last executing test programs: 2.845843815s ago: executing program 0 (id=108): poll(&(0x7f0000000000), 0x0, 0x0) 2.84497199s ago: executing program 3 (id=109): shutdown(0xffffffffffffffff, 0x0) 2.843473691s ago: executing program 0 (id=111): socket$inet6_dccp(0xa, 0x6, 0x0) 2.795140749s ago: executing program 3 (id=114): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2.793474211s ago: executing program 1 (id=116): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 2.793363671s ago: executing program 0 (id=117): pselect6(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 2.793197282s ago: executing program 4 (id=118): socket$inet_tcp(0x2, 0x1, 0x0) 2.793075901s ago: executing program 3 (id=119): socket$can_bcm(0x1d, 0x2, 0x2) 2.745276777s ago: executing program 1 (id=121): epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 2.745097729s ago: executing program 2 (id=122): socket$inet6(0xa, 0x1, 0x0) 2.7450258s ago: executing program 0 (id=123): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.744939267s ago: executing program 4 (id=124): socket$nl_crypto(0x10, 0x3, 0x15) 2.744751425s ago: executing program 2 (id=125): socket$nl_audit(0x10, 0x3, 0x9) 2.744674127s ago: executing program 3 (id=126): nanosleep(&(0x7f0000000000), 0x0) 2.744568508s ago: executing program 1 (id=127): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.742285626s ago: executing program 4 (id=128): socket$pppl2tp(0x18, 0x1, 0x1) 2.711584842s ago: executing program 2 (id=130): socket$isdn(0x22, 0x3, 0x0) 1.996968115s ago: executing program 1 (id=131): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.80100619s ago: executing program 0 (id=129): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.627006872s ago: executing program 3 (id=132): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.590754948s ago: executing program 2 (id=134): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.590452521s ago: executing program 4 (id=133): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.512147457s ago: executing program 1 (id=135): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 755.087497ms ago: executing program 1 (id=138): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 752.004295ms ago: executing program 2 (id=139): socket$inet6_mptcp(0xa, 0x1, 0x106) 709.392832ms ago: executing program 4 (id=140): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 557.989502ms ago: executing program 3 (id=137): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 273.338967ms ago: executing program 2 (id=142): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 99.002793ms ago: executing program 0 (id=141): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=145): pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 57.221854][ T5817] cgroup: Unknown subsys name 'net' [ 57.352395][ T5817] cgroup: Unknown subsys name 'cpuset' [ 57.360920][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.705369][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.649910][ T5845] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.716872][ T5854] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.564331][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.578789][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.591668][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.606392][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.631135][ T5978] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.638693][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.989275][ T5974] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.041603][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.049696][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.101468][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.117295][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.440682][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 64.615275][ T12] [ 64.617660][ T12] ====================================================== [ 64.624682][ T12] WARNING: possible circular locking dependency detected [ 64.631728][ T12] 6.13.0-rc7-syzkaller-01620-gcf33d96f5090 #0 Not tainted [ 64.638921][ T12] ------------------------------------------------------ [ 64.645952][ T12] kworker/u8:1/12 is trying to acquire lock: [ 64.652004][ T12] ffffffff8fcb4e08 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 64.662421][ T12] [ 64.662421][ T12] but task is already holding lock: [ 64.669868][ T12] ffff888024368768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 64.680220][ T12] [ 64.680220][ T12] which lock already depends on the new lock. [ 64.680220][ T12] [ 64.690614][ T12] [ 64.690614][ T12] the existing dependency chain (in reverse order) is: [ 64.699613][ T12] [ 64.699613][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 64.707343][ T12] lock_acquire+0x1ed/0x550 [ 64.712378][ T12] __mutex_lock+0x1ac/0xee0 [ 64.717488][ T12] wiphy_register+0x1a49/0x27b0 [ 64.722858][ T12] ieee80211_register_hw+0x354e/0x4240 [ 64.728836][ T12] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 64.735067][ T12] init_mac80211_hwsim+0x87a/0xb00 [ 64.740693][ T12] do_one_initcall+0x248/0x870 [ 64.745973][ T12] do_initcall_level+0x157/0x210 [ 64.751426][ T12] do_initcalls+0x3f/0x80 [ 64.756360][ T12] kernel_init_freeable+0x435/0x5d0 [ 64.762077][ T12] kernel_init+0x1d/0x2b0 [ 64.766936][ T12] ret_from_fork+0x4b/0x80 [ 64.771906][ T12] ret_from_fork_asm+0x1a/0x30 [ 64.777197][ T12] [ 64.777197][ T12] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 64.784411][ T12] validate_chain+0x18ef/0x5920 [ 64.789781][ T12] __lock_acquire+0x1397/0x2100 [ 64.795252][ T12] lock_acquire+0x1ed/0x550 [ 64.800280][ T12] __mutex_lock+0x1ac/0xee0 [ 64.805301][ T12] unregister_netdevice_many_notify+0xac2/0x2030 [ 64.812239][ T12] unregister_netdevice_queue+0x303/0x370 [ 64.818606][ T12] _cfg80211_unregister_wdev+0x163/0x590 [ 64.824792][ T12] ieee80211_remove_interfaces+0x4ef/0x700 [ 64.831114][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 64.836999][ T12] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 64.843068][ T12] hwsim_exit_net+0x5c1/0x670 [ 64.848258][ T12] cleanup_net+0x812/0xd60 [ 64.853268][ T12] process_scheduled_works+0xa66/0x1840 [ 64.859326][ T12] worker_thread+0x870/0xd30 [ 64.864434][ T12] kthread+0x2f0/0x390 [ 64.869093][ T12] ret_from_fork+0x4b/0x80 [ 64.874039][ T12] ret_from_fork_asm+0x1a/0x30 [ 64.879405][ T12] [ 64.879405][ T12] other info that might help us debug this: [ 64.879405][ T12] [ 64.889623][ T12] Possible unsafe locking scenario: [ 64.889623][ T12] [ 64.897058][ T12] CPU0 CPU1 [ 64.902418][ T12] ---- ---- [ 64.907795][ T12] lock(&rdev->wiphy.mtx); [ 64.912294][ T12] lock(rtnl_mutex); [ 64.918794][ T12] lock(&rdev->wiphy.mtx); [ 64.925809][ T12] lock(rtnl_mutex); [ 64.929792][ T12] [ 64.929792][ T12] *** DEADLOCK *** [ 64.929792][ T12] [ 64.937958][ T12] 4 locks held by kworker/u8:1/12: [ 64.943056][ T12] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 64.953958][ T12] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 64.964502][ T12] #2: ffffffff8fca8850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 64.973899][ T12] #3: ffff888024368768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 64.984708][ T12] [ 64.984708][ T12] stack backtrace: [ 64.990635][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-syzkaller-01620-gcf33d96f5090 #0 [ 65.001306][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.011376][ T12] Workqueue: netns cleanup_net [ 65.016170][ T12] Call Trace: [ 65.019459][ T12] [ 65.022425][ T12] dump_stack_lvl+0x241/0x360 [ 65.027115][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.032315][ T12] ? __pfx__printk+0x10/0x10 [ 65.036907][ T12] print_circular_bug+0x13a/0x1b0 [ 65.041934][ T12] check_noncircular+0x36a/0x4a0 [ 65.046887][ T12] ? __pfx_check_noncircular+0x10/0x10 [ 65.052345][ T12] ? lockdep_lock+0x123/0x2b0 [ 65.057014][ T12] ? kvm_sched_clock_read+0x11/0x20 [ 65.062220][ T12] validate_chain+0x18ef/0x5920 [ 65.067072][ T12] ? __pfx_validate_chain+0x10/0x10 [ 65.072264][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 65.078239][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.084560][ T12] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 65.090460][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 65.095668][ T12] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 65.101568][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 65.107902][ T12] ? do_raw_spin_unlock+0x13c/0x8b0 [ 65.113096][ T12] ? try_to_wake_up+0x959/0x1470 [ 65.118037][ T12] ? mark_lock+0x9a/0x360 [ 65.122711][ T12] __lock_acquire+0x1397/0x2100 [ 65.127561][ T12] lock_acquire+0x1ed/0x550 [ 65.132058][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.138582][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 65.143613][ T12] ? __pfx___might_resched+0x10/0x10 [ 65.148900][ T12] ? finish_wait+0xd4/0x1e0 [ 65.153427][ T12] __mutex_lock+0x1ac/0xee0 [ 65.157925][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.164456][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.170969][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 65.175989][ T12] ? __pfx___might_resched+0x10/0x10 [ 65.181271][ T12] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 65.187863][ T12] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 65.194388][ T12] unregister_netdevice_many_notify+0xac2/0x2030 [ 65.200717][ T12] ? mark_lock+0x9a/0x360 [ 65.205048][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 65.211813][ T12] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 65.217544][ T12] ? __pfx_lock_release+0x10/0x10 [ 65.222568][ T12] unregister_netdevice_queue+0x303/0x370 [ 65.228376][ T12] ? __pfx_up_write+0x10/0x10 [ 65.233051][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 65.239290][ T12] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 65.245019][ T12] _cfg80211_unregister_wdev+0x163/0x590 [ 65.250651][ T12] ieee80211_remove_interfaces+0x4ef/0x700 [ 65.256457][ T12] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 65.262790][ T12] ? rcu_is_watching+0x15/0xb0 [ 65.267751][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 65.273139][ T12] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 65.278803][ T12] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 65.284881][ T12] hwsim_exit_net+0x5c1/0x670 [ 65.289559][ T12] ? __pfx_hwsim_exit_net+0x10/0x10 [ 65.294761][ T12] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 65.300573][ T12] cleanup_net+0x812/0xd60 [ 65.304987][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 65.310110][ T12] ? process_scheduled_works+0x976/0x1840 [ 65.315854][ T12] process_scheduled_works+0xa66/0x1840 [ 65.321492][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 65.327468][ T12] ? assign_work+0x364/0x3d0 [ 65.332060][ T12] worker_thread+0x870/0xd30 [ 65.336653][ T12] ? __kthread_parkme+0x169/0x1d0 [ 65.341679][ T12] ? __pfx_worker_thread+0x10/0x10 [ 65.346786][ T12] kthread+0x2f0/0x390 [ 65.350856][ T12] ? __pfx_worker_thread+0x10/0x10 [ 65.355958][ T12] ? __pfx_kthread+0x10/0x10 [ 65.360539][ T12] ret_from_fork+0x4b/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.364946][ T12] ? __pfx_kthread+0x10/0x10 [ 65.369531][ T12] ret_from_fork_asm+0x1a/0x30 [ 65.374375][ T12] [ 65.432023][ T6035] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 65.861209][ T12] bond0 (unregistering): Released all slaves [ 71.800063][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.806359][ T1295] ieee802154 phy1 wpan1: encryption failed: -22