bond4 (unregistering): Releasing active interface macvlan5 bond0 (unregistering): Releasing backup interface bond4 bond4 (unregistering): Released all slaves bond3 (unregistering): Releasing active interface macvlan4 ============================================ WARNING: possible recursive locking detected 4.19.211-syzkaller #0 Not tainted -------------------------------------------- kworker/u4:6/8161 is trying to acquire lock: 00000000c1ee269e (&(&bond->stats_lock)->rlock#3/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 but task is already holding lock: 000000008d142826 (&(&bond->stats_lock)->rlock#3/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&(&bond->stats_lock)->rlock#3/3); lock(&(&bond->stats_lock)->rlock#3/3); *** DEADLOCK *** May be due to missing lock nesting notation 6 locks held by kworker/u4:6/8161: #0: 0000000012ec1d50 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 000000004ba0ae7b (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 00000000a3e63db0 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:521 #3: 00000000aa4177ab (rtnl_mutex){+.+.}, at: rtnl_lock_unregistering net/core/dev.c:9748 [inline] #3: 00000000aa4177ab (rtnl_mutex){+.+.}, at: default_device_exit_batch+0xea/0x3c0 net/core/dev.c:9786 #4: 000000008d142826 (&(&bond->stats_lock)->rlock#3/3){+.+.}, at: bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 #5: 00000000745ed517 (rcu_read_lock){....}, at: bond_get_nest_level drivers/net/bonding/bond_main.c:3481 [inline] #5: 00000000745ed517 (rcu_read_lock){....}, at: bond_get_stats+0xae/0x500 drivers/net/bonding/bond_main.c:3492 stack backtrace: CPU: 1 PID: 8161 Comm: kworker/u4:6 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 Workqueue: netns cleanup_net Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_deadlock_bug kernel/locking/lockdep.c:1764 [inline] check_deadlock kernel/locking/lockdep.c:1808 [inline] validate_chain kernel/locking/lockdep.c:2404 [inline] __lock_acquire.cold+0x121/0x57e kernel/locking/lockdep.c:3416 lock_acquire+0x170/0x3c0 kernel/locking/lockdep.c:3908 _raw_spin_lock_nested+0x30/0x40 kernel/locking/spinlock.c:354 bond_get_stats+0xca/0x500 drivers/net/bonding/bond_main.c:3492 dev_get_stats+0xa5/0x2b0 net/core/dev.c:9061 bond_get_stats+0x20f/0x500 drivers/net/bonding/bond_main.c:3498 __bond_release_one+0x46c/0x1620 drivers/net/bonding/bond_main.c:1913 bond_slave_netdev_event drivers/net/bonding/bond_main.c:3155 [inline] bond_netdev_event+0xb61/0xe50 drivers/net/bonding/bond_main.c:3267 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93 call_netdevice_notifiers net/core/dev.c:1762 [inline] rollback_registered_many+0x83e/0xe70 net/core/dev.c:8196 unregister_netdevice_many.part.0+0x1a/0x300 net/core/dev.c:9324 unregister_netdevice_many net/core/dev.c:9323 [inline] default_device_exit_batch+0x2fa/0x3c0 net/core/dev.c:9795 ops_exit_list+0xf9/0x150 net/core/net_namespace.c:156 cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:554 process_one_work+0x864/0x1570 kernel/workqueue.c:2153 worker_thread+0x64c/0x1130 kernel/workqueue.c:2296 kthread+0x33f/0x460 kernel/kthread.c:259 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415 bond0 (unregistering): Releasing backup interface bond3 bond3 (unregistering): Released all slaves bond2 (unregistering): Releasing active interface macvlan3 bond0 (unregistering): Releasing backup interface bond2 bond2 (unregistering): Released all slaves bond1 (unregistering): Releasing active interface macvlan2 bond0 (unregistering): Releasing backup interface bond1 bond1 (unregistering): Released all slaves device hsr_slave_0 left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed bond0 (unregistering): Releasing backup interface bond_slave_1 bond0 (unregistering): Releasing backup interface bond_slave_0 bond0 (unregistering): Released all slaves ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' audit: type=1804 audit(1675430263.282:23963): pid=30956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1713442334/syzkaller.874y3v/587/bus" dev="sda1" ino=15505 res=1 audit: type=1804 audit(1675430263.376:23964): pid=30979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1713442334/syzkaller.874y3v/587/bus" dev="sda1" ino=15505 res=1 ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' audit: type=1800 audit(1675430263.576:23965): pid=30962 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=4 res=0 audit: type=1800 audit(1675430263.723:23966): pid=30958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=4 res=0 ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' audit: type=1804 audit(1675430264.017:23967): pid=31017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1713442334/syzkaller.874y3v/588/bus" dev="sda1" ino=14529 res=1 audit: type=1804 audit(1675430264.100:23968): pid=31041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1713442334/syzkaller.874y3v/588/bus" dev="sda1" ino=14529 res=1 ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' audit: type=1800 audit(1675430264.394:23969): pid=31019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=4 res=0 audit: type=1804 audit(1675430264.436:23970): pid=31052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1713442334/syzkaller.874y3v/589/bus" dev="sda1" ino=15585 res=1 audit: type=1804 audit(1675430264.531:23971): pid=31067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1713442334/syzkaller.874y3v/589/bus" dev="sda1" ino=15585 res=1 audit: type=1800 audit(1675430264.562:23972): pid=31037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=4 res=0 input: syz0 as /devices/virtual/input/input19 input: syz0 as /devices/virtual/input/input20 input: syz0 as /devices/virtual/input/input21 input: syz0 as /devices/virtual/input/input22 input: syz0 as /devices/virtual/input/input23 input: syz0 as /devices/virtual/input/input24 input: syz0 as /devices/virtual/input/input25 kauditd_printk_skb: 2 callbacks suppressed audit: type=1800 audit(1675430268.330:23975): pid=31406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=13971 res=0 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 audit: type=1800 audit(1675430269.253:23976): pid=31468 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=14499 res=0 netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 audit: type=1800 audit(1675430269.809:23977): pid=31489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=13924 res=0 audit: type=1800 audit(1675430268.710:23978): pid=31501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=14083 res=0 netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. audit: type=1800 audit(1675430269.224:23979): pid=31518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=13973 res=0 netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. audit: type=1800 audit(1675430269.665:23980): pid=31532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file1" dev="sda1" ino=14004 res=0 audit: type=1800 audit(1675430270.137:23981): pid=31555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=14706 res=0 netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'.