possible deadlock in ieee80211_remove_interfaces
netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
bridge_slave_1: left allmulticast mode
bridge_slave_1: left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): Released all slaves
======================================================
WARNING: possible circular locking dependency detected
6.13.0-syzkaller-g7004a2e46d16 #0 Not tainted
------------------------------------------------------
kworker/u32:5/838 is trying to acquire lock:
ffffffff8fef2c28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline]
ffffffff8fef2c28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1a51/0x21a0 net/core/dev.c:11792
but task is already holding lock:
ffff888041be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6061 [inline]
ffff888041be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf1/0x720 net/mac80211/iface.c:2280
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730
wiphy_lock include/net/cfg80211.h:6046 [inline]
wiphy_register+0x1c9c/0x2860 net/wireless/core.c:1006
ieee80211_register_hw+0x2455/0x4060 net/mac80211/main.c:1587
mac80211_hwsim_new_radio+0x304e/0x54d0 drivers/net/wireless/virtual/mac80211_hwsim.c:5558
init_mac80211_hwsim+0x432/0x8c0 drivers/net/wireless/virtual/mac80211_hwsim.c:6910
do_one_initcall+0x128/0x700 init/main.c:1267
do_initcall_level init/main.c:1329 [inline]
do_initcalls init/main.c:1345 [inline]
do_basic_setup init/main.c:1364 [inline]
kernel_init_freeable+0x5c7/0x900 init/main.c:1578
kernel_init+0x1c/0x2b0 init/main.c:1467
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
-> #0 (rtnl_mutex){+.+.}-{4:4}:
check_prev_add kernel/locking/lockdep.c:3163 [inline]
check_prevs_add kernel/locking/lockdep.c:3282 [inline]
validate_chain kernel/locking/lockdep.c:3906 [inline]
__lock_acquire+0x249e/0x3c40 kernel/locking/lockdep.c:5228
lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730
rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline]
unregister_netdevice_many_notify+0x1a51/0x21a0 net/core/dev.c:11792
unregister_netdevice_many net/core/dev.c:11875 [inline]
unregister_netdevice_queue+0x307/0x3f0 net/core/dev.c:11741
unregister_netdevice include/linux/netdevice.h:3329 [inline]
_cfg80211_unregister_wdev+0x64b/0x830 net/wireless/core.c:1251
ieee80211_remove_interfaces+0x34f/0x720 net/mac80211/iface.c:2305
ieee80211_unregister_hw+0x55/0x3a0 net/mac80211/main.c:1681
mac80211_hwsim_del_radio drivers/net/wireless/virtual/mac80211_hwsim.c:5664 [inline]
hwsim_exit_net+0x3ad/0x7d0 drivers/net/wireless/virtual/mac80211_hwsim.c:6544
ops_exit_list+0xb0/0x180 net/core/net_namespace.c:172
cleanup_net+0x5c6/0xbf0 net/core/net_namespace.c:652
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
process_scheduled_works kernel/workqueue.c:3317 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
kthread+0x3af/0x750 kernel/kthread.c:464
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
other info that might help us debug this:
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(&rdev->wiphy.mtx);
lock(rtnl_mutex);
lock(&rdev->wiphy.mtx);
lock(rtnl_mutex);
*** DEADLOCK ***
4 locks held by kworker/u32:5/838:
#0: ffff88801c284948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3211
#1: ffffc900056a7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3212
#2: ffffffff8fedd010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xbf0 net/core/net_namespace.c:606
#3: ffff888041be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6061 [inline]
#3: ffff888041be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf1/0x720 net/mac80211/iface.c:2280
stack backtrace:
CPU: 1 UID: 0 PID: 838 Comm: kworker/u32:5 Not tainted 6.13.0-syzkaller-g7004a2e46d16 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: netns cleanup_net
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
print_circular_bug+0x490/0x760 kernel/locking/lockdep.c:2076
check_noncircular+0x31a/0x400 kernel/locking/lockdep.c:2208
check_prev_add kernel/locking/lockdep.c:3163 [inline]
check_prevs_add kernel/locking/lockdep.c:3282 [inline]
validate_chain kernel/locking/lockdep.c:3906 [inline]
__lock_acquire+0x249e/0x3c40 kernel/locking/lockdep.c:5228
lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851
__mutex_lock_common kernel/locking/mutex.c:585 [inline]
__mutex_lock+0x19b/0xb10 kernel/locking/mutex.c:730
rtnl_acquire_if_cleanup_net net/core/dev.c:10272 [inline]
unregister_netdevice_many_notify+0x1a51/0x21a0 net/core/dev.c:11792
unregister_netdevice_many net/core/dev.c:11875 [inline]
unregister_netdevice_queue+0x307/0x3f0 net/core/dev.c:11741
unregister_netdevice include/linux/netdevice.h:3329 [inline]
_cfg80211_unregister_wdev+0x64b/0x830 net/wireless/core.c:1251
ieee80211_remove_interfaces+0x34f/0x720 net/mac80211/iface.c:2305
ieee80211_unregister_hw+0x55/0x3a0 net/mac80211/main.c:1681
mac80211_hwsim_del_radio drivers/net/wireless/virtual/mac80211_hwsim.c:5664 [inline]
hwsim_exit_net+0x3ad/0x7d0 drivers/net/wireless/virtual/mac80211_hwsim.c:6544
ops_exit_list+0xb0/0x180 net/core/net_namespace.c:172
cleanup_net+0x5c6/0xbf0 net/core/net_namespace.c:652
process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3236
process_scheduled_works kernel/workqueue.c:3317 [inline]
worker_thread+0x6c8/0xf00 kernel/workqueue.c:3398
kthread+0x3af/0x750 kernel/kthread.c:464
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth1_macvtap: left promiscuous mode
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
[ 38.239295][ T40] audit: type=1400 audit(1737606668.686:80): avc: denied { write } for pid=5902 comm="sh" path="pipe:[2906]" dev="pipefs" ino=2906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 38.247085][ T40] audit: type=1400 audit(1737606668.686:81): avc: denied { rlimitinh } for pid=5902 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 38.252587][ T40] audit: type=1400 audit(1737606668.686:82): avc: denied { siginh } for pid=5902 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 38.912130][ T40] audit: type=1400 audit(1737606669.366:83): avc: denied { read } for pid=5337 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 38.920637][ T40] audit: type=1400 audit(1737606669.376:84): avc: denied { append } for pid=5337 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 38.929195][ T40] audit: type=1400 audit(1737606669.376:85): avc: denied { open } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 38.937686][ T40] audit: type=1400 audit(1737606669.376:86): avc: denied { getattr } for pid=5337 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
Warning: Permanently added '[localhost]:50595' (ED25519) to the list of known hosts.
[ 41.959233][ T40] audit: type=1400 audit(1737606672.416:87): avc: denied { execute } for pid=5935 comm="sh" name="syz-execprog" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
2025/01/23 04:31:12 ignoring optional flag "sandboxArg"="0"
2025/01/23 04:31:12 ignoring optional flag "type"="qemu"
2025/01/23 04:31:12 parsed 1 programs
[ 42.276876][ T5941] cgroup: Unknown subsys name 'net'
[ 42.405377][ T5941] cgroup: Unknown subsys name 'cpuset'
[ 42.408924][ T5941] cgroup: Unknown subsys name 'rlimit'
[ 42.562208][ T5943] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 43.126387][ T5941] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2025/01/23 04:31:13 executed programs: 0
[ 43.182743][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 43.186728][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 43.190089][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 43.194079][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 43.196440][ T5294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 43.198828][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 43.269320][ T40] kauditd_printk_skb: 30 callbacks suppressed
[ 43.269330][ T40] audit: type=1400 audit(1737606673.726:118): avc: denied { module_request } for pid=5950 comm="syz-executor.2" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 43.286000][ T5950] chnl_net:caif_netlink_parms(): no params data found
[ 43.362514][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.365437][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.367664][ T5950] bridge_slave_0: entered allmulticast mode
[ 43.370780][ T5950] bridge_slave_0: entered promiscuous mode
[ 43.375521][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.377692][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.380036][ T5950] bridge_slave_1: entered allmulticast mode
[ 43.382364][ T5950] bridge_slave_1: entered promiscuous mode
[ 43.404605][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 43.408461][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 43.429697][ T5950] team0: Port device team_slave_0 added
[ 43.433812][ T5950] team0: Port device team_slave_1 added
[ 43.451745][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 43.453954][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 43.461092][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 43.465327][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 43.467331][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 43.474999][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 43.500434][ T5950] hsr_slave_0: entered promiscuous mode
[ 43.502701][ T5950] hsr_slave_1: entered promiscuous mode
[ 43.572407][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 43.576332][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 43.579531][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 43.582874][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 43.594505][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.596672][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.599062][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.601178][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.623839][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0
[ 43.631212][ T94] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.634056][ T94] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.640575][ T5950] 8021q: adding VLAN 0 to HW filter on device team0
[ 43.646209][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.648701][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.654139][ T94] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.656198][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.689583][ T40] audit: type=1400 audit(1737606674.146:119): avc: denied { sys_module } for pid=5950 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 43.731039][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 43.746594][ T5950] veth0_vlan: entered promiscuous mode
[ 43.750390][ T5950] veth1_vlan: entered promiscuous mode
[ 43.763868][ T5950] veth0_macvtap: entered promiscuous mode
[ 43.767392][ T5950] veth1_macvtap: entered promiscuous mode
[ 43.775383][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 43.780949][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 43.785872][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 43.788416][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 43.790893][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 43.794062][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 43.830517][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 43.833694][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 43.843609][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 43.845918][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 43.850738][ T40] audit: type=1400 audit(1737606674.306:120): avc: denied { mounton } for pid=5950 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 43.857389][ T40] audit: type=1400 audit(1737606674.306:121): avc: denied { mount } for pid=5950 comm="syz-executor.2" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 43.866769][ T5950] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 43.878937][ T40] audit: type=1400 audit(1737606674.336:122): avc: denied { read write } for pid=5950 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 43.889058][ T40] audit: type=1400 audit(1737606674.336:123): avc: denied { open } for pid=5950 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 43.898590][ T40] audit: type=1400 audit(1737606674.336:124): avc: denied { ioctl } for pid=5950 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 46.109578][ T838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 47.821107][ T838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 47.918138][ T838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 47.989710][ T838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 48.083715][ T838] bridge_slave_1: left allmulticast mode
[ 48.085463][ T838] bridge_slave_1: left promiscuous mode
[ 48.087587][ T838] bridge0: port 2(bridge_slave_1) entered disabled state
[ 48.093504][ T838] bridge_slave_0: left allmulticast mode
[ 48.095185][ T838] bridge_slave_0: left promiscuous mode
[ 48.096857][ T838] bridge0: port 1(bridge_slave_0) entered disabled state
[ 48.130037][ T40] audit: type=1400 audit(1737606678.586:125): avc: denied { search } for pid=5973 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 48.138542][ T40] audit: type=1400 audit(1737606678.586:126): avc: denied { read } for pid=5973 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 48.147559][ T40] audit: type=1400 audit(1737606678.586:127): avc: denied { open } for pid=5973 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 48.282565][ T838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 48.286603][ T838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 48.289898][ T838] bond0 (unregistering): Released all slaves
[ 48.443763][ T838]
[ 48.444507][ T838] ======================================================
[ 48.446464][ T838] WARNING: possible circular locking dependency detected
[ 48.448412][ T838] 6.13.0-syzkaller-g7004a2e46d16 #0 Not tainted
[ 48.450205][ T838] ------------------------------------------------------
[ 48.452190][ T838] kworker/u32:5/838 is trying to acquire lock:
[ 48.453945][ T838] ffffffff8fef2c28 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.456924][ T838]
[ 48.456924][ T838] but task is already holding lock:
[ 48.458978][ T838] ffff888041be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf1/0x720
[ 48.461804][ T838]
[ 48.461804][ T838] which lock already depends on the new lock.
[ 48.461804][ T838]
[ 48.464688][ T838]
[ 48.464688][ T838] the existing dependency chain (in reverse order) is:
[ 48.467179][ T838]
[ 48.467179][ T838] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[ 48.469337][ T838] __mutex_lock+0x19b/0xb10
[ 48.470774][ T838] wiphy_register+0x1c9c/0x2860
[ 48.472291][ T838] ieee80211_register_hw+0x2455/0x4060
[ 48.474225][ T838] mac80211_hwsim_new_radio+0x304e/0x54d0
[ 48.476192][ T838] init_mac80211_hwsim+0x432/0x8c0
[ 48.477848][ T838] do_one_initcall+0x128/0x700
[ 48.479391][ T838] kernel_init_freeable+0x5c7/0x900
[ 48.481038][ T838] kernel_init+0x1c/0x2b0
[ 48.482478][ T838] ret_from_fork+0x45/0x80
[ 48.483976][ T838] ret_from_fork_asm+0x1a/0x30
[ 48.485501][ T838]
[ 48.485501][ T838] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 48.487590][ T838] __lock_acquire+0x249e/0x3c40
[ 48.489135][ T838] lock_acquire.part.0+0x11b/0x380
[ 48.490758][ T838] __mutex_lock+0x19b/0xb10
[ 48.492205][ T838] unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.494217][ T838] unregister_netdevice_queue+0x307/0x3f0
[ 48.496034][ T838] _cfg80211_unregister_wdev+0x64b/0x830
[ 48.497796][ T838] ieee80211_remove_interfaces+0x34f/0x720
[ 48.499603][ T838] ieee80211_unregister_hw+0x55/0x3a0
[ 48.501384][ T838] hwsim_exit_net+0x3ad/0x7d0
[ 48.503010][ T838] ops_exit_list+0xb0/0x180
[ 48.504460][ T838] cleanup_net+0x5c6/0xbf0
[ 48.505896][ T838] process_one_work+0x9c5/0x1ba0
[ 48.507475][ T838] worker_thread+0x6c8/0xf00
[ 48.508950][ T838] kthread+0x3af/0x750
[ 48.510301][ T838] ret_from_fork+0x45/0x80
[ 48.511739][ T838] ret_from_fork_asm+0x1a/0x30
[ 48.513306][ T838]
[ 48.513306][ T838] other info that might help us debug this:
[ 48.513306][ T838]
[ 48.516305][ T838] Possible unsafe locking scenario:
[ 48.516305][ T838]
[ 48.518442][ T838] CPU0 CPU1
[ 48.519974][ T838] ---- ----
[ 48.521495][ T838] lock(&rdev->wiphy.mtx);
[ 48.522836][ T838] lock(rtnl_mutex);
[ 48.524691][ T838] lock(&rdev->wiphy.mtx);
[ 48.526658][ T838] lock(rtnl_mutex);
[ 48.527765][ T838]
[ 48.527765][ T838] *** DEADLOCK ***
[ 48.527765][ T838]
[ 48.529943][ T838] 4 locks held by kworker/u32:5/838:
[ 48.531366][ T838] #0: ffff88801c284948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0
[ 48.534144][ T838] #1: ffffc900056a7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0
[ 48.536713][ T838] #2: ffffffff8fedd010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xbf0
[ 48.539242][ T838] #3: ffff888041be8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf1/0x720
[ 48.542166][ T838]
[ 48.542166][ T838] stack backtrace:
[ 48.543803][ T838] CPU: 1 UID: 0 PID: 838 Comm: kworker/u32:5 Not tainted 6.13.0-syzkaller-g7004a2e46d16 #0
[ 48.543814][ T838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 48.543821][ T838] Workqueue: netns cleanup_net
[ 48.543834][ T838] Call Trace:
[ 48.543837][ T838]
[ 48.543841][ T838] dump_stack_lvl+0x116/0x1f0
[ 48.543853][ T838] print_circular_bug+0x490/0x760
[ 48.543865][ T838] check_noncircular+0x31a/0x400
[ 48.543875][ T838] ? __pfx_check_noncircular+0x10/0x10
[ 48.543885][ T838] ? lockdep_lock+0xc6/0x200
[ 48.543893][ T838] ? __pfx_lockdep_lock+0x10/0x10
[ 48.543900][ T838] ? __pfx_lock_release+0x10/0x10
[ 48.543911][ T838] __lock_acquire+0x249e/0x3c40
[ 48.543923][ T838] ? __pfx___lock_acquire+0x10/0x10
[ 48.543933][ T838] ? synchronize_rcu_expedited+0x424/0x450
[ 48.543944][ T838] ? __pfx_lock_release+0x10/0x10
[ 48.543954][ T838] lock_acquire.part.0+0x11b/0x380
[ 48.543964][ T838] ? unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.543978][ T838] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 48.543988][ T838] ? rcu_is_watching+0x12/0xc0
[ 48.543996][ T838] ? trace_lock_acquire+0x14e/0x1f0
[ 48.544004][ T838] ? unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.544016][ T838] ? lock_acquire+0x2f/0xb0
[ 48.544025][ T838] ? unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.544037][ T838] __mutex_lock+0x19b/0xb10
[ 48.544048][ T838] ? unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.544060][ T838] ? unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.544073][ T838] ? __pfx___mutex_lock+0x10/0x10
[ 48.544083][ T838] ? __pfx_wait_rcu_exp_gp+0x10/0x10
[ 48.544093][ T838] ? __pfx___might_resched+0x10/0x10
[ 48.544104][ T838] ? unregister_netdevice_many_notify+0x959/0x21a0
[ 48.544117][ T838] ? unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.544129][ T838] unregister_netdevice_many_notify+0x1a51/0x21a0
[ 48.544143][ T838] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 48.544155][ T838] ? find_held_lock+0x2d/0x110
[ 48.544163][ T838] ? kernfs_remove_by_name_ns+0xc4/0x130
[ 48.544176][ T838] ? __pfx_lock_release+0x10/0x10
[ 48.544185][ T838] ? __call_rcu_common.constprop.0+0x3ea/0x870
[ 48.544197][ T838] unregister_netdevice_queue+0x307/0x3f0
[ 48.544209][ T838] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 48.544223][ T838] _cfg80211_unregister_wdev+0x64b/0x830
[ 48.544236][ T838] ieee80211_remove_interfaces+0x34f/0x720
[ 48.544244][ T838] ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[ 48.544254][ T838] ieee80211_unregister_hw+0x55/0x3a0
[ 48.544264][ T838] hwsim_exit_net+0x3ad/0x7d0
[ 48.544275][ T838] ? __pfx_hwsim_exit_net+0x10/0x10
[ 48.544285][ T838] ? ip_vs_sync_net_cleanup+0x72/0xb0
[ 48.544296][ T838] ? __ip_vs_dev_cleanup_batch+0xb1/0x290
[ 48.544309][ T838] ? __pfx_hwsim_exit_net+0x10/0x10
[ 48.544319][ T838] ops_exit_list+0xb0/0x180
[ 48.544330][ T838] cleanup_net+0x5c6/0xbf0
[ 48.544342][ T838] ? __pfx_cleanup_net+0x10/0x10
[ 48.544355][ T838] ? lock_acquire+0x2f/0xb0
[ 48.544364][ T838] ? process_one_work+0x921/0x1ba0
[ 48.544374][ T838] process_one_work+0x9c5/0x1ba0
[ 48.544385][ T838] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 48.544395][ T838] ? __pfx_process_one_work+0x10/0x10
[ 48.544405][ T838] ? rcu_is_watching+0x12/0xc0
[ 48.544413][ T838] ? assign_work+0x1a0/0x250
[ 48.544422][ T838] worker_thread+0x6c8/0xf00
[ 48.544432][ T838] ? __kthread_parkme+0x148/0x220
[ 48.544445][ T838] ? __pfx_worker_thread+0x10/0x10
[ 48.544455][ T838] kthread+0x3af/0x750
[ 48.544463][ T838] ? __pfx_kthread+0x10/0x10
[ 48.544471][ T838] ? lock_acquire+0x2f/0xb0
[ 48.544481][ T838] ? __pfx_kthread+0x10/0x10
[ 48.544490][ T838] ret_from_fork+0x45/0x80
[ 48.544499][ T838] ? __pfx_kthread+0x10/0x10
[ 48.544508][ T838] ret_from_fork_asm+0x1a/0x30
[ 48.544523][ T838]
[ 48.777749][ T838] hsr_slave_0: left promiscuous mode
[ 48.779586][ T838] hsr_slave_1: left promiscuous mode
[ 48.781241][ T838] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 48.783872][ T838] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 48.786172][ T838] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 48.788230][ T838] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 48.791308][ T838] veth1_macvtap: left promiscuous mode
[ 48.793347][ T838] veth0_macvtap: left promiscuous mode
[ 48.795520][ T838] veth1_vlan: left promiscuous mode
[ 48.797570][ T838] veth0_vlan: left promiscuous mode
[ 48.917654][ T838] team0 (unregistering): Port device team_slave_1 removed
[ 48.938266][ T838] team0 (unregistering): Port device team_slave_0 removed
VM DIAGNOSIS:
04:31:24 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000044704 RBX=0000000000000000 RCX=ffffffff8b34b239 RDX=ffffed100d4c6f7e
RSI=ffffffff8bd2c700 RDI=ffffffff8170b719 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20
R8 =0000000000000000 R9 =ffffed100d4c6f7d R10=ffff88806a637beb R11=0000000000000000
R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff90620550 R15=0000000000000000
RIP=ffffffff8b34c61f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc081f6000 CR3=000000002fcde000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000062003 Opmask01=0000000000100000 Opmask02=000000000fffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000010015 0000000c00000028
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000e00000001 0000000000000006
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0043004400010015 0000000000000040
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00000000ff00 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001001 3030303030303230 00316e6170772f74 656e2f317968702f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000055d1c5ab4233 73656d5f70636864
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f94127dc661 72610fef7e7bf37f 656775f3f7ff7fff 7f7f7d7f75777965
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 1
CPU#1
RAX=0000000000030694 RBX=0000000000000001 RCX=ffffffff8b34b239 RDX=ffffed100d4e6f7e
RSI=ffffffff8bd2c700 RDI=ffffffff8170b719 RBP=ffffed10039dd910 RSP=ffffc90000187e08
R8 =0000000000000000 R9 =ffffed100d4e6f7d R10=ffff88806a737beb R11=0000000000000002
R12=0000000000000001 R13=ffff88801ceec880 R14=ffffffff90620550 R15=0000000000000000
RIP=ffffffff8b34c61f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a700000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff1660afb5c CR3=000000000df80000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000062003 Opmask01=0000000000100000 Opmask02=000000000fffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080000010015 0000000c00000028
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000e00000001 0000000000000006
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0043004400010015 0000000000000040
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff00000000ff00 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001001 3030303030303230 00316e6170772f74 656e2f317968702f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000055d1c5ab4233 73656d5f70636864
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f94127dc661 72610fef7e7bf37f 656775f3f7ff7fff 7f7f7d7f75777965
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 2
CPU#2
RAX=000000000001918c RBX=0000000000000002 RCX=ffffffff8b34b239 RDX=ffffed100d506f7e
RSI=ffffffff8bd2c700 RDI=ffffffff8170b719 RBP=ffffed1003a50000 RSP=ffffc90000197e08
R8 =0000000000000000 R9 =ffffed100d506f7d R10=ffff88806a837beb R11=0000000000000000
R12=0000000000000002 R13=ffff88801d280000 R14=ffffffff90620550 R15=0000000000000000
RIP=ffffffff8b34c61f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a800000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe000008f000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9244302866 CR3=000000000df80000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=0000000000000000
Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc081f5d30 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003a1 0000000000000000 44455a494c414954 494e495f43455355
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001d1 0000000000000000 000000000000326d 697377682f6d6973
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9243ff21f0 000055c9d9c5d600 0000000000002e61 0000000000000036
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303b2433273f39 7b27697a787c7a30 23333a3a38263342
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
info registers vcpu 3
CPU#3
RAX=00000000000224e4 RBX=0000000000000003 RCX=ffffffff8b34b239 RDX=ffffed100d526f7e
RSI=ffffffff8bd2c700 RDI=ffffffff8170b719 RBP=ffffed1003a50488 RSP=ffffc900001a7e08
R8 =0000000000000000 R9 =ffffed100d526f7d R10=ffff88806a937beb R11=0000000000000002
R12=0000000000000003 R13=ffff88801d282440 R14=ffffffff90620550 R15=0000000000000000
RIP=ffffffff8b34c61f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88806a900000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe00000d6000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055d1a0cce080 CR3=0000000020e28000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000004040003 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4d7a3610 0000003000000010
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4d7a3610 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2e2e2e2e2e2e2e2e
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 00ffffffffff0000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f73616500000004 0000006900000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a56444057001346 4c51445156004050 4050545f494a5751 4b4a46051f560000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048544150564544 0000000000000021 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001001 3030303030303230 00316e6170772f74 656e2f317968702f
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 000055d1c5ab4233 73656d5f70636864
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 725f0f94127dc661 72610fef7e7bf37f 656775f3f7ff7fff 7f7f7d7f75777965
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 0000726565666965
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000031 00006d5f65636864
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020
syzkaller build log:
go env (err=)
GO111MODULE='auto'
GOARCH='amd64'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFLAGS=''
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.22.7'
GCCGO='gccgo'
GOAMD64='v1'
AR='ar'
CC='gcc'
CXX='g++'
CGO_ENABLED='1'
GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOWORK=''
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
PKG_CONFIG='pkg-config'
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build4153867243=/tmp/go-build -gno-record-gcc-switches'
git status (err=)
HEAD detached at 1d21e169f5
nothing to commit, working tree clean
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:32: run command via tools/syz-env for best compatibility, see:
Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=1d21e169f5af587e88b70ecd9640f8b33a76ebc5 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20231109-113045'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=1d21e169f5af587e88b70ecd9640f8b33a76ebc5 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20231109-113045'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=1d21e169f5af587e88b70ecd9640f8b33a76ebc5 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20231109-113045'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress
mkdir -p ./bin/linux_amd64
gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
-DHOSTGOOS_linux=1 -DGIT_REVISION=\"1d21e169f5af587e88b70ecd9640f8b33a76ebc5\"