./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1949224615 <...> Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. execve("./syz-executor1949224615", ["./syz-executor1949224615"], 0x7ffe56ec64e0 /* 10 vars */) = 0 brk(NULL) = 0x555561ea1000 brk(0x555561ea1d00) = 0x555561ea1d00 arch_prctl(ARCH_SET_FS, 0x555561ea1380) = 0 set_tid_address(0x555561ea1650) = 5087 set_robust_list(0x555561ea1660, 24) = 0 rseq(0x555561ea1ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1949224615", 4096) = 28 getrandom("\x9e\x32\x9b\x63\x84\xf1\x73\xae", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555561ea1d00 brk(0x555561ec2d00) = 0x555561ec2d00 brk(0x555561ec3000) = 0x555561ec3000 mprotect(0x7fe8a4b86000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached , child_tidptr=0x555561ea1650) = 5088 [pid 5088] set_robust_list(0x555561ea1660, 24) = 0 [pid 5088] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setsid() = 1 [pid 5088] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5088] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5088] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5088] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5088] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5088] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5088] unshare(CLONE_NEWNS) = 0 [pid 5088] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5088] unshare(CLONE_NEWIPC) = 0 [pid 5088] unshare(CLONE_NEWCGROUP) = 0 [pid 5088] unshare(CLONE_NEWUTS) = 0 [pid 5088] unshare(CLONE_SYSVSEM) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "16777216", 8) = 8 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "536870912", 9) = 9 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1024", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "8192", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1024", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1024", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5088] close(3) = 0 [pid 5088] getpid() = 1 [pid 5088] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<team_lock_key){+.+.}-{3:3}, at: team_port_change_check+0x51/0x1e0 [ 66.455584][ T5088] [ 66.455584][ T5088] but task is already holding lock: [ 66.462937][ T5088] ffff8880204bcd20 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 66.472394][ T5088] [ 66.472394][ T5088] other info that might help us debug this: [ 66.480428][ T5088] Possible unsafe locking scenario: [ 66.480428][ T5088] [ 66.487866][ T5088] CPU0 [ 66.491125][ T5088] ---- [ 66.494380][ T5088] lock(team->team_lock_key); [ 66.499130][ T5088] lock(team->team_lock_key); [ 66.503873][ T5088] [ 66.503873][ T5088] *** DEADLOCK *** [ 66.503873][ T5088] [ 66.511993][ T5088] May be due to missing lock nesting notation [ 66.511993][ T5088] [ 66.520289][ T5088] 2 locks held by syz-executor194/5088: [ 66.525812][ T5088] #0: ffffffff8f5a8a08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x10d0 [ 66.535271][ T5088] #1: ffff8880204bcd20 (team->team_lock_key){+.+.}-{3:3}, at: team_add_slave+0xad/0x2750 [ 66.545162][ T5088] [ 66.545162][ T5088] stack backtrace: [ 66.551030][ T5088] CPU: 0 PID: 5088 Comm: syz-executor194 Not tainted 6.9.0-rc6-syzkaller-01461-g5829614a7b3b #0 [ 66.561421][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 66.571457][ T5088] Call Trace: [ 66.574720][ T5088] [ 66.577634][ T5088] dump_stack_lvl+0x241/0x360 [ 66.582305][ T5088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.587488][ T5088] ? print_deadlock_bug+0x479/0x620 [ 66.592669][ T5088] ? _find_first_zero_bit+0xd4/0x100 [ 66.597942][ T5088] validate_chain+0x15c1/0x58e0 [ 66.602796][ T5088] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 66.608696][ T5088] ? __wake_up_common_lock+0x18c/0x1e0 [ 66.614178][ T5088] ? __pfx_validate_chain+0x10/0x10 [ 66.619370][ T5088] ? consume_skb+0xc4/0x160 [ 66.623857][ T5088] ? netlink_broadcast_filtered+0x1259/0x1290 [ 66.629911][ T5088] ? nlmsg_notify+0xfb/0x1c0 [ 66.634483][ T5088] ? nlmsg_notify+0x15a/0x1c0 [ 66.639146][ T5088] ? rtmsg_fib+0x3a3/0x630 [ 66.643542][ T5088] ? mark_lock+0x9a/0x350 [ 66.647853][ T5088] ? __pfx_rtmsg_fib+0x10/0x10 [ 66.652596][ T5088] __lock_acquire+0x1346/0x1fd0 [ 66.657433][ T5088] lock_acquire+0x1ed/0x550 [ 66.661913][ T5088] ? team_port_change_check+0x51/0x1e0 [ 66.667362][ T5088] ? __pfx_lock_acquire+0x10/0x10 [ 66.672373][ T5088] ? neigh_lookup+0xb1/0x500 [ 66.676946][ T5088] ? __pfx___might_resched+0x10/0x10 [ 66.682210][ T5088] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 66.688698][ T5088] ? __pfx_arp_key_eq+0x10/0x10 [ 66.693528][ T5088] __mutex_lock+0x136/0xd70 [ 66.698016][ T5088] ? team_port_change_check+0x51/0x1e0 [ 66.703460][ T5088] ? neigh_lookup+0xb1/0x500 [ 66.708034][ T5088] ? __pfx_neigh_lookup+0x10/0x10 [ 66.713043][ T5088] ? bond_netdev_event+0xdd/0xf20 [ 66.718048][ T5088] ? team_port_change_check+0x51/0x1e0 [ 66.723483][ T5088] ? __pfx___mutex_lock+0x10/0x10 [ 66.728490][ T5088] ? __asan_memset+0x23/0x50 [ 66.733072][ T5088] team_port_change_check+0x51/0x1e0 [ 66.738338][ T5088] team_device_event+0x4e6/0x5b0 [ 66.743254][ T5088] ? notifier_call_chain+0x162/0x3e0 [ 66.748521][ T5088] notifier_call_chain+0x19f/0x3e0 [ 66.753633][ T5088] __dev_notify_flags+0x207/0x400 [ 66.758642][ T5088] ? dev_set_rx_mode+0xb8/0x2e0 [ 66.763473][ T5088] ? __pfx___dev_notify_flags+0x10/0x10 [ 66.768997][ T5088] ? __dev_change_flags+0x515/0x6f0 [ 66.774191][ T5088] ? __pfx___dev_change_flags+0x10/0x10 [ 66.779726][ T5088] ? dsa_user_netdevice_event+0x714/0x2970 [ 66.785514][ T5088] dev_change_flags+0xf0/0x1a0 [ 66.790260][ T5088] vlan_device_event+0x1b81/0x1de0 [ 66.795378][ T5088] ? rt6_multipath_rebalance+0x820/0x880 [ 66.800999][ T5088] ? br_device_event+0x148/0x970 [ 66.805923][ T5088] ? __pfx_phonet_device_notify+0x10/0x10 [ 66.811715][ T5088] ? __pfx_vlan_device_event+0x10/0x10 [ 66.817153][ T5088] ? __pfx_br_device_event+0x10/0x10 [ 66.822417][ T5088] ? raw_notifier+0x9d/0x740 [ 66.826988][ T5088] ? isotp_notifier+0xa4/0x6b0 [ 66.831744][ T5088] ? cgw_notifier+0xd8/0x3b0 [ 66.836316][ T5088] ? packet_notifier+0x76/0xa30 [ 66.841166][ T5088] notifier_call_chain+0x19f/0x3e0 [ 66.846270][ T5088] dev_open+0x13a/0x1b0 [ 66.850406][ T5088] ? __pfx_dev_open+0x10/0x10 [ 66.855061][ T5088] ? team_add_slave+0x8a0/0x2750 [ 66.860002][ T5088] team_add_slave+0x9b3/0x2750 [ 66.864751][ T5088] ? __pfx___dev_notify_flags+0x10/0x10 [ 66.870282][ T5088] ? __dev_change_flags+0x515/0x6f0 [ 66.875458][ T5088] ? __pfx_team_add_slave+0x10/0x10 [ 66.880638][ T5088] ? __pfx___dev_change_flags+0x10/0x10 [ 66.886164][ T5088] ? vprintk_emit+0x631/0x770 [ 66.890826][ T5088] ? mutex_is_locked+0x12/0x50 [ 66.895605][ T5088] do_setlink+0xe70/0x41f0 [ 66.900014][ T5088] ? _printk+0xd5/0x120 [ 66.904150][ T5088] ? __nla_validate_parse+0x4e4/0x2f70 [ 66.909591][ T5088] ? __pfx__printk+0x10/0x10 [ 66.914161][ T5088] ? __pfx_do_setlink+0x10/0x10 [ 66.918993][ T5088] ? __nla_validate_parse+0x259b/0x2f70 [ 66.924517][ T5088] ? netlink_unicast+0x7ea/0x980 [ 66.929441][ T5088] ? __pfx___nla_validate_parse+0x10/0x10 [ 66.935147][ T5088] ? __kasan_kmalloc+0x98/0xb0 [ 66.939896][ T5088] ? validate_linkmsg+0x71e/0x900 [ 66.944903][ T5088] rtnl_newlink+0x180b/0x20a0 [ 66.949564][ T5088] ? __kernel_text_address+0xd/0x40 [ 66.954747][ T5088] ? rtnl_newlink+0x4a1/0x20a0 [ 66.959495][ T5088] ? __pfx_rtnl_newlink+0x10/0x10 [ 66.964498][ T5088] ? __pfx___mutex_trylock_common+0x10/0x10 [ 66.970374][ T5088] ? rcu_is_watching+0x15/0xb0 [ 66.975117][ T5088] ? trace_contention_end+0x3c/0x120 [ 66.980402][ T5088] ? __mutex_lock+0x2ef/0xd70 [ 66.985062][ T5088] ? rcu_read_unlock+0x8c/0xa0 [ 66.989817][ T5088] ? __pfx_rtnl_newlink+0x10/0x10 [ 66.994842][ T5088] rtnetlink_rcv_msg+0x89b/0x10d0 [ 66.999860][ T5088] ? rtnetlink_rcv_msg+0x208/0x10d0 [ 67.005037][ T5088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.010477][ T5088] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 67.016449][ T5088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.022776][ T5088] ? __local_bh_enable_ip+0x168/0x200 [ 67.028130][ T5088] ? lockdep_hardirqs_on+0x99/0x150 [ 67.033310][ T5088] ? __local_bh_enable_ip+0x168/0x200 [ 67.038660][ T5088] ? dev_hard_start_xmit+0x773/0x7e0 [ 67.043926][ T5088] ? __dev_queue_xmit+0x2d2/0x3d30 [ 67.049019][ T5088] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 67.054733][ T5088] ? __dev_queue_xmit+0x2d2/0x3d30 [ 67.059826][ T5088] ? __dev_queue_xmit+0x16c9/0x3d30 [ 67.065005][ T5088] ? __dev_queue_xmit+0x2d2/0x3d30 [ 67.070104][ T5088] ? ref_tracker_free+0x643/0x7e0 [ 67.075109][ T5088] netlink_rcv_skb+0x1e3/0x430 [ 67.079860][ T5088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 67.085297][ T5088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 67.090569][ T5088] ? netlink_deliver_tap+0x2e/0x1b0 [ 67.095772][ T5088] netlink_unicast+0x7ea/0x980 [ 67.100520][ T5088] ? __pfx_netlink_unicast+0x10/0x10 [ 67.105784][ T5088] ? __virt_addr_valid+0x44e/0x520 [ 67.110884][ T5088] ? __phys_addr_symbol+0x2f/0x70 [ 67.115909][ T5088] ? __check_object_size+0x4bc/0xa00 [ 67.121172][ T5088] ? bpf_lsm_netlink_send+0x9/0x10 [ 67.126270][ T5088] netlink_sendmsg+0x8e1/0xcb0 [ 67.131023][ T5088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.136291][ T5088] ? __import_iovec+0x536/0x820 [ 67.141121][ T5088] ? aa_sock_msg_perm+0x91/0x160 [ 67.146039][ T5088] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 67.151306][ T5088] ? security_socket_sendmsg+0x87/0xb0 [ 67.156753][ T5088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.162021][ T5088] __sock_sendmsg+0x221/0x270 [ 67.166681][ T5088] ____sys_sendmsg+0x525/0x7d0 [ 67.171427][ T5088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.176696][ T5088] ? do_raw_spin_lock+0x14f/0x370 [ 67.181706][ T5088] __sys_sendmsg+0x2b0/0x3a0 [ 67.186279][ T5088] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.191375][ T5088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.197685][ T5088] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.202866][ T5088] ? ptrace_notify+0x279/0x380 [ 67.207612][ T5088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.213918][ T5088] ? do_syscall_64+0x102/0x240 [ 67.218665][ T5088] do_syscall_64+0xf5/0x240 [ 67.223150][ T5088] ? clear_bhb_loop+0x35/0x90 [ 67.227808][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.233682][ T5088] RIP: 0033:0x7fe8a4b0db09 [ 67.238079][ T5088] Code: 48 83 c4 28 c3 e8 d7 19 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.257664][ T5088] RSP: 002b:00007ffef059e518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.266061][ T5088] RAX: ffffffffffffffda RBX: 00007fe8a4b5b3d3 RCX: 00007fe8a4b0db09 [ 67.274016][ T5088] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 67.281966][ T5088] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 67.289918][ T5088] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffef059e550 [ 67.297886][ T5088] R13: 00007fe8a4b5b004 R14: 00007ffef059e53c R15: 0000000000000003 [ 67.305843][ T5088]