last executing test programs: 3.100320117s ago: executing program 0 (id=98): splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 3.048811795s ago: executing program 0 (id=102): socket$key(0xf, 0x3, 0x2) 2.987724496s ago: executing program 4 (id=110): epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 2.98748383s ago: executing program 0 (id=111): syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.985308182s ago: executing program 4 (id=113): syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.98516038s ago: executing program 2 (id=114): socket$caif_stream(0x25, 0x1, 0x0) 2.984788442s ago: executing program 1 (id=115): preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 2.984058222s ago: executing program 3 (id=116): pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 2.983668891s ago: executing program 0 (id=117): socket(0x1, 0x1, 0x0) 2.979778095s ago: executing program 1 (id=118): socket$inet_dccp(0x2, 0x6, 0x0) 2.935195159s ago: executing program 4 (id=119): socket$qrtr(0x2a, 0x2, 0x0) 2.934897151s ago: executing program 2 (id=120): socket$inet6_tcp(0xa, 0x1, 0x0) 2.934501498s ago: executing program 1 (id=121): pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 2.93444844s ago: executing program 3 (id=122): socket$rds(0x15, 0x5, 0x0) 2.934321886s ago: executing program 4 (id=123): socket$nl_generic(0x10, 0x3, 0x10) 2.934265095s ago: executing program 0 (id=124): select(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) 2.934193061s ago: executing program 2 (id=125): pwritev(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 2.934120896s ago: executing program 2 (id=126): syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2.892122848s ago: executing program 3 (id=127): epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0) 2.891917295s ago: executing program 1 (id=128): socket$nl_sock_diag(0x10, 0x3, 0x4) 2.521242544s ago: executing program 0 (id=130): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.193663451s ago: executing program 3 (id=133): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.528971826s ago: executing program 3 (id=136): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.356388685s ago: executing program 2 (id=132): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.291905042s ago: executing program 4 (id=129): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.167882012s ago: executing program 1 (id=131): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 599.65964ms ago: executing program 2 (id=138): socket$isdn_base(0x22, 0x3, 0x0) 565.098229ms ago: executing program 3 (id=137): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 26.452307ms ago: executing program 1 (id=140): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=139): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 58.091237][ T5821] cgroup: Unknown subsys name 'net' [ 58.219263][ T5821] cgroup: Unknown subsys name 'cpuset' [ 58.227422][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.539555][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.726197][ T5878] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.137328][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.864419][ T5977] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.231668][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.239833][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.631889][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.645316][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.957458][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 64.448783][ T6027] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.457281][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.465119][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.477090][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.485252][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.493010][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.509291][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.517184][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.524474][ T5993] bridge_slave_0: entered allmulticast mode [ 64.532029][ T5993] bridge_slave_0: entered promiscuous mode [ 64.541810][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.549016][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.556269][ T5993] bridge_slave_1: entered allmulticast mode [ 64.563265][ T5993] bridge_slave_1: entered promiscuous mode [ 64.674300][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.739644][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.116655][ T5993] team0: Port device team_slave_0 added [ 65.125441][ T5993] team0: Port device team_slave_1 added [ 65.232542][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.253101][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.323949][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.358949][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.366043][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.393222][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.465860][ T12] [ 65.468223][ T12] ====================================================== [ 65.475245][ T12] WARNING: possible circular locking dependency detected [ 65.482276][ T12] 6.13.0-rc7-syzkaller-01128-g2ee738e90e80 #0 Not tainted [ 65.489400][ T12] ------------------------------------------------------ [ 65.496429][ T12] kworker/u8:1/12 is trying to acquire lock: [ 65.502418][ T12] ffffffff8fcb4a08 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 65.512828][ T12] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.512828][ T12] but task is already holding lock: [ 65.520211][ T12] ffff888026100768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 65.530599][ T12] [ 65.530599][ T12] which lock already depends on the new lock. [ 65.530599][ T12] [ 65.541106][ T12] [ 65.541106][ T12] the existing dependency chain (in reverse order) is: [ 65.550135][ T12] [ 65.550135][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 65.557904][ T12] lock_acquire+0x1ed/0x550 [ 65.562961][ T12] __mutex_lock+0x1ac/0xee0 [ 65.568016][ T12] wiphy_register+0x1a49/0x27b0 [ 65.573420][ T12] ieee80211_register_hw+0x30fb/0x3e10 [ 65.579441][ T12] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 65.585730][ T12] init_mac80211_hwsim+0x87a/0xb00 [ 65.591426][ T12] do_one_initcall+0x248/0x870 [ 65.596720][ T12] do_initcall_level+0x157/0x210 [ 65.602177][ T12] do_initcalls+0x3f/0x80 [ 65.607120][ T12] kernel_init_freeable+0x435/0x5d0 [ 65.612860][ T12] kernel_init+0x1d/0x2b0 [ 65.617698][ T12] ret_from_fork+0x4b/0x80 [ 65.622617][ T12] ret_from_fork_asm+0x1a/0x30 [ 65.627906][ T12] [ 65.627906][ T12] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 65.635100][ T12] validate_chain+0x18ef/0x5920 [ 65.640486][ T12] __lock_acquire+0x1397/0x2100 [ 65.645846][ T12] lock_acquire+0x1ed/0x550 [ 65.650855][ T12] __mutex_lock+0x1ac/0xee0 [ 65.655881][ T12] unregister_netdevice_many_notify+0xac2/0x2030 [ 65.662735][ T12] unregister_netdevice_queue+0x303/0x370 [ 65.669006][ T12] _cfg80211_unregister_wdev+0x163/0x590 [ 65.675234][ T12] ieee80211_remove_interfaces+0x4ef/0x700 [ 65.681545][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 65.687423][ T12] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 65.693502][ T12] hwsim_exit_net+0x5c1/0x670 [ 65.698689][ T12] cleanup_net+0x812/0xd60 [ 65.703606][ T12] process_scheduled_works+0xa66/0x1840 [ 65.709661][ T12] worker_thread+0x870/0xd30 [ 65.714755][ T12] kthread+0x2f0/0x390 [ 65.719331][ T12] ret_from_fork+0x4b/0x80 [ 65.724251][ T12] ret_from_fork_asm+0x1a/0x30 [ 65.729517][ T12] [ 65.729517][ T12] other info that might help us debug this: [ 65.729517][ T12] [ 65.739733][ T12] Possible unsafe locking scenario: [ 65.739733][ T12] [ 65.747188][ T12] CPU0 CPU1 [ 65.752558][ T12] ---- ---- [ 65.757912][ T12] lock(&rdev->wiphy.mtx); [ 65.762402][ T12] lock(rtnl_mutex); [ 65.768896][ T12] lock(&rdev->wiphy.mtx); [ 65.775923][ T12] lock(rtnl_mutex); [ 65.779891][ T12] [ 65.779891][ T12] *** DEADLOCK *** [ 65.779891][ T12] [ 65.788047][ T12] 4 locks held by kworker/u8:1/12: [ 65.793145][ T12] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 65.804007][ T12] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 65.814538][ T12] #2: ffffffff8fca8290 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 65.823926][ T12] #3: ffff888026100768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 65.834718][ T12] [ 65.834718][ T12] stack backtrace: [ 65.840632][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc7-syzkaller-01128-g2ee738e90e80 #0 [ 65.851296][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 65.861429][ T12] Workqueue: netns cleanup_net [ 65.866221][ T12] Call Trace: [ 65.869485][ T12] [ 65.872408][ T12] dump_stack_lvl+0x241/0x360 [ 65.877101][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.882308][ T12] ? __pfx__printk+0x10/0x10 [ 65.886888][ T12] print_circular_bug+0x13a/0x1b0 [ 65.891990][ T12] check_noncircular+0x36a/0x4a0 [ 65.896929][ T12] ? __pfx_check_noncircular+0x10/0x10 [ 65.902374][ T12] ? lockdep_lock+0x123/0x2b0 [ 65.907105][ T12] validate_chain+0x18ef/0x5920 [ 65.911976][ T12] ? __lock_acquire+0x1397/0x2100 [ 65.917005][ T12] ? __pfx_validate_chain+0x10/0x10 [ 65.922215][ T12] ? mark_lock+0x9a/0x360 [ 65.926535][ T12] ? mark_lock+0x9a/0x360 [ 65.930871][ T12] ? __lock_acquire+0x1397/0x2100 [ 65.935882][ T12] ? mark_lock+0x9a/0x360 [ 65.940195][ T12] __lock_acquire+0x1397/0x2100 [ 65.945032][ T12] lock_acquire+0x1ed/0x550 [ 65.949546][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.956037][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 65.961045][ T12] ? __pfx___might_resched+0x10/0x10 [ 65.966324][ T12] ? finish_wait+0xd4/0x1e0 [ 65.970826][ T12] __mutex_lock+0x1ac/0xee0 [ 65.975337][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.981858][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 65.988366][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 65.993395][ T12] ? __pfx___might_resched+0x10/0x10 [ 65.998670][ T12] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 66.005160][ T12] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 66.011654][ T12] unregister_netdevice_many_notify+0xac2/0x2030 [ 66.017974][ T12] ? mark_lock+0x9a/0x360 [ 66.022288][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 66.029036][ T12] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 66.034742][ T12] ? __pfx_lock_release+0x10/0x10 [ 66.039765][ T12] unregister_netdevice_queue+0x303/0x370 [ 66.045472][ T12] ? __pfx_up_write+0x10/0x10 [ 66.050385][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 66.056639][ T12] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 66.062356][ T12] _cfg80211_unregister_wdev+0x163/0x590 [ 66.067983][ T12] ieee80211_remove_interfaces+0x4ef/0x700 [ 66.073776][ T12] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 66.080095][ T12] ? rcu_is_watching+0x15/0xb0 [ 66.084844][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 66.090198][ T12] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 66.095750][ T12] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 66.101861][ T12] hwsim_exit_net+0x5c1/0x670 [ 66.106556][ T12] ? __pfx_hwsim_exit_net+0x10/0x10 [ 66.111822][ T12] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 66.117614][ T12] cleanup_net+0x812/0xd60 [ 66.122013][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 66.126932][ T12] ? process_scheduled_works+0x976/0x1840 [ 66.132645][ T12] process_scheduled_works+0xa66/0x1840 [ 66.138189][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 66.144169][ T12] ? assign_work+0x364/0x3d0 [ 66.148742][ T12] worker_thread+0x870/0xd30 [ 66.153316][ T12] ? __kthread_parkme+0x169/0x1d0 [ 66.158336][ T12] ? __pfx_worker_thread+0x10/0x10 [ 66.163543][ T12] kthread+0x2f0/0x390 [ 66.167609][ T12] ? __pfx_worker_thread+0x10/0x10 [ 66.172703][ T12] ? __pfx_kthread+0x10/0x10 [ 66.177276][ T12] ret_from_fork+0x4b/0x80 [ 66.181685][ T12] ? __pfx_kthread+0x10/0x10 [ 66.186259][ T12] ret_from_fork_asm+0x1a/0x30 [ 66.191006][ T12] [ 66.553558][ T12] bridge_slave_1: left allmulticast mode [ 66.559642][ T12] bridge_slave_1: left promiscuous mode [ 66.565314][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.573360][ T12] bridge_slave_0: left allmulticast mode [ 66.579092][ T12] bridge_slave_0: left promiscuous mode [ 66.584750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.701070][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.710736][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.720216][ T12] bond0 (unregistering): Released all slaves [ 66.827623][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.835169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.848707][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.858821][ T12] team0 (unregistering): Port device team_slave_0 removed [ 71.787147][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.793431][ T1295] ieee802154 phy1 wpan1: encryption failed: -22