device Y4`Ҙ left promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 8021q: adding VLAN 0 to HW filter on device team0 ============================================ WARNING: possible recursive locking detected 4.19.211-syzkaller #0 Not tainted -------------------------------------------- syz-executor.4/24693 is trying to acquire lock: 00000000a35e2d35 (&vlan_netdev_addr_lock_key#2/2){+...}, at: netif_addr_lock_nested include/linux/netdevice.h:4007 [inline] 00000000a35e2d35 (&vlan_netdev_addr_lock_key#2/2){+...}, at: dev_uc_sync_multiple+0x11a/0x1e0 net/core/dev_addr_lists.c:574 but task is already holding lock: 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: spin_lock_bh include/linux/spinlock.h:334 [inline] 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: netif_addr_lock_bh include/linux/netdevice.h:4012 [inline] 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: dev_set_rx_mode net/core/dev.c:7606 [inline] 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: __dev_open+0x264/0x3a0 net/core/dev.c:1410 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&vlan_netdev_addr_lock_key#2/2); lock(&vlan_netdev_addr_lock_key#2/2); *** DEADLOCK *** May be due to missing lock nesting notation 4 locks held by syz-executor.4/24693: #0: 000000002cc5622a (rtnl_mutex){+.+.}, at: rtnl_lock net/core/rtnetlink.c:77 [inline] #0: 000000002cc5622a (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x3fe/0xb80 net/core/rtnetlink.c:4779 #1: 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: spin_lock_bh include/linux/spinlock.h:334 [inline] #1: 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: netif_addr_lock_bh include/linux/netdevice.h:4012 [inline] #1: 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: dev_set_rx_mode net/core/dev.c:7606 [inline] #1: 00000000e96a04c4 (&vlan_netdev_addr_lock_key#2/2){+...}, at: __dev_open+0x264/0x3a0 net/core/dev.c:1410 #2: 00000000a2693ec6 (&dev_addr_list_lock_key#2/1){+...}, at: netif_addr_lock_nested include/linux/netdevice.h:4007 [inline] #2: 00000000a2693ec6 (&dev_addr_list_lock_key#2/1){+...}, at: dev_mc_sync+0x11a/0x1e0 net/core/dev_addr_lists.c:765 #3: 000000008b75d6fd (rcu_read_lock){....}, at: team_set_rx_mode+0x0/0x230 drivers/net/team/team.c:509 stack backtrace: CPU: 1 PID: 24693 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_deadlock_bug kernel/locking/lockdep.c:1764 [inline] check_deadlock kernel/locking/lockdep.c:1808 [inline] validate_chain kernel/locking/lockdep.c:2404 [inline] __lock_acquire.cold+0x121/0x57e kernel/locking/lockdep.c:3416 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 _raw_spin_lock_nested+0x30/0x40 kernel/locking/spinlock.c:354 netif_addr_lock_nested include/linux/netdevice.h:4007 [inline] dev_uc_sync_multiple+0x11a/0x1e0 net/core/dev_addr_lists.c:574 team_set_rx_mode+0xce/0x230 drivers/net/team/team.c:1788 __dev_set_rx_mode+0x1d9/0x2f0 net/core/dev.c:7601 dev_mc_sync+0x193/0x1e0 net/core/dev_addr_lists.c:768 vlan_dev_set_rx_mode+0x38/0x80 net/8021q/vlan_dev.c:488 __dev_set_rx_mode+0x1d9/0x2f0 net/core/dev.c:7601 dev_set_rx_mode net/core/dev.c:7607 [inline] __dev_open+0x26c/0x3a0 net/core/dev.c:1410 __dev_change_flags+0x501/0x660 net/core/dev.c:7679 dev_change_flags+0x7e/0x140 net/core/dev.c:7748 vlan_device_event+0x1429/0x1e40 net/8021q/vlan.c:463 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93 call_netdevice_notifiers net/core/dev.c:1762 [inline] __dev_notify_flags+0x110/0x2b0 net/core/dev.c:7717 dev_change_flags+0xf0/0x140 net/core/dev.c:7753 do_setlink+0x14f1/0x3540 net/core/rtnetlink.c:2449 rtnl_group_changelink net/core/rtnetlink.c:2925 [inline] rtnl_newlink+0xbc9/0x15c0 net/core/rtnetlink.c:3083 rtnetlink_rcv_msg+0x453/0xb80 net/core/rtnetlink.c:4782 netlink_rcv_skb+0x160/0x440 net/netlink/af_netlink.c:2463 netlink_unicast_kernel net/netlink/af_netlink.c:1325 [inline] netlink_unicast+0x4d5/0x690 net/netlink/af_netlink.c:1351 netlink_sendmsg+0x6c3/0xc50 net/netlink/af_netlink.c:1917 sock_sendmsg_nosec net/socket.c:651 [inline] sock_sendmsg+0xc3/0x120 net/socket.c:661 ___sys_sendmsg+0x7bb/0x8e0 net/socket.c:2227 __sys_sendmsg net/socket.c:2265 [inline] __do_sys_sendmsg net/socket.c:2274 [inline] __se_sys_sendmsg net/socket.c:2272 [inline] __x64_sys_sendmsg+0x132/0x220 net/socket.c:2272 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f686500b049 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6863980168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f686511df60 RCX: 00007f686500b049 RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 RBP: 00007f686506508d R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd2a9b51bf R14: 00007f6863980300 R15: 0000000000022000 chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 caif:caif_disconnect_client(): nothing to disconnect chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT chnl_net:chnl_net_open(): state disconnected A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. sd 0:0:1:0: [sg0] tag#302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#302 CDB: opcode=0x71 (reserved) sd 0:0:1:0: [sg0] tag#302 CDB[00]: 71 d4 b1 c2 92 b6 fc 23 92 55 59 4d 17 9d 18 78 sd 0:0:1:0: [sg0] tag#302 CDB[10]: 44 f6 bf 50 f0 09 64 ae d0 51 84 ba 8d 87 3b c9 IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready sd 0:0:1:0: [sg0] tag#302 CDB[20]: eb cb cf fe 85 bb 72 b8 e2 4d ec fc fb ca df 17 sd 0:0:1:0: [sg0] tag#302 CDB[30]: cd c9 15 3f 6c 71 08 e2 0b 38 53 f8 d1 1d d4 ae sd 0:0:1:0: [sg0] tag#302 CDB[40]: c9 05 68 6a 1b 3f 10 b9 44 f2 14 c6 1b 25 61 b3 sd 0:0:1:0: [sg0] tag#302 CDB[50]: 30 25 c9 ac 5a f2 38 f6 ec 97 2b 1f 96 c7 e7 3f sd 0:0:1:0: [sg0] tag#302 CDB[60]: 01 64 e7 ab 42 34 5c ab 70 ea 5e 35 c0 85 08 0f sd 0:0:1:0: [sg0] tag#302 CDB[70]: 7e fb 3a 68 d1 d2 06 f8 a6 10 1e 78 78 52 0a a1 chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 sd 0:0:1:0: [sg0] tag#302 CDB[80]: c3 b6 f8 ce 53 01 8b c6 65 fb ba 67 d5 e3 e3 3c sd 0:0:1:0: [sg0] tag#302 CDB[90]: 95 8d 65 4a fa 8a f3 88 d0 1c 7a 6f 9e 3a b6 39 sd 0:0:1:0: [sg0] tag#302 CDB[a0]: 00 27 51 19 e3 df sd 0:0:1:0: [sg0] tag#302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#302 CDB: opcode=0x71 (reserved) sd 0:0:1:0: [sg0] tag#302 CDB[00]: 71 d4 b1 c2 92 b6 fc 23 92 55 59 4d 17 9d 18 78 sd 0:0:1:0: [sg0] tag#302 CDB[10]: 44 f6 bf 50 f0 09 64 ae d0 51 84 ba 8d 87 3b c9 sd 0:0:1:0: [sg0] tag#302 CDB[20]: eb cb cf fe 85 bb 72 b8 e2 4d ec fc fb ca df 17 sd 0:0:1:0: [sg0] tag#302 CDB[30]: cd c9 15 3f 6c 71 08 e2 0b 38 53 f8 d1 1d d4 ae caif:caif_disconnect_client(): nothing to disconnect sd 0:0:1:0: [sg0] tag#302 CDB[40]: c9 05 68 6a 1b 3f 10 b9 44 f2 14 c6 1b 25 61 b3 sd 0:0:1:0: [sg0] tag#302 CDB[50]: 30 25 c9 ac 5a f2 38 f6 ec 97 2b 1f 96 c7 e7 3f sd 0:0:1:0: [sg0] tag#302 CDB[60]: 01 64 e7 ab 42 34 5c ab 70 ea 5e 35 c0 85 08 0f sd 0:0:1:0: [sg0] tag#302 CDB[70]: 7e fb 3a 68 d1 d2 06 f8 a6 10 1e 78 78 52 0a a1 sd 0:0:1:0: [sg0] tag#302 CDB[80]: c3 b6 f8 ce 53 01 8b c6 65 fb ba 67 d5 e3 e3 3c sd 0:0:1:0: [sg0] tag#302 CDB[90]: 95 8d 65 4a fa 8a f3 88 d0 1c 7a 6f 9e 3a b6 39 sd 0:0:1:0: [sg0] tag#302 CDB[a0]: 00 27 51 19 e3 df chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT chnl_net:chnl_net_open(): state disconnected A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready sd 0:0:1:0: [sg0] tag#307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK 8021q: adding VLAN 0 to HW filter on device bond0 sd 0:0:1:0: [sg0] tag#307 CDB: opcode=0x71 (reserved) sd 0:0:1:0: [sg0] tag#307 CDB[00]: 71 d4 b1 c2 92 b6 fc 23 92 55 59 4d 17 9d 18 78 sd 0:0:1:0: [sg0] tag#307 CDB[10]: 44 f6 bf 50 f0 09 64 ae d0 51 84 ba 8d 87 3b c9 IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready sd 0:0:1:0: [sg0] tag#307 CDB[20]: eb cb cf fe 85 bb 72 b8 e2 4d ec fc fb ca df 17 sd 0:0:1:0: [sg0] tag#307 CDB[30]: cd c9 15 3f 6c 71 08 e2 0b 38 53 f8 d1 1d d4 ae sd 0:0:1:0: [sg0] tag#302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#307 CDB[40]: c9 05 68 6a 1b 3f 10 b9 44 f2 14 c6 1b 25 61 b3 sd 0:0:1:0: [sg0] tag#302 CDB: opcode=0x71 (reserved) sd 0:0:1:0: [sg0] tag#302 CDB[00]: 71 d4 b1 c2 92 b6 fc 23 92 55 59 4d 17 9d 18 78 sd 0:0:1:0: [sg0] tag#302 CDB[10]: 44 f6 bf 50 f0 09 64 ae d0 51 84 ba 8d 87 3b c9 sd 0:0:1:0: [sg0] tag#302 CDB[20]: eb cb cf fe 85 bb 72 b8 e2 4d ec fc fb ca df 17 sd 0:0:1:0: [sg0] tag#302 CDB[30]: cd c9 15 3f 6c 71 08 e2 0b 38 53 f8 d1 1d d4 ae sd 0:0:1:0: [sg0] tag#302 CDB[40]: c9 05 68 6a 1b 3f 10 b9 44 f2 14 c6 1b 25 61 b3 sd 0:0:1:0: [sg0] tag#302 CDB[50]: 30 25 c9 ac 5a f2 38 f6 ec 97 2b 1f 96 c7 e7 3f sd 0:0:1:0: [sg0] tag#302 CDB[60]: 01 64 e7 ab 42 34 5c ab 70 ea 5e 35 c0 85 08 0f sd 0:0:1:0: [sg0] tag#302 CDB[70]: 7e fb 3a 68 d1 d2 06 f8 a6 10 1e 78 78 52 0a a1 sd 0:0:1:0: [sg0] tag#302 CDB[80]: c3 b6 f8 ce 53 01 8b c6 65 fb ba 67 d5 e3 e3 3c sd 0:0:1:0: [sg0] tag#302 CDB[90]: 95 8d 65 4a fa 8a f3 88 d0 1c 7a 6f 9e 3a b6 39 sd 0:0:1:0: [sg0] tag#302 CDB[a0]: 00 27 51 19 e3 df 8021q: adding VLAN 0 to HW filter on device team0 sd 0:0:1:0: [sg0] tag#307 CDB[50]: 30 25 c9 ac 5a f2 38 f6 ec 97 2b 1f 96 c7 e7 3f chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 sd 0:0:1:0: [sg0] tag#307 CDB[60]: 01 64 e7 ab 42 34 5c ab 70 ea 5e 35 c0 85 08 0f caif:caif_disconnect_client(): nothing to disconnect sd 0:0:1:0: [sg0] tag#307 CDB[70]: 7e fb 3a 68 d1 d2 06 f8 a6 10 1e 78 78 52 0a a1 sd 0:0:1:0: [sg0] tag#307 CDB[80]: c3 b6 f8 ce 53 01 8b c6 65 fb ba 67 d5 e3 e3 3c sd 0:0:1:0: [sg0] tag#307 CDB[90]: 95 8d 65 4a fa 8a f3 88 d0 1c 7a 6f 9e 3a b6 39 sd 0:0:1:0: [sg0] tag#307 CDB[a0]: 00 27 51 19 e3 df chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT chnl_net:chnl_net_open(): state disconnected A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. sd 0:0:1:0: [sg0] tag#307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK sd 0:0:1:0: [sg0] tag#307 CDB: opcode=0x71 (reserved) sd 0:0:1:0: [sg0] tag#307 CDB[00]: 71 d4 b1 c2 92 b6 fc 23 92 55 59 4d 17 9d 18 78 sd 0:0:1:0: [sg0] tag#307 CDB[10]: 44 f6 bf 50 f0 09 64 ae d0 51 84 ba 8d 87 3b c9 sd 0:0:1:0: [sg0] tag#307 CDB[20]: eb cb cf fe 85 bb 72 b8 e2 4d ec fc fb ca df 17 sd 0:0:1:0: [sg0] tag#307 CDB[30]: cd c9 15 3f 6c 71 08 e2 0b 38 53 f8 d1 1d d4 ae sd 0:0:1:0: [sg0] tag#307 CDB[40]: c9 05 68 6a 1b 3f 10 b9 44 f2 14 c6 1b 25 61 b3 sd 0:0:1:0: [sg0] tag#307 CDB[50]: 30 25 c9 ac 5a f2 38 f6 ec 97 2b 1f 96 c7 e7 3f sd 0:0:1:0: [sg0] tag#307 CDB[60]: 01 64 e7 ab 42 34 5c ab 70 ea 5e 35 c0 85 08 0f sd 0:0:1:0: [sg0] tag#307 CDB[70]: 7e fb 3a 68 d1 d2 06 f8 a6 10 1e 78 78 52 0a a1 sd 0:0:1:0: [sg0] tag#307 CDB[80]: c3 b6 f8 ce 53 01 8b c6 65 fb ba 67 d5 e3 e3 3c sd 0:0:1:0: [sg0] tag#307 CDB[90]: 95 8d 65 4a fa 8a f3 88 d0 1c 7a 6f 9e 3a b6 39 sd 0:0:1:0: [sg0] tag#307 CDB[a0]: 00 27 51 19 e3 df batman_adv: batadv0: Interface deactivated: batadv_slave_0 device wlan1 left promiscuous mode device vxlan0 left promiscuous mode device bridge1 left promiscuous mode device bridge2 left promiscuous mode device bridge3 left promiscuous mode device bridge0 left promiscuous mode device bridge6 left promiscuous mode device bridge7 left promiscuous mode