./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor229204161 <...> Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. execve("./syz-executor229204161", ["./syz-executor229204161"], 0x7ffde8b501b0 /* 10 vars */) = 0 brk(NULL) = 0x555560a22000 brk(0x555560a22d00) = 0x555560a22d00 arch_prctl(ARCH_SET_FS, 0x555560a22380) = 0 set_tid_address(0x555560a22650) = 5836 set_robust_list(0x555560a22660, 24) = 0 rseq(0x555560a22ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor229204161", 4096) = 27 getrandom("\xdc\xc3\x3f\x0f\x05\x79\x81\x9f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555560a22d00 brk(0x555560a43d00) = 0x555560a43d00 brk(0x555560a44000) = 0x555560a44000 mprotect(0x7f68f2ed5000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5838 attached , child_tidptr=0x555560a22650) = 5838 [pid 5838] set_robust_list(0x555560a22660, 24) = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] getppid() = 0 [pid 5838] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5838] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5838] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5838] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5838] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5838] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5838] unshare(CLONE_NEWNS) = 0 [pid 5838] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5838] unshare(CLONE_NEWIPC) = 0 [pid 5838] unshare(CLONE_NEWCGROUP) = 0 [pid 5838] unshare(CLONE_NEWUTS) = 0 [pid 5838] unshare(CLONE_SYSVSEM) = 0 [pid 5838] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "16777216", 8) = 8 [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "536870912", 9) = 9 [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1024", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "8192", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1024", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1024", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5838] close(3) = 0 [pid 5838] getpid() = 1 [pid 5838] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 105.299510][ T5838] dump_stack_lvl+0x189/0x250 [ 105.299535][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.299555][ T5838] ? __irq_work_queue_local+0x13a/0x3e0 [ 105.299595][ T5838] ? print_lock_name+0xde/0x100 [ 105.299623][ T5838] __might_resched+0x495/0x610 [ 105.299640][ T5838] ? __wake_up_klogd+0x1c/0x110 [ 105.299657][ T5838] ? __pfx___might_resched+0x10/0x10 [ 105.299683][ T5838] __mutex_lock+0x106/0xe80 [ 105.299705][ T5838] ? __pfx__printk+0x10/0x10 [ 105.299721][ T5838] ? team_change_rx_flags+0x38/0x220 [ 105.299758][ T5838] ? __netdev_printk+0x1bf/0x4d0 [ 105.299772][ T5838] ? __pfx___mutex_lock+0x10/0x10 [ 105.299790][ T5838] ? netdev_info+0x10a/0x160 [ 105.299809][ T5838] ? __pfx_netdev_info+0x10/0x10 [ 105.299830][ T5838] team_change_rx_flags+0x38/0x220 [ 105.299853][ T5838] ? __pfx_team_change_rx_flags+0x10/0x10 [ 105.299873][ T5838] __dev_set_promiscuity+0x3f8/0x590 [ 105.299897][ T5838] netif_set_promiscuity+0x50/0xe0 [ 105.299916][ T5838] dev_set_promiscuity+0x126/0x260 [ 105.299937][ T5838] packet_notifier+0x292/0xa60 [ 105.299956][ T5838] ? packet_notifier+0x78/0xa60 [ 105.299972][ T5838] notifier_call_chain+0x1b3/0x3e0 [ 105.299991][ T5838] unregister_netdevice_many_notify+0x15d8/0x2330 [ 105.300014][ T5838] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 105.300037][ T5838] ? rtnl_dellink+0x331/0x710 [ 105.300056][ T5838] ? unregister_netdevice_queue+0x1b3/0x380 [ 105.300081][ T5838] ? __nla_parse+0x40/0x60 [ 105.300100][ T5838] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 105.300119][ T5838] rtnl_dellink+0x488/0x710 [ 105.300138][ T5838] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.300221][ T5838] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.300236][ T5838] rtnetlink_rcv_msg+0x7cf/0xb70 [ 105.300253][ T5838] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 105.300268][ T5838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.300286][ T5838] ? ref_tracker_free+0x63a/0x7d0 [ 105.300300][ T5838] ? __copy_skb_header+0xa7/0x550 [ 105.300326][ T5838] netlink_rcv_skb+0x219/0x490 [ 105.300343][ T5838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.300359][ T5838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.300388][ T5838] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.300404][ T5838] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.300424][ T5838] netlink_unicast+0x75b/0x8d0 [ 105.300446][ T5838] netlink_sendmsg+0x805/0xb30 [ 105.300469][ T5838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.300488][ T5838] ? aa_sock_msg_perm+0x94/0x160 [ 105.300504][ T5838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.300521][ T5838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.300539][ T5838] __sock_sendmsg+0x219/0x270 [ 105.300574][ T5838] ____sys_sendmsg+0x505/0x830 [ 105.300599][ T5838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.300627][ T5838] ? import_iovec+0x74/0xa0 [ 105.300653][ T5838] ___sys_sendmsg+0x21f/0x2a0 [ 105.300676][ T5838] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.300698][ T5838] ? do_raw_spin_lock+0x121/0x290 [ 105.300726][ T5838] ? _raw_spin_lock_irq+0xae/0xf0 [ 105.300761][ T5838] __x64_sys_sendmsg+0x19b/0x260 [ 105.300782][ T5838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.300819][ T5838] do_syscall_64+0xf6/0x210 [ 105.300839][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 105.300856][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.300870][ T5838] RIP: 0033:0x7f68f2e5c859 [ 105.300888][ T5838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.300900][ T5838] RSP: 002b:00007ffcc3ba51b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.300915][ T5838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f68f2e5c859 [ 105.300925][ T5838] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 105.300933][ T5838] RBP: 00007f68f2eaa47d R08: 0000555500000000 R09: 0000555500000000 [ 105.300943][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f68f2eaa3e5 [ 105.300952][ T5838] R13: 0000000000000001 R14: 00007ffcc3ba5200 R15: 0000000000000003 [ 105.300973][ T5838] [ 105.300982][ T5838] [ 105.712056][ T5838] ============================= [ 105.716903][ T5838] [ BUG: Invalid wait context ] [ 105.721748][ T5838] 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 Tainted: G W [ 105.730413][ T5838] ----------------------------- [ 105.735259][ T5838] syz-executor229/5838 is trying to lock: [ 105.740976][ T5838] ffff88807cedce00 (team->team_lock_key){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 105.750913][ T5838] other info that might help us debug this: [ 105.756798][ T5838] context-{5:5} [ 105.760259][ T5838] 2 locks held by syz-executor229/5838: [ 105.765887][ T5838] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 105.774869][ T5838] #1: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: packet_notifier+0x78/0xa60 [ 105.784289][ T5838] stack backtrace: [ 105.788098][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor229 Tainted: G W 6.15.0-rc6-syzkaller-00168-g239af1970bcb #0 PREEMPT(full) [ 105.788123][ T5838] Tainted: [W]=WARN [ 105.788128][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.788138][ T5838] Call Trace: [ 105.788145][ T5838] [ 105.788153][ T5838] dump_stack_lvl+0x189/0x250 [ 105.788186][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.788210][ T5838] ? __pfx__printk+0x10/0x10 [ 105.788225][ T5838] ? __irq_work_queue_local+0x13a/0x3e0 [ 105.788249][ T5838] ? print_lock_name+0xde/0x100 [ 105.788278][ T5838] __lock_acquire+0xbcf/0xd20 [ 105.788304][ T5838] ? team_change_rx_flags+0x38/0x220 [ 105.788330][ T5838] lock_acquire+0x120/0x360 [ 105.788353][ T5838] ? team_change_rx_flags+0x38/0x220 [ 105.788384][ T5838] __mutex_lock+0x182/0xe80 [ 105.788406][ T5838] ? team_change_rx_flags+0x38/0x220 [ 105.788433][ T5838] ? __pfx__printk+0x10/0x10 [ 105.788450][ T5838] ? team_change_rx_flags+0x38/0x220 [ 105.788475][ T5838] ? __netdev_printk+0x1bf/0x4d0 [ 105.788490][ T5838] ? __pfx___mutex_lock+0x10/0x10 [ 105.788512][ T5838] ? netdev_info+0x10a/0x160 [ 105.788532][ T5838] ? __pfx_netdev_info+0x10/0x10 [ 105.788553][ T5838] team_change_rx_flags+0x38/0x220 [ 105.788580][ T5838] ? __pfx_team_change_rx_flags+0x10/0x10 [ 105.788606][ T5838] __dev_set_promiscuity+0x3f8/0x590 [ 105.788631][ T5838] netif_set_promiscuity+0x50/0xe0 [ 105.788653][ T5838] dev_set_promiscuity+0x126/0x260 [ 105.788676][ T5838] packet_notifier+0x292/0xa60 [ 105.788697][ T5838] ? packet_notifier+0x78/0xa60 [ 105.788716][ T5838] notifier_call_chain+0x1b3/0x3e0 [ 105.788736][ T5838] unregister_netdevice_many_notify+0x15d8/0x2330 [ 105.788758][ T5838] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 105.788787][ T5838] ? rtnl_dellink+0x331/0x710 [ 105.788807][ T5838] ? unregister_netdevice_queue+0x1b3/0x380 [ 105.788836][ T5838] ? __nla_parse+0x40/0x60 [ 105.788858][ T5838] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 105.788883][ T5838] rtnl_dellink+0x488/0x710 [ 105.788916][ T5838] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.788966][ T5838] ? __pfx_rtnl_dellink+0x10/0x10 [ 105.788983][ T5838] rtnetlink_rcv_msg+0x7cf/0xb70 [ 105.789003][ T5838] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 105.789020][ T5838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.789039][ T5838] ? ref_tracker_free+0x63a/0x7d0 [ 105.789056][ T5838] ? __copy_skb_header+0xa7/0x550 [ 105.789083][ T5838] netlink_rcv_skb+0x219/0x490 [ 105.789102][ T5838] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.789121][ T5838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.789170][ T5838] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.789189][ T5838] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.789210][ T5838] netlink_unicast+0x75b/0x8d0 [ 105.789230][ T5838] netlink_sendmsg+0x805/0xb30 [ 105.789253][ T5838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.789274][ T5838] ? aa_sock_msg_perm+0x94/0x160 [ 105.789294][ T5838] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 105.789313][ T5838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.789333][ T5838] __sock_sendmsg+0x219/0x270 [ 105.789351][ T5838] ____sys_sendmsg+0x505/0x830 [ 105.789376][ T5838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.789403][ T5838] ? import_iovec+0x74/0xa0 [ 105.789429][ T5838] ___sys_sendmsg+0x21f/0x2a0 [ 105.789453][ T5838] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.789477][ T5838] ? do_raw_spin_lock+0x121/0x290 [ 105.789503][ T5838] ? _raw_spin_lock_irq+0xae/0xf0 [ 105.789530][ T5838] __x64_sys_sendmsg+0x19b/0x260 [ 105.789554][ T5838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.789586][ T5838] do_syscall_64+0xf6/0x210 [ 105.789610][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 105.789629][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.789646][ T5838] RIP: 0033:0x7f68f2e5c859 [ 105.789661][ T5838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 105.789675][ T5838] RSP: 002b:00007ffcc3ba51b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.789692][ T5838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f68f2e5c859 [ 105.789703][ T5838] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 105.789714][ T5838] RBP: 00007f68f2eaa47d R08: 0000555500000000 R09: 0000555500000000 [ 105.789726][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f68f2eaa3e5 [ 105.789736][ T5838] R13: 0000000000000001 R14: 00007ffcc3ba5200 R15: 0000000000000003 [ 105.789753][ T5838] [ 106.220310][ T5838] team_slave_0: left promiscuous mode [ 106.225877][ T5838] team_slave_1: left promiscuous mode [ 106.236609][ T5838] team0 (unregistering): Port device team_slave_0 removed [pid 5838] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x20\x00\x00\x00\x11\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=32}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 32 [pid 5838] exit_group(1) = ? [ 106.246288][ T5838] team0 (unregistering): Port device team_slave_1 removed [pid 5838] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5838, si_uid=0, si_status=1, si_utime=0, si_stime=134 /* 1.34 s */} --- exit_group(0) = ? +++ exited with 0 +++