last executing test programs: 6.000749414s ago: executing program 4 (id=158): recvmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) 5.950495527s ago: executing program 4 (id=166): wait4(0x0, 0x0, 0x0, 0x0) 5.950070022s ago: executing program 4 (id=171): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load', 0x2, 0x0) 5.915833014s ago: executing program 4 (id=176): rt_sigreturn() 2.84954258s ago: executing program 3 (id=475): rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) 2.770479839s ago: executing program 0 (id=478): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/info', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/info', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/info', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/info', 0x800, 0x0) 2.770302367s ago: executing program 3 (id=480): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci', 0x2, 0x0) 2.769074467s ago: executing program 3 (id=482): getdents64(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.744766786s ago: executing program 0 (id=483): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats', 0x0, 0x0) 2.744213105s ago: executing program 5 (id=486): rt_sigsuspend(&(0x7f0000000000), 0x0) 2.739254405s ago: executing program 3 (id=487): fanotify_init(0x0, 0x0) 2.669683402s ago: executing program 2 (id=488): lookup_dcookie(0x0, &(0x7f0000000000), 0x0) 2.669450661s ago: executing program 5 (id=489): faccessat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.669368114s ago: executing program 1 (id=490): kexec_load(0x0, 0x0, &(0x7f0000000000), 0x0) 2.669320554s ago: executing program 3 (id=491): rt_sigprocmask(0x0, &(0x7f0000000000), 0x0, 0x0) 2.669264046s ago: executing program 0 (id=492): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net', 0x2, 0x0) 2.669198373s ago: executing program 1 (id=493): syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.668956428s ago: executing program 4 (id=494): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer', 0x800, 0x0) 2.668887695s ago: executing program 3 (id=495): rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0) 2.610489415s ago: executing program 2 (id=496): getdents(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.610283704s ago: executing program 5 (id=497): socket$inet_dccp(0x2, 0x6, 0x0) 2.610137839s ago: executing program 5 (id=498): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwbinder', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwbinder', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwbinder', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwbinder', 0x800, 0x0) 2.609995078s ago: executing program 1 (id=499): socket$unix(0x1, 0x1, 0x0) 2.582697299s ago: executing program 2 (id=502): openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log', 0x0, 0x0) 1.698056615s ago: executing program 1 (id=503): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.638229317s ago: executing program 2 (id=505): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.535670185s ago: executing program 0 (id=501): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.041598266s ago: executing program 5 (id=504): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.008838224s ago: executing program 2 (id=509): syz_open_dev$sndhw(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x29, 0x800) 969.686333ms ago: executing program 2 (id=511): syz_open_dev$sndmidi(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndmidi(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndmidi(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndmidi(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndmidi(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndmidi(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndmidi(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndmidi(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndmidi(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndmidi(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndmidi(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndmidi(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndmidi(&(0x7f0000000500), 0x29, 0x800) 329.514697ms ago: executing program 4 (id=506): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 142.153619ms ago: executing program 1 (id=508): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x29, 0x800) 81.012511ms ago: executing program 5 (id=512): syz_open_dev$sndhw(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndhw(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$sndhw(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$sndhw(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$sndhw(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$sndhw(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$sndhw(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$sndhw(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$sndhw(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$sndhw(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$sndhw(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$sndhw(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$sndhw(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$sndhw(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$sndhw(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$sndhw(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$sndhw(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$sndhw(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$sndhw(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$sndhw(&(0x7f0000000500), 0x2a, 0x800) 52.186863ms ago: executing program 0 (id=510): syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x1, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x1, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xb, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xb, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x15, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x15, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x15, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x15, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x1f, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x1f, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x1f, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x1f, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x29, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x29, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x29, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x29, 0x800) 1.28568ms ago: executing program 0 (id=513): syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x4, 0x1) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x4, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x4, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xe, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xe, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xe, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0xe, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x18, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x18, 0x1) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x18, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x18, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x22, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x22, 0x1) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x22, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x22, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x2c, 0x1) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x2c, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000500), 0x2c, 0x800) 0s ago: executing program 1 (id=514): syz_open_dev$usbfs(&(0x7f0000000040), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x2, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xc, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xc, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x16, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x16, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x16, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x16, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x20, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x20, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x20, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x20, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x2a, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x2a, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x2a, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x2a, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 71.275513][ T5818] cgroup: Unknown subsys name 'net' [ 71.386032][ T5818] cgroup: Unknown subsys name 'cpuset' [ 71.394326][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.764301][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.609031][ T6072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.105835][ T6209] mmap: syz.0.361 (6209) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.888716][ T6291] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.672785][ T6361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.681642][ T6361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.690960][ T6361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.699959][ T6361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.724737][ T6361] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.733798][ T6361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.284587][ T6359] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.465247][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.483263][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.665138][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.700311][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.001417][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 82.237965][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.246097][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.254556][ T6373] bridge_slave_0: entered allmulticast mode [ 82.261782][ T6373] bridge_slave_0: entered promiscuous mode [ 82.271211][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.279339][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.286598][ T6373] bridge_slave_1: entered allmulticast mode [ 82.293889][ T6373] bridge_slave_1: entered promiscuous mode [ 82.322781][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.334908][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.373282][ T6373] team0: Port device team_slave_0 added [ 82.381635][ T6373] team0: Port device team_slave_1 added [ 82.426035][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.434228][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.460281][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.473886][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.480832][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.507967][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.548627][ T6373] hsr_slave_0: entered promiscuous mode [ 82.555327][ T6373] hsr_slave_1: entered promiscuous mode [ 82.696637][ T6373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.708137][ T6373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.717149][ T6373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.727146][ T6373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.760948][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.768218][ T6373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.776205][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.783453][ T6373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.807719][ T62] [ 82.810066][ T62] ====================================================== [ 82.817084][ T62] WARNING: possible circular locking dependency detected [ 82.824099][ T62] 6.13.0-syzkaller-05252-gbc8198dc7ebc #0 Not tainted [ 82.830856][ T62] ------------------------------------------------------ [ 82.837872][ T62] kworker/u8:4/62 is trying to acquire lock: [ 82.839681][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.843832][ T62] ffffffff8fcc40c8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 82.843913][ T62] [ 82.843913][ T62] but task is already holding lock: [ 82.858247][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.860749][ T62] ffff888034498768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 82.885240][ T62] [ 82.885240][ T62] which lock already depends on the new lock. [ 82.885240][ T62] [ 82.895641][ T62] [ 82.895641][ T62] the existing dependency chain (in reverse order) is: [ 82.904651][ T62] [ 82.904651][ T62] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 82.912414][ T62] lock_acquire+0x1ed/0x550 [ 82.917454][ T62] __mutex_lock+0x19c/0x1010 [ 82.922575][ T62] wiphy_register+0x1a49/0x27b0 [ 82.927966][ T62] ieee80211_register_hw+0x354e/0x4240 [ 82.933958][ T62] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 82.940211][ T62] init_mac80211_hwsim+0x87a/0xb00 [ 82.945851][ T62] do_one_initcall+0x24a/0x870 [ 82.951151][ T62] do_initcall_level+0x157/0x210 [ 82.956711][ T62] do_initcalls+0x3f/0x80 [ 82.961578][ T62] kernel_init_freeable+0x435/0x5d0 [ 82.967310][ T62] kernel_init+0x1d/0x2b0 [ 82.972167][ T62] ret_from_fork+0x4d/0x80 [ 82.977111][ T62] ret_from_fork_asm+0x1a/0x30 [ 82.982401][ T62] [ 82.982401][ T62] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 82.989640][ T62] validate_chain+0x18ef/0x5920 [ 82.995026][ T62] __lock_acquire+0x1397/0x2100 [ 83.000402][ T62] lock_acquire+0x1ed/0x550 [ 83.005429][ T62] __mutex_lock+0x19c/0x1010 [ 83.010540][ T62] unregister_netdevice_many_notify+0xac2/0x2030 [ 83.017393][ T62] unregister_netdevice_queue+0x303/0x370 [ 83.023635][ T62] _cfg80211_unregister_wdev+0x163/0x590 [ 83.030056][ T62] ieee80211_remove_interfaces+0x4ef/0x700 [ 83.036384][ T62] ieee80211_unregister_hw+0x5d/0x2c0 [ 83.042271][ T62] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 83.048339][ T62] hwsim_exit_net+0x5c1/0x670 [ 83.053534][ T62] cleanup_net+0x814/0xd60 [ 83.058462][ T62] process_scheduled_works+0xa68/0x1840 [ 83.064540][ T62] worker_thread+0x870/0xd30 [ 83.069659][ T62] kthread+0x7ab/0x920 [ 83.074250][ T62] ret_from_fork+0x4d/0x80 [ 83.079185][ T62] ret_from_fork_asm+0x1a/0x30 [ 83.084465][ T62] [ 83.084465][ T62] other info that might help us debug this: [ 83.084465][ T62] [ 83.094771][ T62] Possible unsafe locking scenario: [ 83.094771][ T62] [ 83.102210][ T62] CPU0 CPU1 [ 83.107562][ T62] ---- ---- [ 83.112918][ T62] lock(&rdev->wiphy.mtx); [ 83.117422][ T62] lock(rtnl_mutex); [ 83.123924][ T62] lock(&rdev->wiphy.mtx); [ 83.131293][ T62] lock(rtnl_mutex); [ 83.135276][ T62] [ 83.135276][ T62] *** DEADLOCK *** [ 83.135276][ T62] [ 83.143407][ T62] 4 locks held by kworker/u8:4/62: [ 83.148515][ T62] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 83.159412][ T62] #1: ffffc9000213fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 83.169961][ T62] #2: ffffffff8fcb7b10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 83.179382][ T62] #3: ffff888034498768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 83.190400][ T62] [ 83.190400][ T62] stack backtrace: [ 83.196407][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted 6.13.0-syzkaller-05252-gbc8198dc7ebc #0 [ 83.196430][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.196445][ T62] Workqueue: netns cleanup_net [ 83.196468][ T62] Call Trace: [ 83.196477][ T62] [ 83.196485][ T62] dump_stack_lvl+0x241/0x360 [ 83.196520][ T62] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.196550][ T62] ? __pfx__printk+0x10/0x10 [ 83.196582][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.196613][ T62] print_circular_bug+0x13a/0x1b0 [ 83.196646][ T62] check_noncircular+0x36a/0x4a0 [ 83.196676][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.196706][ T62] ? __pfx_check_noncircular+0x10/0x10 [ 83.196742][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.196770][ T62] ? lockdep_lock+0x123/0x2b0 [ 83.196794][ T62] ? rcu_read_lock_sched_held+0x8d/0x130 [ 83.196829][ T62] validate_chain+0x18ef/0x5920 [ 83.196869][ T62] ? __pfx_validate_chain+0x10/0x10 [ 83.196899][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.196931][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.196958][ T62] ? mark_lock+0x9a/0x360 [ 83.196986][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197013][ T62] ? __lock_acquire+0x1397/0x2100 [ 83.197044][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197072][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197100][ T62] ? mark_lock+0x9a/0x360 [ 83.197125][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197155][ T62] __lock_acquire+0x1397/0x2100 [ 83.197187][ T62] lock_acquire+0x1ed/0x550 [ 83.197211][ T62] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 83.197246][ T62] ? __pfx_lock_acquire+0x10/0x10 [ 83.197270][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197298][ T62] ? __pfx___might_resched+0x10/0x10 [ 83.197321][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197349][ T62] ? finish_wait+0xd4/0x1e0 [ 83.197375][ T62] __mutex_lock+0x19c/0x1010 [ 83.197397][ T62] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 83.197427][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197459][ T62] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 83.197489][ T62] ? __pfx___mutex_lock+0x10/0x10 [ 83.197510][ T62] ? __pfx___might_resched+0x10/0x10 [ 83.197530][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197559][ T62] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 83.197589][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197617][ T62] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 83.197649][ T62] unregister_netdevice_many_notify+0xac2/0x2030 [ 83.197679][ T62] ? mark_lock+0x9a/0x360 [ 83.197708][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197743][ T62] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 83.197774][ T62] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 83.197807][ T62] ? __pfx_lock_release+0x10/0x10 [ 83.197838][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197869][ T62] unregister_netdevice_queue+0x303/0x370 [ 83.197896][ T62] ? __pfx_up_write+0x10/0x10 [ 83.197926][ T62] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 83.197953][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.197984][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.198012][ T62] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 83.198044][ T62] _cfg80211_unregister_wdev+0x163/0x590 [ 83.198077][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.198107][ T62] ieee80211_remove_interfaces+0x4ef/0x700 [ 83.198138][ T62] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 83.198166][ T62] ? rcu_is_watching+0x15/0xb0 [ 83.198200][ T62] ieee80211_unregister_hw+0x5d/0x2c0 [ 83.198224][ T62] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 83.198254][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.198284][ T62] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 83.198311][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.198344][ T62] hwsim_exit_net+0x5c1/0x670 [ 83.198368][ T62] ? __pfx_hwsim_exit_net+0x10/0x10 [ 83.198391][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.198419][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.198447][ T62] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 83.198471][ T62] cleanup_net+0x814/0xd60 [ 83.198495][ T62] ? __pfx_cleanup_net+0x10/0x10 [ 83.198521][ T62] ? process_scheduled_works+0x976/0x1840 [ 83.198542][ T62] process_scheduled_works+0xa68/0x1840 [ 83.198575][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.198600][ T62] ? assign_work+0x364/0x3d0 [ 83.198635][ T62] worker_thread+0x870/0xd30 [ 83.198662][ T62] ? __kthread_parkme+0x169/0x1d0 [ 83.198686][ T62] ? __pfx_worker_thread+0x10/0x10 [ 83.198708][ T62] kthread+0x7ab/0x920 [ 83.198735][ T62] ? __pfx_kthread+0x10/0x10 [ 83.198762][ T62] ? __pfx_worker_thread+0x10/0x10 [ 83.198783][ T62] ? __pfx_kthread+0x10/0x10 [ 83.198807][ T62] ? __pfx_kthread+0x10/0x10 [ 83.198834][ T62] ? __pfx_kthread+0x10/0x10 [ 83.198858][ T62] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.198888][ T62] ? srso_alias_return_thunk+0x5/0xfbef5 [ 83.198915][ T62] ? lockdep_hardirqs_on+0x99/0x150 [ 83.198948][ T62] ? __pfx_kthread+0x10/0x10 [ 83.198973][ T62] ret_from_fork+0x4d/0x80 [ 83.198997][ T62] ? __pfx_kthread+0x10/0x10 [ 83.199023][ T62] ret_from_fork_asm+0x1a/0x30 [ 83.199050][ T62] [ 83.714873][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.730111][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.216095][ T62] bridge_slave_1: left allmulticast mode [ 85.221769][ T62] bridge_slave_1: left promiscuous mode [ 85.228317][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.236420][ T62] bridge_slave_0: left allmulticast mode [ 85.242047][ T62] bridge_slave_0: left promiscuous mode [ 85.248214][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.442589][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.462718][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.472308][ T62] bond0 (unregistering): Released all slaves [ 85.591616][ T62] hsr_slave_0: left promiscuous mode [ 85.598176][ T62] hsr_slave_1: left promiscuous mode [ 85.604472][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.613539][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.691360][ T62] team0 (unregistering): Port device team_slave_1 removed [ 85.707023][ T62] team0 (unregistering): Port device team_slave_0 removed [ 86.334638][ T25] cfg80211: failed to load regulatory.db