last executing test programs: 4.894304614s ago: executing program 1 (id=70): getuid() 4.827459401s ago: executing program 1 (id=75): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0) 4.771022191s ago: executing program 1 (id=81): lremovexattr(&(0x7f0000000000), &(0x7f0000000000)) 4.770342741s ago: executing program 1 (id=86): pause() 3.24982368s ago: executing program 5 (id=263): faccessat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 3.198350626s ago: executing program 5 (id=269): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer', 0x800, 0x0) 3.122540116s ago: executing program 5 (id=277): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0) 2.818539392s ago: executing program 4 (id=305): brk(0x0) 2.804346515s ago: executing program 4 (id=308): eventfd2(0x0, 0x0) 2.804032615s ago: executing program 5 (id=309): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/lightnvm/control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/lightnvm/control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/lightnvm/control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/lightnvm/control', 0x800, 0x0) 2.796742183s ago: executing program 3 (id=310): epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 2.734992857s ago: executing program 0 (id=311): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full', 0x800, 0x0) 2.734864874s ago: executing program 5 (id=312): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$evdev(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$evdev(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x800) 2.734784992s ago: executing program 3 (id=313): rseq(&(0x7f0000000000), 0x0, 0x0, 0x0) 2.734719415s ago: executing program 2 (id=314): renameat2(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.734549572s ago: executing program 4 (id=315): capset(&(0x7f0000000000), &(0x7f0000000000)) 2.734436915s ago: executing program 3 (id=316): prlimit64(0x0, 0x0, 0x0, 0x0) 2.731275535s ago: executing program 0 (id=317): ioperm(0x0, 0x0, 0x0) 2.726522865s ago: executing program 2 (id=318): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/iommu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/iommu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/iommu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/iommu', 0x800, 0x0) 2.67899214s ago: executing program 4 (id=319): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$dri(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$dri(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$dri(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$dri(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$dri(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$dri(&(0x7f0000000500), 0x4, 0x800) 2.67882295s ago: executing program 3 (id=320): utimensat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0) 2.678702769s ago: executing program 0 (id=321): setns(0xffffffffffffffff, 0x0) 2.678650996s ago: executing program 2 (id=322): socket$pptp(0x18, 0x1, 0x2) 2.669787782s ago: executing program 0 (id=323): rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 1.894496498s ago: executing program 5 (id=328): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.851504376s ago: executing program 4 (id=324): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.717345394s ago: executing program 1 (id=332): syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$video4linux(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$video4linux(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$video4linux(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$video4linux(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$video4linux(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$video4linux(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$video4linux(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$video4linux(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$video4linux(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$video4linux(&(0x7f0000000500), 0x4, 0x800) 1.666550068s ago: executing program 3 (id=329): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.591299481s ago: executing program 2 (id=327): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 876.664413ms ago: executing program 0 (id=326): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 783.132384ms ago: executing program 4 (id=331): syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$admmidi(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$admmidi(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$admmidi(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$admmidi(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$admmidi(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$admmidi(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$admmidi(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$admmidi(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$admmidi(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$admmidi(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$admmidi(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$admmidi(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$admmidi(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$admmidi(&(0x7f0000000500), 0x4, 0x800) 477.773108ms ago: executing program 2 (id=335): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x29, 0x800) 449.683876ms ago: executing program 3 (id=334): syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndmidi(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndmidi(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndmidi(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndmidi(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndmidi(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndmidi(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndmidi(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndmidi(&(0x7f0000000500), 0x29, 0x800) 340.877407ms ago: executing program 2 (id=337): syz_open_dev$sndpcmc(&(0x7f0000000040), 0x4, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x4, 0x1) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x4, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x4, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000140), 0xe, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180), 0xe, 0x1) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0xe, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000200), 0xe, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x18, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000280), 0x18, 0x1) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x18, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x18, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x22, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000380), 0x22, 0x1) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x22, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000400), 0x22, 0x800) syz_open_dev$sndpcmc(&(0x7f0000000440), 0x2c, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x2c, 0x1) syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x2c, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x2c, 0x800) 293.303464ms ago: executing program 1 (id=333): expanding glob: /sys/**/* 0s ago: executing program 0 (id=336): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x2a, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. [ 80.150179][ T5817] cgroup: Unknown subsys name 'net' [ 80.284988][ T5817] cgroup: Unknown subsys name 'cpuset' [ 80.293482][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.802252][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.424589][ T5897] mmap: syz.1.56 (5897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.559530][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.089955][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.389227][ T6174] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.404487][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.421237][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.588051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.614065][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.375881][ T6189] chnl_net:caif_netlink_parms(): no params data found [ 89.518818][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.526756][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.535342][ T6189] bridge_slave_0: entered allmulticast mode [ 89.543691][ T6189] bridge_slave_0: entered promiscuous mode [ 89.552596][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.559722][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.567889][ T6189] bridge_slave_1: entered allmulticast mode [ 89.575091][ T6189] bridge_slave_1: entered promiscuous mode [ 89.709480][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.732530][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.778917][ T6189] team0: Port device team_slave_0 added [ 89.798919][ T52] [ 89.801260][ T52] ====================================================== [ 89.801553][ T6189] team0: Port device team_slave_1 added [ 89.808268][ T52] WARNING: possible circular locking dependency detected [ 89.808283][ T52] 6.13.0-syzkaller-08291-g805ba04cb7cc #0 Not tainted [ 89.827553][ T52] ------------------------------------------------------ [ 89.834559][ T52] kworker/u8:3/52 is trying to acquire lock: [ 89.840524][ T52] ffffffff8fef8068 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1a51/0x21a0 [ 89.851010][ T52] [ 89.851010][ T52] but task is already holding lock: [ 89.858366][ T52] ffff88806cf48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf1/0x720 [ 89.868670][ T52] [ 89.868670][ T52] which lock already depends on the new lock. [ 89.868670][ T52] [ 89.879063][ T52] [ 89.879063][ T52] the existing dependency chain (in reverse order) is: [ 89.888067][ T52] [ 89.888067][ T52] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 89.895813][ T52] __mutex_lock+0x19b/0xb10 [ 89.900841][ T52] wiphy_register+0x1c9c/0x2860 [ 89.906236][ T52] ieee80211_register_hw+0x2455/0x4060 [ 89.912231][ T52] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 89.918505][ T52] init_mac80211_hwsim+0x432/0x8c0 [ 89.924140][ T52] do_one_initcall+0x12b/0x700 [ 89.929451][ T52] kernel_init_freeable+0x5c7/0x900 [ 89.935189][ T52] kernel_init+0x1c/0x2b0 [ 89.940046][ T52] ret_from_fork+0x48/0x80 [ 89.944994][ T52] ret_from_fork_asm+0x1a/0x30 [ 89.950282][ T52] [ 89.950282][ T52] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 89.957507][ T52] __lock_acquire+0x249e/0x3c40 [ 89.962892][ T52] lock_acquire.part.0+0x11b/0x380 [ 89.968553][ T52] __mutex_lock+0x19b/0xb10 [ 89.973577][ T52] unregister_netdevice_many_notify+0x1a51/0x21a0 [ 89.980521][ T52] unregister_netdevice_queue+0x307/0x3f0 [ 89.986771][ T52] _cfg80211_unregister_wdev+0x64b/0x830 [ 89.992931][ T52] ieee80211_remove_interfaces+0x34f/0x720 [ 89.999273][ T52] ieee80211_unregister_hw+0x55/0x3a0 [ 90.005188][ T52] hwsim_exit_net+0x3ad/0x7d0 [ 90.010386][ T52] ops_exit_list+0xb3/0x180 [ 90.015418][ T52] cleanup_net+0x5c6/0xbf0 [ 90.020365][ T52] process_one_work+0x9c8/0x1ba0 [ 90.025834][ T52] worker_thread+0x6c8/0xf00 [ 90.030982][ T52] kthread+0x3b2/0x750 [ 90.035688][ T52] ret_from_fork+0x48/0x80 [ 90.040637][ T52] ret_from_fork_asm+0x1a/0x30 [ 90.045925][ T52] [ 90.045925][ T52] other info that might help us debug this: [ 90.045925][ T52] [ 90.056147][ T52] Possible unsafe locking scenario: [ 90.056147][ T52] [ 90.063592][ T52] CPU0 CPU1 [ 90.068944][ T52] ---- ---- [ 90.074296][ T52] lock(&rdev->wiphy.mtx); [ 90.078799][ T52] lock(rtnl_mutex); [ 90.085303][ T52] lock(&rdev->wiphy.mtx); [ 90.092416][ T52] lock(rtnl_mutex); [ 90.096446][ T52] [ 90.096446][ T52] *** DEADLOCK *** [ 90.096446][ T52] [ 90.104755][ T52] 4 locks held by kworker/u8:3/52: [ 90.109855][ T52] #0: ffff88801beed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 90.120251][ T52] #1: ffffc90000bd7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 90.130212][ T52] #2: ffffffff8fee2450 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xbf0 [ 90.139648][ T52] #3: ffff88806cf48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf1/0x720 [ 90.150395][ T52] [ 90.150395][ T52] stack backtrace: [ 90.156276][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 90.156308][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 90.156327][ T52] Workqueue: netns cleanup_net [ 90.156361][ T52] Call Trace: [ 90.156370][ T52] [ 90.156380][ T52] dump_stack_lvl+0x116/0x1f0 [ 90.156430][ T52] print_circular_bug+0x490/0x760 [ 90.156470][ T52] check_noncircular+0x31a/0x400 [ 90.156507][ T52] ? __pfx_check_noncircular+0x10/0x10 [ 90.156544][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.156591][ T52] ? lockdep_lock+0xc6/0x200 [ 90.156619][ T52] ? __pfx_lockdep_lock+0x10/0x10 [ 90.156647][ T52] ? __pfx_lock_release+0x10/0x10 [ 90.156686][ T52] __lock_acquire+0x249e/0x3c40 [ 90.156729][ T52] ? __pfx___lock_acquire+0x10/0x10 [ 90.156765][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.156810][ T52] ? synchronize_rcu_expedited+0x424/0x450 [ 90.156850][ T52] ? __pfx_lock_release+0x10/0x10 [ 90.156889][ T52] lock_acquire.part.0+0x11b/0x380 [ 90.156927][ T52] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 90.156965][ T52] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 90.157004][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.157048][ T52] ? rcu_is_watching+0x12/0xc0 [ 90.157074][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.157118][ T52] ? trace_lock_acquire+0x14e/0x1f0 [ 90.157148][ T52] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 90.157188][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.157231][ T52] ? lock_acquire+0x2f/0xb0 [ 90.157266][ T52] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 90.157304][ T52] __mutex_lock+0x19b/0xb10 [ 90.157330][ T52] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 90.157367][ T52] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 90.157403][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.157447][ T52] ? __pfx___mutex_lock+0x10/0x10 [ 90.157477][ T52] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 90.157515][ T52] ? __pfx___might_resched+0x10/0x10 [ 90.157558][ T52] ? unregister_netdevice_many_notify+0x959/0x21a0 [ 90.157596][ T52] ? unregister_netdevice_many_notify+0x1a51/0x21a0 [ 90.157631][ T52] unregister_netdevice_many_notify+0x1a51/0x21a0 [ 90.157673][ T52] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 90.157712][ T52] ? find_held_lock+0x2d/0x110 [ 90.157740][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.157784][ T52] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 90.157829][ T52] ? __pfx_lock_release+0x10/0x10 [ 90.157865][ T52] ? __call_rcu_common.constprop.0+0x3ea/0x870 [ 90.157906][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.157953][ T52] unregister_netdevice_queue+0x307/0x3f0 [ 90.157988][ T52] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 90.158023][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.158071][ T52] _cfg80211_unregister_wdev+0x64b/0x830 [ 90.158105][ T52] ieee80211_remove_interfaces+0x34f/0x720 [ 90.158147][ T52] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 90.158196][ T52] ieee80211_unregister_hw+0x55/0x3a0 [ 90.158243][ T52] hwsim_exit_net+0x3ad/0x7d0 [ 90.158271][ T52] ? __pfx_hwsim_exit_net+0x10/0x10 [ 90.158297][ T52] ? __pfx___might_resched+0x10/0x10 [ 90.158338][ T52] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 90.158382][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.158425][ T52] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 90.158465][ T52] ? __pfx_hwsim_exit_net+0x10/0x10 [ 90.158491][ T52] ops_exit_list+0xb3/0x180 [ 90.158523][ T52] cleanup_net+0x5c6/0xbf0 [ 90.158558][ T52] ? __pfx_cleanup_net+0x10/0x10 [ 90.158592][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.158637][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.158680][ T52] ? lock_acquire+0x2f/0xb0 [ 90.158716][ T52] ? process_one_work+0x921/0x1ba0 [ 90.158753][ T52] process_one_work+0x9c8/0x1ba0 [ 90.158794][ T52] ? __pfx_cleanup_net+0x10/0x10 [ 90.158828][ T52] ? __pfx_process_one_work+0x10/0x10 [ 90.158864][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.158910][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.158954][ T52] ? assign_work+0x1a0/0x250 [ 90.158987][ T52] worker_thread+0x6c8/0xf00 [ 90.159026][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 [ 90.159069][ T52] ? __kthread_parkme+0x148/0x220 [ 90.159095][ T52] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.159139][ T52] ? __pfx_worker_thread+0x10/0x10 [ 90.159178][ T52] kthread+0x3b2/0x750 [ 90.159210][ T52] ? __pfx_kthread+0x10/0x10 [ 90.159241][ T52] ? lock_acquire+0x2f/0xb0 [ 90.159280][ T52] ? __pfx_kthread+0x10/0x10 [ 90.159312][ T52] ret_from_fork+0x48/0x80 [ 90.159348][ T52] ? __pfx_kthread+0x10/0x10 [ 90.159380][ T52] ret_from_fork_asm+0x1a/0x30 [ 90.159416][ T52] [ 90.620610][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.914329][ T52] bridge_slave_1: left allmulticast mode [ 90.920000][ T52] bridge_slave_1: left promiscuous mode [ 90.925731][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.933885][ T52] bridge_slave_0: left allmulticast mode [ 90.939548][ T52] bridge_slave_0: left promiscuous mode [ 90.945334][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.066243][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.076324][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.085934][ T52] bond0 (unregistering): Released all slaves [ 91.193944][ T52] team0 (unregistering): Port device team_slave_1 removed [ 91.204776][ T52] team0 (unregistering): Port device team_slave_0 removed [ 96.641579][ T46] cfg80211: failed to load regulatory.db