bond3 (unregistering): Releasing active interface macvlan4 bond0 (unregistering): Releasing backup interface bond3 bond3 (unregistering): Released all slaves bond2 (unregistering): Releasing active interface macvlan3 ============================================ WARNING: possible recursive locking detected 4.19.211-syzkaller #0 Not tainted -------------------------------------------- kworker/u4:4/298 is trying to acquire lock: 00000000cb6e5e27 (&(&bond->stats_lock)->rlock#4/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 but task is already holding lock: 0000000027eadff9 (&(&bond->stats_lock)->rlock#4/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&(&bond->stats_lock)->rlock#4/3); lock(&(&bond->stats_lock)->rlock#4/3); *** DEADLOCK *** May be due to missing lock nesting notation 6 locks held by kworker/u4:4/298: #0: 0000000096f0b687 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 00000000557e2886 (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 0000000072f676e8 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:521 #3: 00000000373994ab (rtnl_mutex){+.+.}, at: rtnl_lock_unregistering net/core/dev.c:9748 [inline] #3: 00000000373994ab (rtnl_mutex){+.+.}, at: default_device_exit_batch+0xea/0x3c0 net/core/dev.c:9786 #4: 0000000027eadff9 (&(&bond->stats_lock)->rlock#4/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 #5: 000000001d59244d (rcu_read_lock){....}, at: bond_get_nest_level drivers/net/bonding/bond_main.c:3481 [inline] #5: 000000001d59244d (rcu_read_lock){....}, at: bond_get_stats+0xae/0x500 drivers/net/bonding/bond_main.c:3492 stack backtrace: CPU: 0 PID: 298 Comm: kworker/u4:4 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_deadlock_bug kernel/locking/lockdep.c:1764 [inline] check_deadlock kernel/locking/lockdep.c:1808 [inline] validate_chain kernel/locking/lockdep.c:2404 [inline] __lock_acquire.cold+0x121/0x57e kernel/locking/lockdep.c:3416 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 _raw_spin_lock_nested+0x30/0x40 kernel/locking/spinlock.c:354 bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 dev_get_stats+0xa5/0x2b0 net/core/dev.c:9061 bond_get_stats+0x20f/0x500 drivers/net/bonding/bond_main.c:3498 __bond_release_one+0x46c/0x1620 drivers/net/bonding/bond_main.c:1913 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3155 [inline] bond_netdev_event+0xb61/0xe50 drivers/net/bonding/bond_main.c:3267 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93 call_netdevice_notifiers net/core/dev.c:1762 [inline] rollback_registered_many+0x83e/0xe70 net/core/dev.c:8196 unregister_netdevice_many.part.0+0x1a/0x300 net/core/dev.c:9324 unregister_netdevice_many net/core/dev.c:9323 [inline] default_device_exit_batch+0x2fa/0x3c0 net/core/dev.c:9795 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156 cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:554 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 bond0 (unregistering): Releasing backup interface bond2 bond2 (unregistering): Released all slaves bond1 (unregistering): Releasing active interface macvlan2 bond0 (unregistering): Releasing backup interface bond1 bond1 (unregistering): Released all slaves device hsr_slave_1 left promiscuous mode device hsr_slave_0 left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bond0 (unregistering): Releasing backup interface bond_slave_1 bond0 (unregistering): Releasing backup interface bond_slave_0 bond0 (unregistering): Released all slaves IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 8021q: adding VLAN 0 to HW filter on device batadv0 IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready device veth0_vlan entered promiscuous mode device veth1_vlan entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready device veth0_macvtap entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready device veth1_macvtap entered promiscuous mode IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_0 IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready batman_adv: batadv0: Interface activated: batadv_slave_1 IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium audit: type=1804 audit(1676077671.959:2232): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1674995725/syzkaller.84XBRT/1476/bus" dev="sda1" ino=15199 res=1 netlink: 'syz-executor.2': attribute type 5 has an invalid length. IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 audit: type=1800 audit(1676077671.959:2233): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15199 res=0 IPVS: ftp: loaded support on port[0] = 21 netlink: 'syz-executor.4': attribute type 5 has an invalid length. audit: type=1804 audit(1676077672.019:2234): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4215139207/syzkaller.fAEG2f/1466/bus" dev="sda1" ino=15209 res=1 audit: type=1804 audit(1676077672.019:2235): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2773518995/syzkaller.Gh7FyN/1420/bus" dev="sda1" ino=15208 res=1 netlink: 'syz-executor.4': attribute type 5 has an invalid length. audit: type=1800 audit(1676077672.019:2236): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15209 res=0 audit: type=1800 audit(1676077672.019:2237): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15208 res=0 audit: type=1804 audit(1676077672.039:2238): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1674995725/syzkaller.84XBRT/1476/bus" dev="sda1" ino=15199 res=1 netlink: 'syz-executor.2': attribute type 5 has an invalid length. audit: type=1804 audit(1676077672.089:2239): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir4215139207/syzkaller.fAEG2f/1466/bus" dev="sda1" ino=15209 res=1 audit: type=1804 audit(1676077672.099:2240): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2773518995/syzkaller.Gh7FyN/1420/bus" dev="sda1" ino=15208 res=1 netlink: 'syz-executor.4': attribute type 5 has an invalid length. audit: type=1804 audit(1676077672.799:2241): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir4215139207/syzkaller.fAEG2f/1467/bus" dev="sda1" ino=15189 res=1 IPVS: ftp: loaded support on port[0] = 21 netlink: 'syz-executor.2': attribute type 5 has an invalid length. IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 netlink: 'syz-executor.4': attribute type 5 has an invalid length. netlink: 'syz-executor.2': attribute type 5 has an invalid length. tmpfs: Bad mount option fsmagic netlink: 'syz-executor.4': attribute type 5 has an invalid length. tmpfs: Bad mount option fsmagic tmpfs: Bad mount option fsmagic tmpfs: Bad mount option fsmagic netlink: 'syz-executor.2': attribute type 5 has an invalid length. tmpfs: Bad mount option fsmagic tmpfs: Bad mount option fsmagic l2tp_ppp: sess 2/1073741824: set debug=6f72702f tmpfs: Bad mount option fsmagic tmpfs: Bad mount option fsmagic l2tp_ppp: sess 2/1073741824: set debug=6f72702f l2tp_core: sess 2/1073741824: closing session tmpfs: Bad mount option fsmagic l2tp_ppp: sess 2/1073741824: set debug=6f72702f tmpfs: Bad mount option fsmagic l2tp_ppp: sess 2/1073741824: set debug=6f72702f l2tp_ppp: sess 2/1073741824: set debug=6f72702f l2tp_core: sess 2/1073741824: closing session l2tp_ppp: sess 2/1073741824: set debug=6f72702f l2tp_core: sess 2/1073741824: closing session PM: Image not found (code -22) l2tp_ppp: sess 2/1073741824: set debug=6f72702f l2tp_core: sess 2/1073741824: closing session l2tp_ppp: sess 2/1073741824: set debug=6f72702f PM: Image not found (code -22) l2tp_core: sess 2/1073741824: closing session l2tp_ppp: sess 2/1073741824: set debug=6f72702f PM: Image not found (code -22) l2tp_ppp: sess 2/1073741824: set debug=6f72702f PM: Image not found (code -22) device macvtap1 entered promiscuous mode device vlan0 entered promiscuous mode device macvtap2 entered promiscuous mode kauditd_printk_skb: 42 callbacks suppressed audit: type=1804 audit(1676077677.249:2284): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2773518995/syzkaller.Gh7FyN/1430/bus" dev="sda1" ino=13910 res=1 audit: type=1800 audit(1676077677.249:2285): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=13910 res=0 audit: type=1804 audit(1676077677.249:2286): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2773518995/syzkaller.Gh7FyN/1430/bus" dev="sda1" ino=13910 res=1 audit: type=1804 audit(1676077677.269:2287): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2773518995/syzkaller.Gh7FyN/1430/bus" dev="sda1" ino=13910 res=1 audit: type=1800 audit(1676077677.269:2288): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=13910 res=0 device macvtap1 entered promiscuous mode device vlan0 entered promiscuous mode audit: type=1804 audit(1676077677.709:2289): pid=12956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1674995725/syzkaller.84XBRT/1487/bus" dev="sda1" ino=14116 res=1 audit: type=1800 audit(1676077677.709:2290): pid=12956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14116 res=0 device macvtap1 entered promiscuous mode device vlan0 entered promiscuous mode device macvtap3 entered promiscuous mode device macvtap1 entered promiscuous mode device vlan0 entered promiscuous mode device macvtap2 entered promiscuous mode audit: type=1804 audit(1676077678.599:2291): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1674995725/syzkaller.84XBRT/1488/bus" dev="sda1" ino=14258 res=1 audit: type=1800 audit(1676077678.599:2292): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14258 res=0 device macvtap2 entered promiscuous mode device macvtap4 entered promiscuous mode device macvtap2 entered promiscuous mode device macvtap3 entered promiscuous mode