./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3744323600 <...> no interfaces have a carrier [ 22.753166][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.763260][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 23.116852][ T3276] sshd (3276) used greatest stack depth: 22520 bytes left OK syzkaller Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. execve("./syz-executor3744323600", ["./syz-executor3744323600"], 0x7fff350f9630 /* 10 vars */) = 0 brk(NULL) = 0x555556cb4000 brk(0x555556cb4c40) = 0x555556cb4c40 arch_prctl(ARCH_SET_FS, 0x555556cb4300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555556cb45d0) = 3604 set_robust_list(0x555556cb45e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f7947064ed0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f79470655a0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f7947064f70, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f79470655a0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3744323600", 4096) = 28 brk(0x555556cd5c40) = 0x555556cd5c40 brk(0x555556cd6000) = 0x555556cd6000 mprotect(0x7f7947125000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 futex(0x7f794712b4cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7947035000 mprotect(0x7f7947036000, 131072, PROT_READ|PROT_WRITE) = 0 clone(child_stack=0x7f79470553f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3605], tls=0x7f7947055700, child_tidptr=0x7f79470559d0) = 3605 futex(0x7f794712b4c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 futex(0x7f794712b4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3605 attached [pid 3605] set_robust_list(0x7f79470559e0, 24) = 0 [pid 3605] openat(AT_FDCWD, "/dev/ptmx", O_RDONLY) = 3 [pid 3605] futex(0x7f794712b4cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3605] readv(3, [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3604] futex(0x7f794712b4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3604] futex(0x7f794712b4cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3604] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7947014000 [pid 3604] mprotect(0x7f7947015000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3604] clone(child_stack=0x7f79470343f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3606], tls=0x7f7947034700, child_tidptr=0x7f79470349d0) = 3606 [pid 3604] futex(0x7f794712b4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f794712b4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3606 attached [pid 3606] set_robust_list(0x7f79470349e0, 24) = 0 [pid 3606] ioctl(3, TIOCSPTLCK, [0]) = 0 [pid 3606] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f794712b4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... futex resumed>) = 1 [pid 3606] openat(AT_FDCWD, "/dev/dlm-monitor", O_RDONLY) = 4 [pid 3606] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f794712b4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... futex resumed>) = 1 [pid 3606] close(4) = 0 [pid 3606] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f794712b4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... futex resumed>) = 1 [pid 3606] ioctl(3, TIOCGPTN, [0]) = 0 [pid 3606] openat(AT_FDCWD, "/dev/pts/0", O_RDWR) = 4 [pid 3606] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f794712b4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... futex resumed>) = 1 [pid 3606] dup3(4, 3, 0) = 3 [pid 3606] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f794712b4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... futex resumed>) = 1 [pid 3606] ioctl(4, TIOCSETD, [21]) = 0 [pid 3606] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f794712b4d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f794712b4dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3606] <... futex resumed>) = 1 syzkaller login: [ 42.834134][ T3606] INFO: trying to register non-static key. [ 42.839969][ T3606] The code is fine but needs lockdep annotation, or maybe [ 42.847050][ T3606] you didn't initialize this object before use? [ 42.853262][ T3606] turning off the locking correctness validator. [ 42.859557][ T3606] CPU: 1 PID: 3606 Comm: syz-executor374 Not tainted 6.0.0-rc1-syzkaller-00399-g15b3f48a4339 #0 [ 42.869942][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 42.880150][ T3606] Call Trace: [ 42.883408][ T3606] [ 42.886316][ T3606] dump_stack_lvl+0xcd/0x134 [ 42.890912][ T3606] register_lock_class+0xf1b/0x1120 [ 42.896096][ T3606] ? is_dynamic_key.part.0+0x130/0x130 [ 42.901538][ T3606] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 42.907495][ T3606] ? __lock_acquire+0xbc3/0x56d0 [ 42.912416][ T3606] __lock_acquire+0x109/0x56d0 [ 42.917162][ T3606] ? find_held_lock+0x2d/0x110 [ 42.921905][ T3606] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 42.927869][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 42.932718][ T3606] lock_acquire+0x1ab/0x570 [ 42.937214][ T3606] ? gsmld_write+0x5e/0x140 [ 42.941709][ T3606] ? lock_release+0x780/0x780 [ 42.946379][ T3606] ? _copy_mc_to_iter+0x1430/0x1430 [ 42.951569][ T3606] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 42.956938][ T3606] _raw_spin_lock_irqsave+0x39/0x50 [ 42.962137][ T3606] ? gsmld_write+0x5e/0x140 [ 42.966632][ T3606] gsmld_write+0x5e/0x140 [ 42.970949][ T3606] file_tty_write.constprop.0+0x499/0x8f0 [ 42.976688][ T3606] ? gsmtty_tiocmget+0xd0/0xd0 [ 42.981442][ T3606] vfs_write+0x9e9/0xdd0 [ 42.985681][ T3606] ? vfs_read+0x930/0x930 [ 42.990001][ T3606] ? __fget_files+0x26a/0x440 [ 42.994759][ T3606] ? __fget_light+0xe5/0x270 [ 42.999336][ T3606] ksys_write+0x127/0x250 [ 43.003656][ T3606] ? __ia32_sys_read+0xb0/0xb0 [ 43.008410][ T3606] ? lockdep_hardirqs_on+0x79/0x100 [ 43.013603][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40 [ 43.018790][ T3606] ? ptrace_notify+0xfa/0x140 [ 43.023460][ T3606] do_syscall_64+0x35/0xb0 [ 43.027867][ T3606] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.033755][ T3606] RIP: 0033:0x7f79470a30c9 [ 43.038159][ T3606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.057847][ T3606] RSP: 002b:00007f7947034268 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.066250][ T3606] RAX: ffffffffffffffda RBX: 00007f794712b4d0 RCX: 00007f79470a30c9 [ 43.074301][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [pid 3606] write(3, NULL, 0 [pid 3604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3606] <... write resumed>) = 0 [pid 3606] futex(0x7f794712b4dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 43.082282][ T3606] RBP: 00007f79470f9010 R08: 0000000000000000 R09: 0000000000000000 [ 43.090243][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7947034280 [ 43.098202][ T3606] R13: 6d74702f7665642f R14: 00007f794703427c R15: 00007f794712b4d8 [ 43.106167][ T3606] [pid 3606] futex(0x7f794712b4d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3604] exit_group(0) = ? [pid 3606] <... futex resumed>) = ? [pid 3606] +++ exited with 0 +++ [pid 3605] <... readv resumed> ) = ? [pid 3605] +++ exited with 0 +++ +++ exited with 0 +++