last executing test programs: 2.568855242s ago: executing program 0 (id=1): sendmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.535429046s ago: executing program 0 (id=6): socket(0x1, 0x1, 0x0) 2.454257445s ago: executing program 0 (id=7): close(0xffffffffffffffff) 2.453435857s ago: executing program 4 (id=5): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.453113523s ago: executing program 0 (id=8): recvmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.452730451s ago: executing program 1 (id=9): gettid() 2.44911338s ago: executing program 3 (id=4): perf_event_open(&(0x7f0000000000), 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.438701808s ago: executing program 4 (id=10): socket$kcm(0x29, 0x2, 0x0) 2.43826103s ago: executing program 0 (id=11): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun', 0x800, 0x0) 2.437114956s ago: executing program 2 (id=3): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x0) 2.382292633s ago: executing program 1 (id=12): socket(0x1e, 0x2, 0x0) 2.382136235s ago: executing program 3 (id=13): unlink(&(0x7f0000000000)) 2.382022606s ago: executing program 1 (id=14): mkdirat(0xffffffffffffffff, &(0x7f0000000000), 0x0) 2.381977784s ago: executing program 4 (id=15): getpid() 1.788094538s ago: executing program 2 (id=18): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.766626643s ago: executing program 4 (id=20): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.666287145s ago: executing program 1 (id=17): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.329313928s ago: executing program 0 (id=16): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.234808491s ago: executing program 3 (id=19): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 1.063524363s ago: executing program 4 (id=22): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 927.18421ms ago: executing program 2 (id=21): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 828.001533ms ago: executing program 1 (id=23): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 801.828861ms ago: executing program 2 (id=27): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 671.327774ms ago: executing program 3 (id=24): mkdir(&(0x7f0000000000), 0x0) 602.59947ms ago: executing program 4 (id=26): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 310.650025ms ago: executing program 1 (id=28): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=30): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp', 0x800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 55.113070][ T5817] cgroup: Unknown subsys name 'net' [ 55.228717][ T5817] cgroup: Unknown subsys name 'cpuset' [ 55.236448][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.585195][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.063944][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.079941][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.088694][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.206790][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.224167][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.465496][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.474159][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.481988][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.490115][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.497956][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.505422][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.872815][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 61.100319][ T2935] [ 61.102687][ T2935] ====================================================== [ 61.109717][ T2935] WARNING: possible circular locking dependency detected [ 61.116754][ T2935] 6.13.0-syzkaller-gf9f03a0a6d2d #0 Not tainted [ 61.123692][ T2935] ------------------------------------------------------ [ 61.130719][ T2935] kworker/u8:6/2935 is trying to acquire lock: [ 61.136878][ T2935] ffffffff8fcc1608 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 61.147272][ T2935] [ 61.147272][ T2935] but task is already holding lock: [ 61.154658][ T2935] ffff88806ffd8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 61.165039][ T2935] [ 61.165039][ T2935] which lock already depends on the new lock. [ 61.165039][ T2935] [ 61.175434][ T2935] [ 61.175434][ T2935] the existing dependency chain (in reverse order) is: [ 61.184433][ T2935] [ 61.184433][ T2935] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 61.192161][ T2935] lock_acquire+0x1ed/0x550 [ 61.197175][ T2935] __mutex_lock+0x19c/0x1010 [ 61.202278][ T2935] wiphy_register+0x1a49/0x27b0 [ 61.207645][ T2935] ieee80211_register_hw+0x354e/0x4240 [ 61.213614][ T2935] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 61.219851][ T2935] init_mac80211_hwsim+0x87a/0xb00 [ 61.225473][ T2935] do_one_initcall+0x248/0x870 [ 61.230821][ T2935] do_initcall_level+0x157/0x210 [ 61.236298][ T2935] do_initcalls+0x3f/0x80 [ 61.241146][ T2935] kernel_init_freeable+0x435/0x5d0 [ 61.246853][ T2935] kernel_init+0x1d/0x2b0 [ 61.251689][ T2935] ret_from_fork+0x4b/0x80 [ 61.256611][ T2935] ret_from_fork_asm+0x1a/0x30 [ 61.261881][ T2935] [ 61.261881][ T2935] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 61.269178][ T2935] validate_chain+0x18ef/0x5920 [ 61.274542][ T2935] __lock_acquire+0x1397/0x2100 [ 61.279898][ T2935] lock_acquire+0x1ed/0x550 [ 61.284905][ T2935] __mutex_lock+0x19c/0x1010 [ 61.290009][ T2935] unregister_netdevice_many_notify+0xac2/0x2030 [ 61.296861][ T2935] unregister_netdevice_queue+0x303/0x370 [ 61.303122][ T2935] _cfg80211_unregister_wdev+0x163/0x590 [ 61.309278][ T2935] ieee80211_remove_interfaces+0x4ef/0x700 [ 61.315599][ T2935] ieee80211_unregister_hw+0x5d/0x2c0 [ 61.321501][ T2935] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 61.327557][ T2935] hwsim_exit_net+0x5c1/0x670 [ 61.332742][ T2935] cleanup_net+0x812/0xd60 [ 61.337679][ T2935] process_scheduled_works+0xa66/0x1840 [ 61.343739][ T2935] worker_thread+0x870/0xd30 [ 61.348838][ T2935] kthread+0x7a9/0x920 [ 61.353414][ T2935] ret_from_fork+0x4b/0x80 [ 61.358341][ T2935] ret_from_fork_asm+0x1a/0x30 [ 61.363614][ T2935] [ 61.363614][ T2935] other info that might help us debug this: [ 61.363614][ T2935] [ 61.373825][ T2935] Possible unsafe locking scenario: [ 61.373825][ T2935] [ 61.381258][ T2935] CPU0 CPU1 [ 61.386611][ T2935] ---- ---- [ 61.391963][ T2935] lock(&rdev->wiphy.mtx); [ 61.396459][ T2935] lock(rtnl_mutex); [ 61.402957][ T2935] lock(&rdev->wiphy.mtx); [ 61.409976][ T2935] lock(rtnl_mutex); [ 61.413948][ T2935] [ 61.413948][ T2935] *** DEADLOCK *** [ 61.413948][ T2935] [ 61.422074][ T2935] 4 locks held by kworker/u8:6/2935: [ 61.427343][ T2935] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 61.438217][ T2935] #1: ffffc9000c387c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 61.448746][ T2935] #2: ffffffff8fcb5050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 61.458224][ T2935] #3: ffff88806ffd8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 61.468999][ T2935] [ 61.468999][ T2935] stack backtrace: [ 61.474886][ T2935] CPU: 0 UID: 0 PID: 2935 Comm: kworker/u8:6 Not tainted 6.13.0-syzkaller-gf9f03a0a6d2d #0 [ 61.474900][ T2935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 61.474909][ T2935] Workqueue: netns cleanup_net [ 61.474933][ T2935] Call Trace: [ 61.474940][ T2935] [ 61.474946][ T2935] dump_stack_lvl+0x241/0x360 [ 61.474966][ T2935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.474983][ T2935] ? __pfx__printk+0x10/0x10 [ 61.475001][ T2935] print_circular_bug+0x13a/0x1b0 [ 61.475019][ T2935] check_noncircular+0x36a/0x4a0 [ 61.475037][ T2935] ? __pfx_check_noncircular+0x10/0x10 [ 61.475053][ T2935] ? lockdep_lock+0x123/0x2b0 [ 61.475066][ T2935] ? rcu_read_lock_sched_held+0x8d/0x130 [ 61.475085][ T2935] validate_chain+0x18ef/0x5920 [ 61.475107][ T2935] ? __pfx_validate_chain+0x10/0x10 [ 61.475126][ T2935] ? mark_lock+0x9a/0x360 [ 61.475141][ T2935] ? __lock_acquire+0x1397/0x2100 [ 61.475158][ T2935] ? mark_lock+0x9a/0x360 [ 61.475173][ T2935] __lock_acquire+0x1397/0x2100 [ 61.475191][ T2935] lock_acquire+0x1ed/0x550 [ 61.475203][ T2935] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 61.475221][ T2935] ? __pfx_lock_acquire+0x10/0x10 [ 61.475235][ T2935] ? __pfx___might_resched+0x10/0x10 [ 61.475247][ T2935] ? finish_wait+0xd4/0x1e0 [ 61.475262][ T2935] __mutex_lock+0x19c/0x1010 [ 61.475280][ T2935] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 61.475298][ T2935] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 61.475313][ T2935] ? __pfx___mutex_lock+0x10/0x10 [ 61.475329][ T2935] ? __pfx___might_resched+0x10/0x10 [ 61.475341][ T2935] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 61.475357][ T2935] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 61.475373][ T2935] unregister_netdevice_many_notify+0xac2/0x2030 [ 61.475388][ T2935] ? mark_lock+0x9a/0x360 [ 61.475405][ T2935] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 61.475419][ T2935] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 61.475436][ T2935] ? __pfx_lock_release+0x10/0x10 [ 61.475455][ T2935] unregister_netdevice_queue+0x303/0x370 [ 61.475469][ T2935] ? __pfx_up_write+0x10/0x10 [ 61.475513][ T2935] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 61.475528][ T2935] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 61.475544][ T2935] _cfg80211_unregister_wdev+0x163/0x590 [ 61.475563][ T2935] ieee80211_remove_interfaces+0x4ef/0x700 [ 61.475579][ T2935] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 61.475592][ T2935] ? rcu_is_watching+0x15/0xb0 [ 61.475610][ T2935] ieee80211_unregister_hw+0x5d/0x2c0 [ 61.475630][ T2935] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 61.475647][ T2935] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 61.475663][ T2935] hwsim_exit_net+0x5c1/0x670 [ 61.475675][ T2935] ? __pfx_hwsim_exit_net+0x10/0x10 [ 61.475688][ T2935] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 61.475707][ T2935] cleanup_net+0x812/0xd60 [ 61.475727][ T2935] ? __pfx_cleanup_net+0x10/0x10 [ 61.475746][ T2935] ? process_scheduled_works+0x976/0x1840 [ 61.475765][ T2935] process_scheduled_works+0xa66/0x1840 [ 61.475790][ T2935] ? __pfx_process_scheduled_works+0x10/0x10 [ 61.475810][ T2935] ? assign_work+0x364/0x3d0 [ 61.475828][ T2935] worker_thread+0x870/0xd30 [ 61.475842][ T2935] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 61.475859][ T2935] ? __kthread_parkme+0x169/0x1d0 [ 61.475872][ T2935] ? __pfx_worker_thread+0x10/0x10 [ 61.475883][ T2935] kthread+0x7a9/0x920 [ 61.475897][ T2935] ? __pfx_kthread+0x10/0x10 [ 61.475910][ T2935] ? __pfx_worker_thread+0x10/0x10 [ 61.475922][ T2935] ? __pfx_kthread+0x10/0x10 [ 61.475935][ T2935] ? __pfx_kthread+0x10/0x10 [ 61.475949][ T2935] ? __pfx_kthread+0x10/0x10 [ 61.475961][ T2935] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.475976][ T2935] ? lockdep_hardirqs_on+0x99/0x150 [ 61.475992][ T2935] ? __pfx_kthread+0x10/0x10 [ 61.476006][ T2935] ret_from_fork+0x4b/0x80 [ 61.476019][ T2935] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.476032][ T2935] ret_from_fork_asm+0x1a/0x30 [ 61.476047][ T2935] [ 61.873273][ T5897] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 62.279414][ T2935] bond0 (unregistering): Released all slaves