last executing test programs: 2.664995763s ago: executing program 2 (id=99): socket$inet_mptcp(0x2, 0x1, 0x106) 2.654292277s ago: executing program 2 (id=102): readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.598882624s ago: executing program 4 (id=105): socket$nl_netfilter(0x10, 0x3, 0xc) 2.596549381s ago: executing program 0 (id=107): socket$nl_audit(0x10, 0x3, 0x9) 2.596318773s ago: executing program 2 (id=109): syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5) 2.59615442s ago: executing program 4 (id=110): socket$netlink(0x10, 0x3, 0x0) 2.595539451s ago: executing program 3 (id=112): socket$kcm(0x29, 0x2, 0x0) 2.589138897s ago: executing program 0 (id=113): listen(0xffffffffffffffff, 0x0) 2.531278388s ago: executing program 3 (id=114): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2.53100336s ago: executing program 4 (id=115): syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.530814552s ago: executing program 0 (id=117): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 2.530547094s ago: executing program 4 (id=119): socket$phonet(0x23, 0x2, 0x1) 2.529419677s ago: executing program 3 (id=120): socket$inet6_udplite(0xa, 0x2, 0x88) 2.52390468s ago: executing program 1 (id=121): getgid() 2.488972204s ago: executing program 1 (id=123): socket$inet6(0xa, 0x1, 0x0) 2.488808846s ago: executing program 2 (id=124): socket$tipc(0x1e, 0x2, 0x0) 2.439272554s ago: executing program 3 (id=125): socket$inet_dccp(0x2, 0x6, 0x0) 2.439136661s ago: executing program 4 (id=126): socket$inet6_mptcp(0xa, 0x1, 0x106) 1.76570828s ago: executing program 0 (id=122): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.63934708s ago: executing program 2 (id=127): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.494650734s ago: executing program 1 (id=129): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.231893434s ago: executing program 4 (id=130): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.108344263s ago: executing program 3 (id=128): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 949.619757ms ago: executing program 0 (id=131): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 898.185049ms ago: executing program 1 (id=133): nanosleep(&(0x7f0000000000), 0x0) 690.756774ms ago: executing program 1 (id=136): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 690.328907ms ago: executing program 2 (id=132): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 377.304196ms ago: executing program 3 (id=135): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 173.807006ms ago: executing program 0 (id=137): socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=138): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 55.229999][ T5825] cgroup: Unknown subsys name 'net' [ 55.337424][ T5825] cgroup: Unknown subsys name 'cpuset' [ 55.345325][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.657656][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.027247][ T5934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.220764][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.369854][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.394264][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.404652][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.418211][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.442816][ T5979] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.452513][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.826574][ T5976] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.987664][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.996008][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.112238][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.120232][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.330949][ T6014] chnl_net:caif_netlink_parms(): no params data found [ 61.678438][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.689312][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.704366][ T6014] bridge_slave_0: entered allmulticast mode [ 61.711598][ T6014] bridge_slave_0: entered promiscuous mode [ 61.730209][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.737926][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.746020][ T6014] bridge_slave_1: entered allmulticast mode [ 61.753130][ T6014] bridge_slave_1: entered promiscuous mode [ 61.812163][ T1033] [ 61.814537][ T1033] ====================================================== [ 61.821568][ T1033] WARNING: possible circular locking dependency detected [ 61.828595][ T1033] 6.13.0-rc6-syzkaller-01150-gb44e27b4df1a #0 Not tainted [ 61.835690][ T1033] ------------------------------------------------------ [ 61.842691][ T1033] kworker/u8:5/1033 is trying to acquire lock: [ 61.848826][ T1033] ffffffff8fcb4888 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 61.859191][ T1033] [ 61.859191][ T1033] but task is already holding lock: [ 61.866541][ T1033] ffff8880276a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 61.876891][ T1033] [ 61.876891][ T1033] which lock already depends on the new lock. [ 61.876891][ T1033] [ 61.887280][ T1033] [ 61.887280][ T1033] the existing dependency chain (in reverse order) is: [ 61.896277][ T1033] [ 61.896277][ T1033] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 61.903999][ T1033] lock_acquire+0x1ed/0x550 [ 61.909101][ T1033] __mutex_lock+0x1ac/0xee0 [ 61.914117][ T1033] wiphy_register+0x1a49/0x27b0 [ 61.919479][ T1033] ieee80211_register_hw+0x30fb/0x3e10 [ 61.925550][ T1033] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 61.931782][ T1033] init_mac80211_hwsim+0x87a/0xb00 [ 61.937405][ T1033] do_one_initcall+0x248/0x870 [ 61.942681][ T1033] do_initcall_level+0x157/0x210 [ 61.948129][ T1033] do_initcalls+0x3f/0x80 [ 61.952972][ T1033] kernel_init_freeable+0x435/0x5d0 [ 61.958772][ T1033] kernel_init+0x1d/0x2b0 [ 61.963607][ T1033] ret_from_fork+0x4b/0x80 [ 61.968533][ T1033] ret_from_fork_asm+0x1a/0x30 [ 61.973809][ T1033] [ 61.973809][ T1033] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 61.981024][ T1033] validate_chain+0x18ef/0x5920 [ 61.986387][ T1033] __lock_acquire+0x1397/0x2100 [ 61.991748][ T1033] lock_acquire+0x1ed/0x550 [ 61.996759][ T1033] __mutex_lock+0x1ac/0xee0 [ 62.001771][ T1033] unregister_netdevice_many_notify+0xac2/0x2030 [ 62.008628][ T1033] unregister_netdevice_queue+0x303/0x370 [ 62.014862][ T1033] _cfg80211_unregister_wdev+0x163/0x590 [ 62.021007][ T1033] ieee80211_remove_interfaces+0x4ef/0x700 [ 62.027325][ T1033] ieee80211_unregister_hw+0x5d/0x2c0 [ 62.033209][ T1033] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 62.039266][ T1033] hwsim_exit_net+0x5c1/0x670 [ 62.044457][ T1033] cleanup_net+0x812/0xd60 [ 62.049396][ T1033] process_scheduled_works+0xa66/0x1840 [ 62.055448][ T1033] worker_thread+0x870/0xd30 [ 62.060557][ T1033] kthread+0x2f0/0x390 [ 62.065168][ T1033] ret_from_fork+0x4b/0x80 [ 62.070103][ T1033] ret_from_fork_asm+0x1a/0x30 [ 62.075379][ T1033] [ 62.075379][ T1033] other info that might help us debug this: [ 62.075379][ T1033] [ 62.085591][ T1033] Possible unsafe locking scenario: [ 62.085591][ T1033] [ 62.093027][ T1033] CPU0 CPU1 [ 62.098382][ T1033] ---- ---- [ 62.103736][ T1033] lock(&rdev->wiphy.mtx); [ 62.108237][ T1033] lock(rtnl_mutex); [ 62.114727][ T1033] lock(&rdev->wiphy.mtx); [ 62.121763][ T1033] lock(rtnl_mutex); [ 62.125759][ T1033] [ 62.125759][ T1033] *** DEADLOCK *** [ 62.125759][ T1033] [ 62.133900][ T1033] 4 locks held by kworker/u8:5/1033: [ 62.139178][ T1033] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 62.150067][ T1033] #1: ffffc90003c0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 62.160612][ T1033] #2: ffffffff8fca8110 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 62.170012][ T1033] #3: ffff8880276a0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 62.180883][ T1033] [ 62.180883][ T1033] stack backtrace: [ 62.186779][ T1033] CPU: 1 UID: 0 PID: 1033 Comm: kworker/u8:5 Not tainted 6.13.0-rc6-syzkaller-01150-gb44e27b4df1a #0 [ 62.197616][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 62.207668][ T1033] Workqueue: netns cleanup_net [ 62.212441][ T1033] Call Trace: [ 62.215717][ T1033] [ 62.218641][ T1033] dump_stack_lvl+0x241/0x360 [ 62.223314][ T1033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.228508][ T1033] ? __pfx__printk+0x10/0x10 [ 62.233090][ T1033] print_circular_bug+0x13a/0x1b0 [ 62.238109][ T1033] check_noncircular+0x36a/0x4a0 [ 62.243043][ T1033] ? __pfx_check_noncircular+0x10/0x10 [ 62.248497][ T1033] ? lockdep_lock+0x123/0x2b0 [ 62.253257][ T1033] validate_chain+0x18ef/0x5920 [ 62.258126][ T1033] ? __lock_acquire+0x1397/0x2100 [ 62.263149][ T1033] ? __pfx_validate_chain+0x10/0x10 [ 62.268343][ T1033] ? mark_lock+0x9a/0x360 [ 62.272666][ T1033] ? mark_lock+0x9a/0x360 [ 62.276990][ T1033] ? __lock_acquire+0x1397/0x2100 [ 62.282010][ T1033] ? mark_lock+0x9a/0x360 [ 62.286333][ T1033] __lock_acquire+0x1397/0x2100 [ 62.291184][ T1033] lock_acquire+0x1ed/0x550 [ 62.295677][ T1033] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 62.302174][ T1033] ? __pfx_lock_acquire+0x10/0x10 [ 62.307218][ T1033] ? __pfx___might_resched+0x10/0x10 [ 62.312527][ T1033] ? finish_wait+0xd4/0x1e0 [ 62.317129][ T1033] __mutex_lock+0x1ac/0xee0 [ 62.321639][ T1033] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 62.328154][ T1033] ? __pfx_autoremove_wake_function+0x10/0x10 [ 62.334224][ T1033] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 62.340724][ T1033] ? __pfx___mutex_lock+0x10/0x10 [ 62.345745][ T1033] ? __pfx___might_resched+0x10/0x10 [ 62.351020][ T1033] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 62.357607][ T1033] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 62.364102][ T1033] unregister_netdevice_many_notify+0xac2/0x2030 [ 62.370425][ T1033] ? mark_lock+0x9a/0x360 [ 62.374756][ T1033] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 62.381513][ T1033] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 62.387225][ T1033] ? __pfx_lock_release+0x10/0x10 [ 62.392247][ T1033] unregister_netdevice_queue+0x303/0x370 [ 62.397958][ T1033] ? __pfx_up_write+0x10/0x10 [ 62.402714][ T1033] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 62.408954][ T1033] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 62.414667][ T1033] _cfg80211_unregister_wdev+0x163/0x590 [ 62.420296][ T1033] ieee80211_remove_interfaces+0x4ef/0x700 [ 62.426095][ T1033] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 62.432416][ T1033] ? rcu_is_watching+0x15/0xb0 [ 62.437180][ T1033] ieee80211_unregister_hw+0x5d/0x2c0 [ 62.442550][ T1033] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 62.448098][ T1033] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 62.454179][ T1033] hwsim_exit_net+0x5c1/0x670 [ 62.458846][ T1033] ? __pfx_hwsim_exit_net+0x10/0x10 [ 62.464041][ T1033] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 62.469842][ T1033] cleanup_net+0x812/0xd60 [ 62.474337][ T1033] ? __pfx_cleanup_net+0x10/0x10 [ 62.479357][ T1033] ? process_scheduled_works+0x976/0x1840 [ 62.485062][ T1033] process_scheduled_works+0xa66/0x1840 [ 62.490609][ T1033] ? __pfx_process_scheduled_works+0x10/0x10 [ 62.496582][ T1033] ? assign_work+0x364/0x3d0 [ 62.501168][ T1033] worker_thread+0x870/0xd30 [ 62.505768][ T1033] ? __kthread_parkme+0x169/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 62.510809][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 62.515917][ T1033] kthread+0x2f0/0x390 [ 62.519986][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 62.525086][ T1033] ? __pfx_kthread+0x10/0x10 [ 62.529667][ T1033] ret_from_fork+0x4b/0x80 [ 62.534078][ T1033] ? __pfx_kthread+0x10/0x10 [ 62.538673][ T1033] ret_from_fork_asm+0x1a/0x30 [ 62.543430][ T1033] [ 62.840040][ T1033] bridge_slave_1: left allmulticast mode [ 62.845859][ T1033] bridge_slave_1: left promiscuous mode [ 62.851499][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.859744][ T1033] bridge_slave_0: left allmulticast mode [ 62.865410][ T1033] bridge_slave_0: left promiscuous mode [ 62.871026][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.947133][ T1033] bond0 (unregistering): Released all slaves [ 71.675237][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.681577][ T1299] ieee802154 phy1 wpan1: encryption failed: -22