./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3163046583 <...> Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. execve("./syz-executor3163046583", ["./syz-executor3163046583"], 0x7fff101f9a00 /* 10 vars */) = 0 brk(NULL) = 0x555584e2a000 brk(0x555584e2ad00) = 0x555584e2ad00 arch_prctl(ARCH_SET_FS, 0x555584e2a380) = 0 set_tid_address(0x555584e2a650) = 5830 set_robust_list(0x555584e2a660, 24) = 0 rseq(0x555584e2aca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3163046583", 4096) = 28 getrandom("\xc8\xd4\x50\x42\x64\xea\x8e\xa3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555584e2ad00 brk(0x555584e4bd00) = 0x555584e4bd00 brk(0x555584e4c000) = 0x555584e4c000 mprotect(0x7fa537ad5000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5831 attached [pid 5831] set_robust_list(0x555584e2a660, 24 [pid 5830] <... clone resumed>, child_tidptr=0x555584e2a650) = 5831 [pid 5831] <... set_robust_list resumed>) = 0 [pid 5831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] getppid() = 0 [pid 5831] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5831] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5831] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5831] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5831] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5831] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5831] unshare(CLONE_NEWNS) = 0 [pid 5831] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5831] unshare(CLONE_NEWIPC) = 0 [pid 5831] unshare(CLONE_NEWCGROUP) = 0 [pid 5831] unshare(CLONE_NEWUTS) = 0 [pid 5831] unshare(CLONE_SYSVSEM) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "16777216", 8) = 8 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "536870912", 9) = 9 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1024", 4) = 4 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "8192", 4) = 4 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1024", 4) = 4 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1024", 4) = 4 [pid 5831] close(3) = 0 [pid 5831] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5831] close(3) = 0 [pid 5831] getpid() = 1 [pid 5831] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 105.486229][ T5831] dump_stack_lvl+0x189/0x250 [ 105.486270][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.486303][ T5831] ? __irq_work_queue_local+0x13a/0x3e0 [ 105.486336][ T5831] ? print_lock_name+0xde/0x100 [ 105.486376][ T5831] __might_resched+0x495/0x610 [ 105.486402][ T5831] ? __wake_up_klogd+0x1c/0x110 [ 105.486428][ T5831] ? __pfx___might_resched+0x10/0x10 [ 105.486465][ T5831] __mutex_lock+0x106/0xe80 [ 105.486499][ T5831] ? __pfx__printk+0x10/0x10 [ 105.486526][ T5831] ? team_change_rx_flags+0x38/0x220 [ 105.486567][ T5831] ? __netdev_printk+0x1bf/0x4d0 [ 105.486591][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 105.486622][ T5831] ? netdev_info+0x10a/0x160 [ 105.486654][ T5831] ? __pfx_netdev_info+0x10/0x10 [ 105.486689][ T5831] team_change_rx_flags+0x38/0x220 [ 105.486729][ T5831] ? __pfx_team_change_rx_flags+0x10/0x10 [ 105.486762][ T5831] __dev_set_promiscuity+0x3f8/0x590 [ 105.486844][ T5831] netif_set_promiscuity+0x50/0xe0 [ 105.486878][ T5831] dev_set_promiscuity+0x126/0x260 [ 105.486915][ T5831] packet_notifier+0x292/0xa60 [ 105.486950][ T5831] ? packet_notifier+0x78/0xa60 [ 105.486980][ T5831] notifier_call_chain+0x1b3/0x3e0 [ 105.487014][ T5831] unregister_netdevice_many_notify+0x15d8/0x2330 [ 105.487055][ T5831] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 105.487096][ T5831] ? rtnl_dellink+0x331/0x710 [ 105.487131][ T5831] ? unregister_netdevice_queue+0x1b3/0x380 [ 105.487177][ T5831] ? __nla_parse+0x40/0x60 [ 105.487211][ T5831] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 105.487245][ T5831] rtnl_dellink+0x488/0x710 [ 105.487280][ T5831] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.487412][ T5831] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.487437][ T5831] rtnetlink_rcv_msg+0x7cf/0xb70 [ 105.487467][ T5831] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 105.487492][ T5831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.487524][ T5831] ? ref_tracker_free+0x63a/0x7d0 [ 105.487548][ T5831] ? __copy_skb_header+0xa7/0x550 [ 105.487592][ T5831] netlink_rcv_skb+0x219/0x490 [ 105.487621][ T5831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.487649][ T5831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.487700][ T5831] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.487725][ T5831] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.487759][ T5831] netlink_unicast+0x75b/0x8d0 [ 105.487805][ T5831] netlink_sendmsg+0x805/0xb30 [ 105.487845][ T5831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.487876][ T5831] ? aa_sock_msg_perm+0x94/0x160 [ 105.487905][ T5831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.487931][ T5831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.487959][ T5831] __sock_sendmsg+0x219/0x270 [ 105.487987][ T5831] ____sys_sendmsg+0x505/0x830 [ 105.488026][ T5831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.488070][ T5831] ? import_iovec+0x74/0xa0 [ 105.488106][ T5831] ___sys_sendmsg+0x21f/0x2a0 [ 105.488141][ T5831] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.488178][ T5831] ? do_raw_spin_lock+0x121/0x290 [ 105.488225][ T5831] ? _raw_spin_lock_irq+0xae/0xf0 [ 105.488281][ T5831] __x64_sys_sendmsg+0x19b/0x260 [ 105.488317][ T5831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.488378][ T5831] do_syscall_64+0xf6/0x210 [ 105.488409][ T5831] ? clear_bhb_loop+0x60/0xb0 [ 105.488439][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.488461][ T5831] RIP: 0033:0x7fa537a5c859 [ 105.488492][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.488511][ T5831] RSP: 002b:00007fff93fbcb88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.488535][ T5831] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa537a5c859 [ 105.488551][ T5831] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 105.488565][ T5831] RBP: 00007fa537aaa47d R08: 0000555500000000 R09: 0000555500000000 [ 105.488581][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa537aaa3e5 [ 105.488595][ T5831] R13: 0000000000000001 R14: 00007fff93fbcbd0 R15: 0000000000000003 [ 105.488631][ T5831] [ 105.910928][ T5831] [ 105.913306][ T5831] ============================= [ 105.918163][ T5831] [ BUG: Invalid wait context ] [ 105.923009][ T5831] 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 Tainted: G W [ 105.931683][ T5831] ----------------------------- [ 105.936526][ T5831] syz-executor316/5831 is trying to lock: [ 105.942240][ T5831] ffff888076094e00 (team->team_lock_key){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 105.952270][ T5831] other info that might help us debug this: [ 105.958165][ T5831] context-{5:5} [ 105.961631][ T5831] 2 locks held by syz-executor316/5831: [ 105.967173][ T5831] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 105.976201][ T5831] #1: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: packet_notifier+0x78/0xa60 [ 105.985618][ T5831] stack backtrace: [ 105.989380][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor316 Tainted: G W 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 105.989406][ T5831] Tainted: [W]=WARN [ 105.989411][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.989422][ T5831] Call Trace: [ 105.989431][ T5831] [ 105.989439][ T5831] dump_stack_lvl+0x189/0x250 [ 105.989467][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.989492][ T5831] ? __pfx__printk+0x10/0x10 [ 105.989506][ T5831] ? __irq_work_queue_local+0x13a/0x3e0 [ 105.989530][ T5831] ? print_lock_name+0xde/0x100 [ 105.989559][ T5831] __lock_acquire+0xbcf/0xd20 [ 105.989585][ T5831] ? team_change_rx_flags+0x38/0x220 [ 105.989611][ T5831] lock_acquire+0x120/0x360 [ 105.989634][ T5831] ? team_change_rx_flags+0x38/0x220 [ 105.989665][ T5831] __mutex_lock+0x182/0xe80 [ 105.989688][ T5831] ? team_change_rx_flags+0x38/0x220 [ 105.989715][ T5831] ? __pfx__printk+0x10/0x10 [ 105.989731][ T5831] ? team_change_rx_flags+0x38/0x220 [ 105.989756][ T5831] ? __netdev_printk+0x1bf/0x4d0 [ 105.989772][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 105.989794][ T5831] ? netdev_info+0x10a/0x160 [ 105.989814][ T5831] ? __pfx_netdev_info+0x10/0x10 [ 105.989835][ T5831] team_change_rx_flags+0x38/0x220 [ 105.989862][ T5831] ? __pfx_team_change_rx_flags+0x10/0x10 [ 105.989887][ T5831] __dev_set_promiscuity+0x3f8/0x590 [ 105.989912][ T5831] netif_set_promiscuity+0x50/0xe0 [ 105.989940][ T5831] dev_set_promiscuity+0x126/0x260 [ 105.989963][ T5831] packet_notifier+0x292/0xa60 [ 105.989985][ T5831] ? packet_notifier+0x78/0xa60 [ 105.990004][ T5831] notifier_call_chain+0x1b3/0x3e0 [ 105.990024][ T5831] unregister_netdevice_many_notify+0x15d8/0x2330 [ 105.990046][ T5831] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 105.990075][ T5831] ? rtnl_dellink+0x331/0x710 [ 105.990096][ T5831] ? unregister_netdevice_queue+0x1b3/0x380 [ 105.990124][ T5831] ? __nla_parse+0x40/0x60 [ 105.990146][ T5831] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 105.990171][ T5831] rtnl_dellink+0x488/0x710 [ 105.990192][ T5831] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.990244][ T5831] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.990262][ T5831] rtnetlink_rcv_msg+0x7cf/0xb70 [ 105.990282][ T5831] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 105.990300][ T5831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.990320][ T5831] ? ref_tracker_free+0x63a/0x7d0 [ 105.990338][ T5831] ? __copy_skb_header+0xa7/0x550 [ 105.990366][ T5831] netlink_rcv_skb+0x219/0x490 [ 105.990386][ T5831] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.990405][ T5831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.990430][ T5831] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.990449][ T5831] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.990470][ T5831] netlink_unicast+0x75b/0x8d0 [ 105.990491][ T5831] netlink_sendmsg+0x805/0xb30 [ 105.990514][ T5831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.990535][ T5831] ? aa_sock_msg_perm+0x94/0x160 [ 105.990555][ T5831] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.990575][ T5831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.990595][ T5831] __sock_sendmsg+0x219/0x270 [ 105.990612][ T5831] ____sys_sendmsg+0x505/0x830 [ 105.990638][ T5831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.990664][ T5831] ? import_iovec+0x74/0xa0 [ 105.990691][ T5831] ___sys_sendmsg+0x21f/0x2a0 [ 105.990716][ T5831] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.990740][ T5831] ? do_raw_spin_lock+0x121/0x290 [ 105.990765][ T5831] ? _raw_spin_lock_irq+0xae/0xf0 [ 105.990792][ T5831] __x64_sys_sendmsg+0x19b/0x260 [ 105.990816][ T5831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.990848][ T5831] do_syscall_64+0xf6/0x210 [ 105.990872][ T5831] ? clear_bhb_loop+0x60/0xb0 [ 105.990891][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.990908][ T5831] RIP: 0033:0x7fa537a5c859 [ 105.990923][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.990942][ T5831] RSP: 002b:00007fff93fbcb88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.990959][ T5831] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa537a5c859 [ 105.990971][ T5831] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 105.990982][ T5831] RBP: 00007fa537aaa47d R08: 0000555500000000 R09: 0000555500000000 [ 105.990993][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa537aaa3e5 [ 105.991004][ T5831] R13: 0000000000000001 R14: 00007fff93fbcbd0 R15: 0000000000000003 [ 105.991021][ T5831] [ 106.426492][ T5831] team_slave_0: left promiscuous mode [ 106.432710][ T5831] team_slave_1: left promiscuous mode [ 106.442567][ T5831] team0 (unregistering): Port device team_slave_0 removed [ 106.453688][ T5831] team0 (unregistering): Port device team_slave_1 removed [pid 5831] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x20\x00\x00\x00\x11\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=32}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32 [pid 5831] exit_group(1) = ? [pid 5831] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=1, si_utime=0, si_stime=140 /* 1.40 s */} --- exit_group(0) = ? +++ exited with 0 +++