device veth0_vlan left promiscuous mode
bond3 (unregistering): Releasing active interface vlan3
bond0 (unregistering): Releasing backup interface bond3
bond3 (unregistering): Released all slaves
============================================
WARNING: possible recursive locking detected
4.19.211-syzkaller #0 Not tainted
--------------------------------------------
kworker/u4:3/333 is trying to acquire lock:
00000000c5b38abe (&(&bond->stats_lock)->rlock#3/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492

but task is already holding lock:
0000000054e2e35d (&(&bond->stats_lock)->rlock#3/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(&(&bond->stats_lock)->rlock#3/3);
  lock(&(&bond->stats_lock)->rlock#3/3);

 *** DEADLOCK ***

 May be due to missing lock nesting notation

6 locks held by kworker/u4:3/333:
 #0: 00000000efcf8d9e ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124
 #1: 0000000085420d83 (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128
 #2: 00000000258b23cb (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:521
 #3: 000000000c8df67b (rtnl_mutex){+.+.}, at: rtnl_lock_unregistering net/core/dev.c:9748 [inline]
 #3: 000000000c8df67b (rtnl_mutex){+.+.}, at: default_device_exit_batch+0xea/0x3c0 net/core/dev.c:9786
 #4: 0000000054e2e35d (&(&bond->stats_lock)->rlock#3/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492
 #5: 000000004efef528 (rcu_read_lock){....}, at: bond_get_nest_level drivers/net/bonding/bond_main.c:3481 [inline]
 #5: 000000004efef528 (rcu_read_lock){....}, at: bond_get_stats+0xae/0x500 drivers/net/bonding/bond_main.c:3492

stack backtrace:
CPU: 0 PID: 333 Comm: kworker/u4:3 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
Workqueue: netns cleanup_net
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2ef lib/dump_stack.c:118
 print_deadlock_bug kernel/locking/lockdep.c:1764 [inline]
 check_deadlock kernel/locking/lockdep.c:1808 [inline]
 validate_chain kernel/locking/lockdep.c:2404 [inline]
 __lock_acquire.cold+0x121/0x57e kernel/locking/lockdep.c:3416
 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908
 _raw_spin_lock_nested+0x30/0x40 kernel/locking/spinlock.c:354
 bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492
 dev_get_stats+0xa5/0x2b0 net/core/dev.c:9061
 bond_get_stats+0x20f/0x500 drivers/net/bonding/bond_main.c:3498
 __bond_release_one+0x46c/0x1620 drivers/net/bonding/bond_main.c:1913
 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3155 [inline]
 bond_netdev_event+0xb61/0xe50 drivers/net/bonding/bond_main.c:3267
 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93
 call_netdevice_notifiers net/core/dev.c:1762 [inline]
 rollback_registered_many+0x83e/0xe70 net/core/dev.c:8196
 unregister_netdevice_many.part.0+0x1a/0x300 net/core/dev.c:9324
 unregister_netdevice_many net/core/dev.c:9323 [inline]
 default_device_exit_batch+0x2fa/0x3c0 net/core/dev.c:9795
 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156
 cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:554
 process_one_work+0x864/0x1570 kernel/workqueue.c:2153
 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296
 kthread+0x33f/0x460 kernel/kthread.c:259
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
bond0 (unregistering): Releasing backup interface bond2
bond2 (unregistering): Released all slaves
bond1 (unregistering): Releasing active interface vlan2
bond0 (unregistering): Releasing backup interface bond1
bond1 (unregistering): Released all slaves
device hsr_slave_1 left promiscuous mode
device hsr_slave_0 left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
bond0 (unregistering): Releasing backup interface bond_slave_1
bond0 (unregistering): Releasing backup interface bond_slave_0
bond0 (unregistering): Released all slaves
device lo entered promiscuous mode
IPVS: ftp: loaded support on port[0] = 21
TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
IPVS: ftp: loaded support on port[0] = 21
netlink: 'syz-executor.0': attribute type 2 has an invalid length.
netlink: 'syz-executor.0': attribute type 1 has an invalid length.
ieee802154 phy0 wpan0: encryption failed: -22
ieee802154 phy1 wpan1: encryption failed: -22
netlink: 'syz-executor.0': attribute type 1 has an invalid length.