bridge2: port 1(macsec0) entered blocking state bridge2: port 1(macsec0) entered disabled state device macsec0 entered promiscuous mode ===================================================== WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected 5.7.0-rc5-syzkaller #0 Not tainted ----------------------------------------------------- syz-executor.4/25700 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire: ffff8880629661b0 (&net->nsid_lock){+.+.}-{2:2}, at: spin_lock include/linux/spinlock.h:353 [inline] ffff8880629661b0 (&net->nsid_lock){+.+.}-{2:2}, at: peernet2id_alloc+0xcd/0x3f0 net/core/net_namespace.c:254 and this task is already holding: ffff888096206280 (&dev->addr_list_lock_key#341){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:358 [inline] ffff888096206280 (&dev->addr_list_lock_key#341){+...}-{2:2}, at: netif_addr_lock_bh include/linux/netdevice.h:4244 [inline] ffff888096206280 (&dev->addr_list_lock_key#341){+...}-{2:2}, at: dev_uc_add+0x1f/0xb0 net/core/dev_addr_lists.c:588 which would create a new lock dependency: (&dev->addr_list_lock_key#341){+...}-{2:2} -> (&net->nsid_lock){+.+.}-{2:2} but this new dependency connects a SOFTIRQ-irq-safe lock: (&mc->mca_lock){+.-.}-{2:2} ... which became SOFTIRQ-irq-safe at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] mld_send_cr net/ipv6/mcast.c:1950 [inline] mld_ifc_timer_expire+0x2b5/0x920 net/ipv6/mcast.c:2474 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0x623/0x1600 kernel/time/timer.c:1786 __do_softirq+0x26c/0x9f7 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x192/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:546 [inline] smp_apic_timer_interrupt+0x19e/0x600 arch/x86/kernel/apic/apic.c:1140 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60 arch_safe_halt arch/x86/include/asm/paravirt.h:144 [inline] default_idle+0x49/0x350 arch/x86/kernel/process.c:697 cpuidle_idle_call kernel/sched/idle.c:154 [inline] do_idle+0x393/0x690 kernel/sched/idle.c:269 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:361 start_kernel+0x97d/0x9b7 init/main.c:1040 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:242 to a SOFTIRQ-irq-unsafe lock: (&net->nsid_lock){+.+.}-{2:2} ... which became SOFTIRQ-irq-unsafe at: ... lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] unhash_nsid net/core/net_namespace.c:537 [inline] cleanup_net+0x2a5/0xa50 net/core/net_namespace.c:585 process_one_work+0x965/0x16a0 kernel/workqueue.c:2268 worker_thread+0x96/0xe20 kernel/workqueue.c:2414 kthread+0x388/0x470 kernel/kthread.c:268 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:351 other info that might help us debug this: Chain exists of: &mc->mca_lock --> &dev->addr_list_lock_key#341 --> &net->nsid_lock Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&net->nsid_lock); local_irq_disable(); lock(&mc->mca_lock); lock(&dev->addr_list_lock_key#341); lock(&mc->mca_lock); *** DEADLOCK *** 3 locks held by syz-executor.4/25700: #0: ffffffff8a58a4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock net/core/rtnetlink.c:72 [inline] #0: ffffffff8a58a4c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 net/core/rtnetlink.c:5458 #1: ffff888096730c18 (&br->hash_lock){+.-.}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:358 [inline] #1: ffff888096730c18 (&br->hash_lock){+.-.}-{2:2}, at: br_fdb_insert+0x24/0x50 net/bridge/br_fdb.c:553 #2: ffff888096206280 (&dev->addr_list_lock_key#341){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:358 [inline] #2: ffff888096206280 (&dev->addr_list_lock_key#341){+...}-{2:2}, at: netif_addr_lock_bh include/linux/netdevice.h:4244 [inline] #2: ffff888096206280 (&dev->addr_list_lock_key#341){+...}-{2:2}, at: dev_uc_add+0x1f/0xb0 net/core/dev_addr_lists.c:588 the dependencies between SOFTIRQ-irq-safe lock and the holding lock: -> (&mc->mca_lock){+.-.}-{2:2} { HARDIRQ-ON-W at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] mld_del_delrec+0x344/0x570 net/ipv6/mcast.c:783 __ipv6_dev_mc_inc+0x811/0xca0 net/ipv6/mcast.c:927 ipv6_add_dev net/ipv6/addrconf.c:453 [inline] ipv6_add_dev+0x98e/0x1090 net/ipv6/addrconf.c:364 addrconf_init+0xd3/0x39a net/ipv6/addrconf.c:7104 inet6_init+0x368/0x705 net/ipv6/af_inet6.c:1134 do_one_initcall+0x10a/0x7d0 init/main.c:1194 do_initcall_level init/main.c:1267 [inline] do_initcalls init/main.c:1283 [inline] do_basic_setup init/main.c:1303 [inline] kernel_init_freeable+0x501/0x5ae init/main.c:1487 kernel_init+0xd/0x1bb init/main.c:1394 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:351 IN-SOFTIRQ-W at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] mld_send_cr net/ipv6/mcast.c:1950 [inline] mld_ifc_timer_expire+0x2b5/0x920 net/ipv6/mcast.c:2474 call_timer_fn+0x1ac/0x780 kernel/time/timer.c:1404 expire_timers kernel/time/timer.c:1449 [inline] __run_timers kernel/time/timer.c:1773 [inline] __run_timers kernel/time/timer.c:1740 [inline] run_timer_softirq+0x623/0x1600 kernel/time/timer.c:1786 __do_softirq+0x26c/0x9f7 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x192/0x1d0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:546 [inline] smp_apic_timer_interrupt+0x19e/0x600 arch/x86/kernel/apic/apic.c:1140 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:829 native_safe_halt+0xe/0x10 arch/x86/include/asm/irqflags.h:60 arch_safe_halt arch/x86/include/asm/paravirt.h:144 [inline] default_idle+0x49/0x350 arch/x86/kernel/process.c:697 cpuidle_idle_call kernel/sched/idle.c:154 [inline] do_idle+0x393/0x690 kernel/sched/idle.c:269 cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:361 start_kernel+0x97d/0x9b7 init/main.c:1040 secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:242 INITIAL USE at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] mld_del_delrec+0x344/0x570 net/ipv6/mcast.c:783 __ipv6_dev_mc_inc+0x811/0xca0 net/ipv6/mcast.c:927 ipv6_add_dev net/ipv6/addrconf.c:453 [inline] ipv6_add_dev+0x98e/0x1090 net/ipv6/addrconf.c:364 addrconf_init+0xd3/0x39a net/ipv6/addrconf.c:7104 inet6_init+0x368/0x705 net/ipv6/af_inet6.c:1134 do_one_initcall+0x10a/0x7d0 init/main.c:1194 do_initcall_level init/main.c:1267 [inline] do_initcalls init/main.c:1283 [inline] do_basic_setup init/main.c:1303 [inline] kernel_init_freeable+0x501/0x5ae init/main.c:1487 kernel_init+0xd/0x1bb init/main.c:1394 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:351 } ... key at: [] __key.79183+0x0/0x40 ... acquired at: __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] netif_addr_lock_bh include/linux/netdevice.h:4244 [inline] __dev_mc_add+0x28/0xd0 net/core/dev_addr_lists.c:765 igmp6_group_added+0x375/0x420 net/ipv6/mcast.c:669 __ipv6_dev_mc_inc+0x819/0xca0 net/ipv6/mcast.c:928 ipv6_add_dev net/ipv6/addrconf.c:456 [inline] ipv6_add_dev+0x99d/0x1090 net/ipv6/addrconf.c:364 addrconf_notify+0x89c/0x2270 net/ipv6/addrconf.c:3462 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:2016 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2001 call_netdevice_notifiers_extack net/core/dev.c:2028 [inline] call_netdevice_notifiers net/core/dev.c:2042 [inline] register_netdevice+0xd70/0x10b0 net/core/dev.c:9513 macsec_newlink+0x441/0x1530 drivers/net/macsec.c:4048 __rtnl_newlink+0xf18/0x1590 net/core/rtnetlink.c:3340 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3398 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5461 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 __sys_sendto+0x219/0x330 net/socket.c:1995 __do_sys_sendto net/socket.c:2007 [inline] __se_sys_sendto net/socket.c:2003 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2003 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 -> (&dev->addr_list_lock_key#341){+...}-{2:2} { HARDIRQ-ON-W at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] netif_addr_lock_bh include/linux/netdevice.h:4244 [inline] __dev_mc_add+0x28/0xd0 net/core/dev_addr_lists.c:765 igmp6_group_added+0x375/0x420 net/ipv6/mcast.c:669 __ipv6_dev_mc_inc+0x819/0xca0 net/ipv6/mcast.c:928 ipv6_add_dev net/ipv6/addrconf.c:456 [inline] ipv6_add_dev+0x99d/0x1090 net/ipv6/addrconf.c:364 addrconf_notify+0x89c/0x2270 net/ipv6/addrconf.c:3462 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:2016 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2001 call_netdevice_notifiers_extack net/core/dev.c:2028 [inline] call_netdevice_notifiers net/core/dev.c:2042 [inline] register_netdevice+0xd70/0x10b0 net/core/dev.c:9513 macsec_newlink+0x441/0x1530 drivers/net/macsec.c:4048 __rtnl_newlink+0xf18/0x1590 net/core/rtnetlink.c:3340 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3398 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5461 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 __sys_sendto+0x219/0x330 net/socket.c:1995 __do_sys_sendto net/socket.c:2007 [inline] __se_sys_sendto net/socket.c:2003 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2003 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 INITIAL USE at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock_bh include/linux/spinlock_api_smp.h:135 [inline] _raw_spin_lock_bh+0x2f/0x40 kernel/locking/spinlock.c:175 spin_lock_bh include/linux/spinlock.h:358 [inline] netif_addr_lock_bh include/linux/netdevice.h:4244 [inline] __dev_mc_add+0x28/0xd0 net/core/dev_addr_lists.c:765 igmp6_group_added+0x375/0x420 net/ipv6/mcast.c:669 __ipv6_dev_mc_inc+0x819/0xca0 net/ipv6/mcast.c:928 ipv6_add_dev net/ipv6/addrconf.c:456 [inline] ipv6_add_dev+0x99d/0x1090 net/ipv6/addrconf.c:364 addrconf_notify+0x89c/0x2270 net/ipv6/addrconf.c:3462 notifier_call_chain+0xc0/0x230 kernel/notifier.c:83 call_netdevice_notifiers_info net/core/dev.c:2016 [inline] call_netdevice_notifiers_info+0xb5/0x130 net/core/dev.c:2001 call_netdevice_notifiers_extack net/core/dev.c:2028 [inline] call_netdevice_notifiers net/core/dev.c:2042 [inline] register_netdevice+0xd70/0x10b0 net/core/dev.c:9513 macsec_newlink+0x441/0x1530 drivers/net/macsec.c:4048 __rtnl_newlink+0xf18/0x1590 net/core/rtnetlink.c:3340 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3398 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5461 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 __sys_sendto+0x219/0x330 net/socket.c:1995 __do_sys_sendto net/socket.c:2007 [inline] __se_sys_sendto net/socket.c:2003 [inline] __x64_sys_sendto+0xdd/0x1b0 net/socket.c:2003 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 } ... key at: [] 0xffff888096206b68 ... acquired at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] peernet2id_alloc+0xcd/0x3f0 net/core/net_namespace.c:254 rtnl_fill_link_netnsid net/core/rtnetlink.c:1572 [inline] rtnl_fill_ifinfo+0x1e7c/0x39b0 net/core/rtnetlink.c:1758 rtmsg_ifinfo_build_skb+0xcd/0x1a0 net/core/rtnetlink.c:3706 rtmsg_ifinfo_event.part.0+0x49/0xe0 net/core/rtnetlink.c:3738 rtmsg_ifinfo_event net/core/rtnetlink.c:3749 [inline] rtmsg_ifinfo+0x7f/0xa0 net/core/rtnetlink.c:3747 __dev_notify_flags+0x235/0x2c0 net/core/dev.c:8277 __dev_set_promiscuity+0x191/0x210 net/core/dev.c:8053 dev_set_promiscuity+0x4f/0xe0 net/core/dev.c:8073 macsec_dev_change_rx_flags+0x13b/0x170 drivers/net/macsec.c:3582 dev_change_rx_flags net/core/dev.c:8006 [inline] __dev_set_promiscuity.cold+0x2e3/0x340 net/core/dev.c:8050 __dev_set_rx_mode+0x21f/0x300 net/core/dev.c:8155 dev_uc_add+0xa1/0xb0 net/core/dev_addr_lists.c:592 fdb_add_hw_addr+0xf9/0x280 net/bridge/br_fdb.c:165 fdb_insert+0x173/0x1c0 net/bridge/br_fdb.c:542 br_fdb_insert+0x35/0x50 net/bridge/br_fdb.c:554 br_add_if+0xdaf/0x1900 net/bridge/br_if.c:664 do_set_master net/core/rtnetlink.c:2477 [inline] do_set_master+0x1d7/0x230 net/core/rtnetlink.c:2450 do_setlink+0xaa2/0x3680 net/core/rtnetlink.c:2612 __rtnl_newlink+0xad5/0x1590 net/core/rtnetlink.c:3273 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3398 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5461 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x6e6/0x810 net/socket.c:2352 ___sys_sendmsg+0x100/0x170 net/socket.c:2406 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2439 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 the dependencies between the lock to be acquired and SOFTIRQ-irq-unsafe lock: -> (&net->nsid_lock){+.+.}-{2:2} { HARDIRQ-ON-W at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] unhash_nsid net/core/net_namespace.c:537 [inline] cleanup_net+0x2a5/0xa50 net/core/net_namespace.c:585 process_one_work+0x965/0x16a0 kernel/workqueue.c:2268 worker_thread+0x96/0xe20 kernel/workqueue.c:2414 kthread+0x388/0x470 kernel/kthread.c:268 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:351 SOFTIRQ-ON-W at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] unhash_nsid net/core/net_namespace.c:537 [inline] cleanup_net+0x2a5/0xa50 net/core/net_namespace.c:585 process_one_work+0x965/0x16a0 kernel/workqueue.c:2268 worker_thread+0x96/0xe20 kernel/workqueue.c:2414 kthread+0x388/0x470 kernel/kthread.c:268 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:351 INITIAL USE at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] unhash_nsid net/core/net_namespace.c:537 [inline] cleanup_net+0x2a5/0xa50 net/core/net_namespace.c:585 process_one_work+0x965/0x16a0 kernel/workqueue.c:2268 worker_thread+0x96/0xe20 kernel/workqueue.c:2414 kthread+0x388/0x470 kernel/kthread.c:268 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:351 } ... key at: [] __key.69720+0x0/0x40 ... acquired at: lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] peernet2id_alloc+0xcd/0x3f0 net/core/net_namespace.c:254 rtnl_fill_link_netnsid net/core/rtnetlink.c:1572 [inline] rtnl_fill_ifinfo+0x1e7c/0x39b0 net/core/rtnetlink.c:1758 rtmsg_ifinfo_build_skb+0xcd/0x1a0 net/core/rtnetlink.c:3706 rtmsg_ifinfo_event.part.0+0x49/0xe0 net/core/rtnetlink.c:3738 rtmsg_ifinfo_event net/core/rtnetlink.c:3749 [inline] rtmsg_ifinfo+0x7f/0xa0 net/core/rtnetlink.c:3747 __dev_notify_flags+0x235/0x2c0 net/core/dev.c:8277 __dev_set_promiscuity+0x191/0x210 net/core/dev.c:8053 dev_set_promiscuity+0x4f/0xe0 net/core/dev.c:8073 macsec_dev_change_rx_flags+0x13b/0x170 drivers/net/macsec.c:3582 dev_change_rx_flags net/core/dev.c:8006 [inline] __dev_set_promiscuity.cold+0x2e3/0x340 net/core/dev.c:8050 __dev_set_rx_mode+0x21f/0x300 net/core/dev.c:8155 dev_uc_add+0xa1/0xb0 net/core/dev_addr_lists.c:592 fdb_add_hw_addr+0xf9/0x280 net/bridge/br_fdb.c:165 fdb_insert+0x173/0x1c0 net/bridge/br_fdb.c:542 br_fdb_insert+0x35/0x50 net/bridge/br_fdb.c:554 br_add_if+0xdaf/0x1900 net/bridge/br_if.c:664 do_set_master net/core/rtnetlink.c:2477 [inline] do_set_master+0x1d7/0x230 net/core/rtnetlink.c:2450 do_setlink+0xaa2/0x3680 net/core/rtnetlink.c:2612 __rtnl_newlink+0xad5/0x1590 net/core/rtnetlink.c:3273 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3398 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5461 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x6e6/0x810 net/socket.c:2352 ___sys_sendmsg+0x100/0x170 net/socket.c:2406 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2439 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 stack backtrace: CPU: 0 PID: 25700 Comm: syz-executor.4 Not tainted 5.7.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x188/0x20d lib/dump_stack.c:118 print_bad_irq_dependency kernel/locking/lockdep.c:2132 [inline] check_irq_usage.cold+0x566/0x6de kernel/locking/lockdep.c:2330 check_prev_add kernel/locking/lockdep.c:2519 [inline] check_prevs_add kernel/locking/lockdep.c:2620 [inline] validate_chain kernel/locking/lockdep.c:3237 [inline] __lock_acquire+0x2ac9/0x4c50 kernel/locking/lockdep.c:4355 lock_acquire+0x1f2/0x8f0 kernel/locking/lockdep.c:4934 __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline] _raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:151 spin_lock include/linux/spinlock.h:353 [inline] peernet2id_alloc+0xcd/0x3f0 net/core/net_namespace.c:254 rtnl_fill_link_netnsid net/core/rtnetlink.c:1572 [inline] rtnl_fill_ifinfo+0x1e7c/0x39b0 net/core/rtnetlink.c:1758 rtmsg_ifinfo_build_skb+0xcd/0x1a0 net/core/rtnetlink.c:3706 rtmsg_ifinfo_event.part.0+0x49/0xe0 net/core/rtnetlink.c:3738 rtmsg_ifinfo_event net/core/rtnetlink.c:3749 [inline] rtmsg_ifinfo+0x7f/0xa0 net/core/rtnetlink.c:3747 __dev_notify_flags+0x235/0x2c0 net/core/dev.c:8277 __dev_set_promiscuity+0x191/0x210 net/core/dev.c:8053 dev_set_promiscuity+0x4f/0xe0 net/core/dev.c:8073 macsec_dev_change_rx_flags+0x13b/0x170 drivers/net/macsec.c:3582 dev_change_rx_flags net/core/dev.c:8006 [inline] __dev_set_promiscuity.cold+0x2e3/0x340 net/core/dev.c:8050 __dev_set_rx_mode+0x21f/0x300 net/core/dev.c:8155 dev_uc_add+0xa1/0xb0 net/core/dev_addr_lists.c:592 fdb_add_hw_addr+0xf9/0x280 net/bridge/br_fdb.c:165 fdb_insert+0x173/0x1c0 net/bridge/br_fdb.c:542 br_fdb_insert+0x35/0x50 net/bridge/br_fdb.c:554 br_add_if+0xdaf/0x1900 net/bridge/br_if.c:664 do_set_master net/core/rtnetlink.c:2477 [inline] do_set_master+0x1d7/0x230 net/core/rtnetlink.c:2450 do_setlink+0xaa2/0x3680 net/core/rtnetlink.c:2612 __rtnl_newlink+0xad5/0x1590 net/core/rtnetlink.c:3273 rtnl_newlink+0x64/0xa0 net/core/rtnetlink.c:3398 rtnetlink_rcv_msg+0x44e/0xad0 net/core/rtnetlink.c:5461 netlink_rcv_skb+0x15a/0x410 net/netlink/af_netlink.c:2469 netlink_unicast_kernel net/netlink/af_netlink.c:1303 [inline] netlink_unicast+0x537/0x740 net/netlink/af_netlink.c:1329 netlink_sendmsg+0x882/0xe10 net/netlink/af_netlink.c:1918 sock_sendmsg_nosec net/socket.c:652 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:672 ____sys_sendmsg+0x6e6/0x810 net/socket.c:2352 ___sys_sendmsg+0x100/0x170 net/socket.c:2406 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2439 do_syscall_64+0xf6/0x7d0 arch/x86/entry/common.c:295 entry_SYSCALL_64_after_hwframe+0x49/0xb3 RIP: 0033:0x45ca29 Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 RSP: 002b:00007fad13729c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007fad1372a6d4