][ T2989] ? process_scheduled_works+0x976/0x1840 [ 65.560901][ T2989] process_scheduled_works+0xa66/0x1840 [ 65.560920][ T2989] ? __pfx_process_scheduled_works+0x10/0x10 [ 65.560935][ T2989] ? assign_work+0x364/0x3d0 [ 65.560948][ T2989] worker_thread+0x870/0xd30 [ 65.560959][ T2989] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 65.560971][ T2989] ? __kthread_parkme+0x169/0x1d0 [ 65.560980][ T2989] ? __pfx_worker_thread+0x10/0x10 [ 65.560989][ T2989] kthread+0x7a9/0x920 [ 65.560999][ T2989] ? __pfx_kthread+0x10/0x10 [ 65.561009][ T2989] ? __pfx_worker_thread+0x10/0x10 [ 65.561018][ T2989] ? __pfx_kthread+0x10/0x10 [ 65.561027][ T2989] ? __pfx_kthread+0x10/0x10 [ 65.561038][ T2989] ? __pfx_kthread+0x10/0x10 [ 65.561047][ T2989] ? _raw_spin_unlock_irq+0x23/0x50 [ 65.561058][ T2989] ? lockdep_hardirqs_on+0x99/0x150 [ 65.561070][ T2989] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.561080][ T2989] ret_from_fork+0x4b/0x80 [ 65.561091][ T2989] ? __pfx_kthread+0x10/0x10 [ 65.561101][ T2989] ret_from_fork_asm+0x1a/0x30 [ 65.561112][ T2989] [ 66.365999][ T2989] bond0 (unregistering): Released all slaves [ 71.739603][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.745908][ T1295] ieee802154 phy1 wpan1: encryption failed: -22