Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. 2024/11/29 09:22:11 ignoring optional flag "sandboxArg"="0" 2024/11/29 09:22:11 ignoring optional flag "type"="gce" 2024/11/29 09:22:11 parsed 1 programs 2024/11/29 09:22:12 executed programs: 0 [ 47.819548][ T1989] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.690846][ T1996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.698876][ T1996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.706619][ T1996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.714623][ T1996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.241703][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.249906][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.258166][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.265943][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.273864][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.281727][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.321944][ T2711] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 51.335267][ T2711] device wlan1 entered promiscuous mode [ 51.342777][ T2711] team0: Port device wlan1 added [ 51.351208][ T2711] [ 51.353536][ T2711] ====================================================== [ 51.360563][ T2711] WARNING: possible circular locking dependency detected [ 51.367569][ T2711] 5.15.173-syzkaller #0 Not tainted [ 51.372747][ T2711] ------------------------------------------------------ [ 51.379744][ T2711] syz-executor.0/2711 is trying to acquire lock: [ 51.386051][ T2711] ffff88810e85bc80 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x29/0xe0 [ 51.395347][ T2711] [ 51.395347][ T2711] but task is already holding lock: [ 51.402689][ T2711] ffff888113448628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x65/0x200 [ 51.412420][ T2711] [ 51.412420][ T2711] which lock already depends on the new lock. [ 51.412420][ T2711] [ 51.422798][ T2711] [ 51.422798][ T2711] the existing dependency chain (in reverse order) is: [ 51.431790][ T2711] [ 51.431790][ T2711] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 51.439536][ T2711] __mutex_lock+0x60/0x660 [ 51.444467][ T2711] ieee80211_open+0x92/0xd0 [ 51.449498][ T2711] __dev_open+0x1ac/0x260 [ 51.454340][ T2711] dev_open+0x75/0x120 [ 51.458919][ T2711] team_add_slave+0x4af/0xc00 [ 51.464125][ T2711] do_set_master+0xe3/0x100 [ 51.469234][ T2711] do_setlink+0x439/0x1b80 [ 51.474187][ T2711] __rtnl_newlink+0x828/0xe60 [ 51.479393][ T2711] rtnl_newlink+0x49/0x70 [ 51.484235][ T2711] rtnetlink_rcv_msg+0x248/0x8a0 [ 51.489713][ T2711] netlink_rcv_skb+0x87/0x1d0 [ 51.494914][ T2711] netlink_unicast+0x2fe/0x430 [ 51.500204][ T2711] netlink_sendmsg+0x3b7/0x730 [ 51.505476][ T2711] __sock_sendmsg+0x56/0x80 [ 51.510518][ T2711] ____sys_sendmsg+0x36f/0x390 [ 51.516057][ T2711] ___sys_sendmsg+0x8b/0xd0 [ 51.521072][ T2711] __sys_sendmsg+0x88/0x100 [ 51.526097][ T2711] do_syscall_64+0x33/0xb0 [ 51.531122][ T2711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.537545][ T2711] [ 51.537545][ T2711] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 51.545519][ T2711] __lock_acquire+0x10b6/0x1a40 [ 51.550885][ T2711] lock_acquire+0xbb/0x290 [ 51.555815][ T2711] __mutex_lock+0x60/0x660 [ 51.560750][ T2711] team_del_slave+0x29/0xe0 [ 51.565766][ T2711] team_device_event+0x5c/0x420 [ 51.571173][ T2711] notifier_call_chain+0x5d/0x110 [ 51.576712][ T2711] unregister_netdevice_many+0x4fc/0x8e0 [ 51.582864][ T2711] unregister_netdevice_queue+0x116/0x120 [ 51.589108][ T2711] _cfg80211_unregister_wdev+0x1e9/0x250 [ 51.595263][ T2711] ieee80211_if_remove+0xac/0x120 [ 51.600807][ T2711] ieee80211_del_iface+0x12/0x20 [ 51.606268][ T2711] nl80211_del_interface+0xab/0x200 [ 51.611984][ T2711] genl_family_rcv_msg_doit+0x113/0x180 [ 51.618077][ T2711] genl_rcv_msg+0x174/0x2c0 [ 51.623101][ T2711] netlink_rcv_skb+0x87/0x1d0 [ 51.628290][ T2711] genl_rcv+0x24/0x40 [ 51.632794][ T2711] netlink_unicast+0x2fe/0x430 [ 51.638086][ T2711] netlink_sendmsg+0x3b7/0x730 [ 51.643359][ T2711] __sock_sendmsg+0x56/0x80 [ 51.648425][ T2711] ____sys_sendmsg+0x36f/0x390 [ 51.653715][ T2711] ___sys_sendmsg+0x8b/0xd0 [ 51.658737][ T2711] __sys_sendmsg+0x88/0x100 [ 51.663754][ T2711] do_syscall_64+0x33/0xb0 [ 51.668700][ T2711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.675115][ T2711] [ 51.675115][ T2711] other info that might help us debug this: [ 51.675115][ T2711] [ 51.685327][ T2711] Possible unsafe locking scenario: [ 51.685327][ T2711] [ 51.692928][ T2711] CPU0 CPU1 [ 51.698286][ T2711] ---- ---- [ 51.703666][ T2711] lock(&rdev->wiphy.mtx); [ 51.708156][ T2711] lock(team->team_lock_key); [ 51.715444][ T2711] lock(&rdev->wiphy.mtx); [ 51.722450][ T2711] lock(team->team_lock_key); [ 51.727204][ T2711] [ 51.727204][ T2711] *** DEADLOCK *** [ 51.727204][ T2711] [ 51.735350][ T2711] 3 locks held by syz-executor.0/2711: [ 51.740794][ T2711] #0: ffffffff83acf430 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 51.748987][ T2711] #1: ffffffff83abfb08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x1a/0x2f0 [ 51.758200][ T2711] #2: ffff888113448628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x65/0x200 [ 51.768376][ T2711] [ 51.768376][ T2711] stack backtrace: [ 51.774254][ T2711] CPU: 0 PID: 2711 Comm: syz-executor.0 Not tainted 5.15.173-syzkaller #0 [ 51.782748][ T2711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.793079][ T2711] Call Trace: [ 51.796344][ T2711] [ 51.799261][ T2711] dump_stack_lvl+0xcd/0x134 [ 51.803847][ T2711] check_noncircular+0xcc/0xe0 [ 51.808614][ T2711] __lock_acquire+0x10b6/0x1a40 [ 51.813476][ T2711] lock_acquire+0xbb/0x290 [ 51.817884][ T2711] ? team_del_slave+0x29/0xe0 [ 51.822561][ T2711] __mutex_lock+0x60/0x660 [ 51.826972][ T2711] ? team_del_slave+0x29/0xe0 [ 51.831656][ T2711] ? team_del_slave+0x29/0xe0 [ 51.836330][ T2711] ? lockdep_hardirqs_on_prepare+0xcd/0xf0 [ 51.842129][ T2711] ? __local_bh_enable_ip+0x5d/0x90 [ 51.847322][ T2711] ? trace_hardirqs_on+0x56/0x110 [ 51.852360][ T2711] team_del_slave+0x29/0xe0 [ 51.856865][ T2711] team_device_event+0x5c/0x420 [ 51.861748][ T2711] notifier_call_chain+0x5d/0x110 [ 51.866788][ T2711] unregister_netdevice_many+0x4fc/0x8e0 [ 51.872418][ T2711] unregister_netdevice_queue+0x116/0x120 [ 51.878141][ T2711] _cfg80211_unregister_wdev+0x1e9/0x250 [ 51.883781][ T2711] ieee80211_if_remove+0xac/0x120 [ 51.888800][ T2711] ieee80211_del_iface+0x12/0x20 [ 51.893753][ T2711] nl80211_del_interface+0xab/0x200 [ 51.898955][ T2711] ? cfg80211_off_channel_oper_allowed+0xb0/0xb0 [ 51.905283][ T2711] genl_family_rcv_msg_doit+0x113/0x180 [ 51.910847][ T2711] genl_rcv_msg+0x174/0x2c0 [ 51.915345][ T2711] ? nl80211_flush_pmksa+0x200/0x200 [ 51.920624][ T2711] netlink_rcv_skb+0x87/0x1d0 [ 51.925294][ T2711] ? genl_get_cmd+0x1a0/0x1a0 [ 51.929965][ T2711] genl_rcv+0x24/0x40 [ 51.933959][ T2711] netlink_unicast+0x2fe/0x430 [ 51.938715][ T2711] netlink_sendmsg+0x3b7/0x730 [ 51.943472][ T2711] __sock_sendmsg+0x56/0x80 [ 51.947975][ T2711] ____sys_sendmsg+0x36f/0x390 [ 51.952749][ T2711] ? sendmsg_copy_msghdr+0x70/0xf0 [ 51.957866][ T2711] ___sys_sendmsg+0x8b/0xd0 [ 51.962360][ T2711] ? find_held_lock+0x2b/0x80 [ 51.967035][ T2711] ? __fget_files+0x182/0x310 [ 51.971736][ T2711] ? __fget_files+0x1ab/0x310 [ 51.976407][ T2711] ? __fget_light+0x69/0xe0 [ 51.980907][ T2711] __sys_sendmsg+0x88/0x100 [ 51.985415][ T2711] ? lockdep_hardirqs_on_prepare+0xcd/0xf0 [ 51.991217][ T2711] do_syscall_64+0x33/0xb0 [ 51.995634][ T2711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.001530][ T2711] RIP: 0033:0x7f0711607da9 [ 52.005947][ T2711] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.025547][ T2711] RSP: 002b:00007f071118a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.033968][ T2711] RAX: ffffffffffffffda RBX: 00007f0711736f80 RCX: 00007f0711607da9 [ 52.041944][ T2711] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 52.049908][ T2711] RBP: 00007f071165447a R08: 0000000000000000 R09: 0000000000000000 [ 52.057877][ T2711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.065838][ T2711] R13: 0000000000000006 R14: 00007f0711736f80 R15: 00007ffe18e19718 [ 52.073807][ T2711] [ 52.078195][ T2711] team0: Port device wlan1 removed 2024/11/29 09:22:17 executed programs: 27 2024/11/29 09:22:22 executed programs: 208