netlink: 'syz-executor.1': attribute type 10 has an invalid length. ============================================ WARNING: possible recursive locking detected 6.9.0-rc4-syzkaller-g6a71d2909427 #0 Not tainted -------------------------------------------- syz-executor.1/13345 is trying to acquire lock: ffff0000e457cd20 (team->team_lock_key#2){+.+.}-{3:3}, at: team_port_change_check+0x5c/0x228 drivers/net/team/team.c:2995 but task is already holding lock: ffff0000e457cd20 (team->team_lock_key#2){+.+.}-{3:3}, at: team_add_slave+0xa4/0x236c drivers/net/team/team.c:1973 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(team->team_lock_key#2); lock(team->team_lock_key#2); *** DEADLOCK *** May be due to missing lock nesting notation 2 locks held by syz-executor.1/13345: #0: ffff800091bcdee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffff800091bcdee8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e0/0xdbc net/core/rtnetlink.c:6592 #1: ffff0000e457cd20 (team->team_lock_key#2){+.+.}-{3:3}, at: team_add_slave+0xa4/0x236c drivers/net/team/team.c:1973 stack backtrace: CPU: 1 PID: 13345 Comm: syz-executor.1 Not tainted 6.9.0-rc4-syzkaller-g6a71d2909427 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:317 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:324 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:114 dump_stack+0x1c/0x28 lib/dump_stack.c:123 print_deadlock_bug+0x4e4/0x660 kernel/locking/lockdep.c:3012 check_deadlock kernel/locking/lockdep.c:3062 [inline] validate_chain kernel/locking/lockdep.c:3856 [inline] __lock_acquire+0x5fe4/0x763c kernel/locking/lockdep.c:5137 lock_acquire+0x248/0x73c kernel/locking/lockdep.c:5754 __mutex_lock_common+0x190/0x21a0 kernel/locking/mutex.c:608 __mutex_lock kernel/locking/mutex.c:752 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:804 team_port_change_check+0x5c/0x228 drivers/net/team/team.c:2995 team_device_event+0x430/0x4d4 notifier_call_chain+0x1bc/0x540 kernel/notifier.c:93 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:461 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:8763 vlan_device_event+0x3f4/0x1814 net/8021q/vlan.c:468 notifier_call_chain+0x1bc/0x540 kernel/notifier.c:93 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:461 call_netdevice_notifiers_info net/core/dev.c:1950 [inline] call_netdevice_notifiers_extack net/core/dev.c:1988 [inline] call_netdevice_notifiers net/core/dev.c:2002 [inline] dev_open+0x1b0/0x248 net/core/dev.c:1471 team_port_add drivers/net/team/team.c:1214 [inline] team_add_slave+0x7b0/0x236c drivers/net/team/team.c:1974 do_set_master net/core/rtnetlink.c:2685 [inline] do_setlink+0xc30/0x377c net/core/rtnetlink.c:2891 __rtnl_newlink net/core/rtnetlink.c:3680 [inline] rtnl_newlink+0x14c0/0x1bcc net/core/rtnetlink.c:3727 rtnetlink_rcv_msg+0x724/0xdbc net/core/rtnetlink.c:6595 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0x65c/0x898 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x7a0/0xa84 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x56c/0x840 net/socket.c:2584 ___sys_sendmsg net/socket.c:2638 [inline] __sys_sendmsg+0x26c/0x33c net/socket.c:2667 __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2674 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:48 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:133 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:152 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598