Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. 2024/03/20 20:03:41 ignoring optional flag "sandboxArg"="0" 2024/03/20 20:03:41 parsed 1 programs 2024/03/20 20:03:41 executed programs: 0 [ 47.505041][ T2075] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.236154][ T2082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.244820][ T2082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.252639][ T2082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.260694][ T2082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.159924][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.167956][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.174992][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.176508][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.183824][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.199157][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.231382][ T2796] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 50.242992][ T2796] device wlan1 entered promiscuous mode [ 50.250656][ T2796] team0: Port device wlan1 added [ 50.258383][ T2796] [ 50.260718][ T2796] ====================================================== [ 50.267799][ T2796] WARNING: possible circular locking dependency detected [ 50.274798][ T2796] 5.15.152-syzkaller #0 Not tainted [ 50.280061][ T2796] ------------------------------------------------------ [ 50.287053][ T2796] syz-executor.0/2796 is trying to acquire lock: [ 50.293439][ T2796] ffff888114ac8c80 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x29/0xe0 [ 50.303008][ T2796] [ 50.303008][ T2796] but task is already holding lock: [ 50.310363][ T2796] ffff88810d7f0628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x65/0x200 [ 50.320073][ T2796] [ 50.320073][ T2796] which lock already depends on the new lock. [ 50.320073][ T2796] [ 50.330549][ T2796] [ 50.330549][ T2796] the existing dependency chain (in reverse order) is: [ 50.339645][ T2796] [ 50.339645][ T2796] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 50.347430][ T2796] __mutex_lock+0x60/0x660 [ 50.352545][ T2796] ieee80211_open+0x92/0xd0 [ 50.357801][ T2796] __dev_open+0x1ac/0x260 [ 50.362740][ T2796] dev_open+0x75/0x120 [ 50.367530][ T2796] team_add_slave+0x4af/0xc00 [ 50.372836][ T2796] do_set_master+0xe3/0x100 [ 50.378190][ T2796] do_setlink+0x426/0x1ba0 [ 50.383244][ T2796] __rtnl_newlink+0x82f/0xe50 [ 50.388426][ T2796] rtnl_newlink+0x49/0x70 [ 50.393477][ T2796] rtnetlink_rcv_msg+0x248/0x8a0 [ 50.398918][ T2796] netlink_rcv_skb+0x87/0x1d0 [ 50.404102][ T2796] netlink_unicast+0x2fe/0x430 [ 50.409559][ T2796] netlink_sendmsg+0x3b7/0x730 [ 50.414839][ T2796] __sock_sendmsg+0x56/0x80 [ 50.420809][ T2796] ____sys_sendmsg+0x36f/0x390 [ 50.426084][ T2796] ___sys_sendmsg+0x8b/0xd0 [ 50.431261][ T2796] __sys_sendmsg+0x88/0x100 [ 50.436348][ T2796] do_syscall_64+0x35/0xb0 [ 50.441297][ T2796] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.447703][ T2796] [ 50.447703][ T2796] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 50.455917][ T2796] __lock_acquire+0x10b6/0x1a40 [ 50.461266][ T2796] lock_acquire+0xbb/0x290 [ 50.466368][ T2796] __mutex_lock+0x60/0x660 [ 50.471642][ T2796] team_del_slave+0x29/0xe0 [ 50.476829][ T2796] team_device_event+0x5c/0x420 [ 50.482203][ T2796] notifier_call_chain+0x5d/0x110 [ 50.487756][ T2796] unregister_netdevice_many+0x4fc/0x8e0 [ 50.493998][ T2796] unregister_netdevice_queue+0x116/0x120 [ 50.500354][ T2796] _cfg80211_unregister_wdev+0x1e9/0x250 [ 50.506688][ T2796] ieee80211_if_remove+0xac/0x120 [ 50.512462][ T2796] ieee80211_del_iface+0x12/0x20 [ 50.518080][ T2796] nl80211_del_interface+0xab/0x200 [ 50.524034][ T2796] genl_family_rcv_msg_doit+0x113/0x180 [ 50.530317][ T2796] genl_rcv_msg+0x174/0x2c0 [ 50.535435][ T2796] netlink_rcv_skb+0x87/0x1d0 [ 50.540716][ T2796] genl_rcv+0x24/0x40 [ 50.545913][ T2796] netlink_unicast+0x2fe/0x430 [ 50.551729][ T2796] netlink_sendmsg+0x3b7/0x730 [ 50.557236][ T2796] __sock_sendmsg+0x56/0x80 [ 50.562239][ T2796] ____sys_sendmsg+0x36f/0x390 [ 50.567724][ T2796] ___sys_sendmsg+0x8b/0xd0 [ 50.572734][ T2796] __sys_sendmsg+0x88/0x100 [ 50.577751][ T2796] do_syscall_64+0x35/0xb0 [ 50.582687][ T2796] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.589443][ T2796] [ 50.589443][ T2796] other info that might help us debug this: [ 50.589443][ T2796] [ 50.599753][ T2796] Possible unsafe locking scenario: [ 50.599753][ T2796] [ 50.607284][ T2796] CPU0 CPU1 [ 50.613011][ T2796] ---- ---- [ 50.618734][ T2796] lock(&rdev->wiphy.mtx); [ 50.623828][ T2796] lock(team->team_lock_key); [ 50.631281][ T2796] lock(&rdev->wiphy.mtx); [ 50.638504][ T2796] lock(team->team_lock_key); [ 50.643681][ T2796] [ 50.643681][ T2796] *** DEADLOCK *** [ 50.643681][ T2796] [ 50.651973][ T2796] 3 locks held by syz-executor.0/2796: [ 50.657405][ T2796] #0: ffffffff83acb730 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 50.666611][ T2796] #1: ffffffff83abbe08 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x1a/0x2f0 [ 50.675897][ T2796] #2: ffff88810d7f0628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_del_interface+0x65/0x200 [ 50.686244][ T2796] [ 50.686244][ T2796] stack backtrace: [ 50.692287][ T2796] CPU: 0 PID: 2796 Comm: syz-executor.0 Not tainted 5.15.152-syzkaller #0 [ 50.700779][ T2796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 50.710902][ T2796] Call Trace: [ 50.714164][ T2796] [ 50.717083][ T2796] dump_stack_lvl+0xcd/0x134 [ 50.721653][ T2796] check_noncircular+0xcc/0xe0 [ 50.726499][ T2796] __lock_acquire+0x10b6/0x1a40 [ 50.731353][ T2796] lock_acquire+0xbb/0x290 [ 50.735790][ T2796] ? team_del_slave+0x29/0xe0 [ 50.740469][ T2796] __mutex_lock+0x60/0x660 [ 50.744902][ T2796] ? team_del_slave+0x29/0xe0 [ 50.749563][ T2796] ? team_del_slave+0x29/0xe0 [ 50.754225][ T2796] ? lockdep_hardirqs_on_prepare+0xcd/0xf0 [ 50.760184][ T2796] ? __local_bh_enable_ip+0x5d/0x90 [ 50.765363][ T2796] ? trace_hardirqs_on+0x56/0x110 [ 50.770363][ T2796] team_del_slave+0x29/0xe0 [ 50.774842][ T2796] team_device_event+0x5c/0x420 [ 50.779759][ T2796] notifier_call_chain+0x5d/0x110 [ 50.784845][ T2796] unregister_netdevice_many+0x4fc/0x8e0 [ 50.790452][ T2796] unregister_netdevice_queue+0x116/0x120 [ 50.796682][ T2796] _cfg80211_unregister_wdev+0x1e9/0x250 [ 50.802713][ T2796] ieee80211_if_remove+0xac/0x120 [ 50.807738][ T2796] ieee80211_del_iface+0x12/0x20 [ 50.812901][ T2796] nl80211_del_interface+0xab/0x200 [ 50.818083][ T2796] ? cfg80211_off_channel_oper_allowed+0xb0/0xb0 [ 50.824496][ T2796] genl_family_rcv_msg_doit+0x113/0x180 [ 50.830125][ T2796] genl_rcv_msg+0x174/0x2c0 [ 50.834651][ T2796] ? nl80211_flush_pmksa+0x200/0x200 [ 50.840160][ T2796] netlink_rcv_skb+0x87/0x1d0 [ 50.844986][ T2796] ? genl_get_cmd+0x1a0/0x1a0 [ 50.849659][ T2796] genl_rcv+0x24/0x40 [ 50.853630][ T2796] netlink_unicast+0x2fe/0x430 [ 50.858608][ T2796] netlink_sendmsg+0x3b7/0x730 [ 50.863465][ T2796] __sock_sendmsg+0x56/0x80 [ 50.868035][ T2796] ____sys_sendmsg+0x36f/0x390 [ 50.872774][ T2796] ? sendmsg_copy_msghdr+0x70/0xf0 [ 50.878033][ T2796] ___sys_sendmsg+0x8b/0xd0 [ 50.882534][ T2796] ? find_held_lock+0x2b/0x80 [ 50.887283][ T2796] ? __fget_files+0x182/0x310 [ 50.891940][ T2796] ? __fget_files+0x1ab/0x310 [ 50.896755][ T2796] ? __fget_light+0x69/0xe0 [ 50.901264][ T2796] __sys_sendmsg+0x88/0x100 [ 50.905835][ T2796] ? lockdep_hardirqs_on_prepare+0xcd/0xf0 [ 50.911961][ T2796] do_syscall_64+0x35/0xb0 [ 50.916453][ T2796] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.922336][ T2796] RIP: 0033:0x7fb35f31bda9 [ 50.926759][ T2796] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.946734][ T2796] RSP: 002b:00007fb35ee9e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.955325][ T2796] RAX: ffffffffffffffda RBX: 00007fb35f44af80 RCX: 00007fb35f31bda9 [ 50.963551][ T2796] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 50.971697][ T2796] RBP: 00007fb35f36847a R08: 0000000000000000 R09: 0000000000000000 [ 50.979828][ T2796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.987880][ T2796] R13: 0000000000000006 R14: 00007fb35f44af80 R15: 00007ffe74900088 [ 50.996040][ T2796] [ 50.999825][ T2796] team0: Port device wlan1 removed [ 51.037083][ T2796] syz-executor.0 (2796) used greatest stack depth: 11296 bytes left 2024/03/20 20:03:46 executed programs: 77 2024/03/20 20:03:51 executed programs: 330