last executing test programs: 3.998944312s ago: executing program 4 (id=516): set_mempolicy_home_node(0x0, 0x0, 0x0, 0x0) 3.973217416s ago: executing program 4 (id=518): ftruncate(0xffffffffffffffff, 0x0) 3.899414067s ago: executing program 4 (id=523): migrate_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)) 3.826690391s ago: executing program 4 (id=530): syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$vim2m(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$vim2m(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$vim2m(&(0x7f0000000500), 0x4, 0x800) 3.826167707s ago: executing program 4 (id=533): pause() 3.539625414s ago: executing program 1 (id=559): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans', 0x1, 0x0) 3.539368184s ago: executing program 3 (id=561): fchdir(0xffffffffffffffff) 3.538098623s ago: executing program 2 (id=562): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/irnet', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/irnet', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/irnet', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/irnet', 0x800, 0x0) 3.527160423s ago: executing program 1 (id=563): lremovexattr(&(0x7f0000000000), &(0x7f0000000000)) 3.516602999s ago: executing program 3 (id=565): chroot(&(0x7f0000000000)) 3.463749044s ago: executing program 2 (id=566): getcwd(&(0x7f0000000000), 0x0) 3.463531745s ago: executing program 1 (id=567): process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0) 3.463464971s ago: executing program 0 (id=568): inotify_init() 3.463385668s ago: executing program 3 (id=569): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey', 0x800, 0x0) 3.450478302s ago: executing program 0 (id=571): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null', 0x800, 0x0) 3.45032648s ago: executing program 2 (id=572): eventfd(0x0) 3.432996197s ago: executing program 3 (id=573): socket$netlink(0x10, 0x3, 0x0) 3.365908385s ago: executing program 3 (id=576): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self', 0x800, 0x0) 2.95276619s ago: executing program 3 (id=577): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.819420643s ago: executing program 2 (id=574): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.703713151s ago: executing program 0 (id=575): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.576302993s ago: executing program 5 (id=578): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid', 0x800, 0x0) 2.546545762s ago: executing program 5 (id=580): setfsuid(0x0) 1.910699477s ago: executing program 1 (id=570): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.640865555s ago: executing program 0 (id=582): exit(0x0) 1.637932692s ago: executing program 2 (id=579): socket$inet6_tcp(0xa, 0x1, 0x0) 1.58905616s ago: executing program 0 (id=585): remap_file_pages(0x0, 0x0, 0x0, 0x0, 0x0) 1.569881399s ago: executing program 5 (id=581): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.461437545s ago: executing program 1 (id=583): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 923.82605ms ago: executing program 0 (id=587): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 349.622359ms ago: executing program 1 (id=588): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 67.623085ms ago: executing program 4 (id=591): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=589): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. [ 63.117953][ T5820] cgroup: Unknown subsys name 'net' [ 63.292124][ T5820] cgroup: Unknown subsys name 'cpuset' [ 63.300889][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.593554][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.820588][ T6154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.429722][ T6232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.762587][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.776128][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.665431][ T6448] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.693890][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.707518][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.855518][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.882622][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.098326][ T6487] mmap: syz.0.585 (6487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.285643][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 75.657091][ T35] [ 75.659463][ T35] ====================================================== [ 75.666578][ T35] WARNING: possible circular locking dependency detected [ 75.673657][ T35] 6.13.0-syzkaller-06167-g0afd22092df4 #0 Not tainted [ 75.680518][ T35] ------------------------------------------------------ [ 75.687578][ T35] kworker/u8:2/35 is trying to acquire lock: [ 75.693571][ T35] ffffffff8fcc33c8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 75.704038][ T35] [ 75.704038][ T35] but task is already holding lock: [ 75.711394][ T35] ffff88807a378768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 75.721744][ T35] [ 75.721744][ T35] which lock already depends on the new lock. [ 75.721744][ T35] [ 75.732140][ T35] [ 75.732140][ T35] the existing dependency chain (in reverse order) is: [ 75.741155][ T35] [ 75.741155][ T35] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 75.748897][ T35] lock_acquire+0x1ed/0x550 [ 75.753918][ T35] __mutex_lock+0x19c/0x1010 [ 75.759026][ T35] wiphy_register+0x1a49/0x27b0 [ 75.764397][ T35] ieee80211_register_hw+0x354e/0x4240 [ 75.770398][ T35] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 75.776630][ T35] init_mac80211_hwsim+0x87a/0xb00 [ 75.782264][ T35] do_one_initcall+0x248/0x870 [ 75.787550][ T35] do_initcall_level+0x157/0x210 [ 75.793089][ T35] do_initcalls+0x3f/0x80 [ 75.797930][ T35] kernel_init_freeable+0x435/0x5d0 [ 75.803821][ T35] kernel_init+0x1d/0x2b0 [ 75.808667][ T35] ret_from_fork+0x4b/0x80 [ 75.813595][ T35] ret_from_fork_asm+0x1a/0x30 [ 75.818956][ T35] [ 75.818956][ T35] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 75.826156][ T35] validate_chain+0x18ef/0x5920 [ 75.831516][ T35] __lock_acquire+0x1397/0x2100 [ 75.836911][ T35] lock_acquire+0x1ed/0x550 [ 75.841962][ T35] __mutex_lock+0x19c/0x1010 [ 75.847078][ T35] unregister_netdevice_many_notify+0xac2/0x2030 [ 75.853938][ T35] unregister_netdevice_queue+0x303/0x370 [ 75.860194][ T35] _cfg80211_unregister_wdev+0x163/0x590 [ 75.866607][ T35] ieee80211_remove_interfaces+0x4ef/0x700 [ 75.872958][ T35] ieee80211_unregister_hw+0x5d/0x2c0 [ 75.878961][ T35] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 75.885045][ T35] hwsim_exit_net+0x5c1/0x670 [ 75.890339][ T35] cleanup_net+0x812/0xd60 [ 75.895271][ T35] process_scheduled_works+0xa66/0x1840 [ 75.901347][ T35] worker_thread+0x870/0xd30 [ 75.906471][ T35] kthread+0x7a9/0x920 [ 75.911066][ T35] ret_from_fork+0x4b/0x80 [ 75.916005][ T35] ret_from_fork_asm+0x1a/0x30 [ 75.921289][ T35] [ 75.921289][ T35] other info that might help us debug this: [ 75.921289][ T35] [ 75.931590][ T35] Possible unsafe locking scenario: [ 75.931590][ T35] [ 75.939035][ T35] CPU0 CPU1 [ 75.944404][ T35] ---- ---- [ 75.949766][ T35] lock(&rdev->wiphy.mtx); [ 75.954272][ T35] lock(rtnl_mutex); [ 75.960767][ T35] lock(&rdev->wiphy.mtx); [ 75.967792][ T35] lock(rtnl_mutex); [ 75.971870][ T35] [ 75.971870][ T35] *** DEADLOCK *** [ 75.971870][ T35] [ 75.980002][ T35] 4 locks held by kworker/u8:2/35: [ 75.985096][ T35] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 75.996057][ T35] #1: ffffc90000ab7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 76.006583][ T35] #2: ffffffff8fcb6e10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 76.015981][ T35] #3: ffff88807a378768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 76.027298][ T35] [ 76.027298][ T35] stack backtrace: [ 76.033220][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-syzkaller-06167-g0afd22092df4 #0 [ 76.033234][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.033243][ T35] Workqueue: netns cleanup_net [ 76.033260][ T35] Call Trace: [ 76.033267][ T35] [ 76.033273][ T35] dump_stack_lvl+0x241/0x360 [ 76.033288][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.033300][ T35] ? __pfx__printk+0x10/0x10 [ 76.033321][ T35] print_circular_bug+0x13a/0x1b0 [ 76.033335][ T35] check_noncircular+0x36a/0x4a0 [ 76.033348][ T35] ? __pfx_check_noncircular+0x10/0x10 [ 76.033360][ T35] ? lockdep_lock+0x123/0x2b0 [ 76.033379][ T35] validate_chain+0x18ef/0x5920 [ 76.033397][ T35] ? __pfx_validate_chain+0x10/0x10 [ 76.033411][ T35] ? mark_lock+0x9a/0x360 [ 76.033428][ T35] ? __lock_acquire+0x1397/0x2100 [ 76.033448][ T35] ? mark_lock+0x9a/0x360 [ 76.033465][ T35] __lock_acquire+0x1397/0x2100 [ 76.033485][ T35] lock_acquire+0x1ed/0x550 [ 76.033501][ T35] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 76.033522][ T35] ? __pfx_lock_acquire+0x10/0x10 [ 76.033538][ T35] ? __pfx___might_resched+0x10/0x10 [ 76.033553][ T35] ? finish_wait+0xd4/0x1e0 [ 76.033570][ T35] __mutex_lock+0x19c/0x1010 [ 76.033584][ T35] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 76.033605][ T35] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 76.033624][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 76.033637][ T35] ? __pfx___might_resched+0x10/0x10 [ 76.033652][ T35] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 76.033671][ T35] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 76.033690][ T35] unregister_netdevice_many_notify+0xac2/0x2030 [ 76.033708][ T35] ? mark_lock+0x9a/0x360 [ 76.033728][ T35] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 76.033752][ T35] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 76.033766][ T35] ? __pfx_lock_release+0x10/0x10 [ 76.033787][ T35] unregister_netdevice_queue+0x303/0x370 [ 76.033805][ T35] ? __pfx_up_write+0x10/0x10 [ 76.033816][ T35] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 76.033835][ T35] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 76.033848][ T35] _cfg80211_unregister_wdev+0x163/0x590 [ 76.033864][ T35] ieee80211_remove_interfaces+0x4ef/0x700 [ 76.033883][ T35] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 76.033900][ T35] ? rcu_is_watching+0x15/0xb0 [ 76.033914][ T35] ieee80211_unregister_hw+0x5d/0x2c0 [ 76.033943][ T35] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 76.033962][ T35] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 76.033982][ T35] hwsim_exit_net+0x5c1/0x670 [ 76.033997][ T35] ? __pfx_hwsim_exit_net+0x10/0x10 [ 76.034012][ T35] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 76.034028][ T35] cleanup_net+0x812/0xd60 [ 76.034043][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 76.034061][ T35] ? process_scheduled_works+0x976/0x1840 [ 76.034075][ T35] process_scheduled_works+0xa66/0x1840 [ 76.034096][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 76.034112][ T35] ? assign_work+0x364/0x3d0 [ 76.034126][ T35] worker_thread+0x870/0xd30 [ 76.034144][ T35] ? __kthread_parkme+0x169/0x1d0 [ 76.034160][ T35] ? __pfx_worker_thread+0x10/0x10 [ 76.034173][ T35] kthread+0x7a9/0x920 [ 76.034189][ T35] ? __pfx_kthread+0x10/0x10 [ 76.034205][ T35] ? __pfx_worker_thread+0x10/0x10 [ 76.034218][ T35] ? __pfx_kthread+0x10/0x10 [ 76.034233][ T35] ? __pfx_kthread+0x10/0x10 [ 76.034250][ T35] ? __pfx_kthread+0x10/0x10 [ 76.034308][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.034320][ T35] ? lockdep_hardirqs_on+0x99/0x150 [ 76.034333][ T35] ? __pfx_kthread+0x10/0x10 [ 76.034349][ T35] ret_from_fork+0x4b/0x80 [ 76.034364][ T35] ? __pfx_kthread+0x10/0x10 [ 76.034379][ T35] ret_from_fork_asm+0x1a/0x30 [ 76.034397][ T35] [ 77.010120][ T35] bond0 (unregistering): Released all slaves [ 81.999390][ T1205] cfg80211: failed to load regulatory.db