last executing test programs: 2.637145896s ago: executing program 1 (id=2): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 2.636943237s ago: executing program 4 (id=5): close(0xffffffffffffffff) 2.636769263s ago: executing program 2 (id=9): gettid() 2.630250589s ago: executing program 0 (id=10): unlink(&(0x7f0000000000)) 2.624392998s ago: executing program 3 (id=11): socket(0x1, 0x1, 0x0) 2.562488144s ago: executing program 1 (id=12): perf_event_open(&(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.562313446s ago: executing program 2 (id=13): socket(0x1e, 0x2, 0x0) 2.562249758s ago: executing program 3 (id=14): mkdirat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.562155605s ago: executing program 4 (id=15): mkdir(&(0x7f0000000000), 0x0) 2.56206327s ago: executing program 0 (id=16): socket$kcm(0x29, 0x2, 0x0) 2.561991744s ago: executing program 3 (id=17): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 2.561857844s ago: executing program 0 (id=18): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 2.560900457s ago: executing program 2 (id=19): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 1.772388005s ago: executing program 2 (id=22): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.699863708s ago: executing program 0 (id=24): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.697647202s ago: executing program 3 (id=23): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.598561815s ago: executing program 1 (id=21): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.244908639s ago: executing program 4 (id=20): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.13909589s ago: executing program 2 (id=25): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.043179765s ago: executing program 4 (id=31): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 958.780166ms ago: executing program 1 (id=28): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 719.540342ms ago: executing program 0 (id=29): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 542.06314ms ago: executing program 3 (id=27): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 298.33826ms ago: executing program 0 (id=34): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 248.280819ms ago: executing program 1 (id=32): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.527612ms ago: executing program 2 (id=30): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=35): expanding glob: /sys/**/* kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 57.659076][ T5817] cgroup: Unknown subsys name 'net' [ 57.767372][ T5817] cgroup: Unknown subsys name 'cpuset' [ 57.776120][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.104482][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.385318][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.401371][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.414478][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.426474][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.448102][ T5867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.459127][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.773821][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.897381][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.915929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.957908][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.966463][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.918618][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 63.934440][ T1018] [ 63.936888][ T1018] ====================================================== [ 63.943908][ T1018] WARNING: possible circular locking dependency detected [ 63.950943][ T1018] 6.13.0-syzkaller-gb420b5756549 #0 Not tainted [ 63.957183][ T1018] ------------------------------------------------------ [ 63.964201][ T1018] kworker/u8:5/1018 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 63.970416][ T1018] ffffffff8fcc1608 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 63.981349][ T1018] [ 63.981349][ T1018] but task is already holding lock: [ 63.988901][ T1018] ffff88806f648768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 63.999371][ T1018] [ 63.999371][ T1018] which lock already depends on the new lock. [ 63.999371][ T1018] [ 64.009792][ T1018] [ 64.009792][ T1018] the existing dependency chain (in reverse order) is: [ 64.019000][ T1018] [ 64.019000][ T1018] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 64.026761][ T1018] lock_acquire+0x1ed/0x550 [ 64.031902][ T1018] __mutex_lock+0x19c/0x1010 [ 64.037059][ T1018] wiphy_register+0x1a49/0x27b0 [ 64.042465][ T1018] ieee80211_register_hw+0x354e/0x4240 [ 64.048514][ T1018] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 64.054789][ T1018] init_mac80211_hwsim+0x87a/0xb00 [ 64.060543][ T1018] do_one_initcall+0x248/0x870 [ 64.065847][ T1018] do_initcall_level+0x157/0x210 [ 64.071404][ T1018] do_initcalls+0x3f/0x80 [ 64.076277][ T1018] kernel_init_freeable+0x435/0x5d0 [ 64.082096][ T1018] kernel_init+0x1d/0x2b0 [ 64.086965][ T1018] ret_from_fork+0x4b/0x80 [ 64.091921][ T1018] ret_from_fork_asm+0x1a/0x30 [ 64.097312][ T1018] [ 64.097312][ T1018] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 64.104547][ T1018] validate_chain+0x18ef/0x5920 [ 64.109935][ T1018] __lock_acquire+0x1397/0x2100 [ 64.115336][ T1018] lock_acquire+0x1ed/0x550 [ 64.120385][ T1018] __mutex_lock+0x19c/0x1010 [ 64.125502][ T1018] unregister_netdevice_many_notify+0xac2/0x2030 [ 64.132868][ T1018] unregister_netdevice_queue+0x303/0x370 [ 64.139184][ T1018] _cfg80211_unregister_wdev+0x163/0x590 [ 64.145388][ T1018] ieee80211_remove_interfaces+0x4ef/0x700 [ 64.151701][ T1018] ieee80211_unregister_hw+0x5d/0x2c0 [ 64.157582][ T1018] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 64.163662][ T1018] hwsim_exit_net+0x5c1/0x670 [ 64.168882][ T1018] cleanup_net+0x812/0xd60 [ 64.173817][ T1018] process_scheduled_works+0xa66/0x1840 [ 64.179901][ T1018] worker_thread+0x870/0xd30 [ 64.185023][ T1018] kthread+0x7a9/0x920 [ 64.189607][ T1018] ret_from_fork+0x4b/0x80 [ 64.195064][ T1018] ret_from_fork_asm+0x1a/0x30 [ 64.200351][ T1018] [ 64.200351][ T1018] other info that might help us debug this: [ 64.200351][ T1018] [ 64.210692][ T1018] Possible unsafe locking scenario: [ 64.210692][ T1018] [ 64.218149][ T1018] CPU0 CPU1 [ 64.223698][ T1018] ---- ---- [ 64.229145][ T1018] lock(&rdev->wiphy.mtx); [ 64.233641][ T1018] lock(rtnl_mutex); [ 64.240140][ T1018] lock(&rdev->wiphy.mtx); [ 64.247179][ T1018] lock(rtnl_mutex); [ 64.251142][ T1018] [ 64.251142][ T1018] *** DEADLOCK *** [ 64.251142][ T1018] [ 64.259284][ T1018] 4 locks held by kworker/u8:5/1018: [ 64.264550][ T1018] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 64.275488][ T1018] #1: ffffc900040ffc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 64.286052][ T1018] #2: ffffffff8fcb5050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 64.295475][ T1018] #3: ffff88806f648768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 64.306311][ T1018] [ 64.306311][ T1018] stack backtrace: [ 64.312431][ T1018] CPU: 1 UID: 0 PID: 1018 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-gb420b5756549 #0 [ 64.312445][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.312453][ T1018] Workqueue: netns cleanup_net [ 64.312475][ T1018] Call Trace: [ 64.312481][ T1018] [ 64.312487][ T1018] dump_stack_lvl+0x241/0x360 [ 64.312502][ T1018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.312515][ T1018] ? __pfx__printk+0x10/0x10 [ 64.312528][ T1018] print_circular_bug+0x13a/0x1b0 [ 64.312543][ T1018] check_noncircular+0x36a/0x4a0 [ 64.312560][ T1018] ? __pfx_check_noncircular+0x10/0x10 [ 64.312572][ T1018] ? lockdep_lock+0x123/0x2b0 [ 64.312582][ T1018] ? rcu_read_lock_sched_held+0x8d/0x130 [ 64.312599][ T1018] validate_chain+0x18ef/0x5920 [ 64.312615][ T1018] ? __pfx_validate_chain+0x10/0x10 [ 64.312629][ T1018] ? mark_lock+0x9a/0x360 [ 64.312640][ T1018] ? __lock_acquire+0x1397/0x2100 [ 64.312653][ T1018] ? mark_lock+0x9a/0x360 [ 64.312664][ T1018] __lock_acquire+0x1397/0x2100 [ 64.312677][ T1018] lock_acquire+0x1ed/0x550 [ 64.312687][ T1018] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 64.312700][ T1018] ? __pfx_lock_acquire+0x10/0x10 [ 64.312710][ T1018] ? __pfx___might_resched+0x10/0x10 [ 64.312720][ T1018] ? finish_wait+0xd4/0x1e0 [ 64.312733][ T1018] __mutex_lock+0x19c/0x1010 [ 64.312747][ T1018] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 64.312760][ T1018] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 64.312772][ T1018] ? __pfx___mutex_lock+0x10/0x10 [ 64.312784][ T1018] ? __pfx___might_resched+0x10/0x10 [ 64.312794][ T1018] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 64.312808][ T1018] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 64.312822][ T1018] unregister_netdevice_many_notify+0xac2/0x2030 [ 64.312834][ T1018] ? mark_lock+0x9a/0x360 [ 64.312847][ T1018] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 64.312858][ T1018] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 64.312872][ T1018] ? __pfx_lock_release+0x10/0x10 [ 64.312886][ T1018] unregister_netdevice_queue+0x303/0x370 [ 64.312896][ T1018] ? __pfx_up_write+0x10/0x10 [ 64.312910][ T1018] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 64.312921][ T1018] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 64.312933][ T1018] _cfg80211_unregister_wdev+0x163/0x590 [ 64.312947][ T1018] ieee80211_remove_interfaces+0x4ef/0x700 [ 64.312960][ T1018] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 64.312971][ T1018] ? rcu_is_watching+0x15/0xb0 [ 64.312986][ T1018] ieee80211_unregister_hw+0x5d/0x2c0 [ 64.313000][ T1018] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 64.313014][ T1018] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 64.313026][ T1018] hwsim_exit_net+0x5c1/0x670 [ 64.313035][ T1018] ? __pfx_hwsim_exit_net+0x10/0x10 [ 64.313045][ T1018] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 64.313063][ T1018] cleanup_net+0x812/0xd60 [ 64.313078][ T1018] ? __pfx_cleanup_net+0x10/0x10 [ 64.313093][ T1018] ? process_scheduled_works+0x976/0x1840 [ 64.313107][ T1018] process_scheduled_works+0xa66/0x1840 [ 64.313126][ T1018] ? __pfx_process_scheduled_works+0x10/0x10 [ 64.313142][ T1018] ? assign_work+0x364/0x3d0 [ 64.313155][ T1018] worker_thread+0x870/0xd30 [ 64.313166][ T1018] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 64.313179][ T1018] ? __kthread_parkme+0x169/0x1d0 [ 64.313188][ T1018] ? __pfx_worker_thread+0x10/0x10 [ 64.313197][ T1018] kthread+0x7a9/0x920 [ 64.313207][ T1018] ? __pfx_kthread+0x10/0x10 [ 64.313221][ T1018] ? __pfx_worker_thread+0x10/0x10 [ 64.313230][ T1018] ? __pfx_kthread+0x10/0x10 [ 64.313241][ T1018] ? __pfx_kthread+0x10/0x10 [ 64.313252][ T1018] ? __pfx_kthread+0x10/0x10 [ 64.313262][ T1018] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.313273][ T1018] ? lockdep_hardirqs_on+0x99/0x150 [ 64.313285][ T1018] ? __pfx_kthread+0x10/0x10 [ 64.313303][ T1018] ret_from_fork+0x4b/0x80 [ 64.313313][ T1018] ? __pfx_kthread+0x10/0x10 [ 64.313323][ T1018] ret_from_fork_asm+0x1a/0x30 [ 64.313335][ T1018] [ 65.047944][ T1018] bond0 (unregistering): Released all slaves [ 71.785338][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.791641][ T1294] ieee802154 phy1 wpan1: encryption failed: -22