netlink: 28 bytes leftover after parsing attributes in process `syz.0.1493'. ============================================ WARNING: possible recursive locking detected 6.12.0-rc4-syzkaller-g7678c1b2735a #0 Not tainted -------------------------------------------- syz.0.1493/11616 is trying to acquire lock: ffff0000ec758d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_port_change_check+0x5c/0x228 drivers/net/team/team_core.c:2950 but task is already holding lock: ffff0000ec758d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xa4/0x236c drivers/net/team/team_core.c:1975 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(team->team_lock_key#3); lock(team->team_lock_key#3); *** DEADLOCK *** May be due to missing lock nesting notation 2 locks held by syz.0.1493/11616: #0: ffff8000927131a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:79 [inline] #0: ffff8000927131a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x5e8/0xa9c net/core/rtnetlink.c:6672 #1: ffff0000ec758d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xa4/0x236c drivers/net/team/team_core.c:1975 stack backtrace: CPU: 1 UID: 0 PID: 11616 Comm: syz.0.1493 Not tainted 6.12.0-rc4-syzkaller-g7678c1b2735a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:484 (C) __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 print_deadlock_bug+0x4e8/0x668 kernel/locking/lockdep.c:3037 check_deadlock kernel/locking/lockdep.c:3089 [inline] validate_chain kernel/locking/lockdep.c:3891 [inline] __lock_acquire+0x6180/0x77c8 kernel/locking/lockdep.c:5202 lock_acquire+0x240/0x728 kernel/locking/lockdep.c:5825 __mutex_lock_common+0x190/0x21a0 kernel/locking/mutex.c:608 __mutex_lock kernel/locking/mutex.c:752 [inline] mutex_lock_nested+0x2c/0x38 kernel/locking/mutex.c:804 team_port_change_check+0x5c/0x228 drivers/net/team/team_core.c:2950 team_device_event+0x430/0x4d4 notifier_call_chain+0x1b4/0x538 kernel/notifier.c:93 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:461 __dev_notify_flags+0x2c4/0x550 dev_change_flags+0xd0/0x15c net/core/dev.c:8918 vlan_device_event+0x3f4/0x1814 net/8021q/vlan.c:468 notifier_call_chain+0x1b4/0x538 kernel/notifier.c:93 raw_notifier_call_chain+0x3c/0x50 kernel/notifier.c:461 call_netdevice_notifiers_info net/core/dev.c:1996 [inline] call_netdevice_notifiers_extack net/core/dev.c:2034 [inline] call_netdevice_notifiers net/core/dev.c:2048 [inline] dev_open+0x1b0/0x248 net/core/dev.c:1517 team_port_add drivers/net/team/team_core.c:1216 [inline] team_add_slave+0x7b0/0x236c drivers/net/team/team_core.c:1976 do_set_master net/core/rtnetlink.c:2730 [inline] do_setlink+0xc30/0x3778 net/core/rtnetlink.c:2936 __rtnl_newlink net/core/rtnetlink.c:3725 [inline] rtnl_newlink+0x14c4/0x1bd0 net/core/rtnetlink.c:3772 rtnetlink_rcv_msg+0x630/0xa9c net/core/rtnetlink.c:6675 netlink_rcv_skb+0x214/0x3c4 net/netlink/af_netlink.c:2551 rtnetlink_rcv+0x28/0x38 net/core/rtnetlink.c:6693 netlink_unicast_kernel net/netlink/af_netlink.c:1331 [inline] netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1357 netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1901 sock_sendmsg_nosec net/socket.c:729 [inline] __sock_sendmsg net/socket.c:744 [inline] ____sys_sendmsg+0x56c/0x840 net/socket.c:2607 ___sys_sendmsg net/socket.c:2661 [inline] __sys_sendmsg+0x26c/0x33c net/socket.c:2690 __do_sys_sendmsg net/socket.c:2699 [inline] __se_sys_sendmsg net/socket.c:2697 [inline] __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2697 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600