last executing test programs: 2.483840271s ago: executing program 2 (id=7): unlink(&(0x7f0000000000)) 2.431094007s ago: executing program 2 (id=9): socket(0x1, 0x1, 0x0) 2.430517437s ago: executing program 4 (id=5): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0) 2.42976777s ago: executing program 0 (id=11): getpid() 2.429708492s ago: executing program 2 (id=12): close(0xffffffffffffffff) 2.401074509s ago: executing program 4 (id=13): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) 2.400131658s ago: executing program 1 (id=2): ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 2.391627841s ago: executing program 2 (id=14): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) 2.345358571s ago: executing program 0 (id=15): clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) exit(0x0) 2.337639233s ago: executing program 3 (id=4): socket(0x1e, 0x2, 0x0) 2.328200569s ago: executing program 4 (id=17): mkdirat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 1.810830201s ago: executing program 0 (id=18): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.774872302s ago: executing program 1 (id=16): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.501817586s ago: executing program 0 (id=22): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.351823334s ago: executing program 4 (id=20): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.218373719s ago: executing program 1 (id=23): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cmdline', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cmdline', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cmdline', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/cmdline', 0x800, 0x0) 1.129135544s ago: executing program 2 (id=19): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 950.61015ms ago: executing program 0 (id=24): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 364.561338ms ago: executing program 1 (id=26): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 322.471429ms ago: executing program 2 (id=27): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 42.949057ms ago: executing program 0 (id=28): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=29): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 58.185985][ T5822] cgroup: Unknown subsys name 'net' [ 58.335498][ T5822] cgroup: Unknown subsys name 'cpuset' [ 58.343213][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.599287][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.071270][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.277998][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.286577][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.369069][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 62.544037][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.551901][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.000309][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.024278][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.041980][ T5874] bridge_slave_0: entered allmulticast mode [ 63.084964][ T5874] bridge_slave_0: entered promiscuous mode [ 63.136065][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.153170][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.160399][ T5874] bridge_slave_1: entered allmulticast mode [ 63.173584][ T5874] bridge_slave_1: entered promiscuous mode [ 63.246748][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.289544][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.420526][ T5874] team0: Port device team_slave_0 added [ 63.466378][ T5874] team0: Port device team_slave_1 added [ 63.612413][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.632862][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.684148][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.701535][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.708859][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.770739][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.867730][ T5874] hsr_slave_0: entered promiscuous mode [ 63.876131][ T5874] hsr_slave_1: entered promiscuous mode [ 64.207472][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.227811][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.240568][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.256884][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.293406][ T1157] [ 64.295780][ T1157] ====================================================== [ 64.302802][ T1157] WARNING: possible circular locking dependency detected [ 64.309829][ T1157] 6.13.0-syzkaller-gdbf7cc560007 #0 Not tainted [ 64.316072][ T1157] ------------------------------------------------------ [ 64.323095][ T1157] kworker/u8:6/1157 is trying to acquire lock: [ 64.329248][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.329251][ T1157] ffffffff8fed6808 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 64.342188][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.346215][ T1157] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.346215][ T1157] but task is already holding lock: [ 64.346224][ T1157] ffff88807e688768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 64.370504][ T1157] [ 64.370504][ T1157] which lock already depends on the new lock. [ 64.370504][ T1157] [ 64.380910][ T1157] [ 64.380910][ T1157] the existing dependency chain (in reverse order) is: [ 64.389930][ T1157] [ 64.389930][ T1157] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 64.397683][ T1157] lock_acquire+0x1ed/0x550 [ 64.402722][ T1157] __mutex_lock+0x19c/0x1010 [ 64.407843][ T1157] wiphy_register+0x1913/0x2650 [ 64.413216][ T1157] ieee80211_register_hw+0x35d9/0x42e0 [ 64.419201][ T1157] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 64.425462][ T1157] init_mac80211_hwsim+0x87a/0xb00 [ 64.431124][ T1157] do_one_initcall+0x248/0x930 [ 64.436420][ T1157] do_initcall_level+0x157/0x210 [ 64.441898][ T1157] do_initcalls+0x71/0xd0 [ 64.446727][ T1157] kernel_init_freeable+0x435/0x5d0 [ 64.452423][ T1157] kernel_init+0x1d/0x2b0 [ 64.457250][ T1157] ret_from_fork+0x4b/0x80 [ 64.462167][ T1157] ret_from_fork_asm+0x1a/0x30 [ 64.467429][ T1157] [ 64.467429][ T1157] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 64.474615][ T1157] validate_chain+0x18ef/0x5920 [ 64.479966][ T1157] __lock_acquire+0x1397/0x2100 [ 64.485335][ T1157] lock_acquire+0x1ed/0x550 [ 64.490337][ T1157] __mutex_lock+0x19c/0x1010 [ 64.495430][ T1157] unregister_netdevice_many_notify+0xac2/0x2030 [ 64.502278][ T1157] unregister_netdevice_queue+0x303/0x370 [ 64.508506][ T1157] _cfg80211_unregister_wdev+0x163/0x590 [ 64.514666][ T1157] ieee80211_remove_interfaces+0x4ef/0x700 [ 64.521010][ T1157] ieee80211_unregister_hw+0x5d/0x2c0 [ 64.526908][ T1157] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 64.532985][ T1157] hwsim_exit_net+0x5c1/0x670 [ 64.538199][ T1157] cleanup_net+0x812/0xd60 [ 64.543131][ T1157] process_scheduled_works+0xabe/0x18e0 [ 64.549178][ T1157] worker_thread+0x870/0xd30 [ 64.554270][ T1157] kthread+0x7a9/0x920 [ 64.558844][ T1157] ret_from_fork+0x4b/0x80 [ 64.563780][ T1157] ret_from_fork_asm+0x1a/0x30 [ 64.569045][ T1157] [ 64.569045][ T1157] other info that might help us debug this: [ 64.569045][ T1157] [ 64.579254][ T1157] Possible unsafe locking scenario: [ 64.579254][ T1157] [ 64.586680][ T1157] CPU0 CPU1 [ 64.592052][ T1157] ---- ---- [ 64.597407][ T1157] lock(&rdev->wiphy.mtx); [ 64.601900][ T1157] lock(rtnl_mutex); [ 64.608393][ T1157] lock(&rdev->wiphy.mtx); [ 64.615501][ T1157] lock(rtnl_mutex); [ 64.619467][ T1157] [ 64.619467][ T1157] *** DEADLOCK *** [ 64.619467][ T1157] [ 64.627616][ T1157] 4 locks held by kworker/u8:6/1157: [ 64.632881][ T1157] #0: ffff88801bef5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 64.643759][ T1157] #1: ffffc90003f0fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 64.654371][ T1157] #2: ffffffff8feca0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 64.663759][ T1157] #3: ffff88807e688768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 64.674738][ T1157] [ 64.674738][ T1157] stack backtrace: [ 64.680670][ T1157] CPU: 1 UID: 0 PID: 1157 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-gdbf7cc560007 #0 [ 64.680684][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 64.680695][ T1157] Workqueue: netns cleanup_net [ 64.680713][ T1157] Call Trace: [ 64.680718][ T1157] [ 64.680723][ T1157] dump_stack_lvl+0x241/0x360 [ 64.680735][ T1157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.680744][ T1157] ? __pfx__printk+0x10/0x10 [ 64.680766][ T1157] print_circular_bug+0x13a/0x1b0 [ 64.680777][ T1157] check_noncircular+0x36a/0x4a0 [ 64.680788][ T1157] ? __pfx_check_noncircular+0x10/0x10 [ 64.680797][ T1157] ? lockdep_lock+0x123/0x2b0 [ 64.680810][ T1157] ? mark_lock+0x9a/0x360 [ 64.680818][ T1157] validate_chain+0x18ef/0x5920 [ 64.680830][ T1157] ? lockdep_hardirqs_on+0x99/0x150 [ 64.680845][ T1157] ? __pfx_validate_chain+0x10/0x10 [ 64.680853][ T1157] ? __schedule+0x1916/0x4c90 [ 64.680868][ T1157] ? __pfx___schedule+0x10/0x10 [ 64.680882][ T1157] ? mark_lock+0x9a/0x360 [ 64.680890][ T1157] __lock_acquire+0x1397/0x2100 [ 64.680905][ T1157] lock_acquire+0x1ed/0x550 [ 64.680917][ T1157] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 64.680931][ T1157] ? __pfx_lock_acquire+0x10/0x10 [ 64.680943][ T1157] ? __pfx___might_resched+0x10/0x10 [ 64.680955][ T1157] ? kthread_queue_work+0x110/0x180 [ 64.680969][ T1157] __mutex_lock+0x19c/0x1010 [ 64.680982][ T1157] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 64.680996][ T1157] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 64.681007][ T1157] ? __pfx___mutex_lock+0x10/0x10 [ 64.681019][ T1157] ? __pfx___might_resched+0x10/0x10 [ 64.681031][ T1157] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 64.681042][ T1157] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 64.681055][ T1157] unregister_netdevice_many_notify+0xac2/0x2030 [ 64.681067][ T1157] ? mark_lock+0x9a/0x360 [ 64.681076][ T1157] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 64.681088][ T1157] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 64.681101][ T1157] ? __pfx_lock_release+0x10/0x10 [ 64.681116][ T1157] unregister_netdevice_queue+0x303/0x370 [ 64.681127][ T1157] ? __pfx_up_write+0x10/0x10 [ 64.681136][ T1157] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 64.681148][ T1157] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 64.681160][ T1157] _cfg80211_unregister_wdev+0x163/0x590 [ 64.681172][ T1157] ieee80211_remove_interfaces+0x4ef/0x700 [ 64.681187][ T1157] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 64.681200][ T1157] ? rcu_is_watching+0x15/0xb0 [ 64.681211][ T1157] ieee80211_unregister_hw+0x5d/0x2c0 [ 64.681223][ T1157] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 64.681240][ T1157] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 64.681254][ T1157] hwsim_exit_net+0x5c1/0x670 [ 64.681266][ T1157] ? __pfx_hwsim_exit_net+0x10/0x10 [ 64.681278][ T1157] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 64.681290][ T1157] cleanup_net+0x812/0xd60 [ 64.681300][ T1157] ? __pfx_cleanup_net+0x10/0x10 [ 64.681310][ T1157] ? process_scheduled_works+0x9c6/0x18e0 [ 64.681321][ T1157] process_scheduled_works+0xabe/0x18e0 [ 64.681337][ T1157] ? __pfx_process_scheduled_works+0x10/0x10 [ 64.681349][ T1157] ? assign_work+0x364/0x3d0 [ 64.681360][ T1157] worker_thread+0x870/0xd30 [ 64.681373][ T1157] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 64.681385][ T1157] ? __kthread_parkme+0x169/0x1d0 [ 64.681397][ T1157] ? __pfx_worker_thread+0x10/0x10 [ 64.681407][ T1157] kthread+0x7a9/0x920 [ 64.681419][ T1157] ? __pfx_kthread+0x10/0x10 [ 64.681431][ T1157] ? __pfx_worker_thread+0x10/0x10 [ 64.681442][ T1157] ? __pfx_kthread+0x10/0x10 [ 64.681454][ T1157] ? __pfx_kthread+0x10/0x10 [ 64.681467][ T1157] ? __pfx_kthread+0x10/0x10 [ 64.681478][ T1157] ? _raw_spin_unlock_irq+0x23/0x50 [ 64.681488][ T1157] ? lockdep_hardirqs_on+0x99/0x150 [ 64.681500][ T1157] ? __pfx_kthread+0x10/0x10 [ 64.681512][ T1157] ret_from_fork+0x4b/0x80 [ 64.681523][ T1157] ? __pfx_kthread+0x10/0x10 [ 64.681535][ T1157] ret_from_fork_asm+0x1a/0x30 [ 64.681549][ T1157] [ 65.825355][ T1157] bridge_slave_1: left allmulticast mode [ 65.831040][ T1157] bridge_slave_1: left promiscuous mode [ 65.837011][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.845179][ T1157] bridge_slave_0: left allmulticast mode [ 65.850828][ T1157] bridge_slave_0: left promiscuous mode [ 65.856690][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.959720][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.969669][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.979406][ T1157] bond0 (unregistering): Released all slaves [ 66.097898][ T1157] hsr_slave_0: left promiscuous mode [ 66.107327][ T1157] hsr_slave_1: left promiscuous mode [ 66.113097][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.120817][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.177779][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 66.189122][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 71.643795][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.650069][ T1295] ieee802154 phy1 wpan1: encryption failed: -22