possible deadlock in ieee80211_remove_interfaces ====================================================== WARNING: possible circular locking dependency detected 6.13.0-syzkaller-07078-gb46c89c08f41 #0 Not tainted ------------------------------------------------------ kworker/u8:5/144 is trying to acquire lock: ffffffff8fcb1088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline] ffffffff8fcb1088 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 net/core/dev.c:11792 but task is already holding lock: ffff888028520768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6061 [inline] ffff888028520768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 net/mac80211/iface.c:2280 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851 __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730 wiphy_lock include/net/cfg80211.h:6046 [inline] wiphy_register+0x1a49/0x27b0 net/wireless/core.c:1006 ieee80211_register_hw+0x354e/0x4240 net/mac80211/main.c:1587 mac80211_hwsim_new_radio+0x2a9f/0x4a90 drivers/net/wireless/virtual/mac80211_hwsim.c:5558 init_mac80211_hwsim+0x87a/0xb00 drivers/net/wireless/virtual/mac80211_hwsim.c:6910 do_one_initcall+0x248/0x870 init/main.c:1267 do_initcall_level+0x157/0x210 init/main.c:1329 do_initcalls+0x3f/0x80 init/main.c:1345 kernel_init_freeable+0x435/0x5d0 init/main.c:1578 kernel_init+0x1d/0x2b0 init/main.c:1467 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 -> #0 (rtnl_mutex){+.+.}-{4:4}: check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3906 __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5228 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851 __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730 rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline] unregister_netdevice_many_notify+0xac2/0x2030 net/core/dev.c:11792 unregister_netdevice_many net/core/dev.c:11875 [inline] unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11741 unregister_netdevice include/linux/netdevice.h:3329 [inline] _cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1251 ieee80211_remove_interfaces+0x4ef/0x700 net/mac80211/iface.c:2305 ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1681 mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5664 hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6544 ops_exit_list net/core/net_namespace.c:172 [inline] cleanup_net+0x812/0xd60 net/core/net_namespace.c:652 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&rdev->wiphy.mtx); lock(rtnl_mutex); lock(&rdev->wiphy.mtx); lock(rtnl_mutex); *** DEADLOCK *** 4 locks held by kworker/u8:5/144: #0: ffff88801baf3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3211 [inline] #0: ffff88801baf3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 kernel/workqueue.c:3317 #1: ffffc90002ea7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3212 [inline] #1: ffffc90002ea7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 kernel/workqueue.c:3317 #2: ffffffff8fca4ad0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 net/core/net_namespace.c:606 #3: ffff888028520768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6061 [inline] #3: ffff888028520768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 net/mac80211/iface.c:2280 stack backtrace: CPU: 1 UID: 0 PID: 144 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_circular_bug+0x13a/0x1b0 kernel/locking/lockdep.c:2076 check_noncircular+0x36a/0x4a0 kernel/locking/lockdep.c:2208 check_prev_add kernel/locking/lockdep.c:3163 [inline] check_prevs_add kernel/locking/lockdep.c:3282 [inline] validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3906 __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5228 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851 __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0x19c/0x1010 kernel/locking/mutex.c:730 rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline] unregister_netdevice_many_notify+0xac2/0x2030 net/core/dev.c:11792 unregister_netdevice_many net/core/dev.c:11875 [inline] unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11741 unregister_netdevice include/linux/netdevice.h:3329 [inline] _cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1251 ieee80211_remove_interfaces+0x4ef/0x700 net/mac80211/iface.c:2305 ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1681 mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5664 hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6544 ops_exit_list net/core/net_namespace.c:172 [inline] cleanup_net+0x812/0xd60 net/core/net_namespace.c:652 process_one_work kernel/workqueue.c:3236 [inline] process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3317 worker_thread+0x870/0xd30 kernel/workqueue.c:3398 kthread+0x7a9/0x920 kernel/kthread.c:464 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 2025/01/25 06:30:07 ignoring optional flag "sandboxArg"="0" 2025/01/25 06:30:07 parsed 1 programs [ 65.528816][ T5820] cgroup: Unknown subsys name 'net' [ 65.637613][ T5820] cgroup: Unknown subsys name 'cpuset' [ 65.646117][ T5820] cgroup: Unknown subsys name 'rlimit' [ 66.925545][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.267184][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.276409][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.284406][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.294047][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.301696][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.309531][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.420661][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.379675][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 71.450080][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.459416][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.466925][ T5874] bridge_slave_0: entered allmulticast mode [ 71.474153][ T5874] bridge_slave_0: entered promiscuous mode [ 71.483264][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.492290][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.500040][ T5874] bridge_slave_1: entered allmulticast mode [ 71.507429][ T5874] bridge_slave_1: entered promiscuous mode [ 71.529291][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.540507][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.567038][ T5874] team0: Port device team_slave_0 added [ 71.575160][ T5874] team0: Port device team_slave_1 added [ 71.594620][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.601633][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.628467][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.641676][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.648690][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.675068][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.705660][ T5874] hsr_slave_0: entered promiscuous mode [ 71.711882][ T5874] hsr_slave_1: entered promiscuous mode [ 71.797352][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.804279][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.818104][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.828612][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.837770][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.847014][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.909791][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.930711][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.946202][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.953366][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.969213][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.976378][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.100534][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.135764][ T5874] veth0_vlan: entered promiscuous mode [ 72.148076][ T5874] veth1_vlan: entered promiscuous mode [ 72.169372][ T5874] veth0_macvtap: entered promiscuous mode [ 72.177860][ T5874] veth1_macvtap: entered promiscuous mode [ 72.194042][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.208840][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.220665][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.230431][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.240467][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.249401][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.353956][ T5874] syz-executor (5874) used greatest stack depth: 17616 bytes left [ 72.381024][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.451404][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.480898][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.491746][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.513123][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.522057][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.554431][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.640001][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/01/25 06:30:17 executed programs: 0 [ 73.541035][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.554131][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.562528][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.571103][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.580032][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.588426][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.696619][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 73.756259][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.763435][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.770933][ T5914] bridge_slave_0: entered allmulticast mode [ 73.778275][ T5914] bridge_slave_0: entered promiscuous mode [ 73.786821][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.794157][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.801342][ T5914] bridge_slave_1: entered allmulticast mode [ 73.808248][ T5914] bridge_slave_1: entered promiscuous mode [ 73.831670][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.843223][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.872508][ T5914] team0: Port device team_slave_0 added [ 73.882411][ T5914] team0: Port device team_slave_1 added [ 73.904548][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.911526][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.938021][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.952715][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.960009][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.986332][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.019915][ T5914] hsr_slave_0: entered promiscuous mode [ 74.026410][ T5914] hsr_slave_1: entered promiscuous mode [ 74.032432][ T5914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.040976][ T5914] Cannot create hsr debugfs directory [ 75.635547][ T5830] Bluetooth: hci0: command tx timeout [ 75.905523][ T144] bridge_slave_1: left allmulticast mode [ 75.911433][ T144] bridge_slave_1: left promiscuous mode [ 75.921454][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.948769][ T144] bridge_slave_0: left allmulticast mode [ 75.954688][ T144] bridge_slave_0: left promiscuous mode [ 75.961110][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.247023][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.258076][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.268972][ T144] bond0 (unregistering): Released all slaves [ 76.365733][ T144] hsr_slave_0: left promiscuous mode [ 76.372165][ T144] hsr_slave_1: left promiscuous mode [ 76.381638][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.390551][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.406192][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.416079][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.440609][ T144] veth1_macvtap: left promiscuous mode [ 76.448979][ T144] veth0_macvtap: left promiscuous mode [ 76.457825][ T144] veth1_vlan: left promiscuous mode [ 76.463405][ T144] veth0_vlan: left promiscuous mode [ 76.834141][ T144] team0 (unregistering): Port device team_slave_1 removed [ 76.864451][ T144] team0 (unregistering): Port device team_slave_0 removed [ 77.455192][ T5914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.472959][ T5914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.488780][ T5914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.510744][ T5914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.627039][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.721203][ T5830] Bluetooth: hci0: command tx timeout [ 77.751587][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.777934][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.785117][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.799054][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.806234][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.896914][ T144] [ 77.899288][ T144] ====================================================== [ 77.906309][ T144] WARNING: possible circular locking dependency detected [ 77.913324][ T144] 6.13.0-syzkaller-07078-gb46c89c08f41 #0 Not tainted [ 77.920148][ T144] ------------------------------------------------------ [ 77.927152][ T144] kworker/u8:5/144 is trying to acquire lock: [ 77.933364][ T144] ffffffff8fcb1088 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 77.943714][ T144] [ 77.943714][ T144] but task is already holding lock: [ 77.951278][ T144] ffff888028520768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 77.961673][ T144] [ 77.961673][ T144] which lock already depends on the new lock. [ 77.961673][ T144] [ 77.972173][ T144] [ 77.972173][ T144] the existing dependency chain (in reverse order) is: [ 77.981203][ T144] [ 77.981203][ T144] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 77.988964][ T144] lock_acquire+0x1ed/0x550 [ 77.994012][ T144] __mutex_lock+0x19c/0x1010 [ 77.999142][ T144] wiphy_register+0x1a49/0x27b0 [ 78.004536][ T144] ieee80211_register_hw+0x354e/0x4240 [ 78.010626][ T144] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 78.016897][ T144] init_mac80211_hwsim+0x87a/0xb00 [ 78.022581][ T144] do_one_initcall+0x248/0x870 [ 78.024125][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.027942][ T144] do_initcall_level+0x157/0x210 [ 78.040290][ T144] do_initcalls+0x3f/0x80 [ 78.045193][ T144] kernel_init_freeable+0x435/0x5d0 [ 78.050947][ T144] kernel_init+0x1d/0x2b0 [ 78.055831][ T144] ret_from_fork+0x4b/0x80 [ 78.060923][ T144] ret_from_fork_asm+0x1a/0x30 [ 78.061770][ T5914] veth0_vlan: entered promiscuous mode [ 78.066211][ T144] [ 78.066211][ T144] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 78.066240][ T144] validate_chain+0x18ef/0x5920 [ 78.078077][ T5914] veth1_vlan: entered promiscuous mode [ 78.078854][ T144] __lock_acquire+0x1397/0x2100 [ 78.095062][ T144] lock_acquire+0x1ed/0x550 [ 78.100208][ T144] __mutex_lock+0x19c/0x1010 [ 78.101418][ T5914] veth0_macvtap: entered promiscuous mode [ 78.105324][ T144] unregister_netdevice_many_notify+0xac2/0x2030 [ 78.105353][ T144] unregister_netdevice_queue+0x303/0x370 [ 78.105372][ T144] _cfg80211_unregister_wdev+0x163/0x590 [ 78.114635][ T5914] veth1_macvtap: entered promiscuous mode [ 78.117912][ T144] ieee80211_remove_interfaces+0x4ef/0x700 [ 78.132972][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.135996][ T144] ieee80211_unregister_hw+0x5d/0x2c0 [ 78.136024][ T144] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 78.136044][ T144] hwsim_exit_net+0x5c1/0x670 [ 78.149064][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.149613][ T144] cleanup_net+0x812/0xd60 [ 78.159074][ T5914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.161637][ T144] process_scheduled_works+0xa66/0x1840 [ 78.167312][ T5914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.174076][ T144] worker_thread+0x870/0xd30 [ 78.174099][ T144] kthread+0x7a9/0x920 [ 78.174115][ T144] ret_from_fork+0x4b/0x80 [ 78.179285][ T5914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.187708][ T144] ret_from_fork_asm+0x1a/0x30 [ 78.187730][ T144] [ 78.187730][ T144] other info that might help us debug this: [ 78.187730][ T144] [ 78.187736][ T144] Possible unsafe locking scenario: [ 78.187736][ T144] [ 78.187741][ T144] CPU0 CPU1 [ 78.187747][ T144] ---- ---- [ 78.196615][ T5914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.202441][ T144] lock(&rdev->wiphy.mtx); [ 78.272781][ T144] lock(rtnl_mutex); [ 78.279384][ T144] lock(&rdev->wiphy.mtx); [ 78.286421][ T144] lock(rtnl_mutex); [ 78.290392][ T144] [ 78.290392][ T144] *** DEADLOCK *** [ 78.290392][ T144] [ 78.298518][ T144] 4 locks held by kworker/u8:5/144: [ 78.303704][ T144] #0: ffff88801baf3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 78.314581][ T144] #1: ffffc90002ea7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 78.325098][ T144] #2: ffffffff8fca4ad0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 78.334487][ T144] #3: ffff888028520768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 78.345281][ T144] [ 78.345281][ T144] stack backtrace: [ 78.351178][ T144] CPU: 1 UID: 0 PID: 144 Comm: kworker/u8:5 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 78.351193][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 78.351202][ T144] Workqueue: netns cleanup_net [ 78.351224][ T144] Call Trace: [ 78.351229][ T144] [ 78.351235][ T144] dump_stack_lvl+0x241/0x360 [ 78.351255][ T144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.351273][ T144] ? __pfx__printk+0x10/0x10 [ 78.351292][ T144] print_circular_bug+0x13a/0x1b0 [ 78.351312][ T144] check_noncircular+0x36a/0x4a0 [ 78.351330][ T144] ? __pfx_check_noncircular+0x10/0x10 [ 78.351347][ T144] ? queued_spin_lock_slowpath+0x42/0x50 [ 78.351362][ T144] ? lockdep_lock+0x1b0/0x2b0 [ 78.351379][ T144] validate_chain+0x18ef/0x5920 [ 78.351403][ T144] ? __pfx_validate_chain+0x10/0x10 [ 78.351422][ T144] ? mark_lock+0x9a/0x360 [ 78.351438][ T144] ? __lock_acquire+0x1397/0x2100 [ 78.351457][ T144] ? mark_lock+0x9a/0x360 [ 78.351472][ T144] __lock_acquire+0x1397/0x2100 [ 78.351491][ T144] lock_acquire+0x1ed/0x550 [ 78.351505][ T144] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 78.351526][ T144] ? __pfx_lock_acquire+0x10/0x10 [ 78.351541][ T144] ? __pfx___might_resched+0x10/0x10 [ 78.351555][ T144] ? finish_wait+0xd4/0x1e0 [ 78.351572][ T144] __mutex_lock+0x19c/0x1010 [ 78.351587][ T144] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 78.351608][ T144] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 78.351626][ T144] ? __pfx___mutex_lock+0x10/0x10 [ 78.351640][ T144] ? __pfx___might_resched+0x10/0x10 [ 78.351654][ T144] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 78.351672][ T144] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 78.351691][ T144] unregister_netdevice_many_notify+0xac2/0x2030 [ 78.351710][ T144] ? mark_lock+0x9a/0x360 [ 78.351728][ T144] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 78.351746][ T144] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 78.351762][ T144] ? __pfx_lock_release+0x10/0x10 [ 78.351782][ T144] unregister_netdevice_queue+0x303/0x370 [ 78.351804][ T144] ? __pfx_up_write+0x10/0x10 [ 78.351815][ T144] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 78.351833][ T144] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 78.351849][ T144] _cfg80211_unregister_wdev+0x163/0x590 [ 78.351864][ T144] ieee80211_remove_interfaces+0x4ef/0x700 [ 78.351885][ T144] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 78.351901][ T144] ? rcu_is_watching+0x15/0xb0 [ 78.351921][ T144] ieee80211_unregister_hw+0x5d/0x2c0 [ 78.351937][ T144] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 78.351957][ T144] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 78.351976][ T144] hwsim_exit_net+0x5c1/0x670 [ 78.351992][ T144] ? __pfx_hwsim_exit_net+0x10/0x10 [ 78.352007][ T144] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 78.352024][ T144] cleanup_net+0x812/0xd60 [ 78.352039][ T144] ? __pfx_cleanup_net+0x10/0x10 [ 78.352056][ T144] ? process_scheduled_works+0x976/0x1840 [ 78.352070][ T144] process_scheduled_works+0xa66/0x1840 [ 78.352090][ T144] ? __pfx_process_scheduled_works+0x10/0x10 [ 78.352105][ T144] ? assign_work+0x364/0x3d0 [ 78.352118][ T144] worker_thread+0x870/0xd30 [ 78.352135][ T144] ? __kthread_parkme+0x169/0x1d0 [ 78.352149][ T144] ? __pfx_worker_thread+0x10/0x10 [ 78.352162][ T144] kthread+0x7a9/0x920 [ 78.352176][ T144] ? __pfx_kthread+0x10/0x10 [ 78.352191][ T144] ? __pfx_worker_thread+0x10/0x10 [ 78.352203][ T144] ? __pfx_kthread+0x10/0x10 [ 78.352217][ T144] ? __pfx_kthread+0x10/0x10 [ 78.352232][ T144] ? __pfx_kthread+0x10/0x10 [ 78.352246][ T144] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.352257][ T144] ? lockdep_hardirqs_on+0x99/0x150 [ 78.352270][ T144] ? __pfx_kthread+0x10/0x10 [ 78.352285][ T144] ret_from_fork+0x4b/0x80 [ 78.352299][ T144] ? __pfx_kthread+0x10/0x10 [ 78.352313][ T144] ret_from_fork_asm+0x1a/0x30 [ 78.352330][ T144] [ 78.785459][ T5914] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 78.813461][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.819192][ T5914] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 78.821944][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.794023][ T5830] Bluetooth: hci0: command tx timeout [ 81.863890][ T5830] Bluetooth: hci0: command tx timeout [ 82.024012][ T58] cfg80211: failed to load regulatory.db syzkaller build log: go env (err=) GO111MODULE='auto' GOARCH='amd64' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFLAGS='' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs-2/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/usr/local/go' GOSUMDB='sum.golang.org' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.22.7' GCCGO='gccgo' GOAMD64='v1' AR='ar' CC='gcc' CXX='g++' CGO_ENABLED='1' GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod' GOWORK='' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' PKG_CONFIG='pkg-config' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build1232218060=/tmp/go-build -gno-record-gcc-switches' git status (err=) HEAD detached at d3ccff6372 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen go fmt ./sys/... >/dev/null touch .descriptions GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=d3ccff6372e07c6aabd02b5da419aa6492b5f0ad -X 'github.com/google/syzkaller/prog.gitRevisionDate=20241226-091248'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_amd64 g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"d3ccff6372e07c6aabd02b5da419aa6492b5f0ad\" /usr/bin/ld: /tmp/ccYbbTDf.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking