./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3220250669 <...> Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. execve("./syz-executor3220250669", ["./syz-executor3220250669"], 0x7ffca05cc5c0 /* 10 vars */) = 0 brk(NULL) = 0x55558c405000 brk(0x55558c405d00) = 0x55558c405d00 arch_prctl(ARCH_SET_FS, 0x55558c405380) = 0 set_tid_address(0x55558c405650) = 5832 set_robust_list(0x55558c405660, 24) = 0 rseq(0x55558c405ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3220250669", 4096) = 28 getrandom("\x8f\x72\x90\x34\xcc\x84\x27\xf6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558c405d00 brk(0x55558c426d00) = 0x55558c426d00 brk(0x55558c427000) = 0x55558c427000 mprotect(0x7ff9ea450000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5833 attached [pid 5833] set_robust_list(0x55558c405660, 24 [pid 5832] <... clone resumed>, child_tidptr=0x55558c405650) = 5833 [pid 5833] <... set_robust_list resumed>) = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] getppid() = 0 [pid 5833] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5833] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5833] unshare(CLONE_NEWNS) = 0 [pid 5833] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5833] unshare(CLONE_NEWIPC) = 0 [pid 5833] unshare(CLONE_NEWCGROUP) = 0 [pid 5833] unshare(CLONE_NEWUTS) = 0 [pid 5833] unshare(CLONE_SYSVSEM) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "16777216", 8) = 8 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "536870912", 9) = 9 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "8192", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5833] close(3) = 0 [pid 5833] getpid() = 1 [pid 5833] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 92.093238][ T5833] dump_stack_lvl+0x189/0x250 [ 92.093278][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.093311][ T5833] ? __irq_work_queue_local+0x13a/0x3e0 [ 92.093346][ T5833] ? print_lock_name+0xde/0x100 [ 92.093388][ T5833] __might_resched+0x495/0x610 [ 92.093414][ T5833] ? __wake_up_klogd+0x1c/0x110 [ 92.093439][ T5833] ? __pfx___might_resched+0x10/0x10 [ 92.093480][ T5833] __mutex_lock+0x106/0xe80 [ 92.093513][ T5833] ? __pfx__printk+0x10/0x10 [ 92.093539][ T5833] ? team_change_rx_flags+0x38/0x220 [ 92.093576][ T5833] ? __netdev_printk+0x1bf/0x4d0 [ 92.093598][ T5833] ? __pfx___mutex_lock+0x10/0x10 [ 92.093628][ T5833] ? netdev_info+0x10a/0x160 [ 92.093659][ T5833] ? __pfx_netdev_info+0x10/0x10 [ 92.093693][ T5833] team_change_rx_flags+0x38/0x220 [ 92.093732][ T5833] ? __pfx_team_change_rx_flags+0x10/0x10 [ 92.093763][ T5833] __dev_set_promiscuity+0x3f8/0x590 [ 92.093801][ T5833] netif_set_promiscuity+0x50/0xe0 [ 92.093833][ T5833] dev_set_promiscuity+0x126/0x260 [ 92.093863][ T5833] packet_notifier+0x292/0xa60 [ 92.093894][ T5833] ? packet_notifier+0x78/0xa60 [ 92.093928][ T5833] notifier_call_chain+0x1b3/0x3e0 [ 92.093960][ T5833] unregister_netdevice_many_notify+0x15d8/0x2330 [ 92.093994][ T5833] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 92.094031][ T5833] ? rtnl_dellink+0x331/0x710 [ 92.094062][ T5833] ? unregister_netdevice_queue+0x1b3/0x380 [ 92.094100][ T5833] ? __nla_parse+0x40/0x60 [ 92.094125][ T5833] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 92.094150][ T5833] rtnl_dellink+0x488/0x710 [ 92.094175][ T5833] ? __pfx_rtnl_dellink+0x10/0x10 [ 92.094273][ T5833] ? __pfx_rtnl_dellink+0x10/0x10 [ 92.094291][ T5833] rtnetlink_rcv_msg+0x7cf/0xb70 [ 92.094315][ T5833] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 92.094333][ T5833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.094357][ T5833] ? ref_tracker_free+0x63a/0x7d0 [ 92.094375][ T5833] ? __copy_skb_header+0xa7/0x550 [ 92.094408][ T5833] netlink_rcv_skb+0x219/0x490 [ 92.094429][ T5833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.094451][ T5833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.094498][ T5833] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.094522][ T5833] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.094552][ T5833] netlink_unicast+0x75b/0x8d0 [ 92.094584][ T5833] netlink_sendmsg+0x805/0xb30 [ 92.094618][ T5833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.094642][ T5833] ? aa_sock_msg_perm+0x94/0x160 [ 92.094665][ T5833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.094686][ T5833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.094708][ T5833] __sock_sendmsg+0x219/0x270 [ 92.094728][ T5833] ____sys_sendmsg+0x505/0x830 [ 92.094758][ T5833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.094790][ T5833] ? import_iovec+0x74/0xa0 [ 92.094819][ T5833] ___sys_sendmsg+0x21f/0x2a0 [ 92.094845][ T5833] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.094873][ T5833] ? do_raw_spin_lock+0x121/0x290 [ 92.094908][ T5833] ? _raw_spin_lock_irq+0xae/0xf0 [ 92.094955][ T5833] __x64_sys_sendmsg+0x19b/0x260 [ 92.094982][ T5833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.095027][ T5833] do_syscall_64+0xf6/0x210 [ 92.095052][ T5833] ? clear_bhb_loop+0x60/0xb0 [ 92.095073][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.095089][ T5833] RIP: 0033:0x7ff9ea3d7899 [ 92.095111][ T5833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 92.095126][ T5833] RSP: 002b:00007fffa38d2898 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.095144][ T5833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9ea3d7899 [ 92.095156][ T5833] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 92.095166][ T5833] RBP: 00007ff9ea42547d R08: 0000555500000000 R09: 0000555500000000 [ 92.095178][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9ea4253e5 [ 92.095188][ T5833] R13: 0000000000000001 R14: 00007fffa38d28e0 R15: 0000000000000003 [ 92.095213][ T5833] [ 92.514995][ T5833] [ 92.517363][ T5833] ============================= [ 92.522208][ T5833] [ BUG: Invalid wait context ] [ 92.527144][ T5833] 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 Tainted: G W [ 92.535834][ T5833] ----------------------------- [ 92.540684][ T5833] syz-executor322/5833 is trying to lock: [ 92.546410][ T5833] ffff88807dc50e00 (team->team_lock_key){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 92.556356][ T5833] other info that might help us debug this: [ 92.562245][ T5833] context-{5:5} [ 92.565703][ T5833] 2 locks held by syz-executor322/5833: [ 92.571247][ T5833] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 92.580232][ T5833] #1: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: packet_notifier+0x78/0xa60 [ 92.589654][ T5833] stack backtrace: [ 92.593378][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor322 Tainted: G W 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 92.593402][ T5833] Tainted: [W]=WARN [ 92.593408][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.593418][ T5833] Call Trace: [ 92.593426][ T5833] [ 92.593433][ T5833] dump_stack_lvl+0x189/0x250 [ 92.593461][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.593485][ T5833] ? __pfx__printk+0x10/0x10 [ 92.593500][ T5833] ? __irq_work_queue_local+0x13a/0x3e0 [ 92.593524][ T5833] ? print_lock_name+0xde/0x100 [ 92.593552][ T5833] __lock_acquire+0xbcf/0xd20 [ 92.593584][ T5833] ? team_change_rx_flags+0x38/0x220 [ 92.593609][ T5833] lock_acquire+0x120/0x360 [ 92.593633][ T5833] ? team_change_rx_flags+0x38/0x220 [ 92.593663][ T5833] __mutex_lock+0x182/0xe80 [ 92.593685][ T5833] ? team_change_rx_flags+0x38/0x220 [ 92.593712][ T5833] ? __pfx__printk+0x10/0x10 [ 92.593728][ T5833] ? team_change_rx_flags+0x38/0x220 [ 92.593753][ T5833] ? __netdev_printk+0x1bf/0x4d0 [ 92.593768][ T5833] ? __pfx___mutex_lock+0x10/0x10 [ 92.593790][ T5833] ? netdev_info+0x10a/0x160 [ 92.593810][ T5833] ? __pfx_netdev_info+0x10/0x10 [ 92.593832][ T5833] team_change_rx_flags+0x38/0x220 [ 92.593860][ T5833] ? __pfx_team_change_rx_flags+0x10/0x10 [ 92.593884][ T5833] __dev_set_promiscuity+0x3f8/0x590 [ 92.593909][ T5833] netif_set_promiscuity+0x50/0xe0 [ 92.593932][ T5833] dev_set_promiscuity+0x126/0x260 [ 92.593955][ T5833] packet_notifier+0x292/0xa60 [ 92.593975][ T5833] ? packet_notifier+0x78/0xa60 [ 92.593995][ T5833] notifier_call_chain+0x1b3/0x3e0 [ 92.594014][ T5833] unregister_netdevice_many_notify+0x15d8/0x2330 [ 92.594037][ T5833] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 92.594065][ T5833] ? rtnl_dellink+0x331/0x710 [ 92.594086][ T5833] ? unregister_netdevice_queue+0x1b3/0x380 [ 92.594115][ T5833] ? __nla_parse+0x40/0x60 [ 92.594137][ T5833] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 92.594162][ T5833] rtnl_dellink+0x488/0x710 [ 92.594182][ T5833] ? __pfx_rtnl_dellink+0x10/0x10 [ 92.594234][ T5833] ? __pfx_rtnl_dellink+0x10/0x10 [ 92.594252][ T5833] rtnetlink_rcv_msg+0x7cf/0xb70 [ 92.594272][ T5833] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 92.594290][ T5833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.594310][ T5833] ? ref_tracker_free+0x63a/0x7d0 [ 92.594328][ T5833] ? __copy_skb_header+0xa7/0x550 [ 92.594355][ T5833] netlink_rcv_skb+0x219/0x490 [ 92.594375][ T5833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.594394][ T5833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.594420][ T5833] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.594438][ T5833] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.594459][ T5833] netlink_unicast+0x75b/0x8d0 [ 92.594483][ T5833] netlink_sendmsg+0x805/0xb30 [ 92.594510][ T5833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.594531][ T5833] ? aa_sock_msg_perm+0x94/0x160 [ 92.594551][ T5833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 92.594577][ T5833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.594597][ T5833] __sock_sendmsg+0x219/0x270 [ 92.594615][ T5833] ____sys_sendmsg+0x505/0x830 [ 92.594640][ T5833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.594666][ T5833] ? import_iovec+0x74/0xa0 [ 92.594691][ T5833] ___sys_sendmsg+0x21f/0x2a0 [ 92.594716][ T5833] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.594740][ T5833] ? do_raw_spin_lock+0x121/0x290 [ 92.594766][ T5833] ? _raw_spin_lock_irq+0xae/0xf0 [ 92.594793][ T5833] __x64_sys_sendmsg+0x19b/0x260 [ 92.594817][ T5833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 92.594851][ T5833] do_syscall_64+0xf6/0x210 [ 92.594874][ T5833] ? clear_bhb_loop+0x60/0xb0 [ 92.594893][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.594909][ T5833] RIP: 0033:0x7ff9ea3d7899 [ 92.594925][ T5833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 92.594939][ T5833] RSP: 002b:00007fffa38d2898 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.594956][ T5833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff9ea3d7899 [ 92.594968][ T5833] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 92.594978][ T5833] RBP: 00007ff9ea42547d R08: 0000555500000000 R09: 0000555500000000 [ 92.594989][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9ea4253e5 [ 92.595000][ T5833] R13: 0000000000000001 R14: 00007fffa38d28e0 R15: 0000000000000003 [ 92.595016][ T5833] [ 93.027056][ T5833] team_slave_0: left promiscuous mode [ 93.032628][ T5833] team_slave_1: left promiscuous mode [ 93.042275][ T5833] team0 (unregistering): Port device team_slave_0 removed [ 93.057513][ T5833] team0 (unregistering): Port device team_slave_1 removed [pid 5833] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x20\x00\x00\x00\x11\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=32}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32 [pid 5833] exit_group(1) = ? [pid 5833] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=1, si_utime=0, si_stime=131 /* 1.31 s */} --- exit_group(0) = ? +++ exited with 0 +++