possible deadlock in ieee80211_remove_interfaces
======================================================
WARNING: possible circular locking dependency detected
6.13.0-syzkaller-gaa22f4da2a46 #0 Not tainted
------------------------------------------------------
kworker/u4:4/55 is trying to acquire lock:
ffffffff8fcc38c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline]
ffffffff8fcc38c8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 net/core/dev.c:11792
but task is already holding lock:
ffff88804e690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6061 [inline]
ffff88804e690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 net/mac80211/iface.c:2280
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730
wiphy_lock include/net/cfg80211.h:6046 [inline]
wiphy_register+0x1a49/0x27b0 net/wireless/core.c:1006
ieee80211_register_hw+0x354e/0x4240 net/mac80211/main.c:1587
mac80211_hwsim_new_radio+0x2a9f/0x4a90 drivers/net/wireless/virtual/mac80211_hwsim.c:5558
init_mac80211_hwsim+0x87a/0xb00 drivers/net/wireless/virtual/mac80211_hwsim.c:6910
do_one_initcall+0x248/0x870 init/main.c:1267
do_initcall_level+0x157/0x210 init/main.c:1329
do_initcalls+0x3f/0x80 init/main.c:1345
kernel_init_freeable+0x435/0x5d0 init/main.c:1578
kernel_init+0x1d/0x2b0 init/main.c:1467
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
-> #0 (rtnl_mutex){+.+.}-{4:4}:
check_prev_add kernel/locking/lockdep.c:3163 [inline]
check_prevs_add kernel/locking/lockdep.c:3282 [inline]
validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3906
__lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5228
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730
rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline]
unregister_netdevice_many_notify+0xac2/0x2030 net/core/dev.c:11792
unregister_netdevice_many net/core/dev.c:11875 [inline]
unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11741
unregister_netdevice include/linux/netdevice.h:3329 [inline]
_cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1251
ieee80211_remove_interfaces+0x4ef/0x700 net/mac80211/iface.c:2305
ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1681
mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5664
hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6544
ops_exit_list net/core/net_namespace.c:172 [inline]
cleanup_net+0x812/0xd60 net/core/net_namespace.c:652
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317
worker_thread+0x870/0xd30 kernel/workqueue.c:3398
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&rdev->wiphy.mtx);
lock(rtnl_mutex);
lock(&rdev->wiphy.mtx);
lock(rtnl_mutex);
*** DEADLOCK ***
4 locks held by kworker/u4:4/55:
#0: ffff88801baef148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline]
#0: ffff88801baef148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3317
#1: ffffc9000103fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline]
#1: ffffc9000103fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3317
#2: ffffffff8fcb7310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 net/core/net_namespace.c:606
#3: ffff88804e690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6061 [inline]
#3: ffff88804e690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 net/mac80211/iface.c:2280
stack backtrace:
CPU: 0 UID: 0 PID: 55 Comm: kworker/u4:4 Not tainted 6.13.0-syzkaller-gaa22f4da2a46 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
print_circular_bug+0x13a/0x1b0 kernel/locking/lockdep.c:2076
check_noncircular+0x36a/0x4a0 kernel/locking/lockdep.c:2208
check_prev_add kernel/locking/lockdep.c:3163 [inline]
check_prevs_add kernel/locking/lockdep.c:3282 [inline]
validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3906
__lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5228
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730
rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline]
unregister_netdevice_many_notify+0xac2/0x2030 net/core/dev.c:11792
unregister_netdevice_many net/core/dev.c:11875 [inline]
unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11741
unregister_netdevice include/linux/netdevice.h:3329 [inline]
_cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1251
ieee80211_remove_interfaces+0x4ef/0x700 net/mac80211/iface.c:2305
ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1681
mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5664
hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6544
ops_exit_list net/core/net_namespace.c:172 [inline]
cleanup_net+0x812/0xd60 net/core/net_namespace.c:652
process_one_work kernel/workqueue.c:3236 [inline]
process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317
worker_thread+0x870/0xd30 kernel/workqueue.c:3398
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Warning: Permanently added '[localhost]:29722' (ED25519) to the list of known hosts.
2025/01/26 08:12:46 ignoring optional flag "sandboxArg"="0"
2025/01/26 08:12:46 parsed 1 programs
[ 81.798425][ T5311] cgroup: Unknown subsys name 'net'
[ 81.872783][ T5311] cgroup: Unknown subsys name 'cpuset'
[ 81.880026][ T5311] cgroup: Unknown subsys name 'rlimit'
[ 83.449009][ T5311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 86.638552][ T9] cfg80211: failed to load regulatory.db
[ 87.534205][ T5322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 88.345738][ T5332] chnl_net:caif_netlink_parms(): no params data found
[ 88.431701][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.434938][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 88.437587][ T5332] bridge_slave_0: entered allmulticast mode
[ 88.449262][ T5332] bridge_slave_0: entered promiscuous mode
[ 88.460117][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.463736][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 88.466815][ T5332] bridge_slave_1: entered allmulticast mode
[ 88.488672][ T5332] bridge_slave_1: entered promiscuous mode
[ 88.516572][ T5332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.530140][ T5332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.580188][ T5332] team0: Port device team_slave_0 added
[ 88.584180][ T5332] team0: Port device team_slave_1 added
[ 88.619504][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.623004][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.648236][ T5332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.659349][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.662303][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.688390][ T5332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.744346][ T5332] hsr_slave_0: entered promiscuous mode
[ 88.747421][ T5332] hsr_slave_1: entered promiscuous mode
[ 88.984281][ T5332] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.999855][ T5332] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.011741][ T5332] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.022101][ T5332] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.158680][ T5332] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.187202][ T5332] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.204198][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.207193][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.235863][ T55] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.238779][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.285201][ T5332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 89.299055][ T5332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 89.523759][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 89.584981][ T5332] veth0_vlan: entered promiscuous mode
[ 89.603628][ T5332] veth1_vlan: entered promiscuous mode
[ 89.646870][ T5332] veth0_macvtap: entered promiscuous mode
[ 89.662876][ T5332] veth1_macvtap: entered promiscuous mode
[ 89.682616][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 89.694804][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.704094][ T5332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.710920][ T5332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.716335][ T5332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.723837][ T5332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.859493][ T5332] syz-executor (5332) used greatest stack depth: 19216 bytes left
[ 89.900138][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 89.961359][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.059531][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.132088][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.661517][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.664959][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.713101][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.716241][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.416599][ T55] bridge_slave_1: left allmulticast mode
[ 92.454973][ T55] bridge_slave_1: left promiscuous mode
[ 92.459008][ T55] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.589155][ T55] bridge_slave_0: left allmulticast mode
[ 92.592760][ T55] bridge_slave_0: left promiscuous mode
[ 92.596381][ T55] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.291575][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 93.310577][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 93.316123][ T55] bond0 (unregistering): Released all slaves
[ 93.464226][ T55] hsr_slave_0: left promiscuous mode
[ 93.488373][ T55] hsr_slave_1: left promiscuous mode
[ 93.491077][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 93.494204][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 93.541663][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 93.544829][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 93.592216][ T55] veth1_macvtap: left promiscuous mode
[ 93.594835][ T55] veth0_macvtap: left promiscuous mode
[ 93.597141][ T55] veth1_vlan: left promiscuous mode
[ 93.629792][ T55] veth0_vlan: left promiscuous mode
[ 94.342362][ T55] team0 (unregistering): Port device team_slave_1 removed
[ 94.379586][ T55] team0 (unregistering): Port device team_slave_0 removed
[ 95.166118][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.171593][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.175203][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.179944][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.189189][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 95.192196][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.147928][ T55]
[ 96.148987][ T55] ======================================================
[ 96.151758][ T55] WARNING: possible circular locking dependency detected
[ 96.154557][ T55] 6.13.0-syzkaller-gaa22f4da2a46 #0 Not tainted
[ 96.158077][ T55] ------------------------------------------------------
[ 96.160924][ T55] kworker/u4:4/55 is trying to acquire lock:
[ 96.163231][ T55] ffffffff8fcc38c8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030
[ 96.167670][ T55]
[ 96.167670][ T55] but task is already holding lock:
[ 96.170557][ T55] ffff88804e690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700
[ 96.174525][ T55]
[ 96.174525][ T55] which lock already depends on the new lock.
[ 96.174525][ T55]
[ 96.178467][ T55]
[ 96.178467][ T55] the existing dependency chain (in reverse order) is:
[ 96.181910][ T55]
[ 96.181910][ T55] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 96.185004][ T55] lock_acquire+0x1ed/0x550
[ 96.186880][ T55] __mutex_lock+0x19c/0x1010
[ 96.188880][ T55] wiphy_register+0x1a49/0x27b0
[ 96.190940][ T55] ieee80211_register_hw+0x354e/0x4240
[ 96.193300][ T55] mac80211_hwsim_new_radio+0x2a9f/0x4a90
[ 96.195793][ T55] init_mac80211_hwsim+0x87a/0xb00
[ 96.197990][ T55] do_one_initcall+0x248/0x870
[ 96.200017][ T55] do_initcall_level+0x157/0x210
[ 96.202179][ T55] do_initcalls+0x3f/0x80
[ 96.204111][ T55] kernel_init_freeable+0x435/0x5d0
[ 96.206353][ T55] kernel_init+0x1d/0x2b0
[ 96.208245][ T55] ret_from_fork+0x4b/0x80
[ 96.210178][ T55] ret_from_fork_asm+0x1a/0x30
[ 96.212294][ T55]
[ 96.212294][ T55] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 96.215146][ T55] validate_chain+0x18ef/0x5920
[ 96.217178][ T55] __lock_acquire+0x1397/0x2100
[ 96.219203][ T55] lock_acquire+0x1ed/0x550
[ 96.221091][ T55] __mutex_lock+0x19c/0x1010
[ 96.223000][ T55] unregister_netdevice_many_notify+0xac2/0x2030
[ 96.225559][ T55] unregister_netdevice_queue+0x303/0x370
[ 96.228240][ T55] _cfg80211_unregister_wdev+0x163/0x590
[ 96.230617][ T55] ieee80211_remove_interfaces+0x4ef/0x700
[ 96.233035][ T55] ieee80211_unregister_hw+0x5d/0x2c0
[ 96.235431][ T55] mac80211_hwsim_del_radio+0x2c4/0x4c0
[ 96.237825][ T55] hwsim_exit_net+0x5c1/0x670
[ 96.239779][ T55] cleanup_net+0x812/0xd60
[ 96.241711][ T55] process_scheduled_works+0xa66/0x1840
[ 96.244040][ T55] worker_thread+0x870/0xd30
[ 96.246059][ T55] kthread+0x7a9/0x920
[ 96.247797][ T55] ret_from_fork+0x4b/0x80
[ 96.249821][ T55] ret_from_fork_asm+0x1a/0x30
[ 96.251846][ T55]
[ 96.251846][ T55] other info that might help us debug this:
[ 96.251846][ T55]
[ 96.255869][ T55] Possible unsafe locking scenario:
[ 96.255869][ T55]
[ 96.258725][ T55] CPU0 CPU1
[ 96.260755][ T55] ---- ----
[ 96.262781][ T55] lock(&rdev->wiphy.mtx);
[ 96.264572][ T55] lock(rtnl_mutex);
[ 96.267072][ T55] lock(&rdev->wiphy.mtx);
[ 96.269693][ T55] lock(rtnl_mutex);
[ 96.271196][ T55]
[ 96.271196][ T55] *** DEADLOCK ***
[ 96.271196][ T55]
[ 96.274303][ T55] 4 locks held by kworker/u4:4/55:
[ 96.276232][ T55] #0: ffff88801baef148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[ 96.280332][ T55] #1: ffffc9000103fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[ 96.284493][ T55] #2: ffffffff8fcb7310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60
[ 96.288098][ T55] #3: ffff88804e690768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700
[ 96.292103][ T55]
[ 96.292103][ T55] stack backtrace:
[ 96.294289][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u4:4 Not tainted 6.13.0-syzkaller-gaa22f4da2a46 #0
[ 96.294304][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 96.294312][ T55] Workqueue: netns cleanup_net
[ 96.294330][ T55] Call Trace:
[ 96.294338][ T55]
[ 96.294343][ T55] dump_stack_lvl+0x241/0x360
[ 96.294357][ T55] ? __pfx_dump_stack_lvl+0x10/0x10
[ 96.294367][ T55] ? __pfx__printk+0x10/0x10
[ 96.294384][ T55] print_circular_bug+0x13a/0x1b0
[ 96.294396][ T55] check_noncircular+0x36a/0x4a0
[ 96.294407][ T55] ? __pfx_check_noncircular+0x10/0x10
[ 96.294417][ T55] ? lockdep_lock+0x123/0x2b0
[ 96.294431][ T55] ? mark_lock+0x9a/0x360
[ 96.294446][ T55] validate_chain+0x18ef/0x5920
[ 96.294458][ T55] ? lockdep_hardirqs_on+0x99/0x150
[ 96.294471][ T55] ? __pfx_validate_chain+0x10/0x10
[ 96.294480][ T55] ? __schedule+0x1874/0x4be0
[ 96.294495][ T55] ? __pfx___schedule+0x10/0x10
[ 96.294508][ T55] ? mark_lock+0x9a/0x360
[ 96.294522][ T55] __lock_acquire+0x1397/0x2100
[ 96.294537][ T55] lock_acquire+0x1ed/0x550
[ 96.294550][ T55] ? unregister_netdevice_many_notify+0xac2/0x2030
[ 96.294567][ T55] ? __pfx_lock_acquire+0x10/0x10
[ 96.294579][ T55] ? __pfx___might_resched+0x10/0x10
[ 96.294592][ T55] ? kthread_queue_work+0x110/0x180
[ 96.294607][ T55] __mutex_lock+0x19c/0x1010
[ 96.294619][ T55] ? unregister_netdevice_many_notify+0xac2/0x2030
[ 96.294637][ T55] ? unregister_netdevice_many_notify+0xac2/0x2030
[ 96.294653][ T55] ? __pfx___mutex_lock+0x10/0x10
[ 96.294665][ T55] ? __pfx___might_resched+0x10/0x10
[ 96.294678][ T55] ? unregister_netdevice_many_notify+0x9fa/0x2030
[ 96.294701][ T55] ? unregister_netdevice_many_notify+0x9fa/0x2030
[ 96.294727][ T55] unregister_netdevice_many_notify+0xac2/0x2030
[ 96.294745][ T55] ? mark_lock+0x9a/0x360
[ 96.294763][ T55] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 96.294780][ T55] ? kernfs_remove_by_name_ns+0x11b/0x160
[ 96.294792][ T55] ? __pfx_lock_release+0x10/0x10
[ 96.294810][ T55] unregister_netdevice_queue+0x303/0x370
[ 96.294826][ T55] ? __pfx_up_write+0x10/0x10
[ 96.294836][ T55] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 96.294852][ T55] ? kernfs_remove_by_name_ns+0x11b/0x160
[ 96.294864][ T55] _cfg80211_unregister_wdev+0x163/0x590
[ 96.294879][ T55] ieee80211_remove_interfaces+0x4ef/0x700
[ 96.294898][ T55] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 96.294914][ T55] ? rcu_is_watching+0x15/0xb0
[ 96.294926][ T55] ieee80211_unregister_hw+0x5d/0x2c0
[ 96.294941][ T55] mac80211_hwsim_del_radio+0x2c4/0x4c0
[ 96.294960][ T55] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[ 96.294977][ T55] hwsim_exit_net+0x5c1/0x670
[ 96.294989][ T55] ? __pfx_hwsim_exit_net+0x10/0x10
[ 96.295001][ T55] ? __ip_vs_dev_cleanup_batch+0x239/0x260
[ 96.295014][ T55] cleanup_net+0x812/0xd60
[ 96.295027][ T55] ? __pfx_cleanup_net+0x10/0x10
[ 96.295040][ T55] ? process_scheduled_works+0x976/0x1840
[ 96.295053][ T55] process_scheduled_works+0xa66/0x1840
[ 96.295070][ T55] ? __pfx_process_scheduled_works+0x10/0x10
[ 96.295083][ T55] ? assign_work+0x364/0x3d0
[ 96.295095][ T55] worker_thread+0x870/0xd30
[ 96.295109][ T55] ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 96.295121][ T55] ? __kthread_parkme+0x169/0x1d0
[ 96.295134][ T55] ? __pfx_worker_thread+0x10/0x10
[ 96.295146][ T55] kthread+0x7a9/0x920
[ 96.295159][ T55] ? __pfx_kthread+0x10/0x10
[ 96.295173][ T55] ? __pfx_worker_thread+0x10/0x10
[ 96.295184][ T55] ? __pfx_kthread+0x10/0x10
[ 96.295196][ T55] ? __pfx_kthread+0x10/0x10
[ 96.295210][ T55] ? __pfx_kthread+0x10/0x10
[ 96.295227][ T55] ? _raw_spin_unlock_irq+0x23/0x50
[ 96.295237][ T55] ? lockdep_hardirqs_on+0x99/0x150
[ 96.295247][ T55] ? __pfx_kthread+0x10/0x10
[ 96.295260][ T55] ret_from_fork+0x4b/0x80
[ 96.295273][ T55] ? __pfx_kthread+0x10/0x10
[ 96.295287][ T55] ret_from_fork_asm+0x1a/0x30
[ 96.295302][ T55]
VM DIAGNOSIS:
08:13:04 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000061 RBX=ffffffff9a746940 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000103e4b0
R8 =ffffffff8576423b R9 =1ffff11003d74046 R10=dffffc0000000000 R11=ffffffff857641f0
R12=dffffc0000000000 R13=ffffffff9a440f4a R14=0000000000000061 R15=00000000000003f8
RIP=ffffffff8576426e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f92a9e686ec CR3=0000000036b9e000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 6e1c77e74c0c0a00
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007fffa20f63f0
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92a9305260 00007f92a9305f68
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa20f6540 0000000000000003
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003000000028 00007f92a9125c62
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92a930b488 00007f92a930b480 00007f92a930b478 00007f92a930b450
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92a9e6d100 00007f92a930b440 00007f92a930b458 00007f92a930b4a0
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f92a930b498 00007f92a930b490 00007f92a930b488 00007f92a930b480
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
syzkaller build log:
go env (err=)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.22.7'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3758206853=/tmp/go-build -gno-record-gcc-switches'
git status (err=)
HEAD detached at 0b45cac3dc6
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:31: run command via tools/syz-env for best compatibility, see:
Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
bin/syz-sysgen
go fmt ./sys/... >/dev/null
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=0b45cac3dc627e9b6702daf3d578d970440972e9 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20240925-090608'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
mkdir -p ./bin/linux_amd64
g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"0b45cac3dc627e9b6702daf3d578d970440972e9\"
/usr/bin/ld: /tmp/ccUjB5zK.o: in function `test_cover_filter()':
executor.cc:(.text+0x1417b): warning: the use of `tempnam' is dangerous, better use `mkstemp'
/usr/bin/ld: /tmp/ccUjB5zK.o: in function `Connection::Connect(char const*, char const*)':
executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking