./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2115029348 <...> no interfaces have a carrier [ 27.878688][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.888242][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 28.342665][ T3299] sshd (3299) used greatest stack depth: 22392 bytes left OK syzkaller Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. execve("./syz-executor2115029348", ["./syz-executor2115029348"], 0x7ffe798d7000 /* 10 vars */) = 0 brk(NULL) = 0x555555c94000 brk(0x555555c94c40) = 0x555555c94c40 arch_prctl(ARCH_SET_FS, 0x555555c94300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555555c945d0) = 3629 set_robust_list(0x555555c945e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7ff82ce489d0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7ff82ce490a0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7ff82ce48a70, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff82ce490a0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2115029348", 4096) = 28 brk(0x555555cb5c40) = 0x555555cb5c40 brk(0x555555cb6000) = 0x555555cb6000 mprotect(0x7ff82cf09000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3630 attached , child_tidptr=0x555555c945d0) = 3630 [pid 3630] set_robust_list(0x555555c945e0, 24) = 0 [pid 3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3630] setpgid(0, 0) = 0 [pid 3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3630] write(3, "1000", 4) = 4 [pid 3630] close(3) = 0 [pid 3630] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff82ce18000 [pid 3630] mprotect(0x7ff82ce19000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3630] clone(child_stack=0x7ff82ce383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3631], tls=0x7ff82ce38700, child_tidptr=0x7ff82ce389d0) = 3631 ./strace-static-x86_64: Process 3631 attached [pid 3630] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] set_robust_list(0x7ff82ce389e0, 24) = 0 [pid 3631] openat(AT_FDCWD, "/dev/virtual_nci", O_RDWR [pid 3630] <... futex resumed>) = 0 [pid 3630] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] <... openat resumed>) = 3 [pid 3631] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3631] ioctl(3, _IOC(_IOC_NONE, 0, 0, 0) [pid 3630] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3631] <... ioctl resumed>, 0x200000c0) = 0 [pid 3630] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3630] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 3631] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3631] futex(0x7ff82cf0f428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3630] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3630] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] sendto(4, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 3631] recvfrom(4, [{nlmsg_len=472, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3630}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1f\x00\x00\x00\x80\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0b\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 472 [pid 3631] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3630}, {error=0, msg={nlmsg_len=28, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 3631] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3631] futex(0x7ff82cf0f428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3630] <... futex resumed>) = 0 [pid 3630] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... futex resumed>) = 0 [pid 3630] <... futex resumed>) = 1 [pid 3631] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x1c\x00\x00\x00\x1d\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x02\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00", iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3630] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3630] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff82cdf7000 [pid 3630] mprotect(0x7ff82cdf8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3630] clone(child_stack=0x7ff82ce173f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3636 attached , parent_tid=[3636], tls=0x7ff82ce17700, child_tidptr=0x7ff82ce179d0) = 3636 [pid 3630] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] set_robust_list(0x7ff82ce179e0, 24) = 0 [pid 3636] write(3, "\x40\x00\x00\x00\x00\x00", 6) = 6 [pid 3636] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3630] <... futex resumed>) = 0 [pid 3636] write(3, "\x40\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20 [pid 3630] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] <... write resumed>) = 20 [pid 3630] <... futex resumed>) = 0 [pid 3636] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3630] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] <... futex resumed>) = 0 [pid 3630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] write(3, "\x41\x00\x00\x00", 4 [pid 3630] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000 [pid 3636] <... write resumed>) = 4 [pid 3630] <... futex resumed>) = 0 [pid 3636] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3630] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3636] <... futex resumed>) = 0 [pid 3630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3636] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x1d\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x06\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x03\x00\xff\xff\xff\xff", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3630] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3630] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3630] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3630] exit_group(0) = ? [pid 3636] <... sendmsg resumed>) = ? [pid 3636] +++ exited with 0 +++ [pid 3631] <... sendmsg resumed>) = ? [pid 3631] +++ exited with 0 +++ [pid 3630] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3630, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555c945d0) = 3637 ./strace-static-x86_64: Process 3637 attached [pid 3637] set_robust_list(0x555555c945e0, 24) = 0 [pid 3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3637] setpgid(0, 0) = 0 [pid 3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3637] write(3, "1000", 4) = 4 [pid 3637] close(3) = 0 [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff82ce18000 [pid 3637] mprotect(0x7ff82ce19000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3637] clone(child_stack=0x7ff82ce383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3638], tls=0x7ff82ce38700, child_tidptr=0x7ff82ce389d0) = 3638 [pid 3637] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3638 attached [pid 3638] set_robust_list(0x7ff82ce389e0, 24) = 0 [pid 3638] openat(AT_FDCWD, "/dev/virtual_nci", O_RDWR) = 3 [pid 3638] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... futex resumed>) = 0 [pid 3637] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] <... futex resumed>) = 1 [pid 3638] ioctl(3, _IOC(_IOC_NONE, 0, 0, 0), 0x200000c0) = 0 [pid 3638] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... futex resumed>) = 0 [pid 3637] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] <... futex resumed>) = 1 [pid 3638] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 3638] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... futex resumed>) = 0 [pid 3637] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3638] <... futex resumed>) = 1 [pid 3638] sendto(4, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 3638] recvfrom(4, [{nlmsg_len=472, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3637}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1f\x00\x00\x00\x80\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0b\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 472 [pid 3638] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3637}, {error=0, msg={nlmsg_len=28, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 3638] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3637] <... futex resumed>) = 0 [pid 3638] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x1c\x00\x00\x00\x1d\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x02\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00", iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3637] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 syzkaller login: [ 53.330825][ T3631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3637] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff82cdf7000 [pid 3637] mprotect(0x7ff82cdf8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3637] clone(child_stack=0x7ff82ce173f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3642 attached , parent_tid=[3642], tls=0x7ff82ce17700, child_tidptr=0x7ff82ce179d0) = 3642 [pid 3642] set_robust_list(0x7ff82ce179e0, 24 [pid 3637] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3642] <... set_robust_list resumed>) = 0 [pid 3637] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] write(3, "\x40\x00\x00\x00\x00\x00", 6) = 6 [pid 3642] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3642] futex(0x7ff82cf0f438, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3637] <... futex resumed>) = 0 [pid 3637] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3642] <... futex resumed>) = 0 [pid 3637] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] write(3, "\x40\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20) = 20 [pid 3642] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3637] <... futex resumed>) = 0 [pid 3642] futex(0x7ff82cf0f438, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3637] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3637] <... futex resumed>) = 0 [pid 3642] write(3, "\x41\x00\x00\x00", 4 [pid 3637] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] <... write resumed>) = 4 [pid 3638] <... sendmsg resumed>) = 28 [pid 3638] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3642] <... futex resumed>) = 1 [pid 3638] futex(0x7ff82cf0f428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3637] <... futex resumed>) = 0 [pid 3642] futex(0x7ff82cf0f438, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3637] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3638] <... futex resumed>) = 0 [pid 3637] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 53.445795][ T3638] [ 53.448167][ T3638] ====================================================== [ 53.455183][ T3638] WARNING: possible circular locking dependency detected [ 53.462180][ T3638] 6.1.0-rc6-syzkaller-00251-g0b1dcc2cf55a #0 Not tainted [ 53.469201][ T3638] ------------------------------------------------------ [ 53.476209][ T3638] syz-executor211/3638 is trying to acquire lock: [ 53.482628][ T3638] ffff88801706f350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x688/0x900 [ 53.491770][ T3638] [ 53.491770][ T3638] but task is already holding lock: [ 53.499132][ T3638] ffff88801706c508 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x19e/0x490 [ 53.509722][ T3638] [ 53.509722][ T3638] which lock already depends on the new lock. [ 53.509722][ T3638] [ 53.520112][ T3638] [ 53.520112][ T3638] the existing dependency chain (in reverse order) is: [ 53.529923][ T3638] [ 53.529923][ T3638] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 53.538591][ T3638] __mutex_lock+0x12f/0x1360 [ 53.543698][ T3638] nfc_urelease_event_work+0x143/0x2d0 [ 53.549664][ T3638] process_one_work+0x9bf/0x1710 [ 53.555132][ T3638] worker_thread+0x669/0x1090 [ 53.560336][ T3638] kthread+0x2e8/0x3a0 [ 53.564908][ T3638] ret_from_fork+0x1f/0x30 [ 53.569836][ T3638] [ 53.569836][ T3638] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 53.577637][ T3638] __mutex_lock+0x12f/0x1360 [ 53.582741][ T3638] nfc_register_device+0x32/0x3b0 [ 53.588270][ T3638] nci_register_device+0x7cb/0xb50 [ 53.593896][ T3638] virtual_ncidev_open+0x71/0x110 [ 53.599432][ T3638] misc_open+0x37a/0x4a0 [ 53.604182][ T3638] chrdev_open+0x26a/0x770 [ 53.609103][ T3638] do_dentry_open+0x6cc/0x13f0 [ 53.614372][ T3638] path_openat+0x1bf6/0x2860 [ 53.619475][ T3638] do_filp_open+0x1ba/0x410 [ 53.624484][ T3638] do_sys_openat2+0x16d/0x4c0 [ 53.629666][ T3638] __x64_sys_openat+0x143/0x1f0 [ 53.635025][ T3638] do_syscall_64+0x39/0xb0 [ 53.639953][ T3638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.646358][ T3638] [ 53.646358][ T3638] -> #1 (nci_mutex){+.+.}-{3:3}: [ 53.653723][ T3638] __mutex_lock+0x12f/0x1360 [ 53.658826][ T3638] virtual_nci_close+0x17/0x50 [ 53.664101][ T3638] nci_dev_up+0x4cb/0x660 [ 53.668942][ T3638] nfc_dev_up+0x1aa/0x3b0 [ 53.673792][ T3638] nfc_genl_dev_up+0xa6/0xf0 [ 53.678889][ T3638] genl_family_rcv_msg_doit+0x228/0x320 [ 53.684942][ T3638] genl_rcv_msg+0x445/0x780 [ 53.689951][ T3638] netlink_rcv_skb+0x157/0x430 [ 53.695228][ T3638] genl_rcv+0x28/0x40 [ 53.699716][ T3638] netlink_unicast+0x547/0x7f0 [ 53.704993][ T3638] netlink_sendmsg+0x91b/0xe10 [ 53.710272][ T3638] sock_sendmsg+0xd3/0x120 [ 53.715208][ T3638] ____sys_sendmsg+0x712/0x8c0 [ 53.720486][ T3638] ___sys_sendmsg+0x110/0x1b0 [ 53.725673][ T3638] __sys_sendmsg+0xf7/0x1c0 [ 53.730678][ T3638] do_syscall_64+0x39/0xb0 [ 53.735610][ T3638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.742011][ T3638] [ 53.742011][ T3638] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 53.749638][ T3638] __lock_acquire+0x2a43/0x56d0 [ 53.755002][ T3638] lock_acquire+0x1e3/0x630 [ 53.760017][ T3638] __mutex_lock+0x12f/0x1360 [ 53.765118][ T3638] nci_start_poll+0x688/0x900 [ 53.770310][ T3638] nfc_start_poll+0x192/0x320 [ 53.775494][ T3638] nfc_genl_start_poll+0x1ac/0x490 [ 53.781200][ T3638] genl_family_rcv_msg_doit+0x228/0x320 [ 53.787254][ T3638] genl_rcv_msg+0x445/0x780 [ 53.792268][ T3638] netlink_rcv_skb+0x157/0x430 [ 53.797547][ T3638] genl_rcv+0x28/0x40 [ 53.802031][ T3638] netlink_unicast+0x547/0x7f0 [ 53.807307][ T3638] netlink_sendmsg+0x91b/0xe10 [ 53.812584][ T3638] sock_sendmsg+0xd3/0x120 [ 53.817514][ T3638] ____sys_sendmsg+0x712/0x8c0 [ 53.822787][ T3638] ___sys_sendmsg+0x110/0x1b0 [ 53.827970][ T3638] __sys_sendmsg+0xf7/0x1c0 [ 53.832979][ T3638] do_syscall_64+0x39/0xb0 [ 53.837908][ T3638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.844315][ T3638] [ 53.844315][ T3638] other info that might help us debug this: [ 53.844315][ T3638] [ 53.854530][ T3638] Chain exists of: [ 53.854530][ T3638] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 53.854530][ T3638] [ 53.868771][ T3638] Possible unsafe locking scenario: [ 53.868771][ T3638] [ 53.876202][ T3638] CPU0 CPU1 [ 53.881548][ T3638] ---- ---- [ 53.886895][ T3638] lock(&genl_data->genl_data_mutex); [ 53.892339][ T3638] lock(nfc_devlist_mutex); [ 53.899429][ T3638] lock(&genl_data->genl_data_mutex); [ 53.907389][ T3638] lock(&ndev->req_lock); [ 53.911787][ T3638] [ 53.911787][ T3638] *** DEADLOCK *** [ 53.911787][ T3638] [ 53.919911][ T3638] 4 locks held by syz-executor211/3638: [ 53.925434][ T3638] #0: ffffffff8df50630 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 53.933603][ T3638] #1: ffffffff8df506e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x50d/0x780 [ 53.942559][ T3638] #2: ffff88801706c508 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x19e/0x490 [ 53.953607][ T3638] #3: ffff88801706c100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x58/0x320 [ 53.962737][ T3638] [ 53.962737][ T3638] stack backtrace: [ 53.968611][ T3638] CPU: 1 PID: 3638 Comm: syz-executor211 Not tainted 6.1.0-rc6-syzkaller-00251-g0b1dcc2cf55a #0 [ 53.979009][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.989050][ T3638] Call Trace: [ 53.992315][ T3638] [ 53.995232][ T3638] dump_stack_lvl+0xd1/0x138 [ 53.999819][ T3638] check_noncircular+0x25f/0x2e0 [ 54.004751][ T3638] ? print_circular_bug+0x1e0/0x1e0 [ 54.009944][ T3638] ? __kmem_cache_free+0xaf/0x3b0 [ 54.014962][ T3638] ? kasan_save_stack+0x35/0x40 [ 54.019802][ T3638] ? ____kasan_slab_free+0x160/0x1c0 [ 54.025076][ T3638] ? slab_free_freelist_hook+0x8b/0x1c0 [ 54.030613][ T3638] ? __kmem_cache_free+0xaf/0x3b0 [ 54.035626][ T3638] ? nfc_llcp_build_gb.isra.0+0x2b8/0x3f0 [ 54.041335][ T3638] ? nfc_llcp_general_bytes+0x30/0xe0 [ 54.046700][ T3638] __lock_acquire+0x2a43/0x56d0 [ 54.051549][ T3638] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 54.057527][ T3638] lock_acquire+0x1e3/0x630 [ 54.062112][ T3638] ? nci_start_poll+0x688/0x900 [ 54.066958][ T3638] ? lock_release+0x810/0x810 [ 54.071630][ T3638] __mutex_lock+0x12f/0x1360 [ 54.076213][ T3638] ? nci_start_poll+0x688/0x900 [ 54.081059][ T3638] ? nfc_llcp_build_gb.isra.0+0x2b8/0x3f0 [ 54.086768][ T3638] ? nci_start_poll+0x688/0x900 [ 54.091616][ T3638] ? nfc_llcp_reserve_sdp_ssap+0x120/0x120 [ 54.097411][ T3638] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 54.102953][ T3638] ? rcu_read_lock_sched_held+0x3e/0x70 [ 54.108491][ T3638] ? trace_contention_end+0x153/0x1e0 [ 54.113860][ T3638] nci_start_poll+0x688/0x900 [ 54.118535][ T3638] ? nci_dep_link_up+0x1b0/0x1b0 [ 54.123465][ T3638] ? nfc_genl_start_poll+0x19e/0x490 [ 54.128740][ T3638] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 54.134288][ T3638] nfc_start_poll+0x192/0x320 [ 54.138954][ T3638] nfc_genl_start_poll+0x1ac/0x490 [ 54.144056][ T3638] genl_family_rcv_msg_doit+0x228/0x320 [ 54.149597][ T3638] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 54.156966][ T3638] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 54.162515][ T3638] ? ns_capable+0xdd/0x100 [ 54.166945][ T3638] genl_rcv_msg+0x445/0x780 [ 54.171449][ T3638] ? genl_start+0x670/0x670 [ 54.175938][ T3638] ? nfc_genl_dep_link_up+0x250/0x250 [ 54.181296][ T3638] ? lock_release+0x810/0x810 [ 54.185969][ T3638] netlink_rcv_skb+0x157/0x430 [ 54.190728][ T3638] ? genl_start+0x670/0x670 [ 54.195216][ T3638] ? netlink_ack+0xd60/0xd60 [ 54.199806][ T3638] ? netlink_deliver_tap+0x1b1/0xc50 [ 54.205087][ T3638] genl_rcv+0x28/0x40 [ 54.209053][ T3638] netlink_unicast+0x547/0x7f0 [ 54.213809][ T3638] ? netlink_attachskb+0x890/0x890 [ 54.218917][ T3638] ? __virt_addr_valid+0x61/0x2e0 [ 54.223933][ T3638] ? __phys_addr_symbol+0x30/0x70 [ 54.228951][ T3638] ? __check_object_size+0x2e2/0x5a0 [ 54.234231][ T3638] netlink_sendmsg+0x91b/0xe10 [ 54.238992][ T3638] ? netlink_unicast+0x7f0/0x7f0 [ 54.243927][ T3638] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 54.249202][ T3638] ? netlink_unicast+0x7f0/0x7f0 [ 54.254132][ T3638] sock_sendmsg+0xd3/0x120 [ 54.258542][ T3638] ____sys_sendmsg+0x712/0x8c0 [ 54.263297][ T3638] ? copy_msghdr_from_user+0xfc/0x150 [ 54.268655][ T3638] ? kernel_sendmsg+0x50/0x50 [ 54.273327][ T3638] ___sys_sendmsg+0x110/0x1b0 [ 54.277989][ T3638] ? do_recvmmsg+0x6e0/0x6e0 [ 54.282563][ T3638] ? __fget_files+0x248/0x440 [ 54.287228][ T3638] ? lock_downgrade+0x6e0/0x6e0 [ 54.292073][ T3638] ? lock_release+0x810/0x810 [ 54.296742][ T3638] ? __fget_files+0x26a/0x440 [ 54.301408][ T3638] ? __fget_light+0xe5/0x270 [ 54.305987][ T3638] __sys_sendmsg+0xf7/0x1c0 [ 54.310478][ T3638] ? __sys_sendmsg_sock+0x40/0x40 [ 54.315486][ T3638] ? lock_downgrade+0x6e0/0x6e0 [ 54.320333][ T3638] ? lockdep_hardirqs_on+0x7d/0x100 [ 54.325526][ T3638] ? _raw_spin_unlock_irq+0x2e/0x50 [ 54.330709][ T3638] ? ptrace_notify+0xfe/0x140 [ 54.335381][ T3638] do_syscall_64+0x39/0xb0 [ 54.339788][ T3638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.345668][ T3638] RIP: 0033:0x7ff82ce87639 [ 54.350067][ T3638] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.369665][ T3638] RSP: 002b:00007ff82ce38318 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.378065][ T3638] RAX: ffffffffffffffda RBX: 00007ff82cf0f428 RCX: 00007ff82ce87639 [ 54.386023][ T3638] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [pid 3638] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x1d\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x06\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x03\x00\xff\xff\xff\xff", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 54.393981][ T3638] RBP: 00007ff82cf0f420 R08: 0000000000000003 R09: 0000000000000000 [ 54.401938][ T3638] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ff82cedd064 [ 54.409897][ T3638] R13: 00007ffe0dfc945f R14: 00007ff82ce38400 R15: 0000000000022000 [ 54.417859][ T3638] [pid 3637] exit_group(0 [pid 3642] <... futex resumed>) = ? [pid 3637] <... exit_group resumed>) = ? [pid 3642] +++ exited with 0 +++ [pid 3638] <... sendmsg resumed>) = ? [ 54.553668][ T3638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.562443][ T3638] nci: nci_start_poll: failed to set local general bytes [pid 3629] kill(-3637, SIGKILL) = 0 [pid 3629] kill(3637, SIGKILL) = 0 [pid 3629] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3629] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3629] getdents64(3, 0x555555c95620 /* 2 entries */, 32768) = 48 [pid 3629] getdents64(3, 0x555555c95620 /* 0 entries */, 32768) = 0 [pid 3629] close(3) = 0 [pid 3638] +++ exited with 0 +++ [pid 3637] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3637, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555c945d0) = 3645 ./strace-static-x86_64: Process 3645 attached [pid 3645] set_robust_list(0x555555c945e0, 24) = 0 [pid 3645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3645] setpgid(0, 0) = 0 [pid 3645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3645] write(3, "1000", 4) = 4 [pid 3645] close(3) = 0 [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff82ce18000 [pid 3645] mprotect(0x7ff82ce19000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3645] clone(child_stack=0x7ff82ce383f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3647 attached [pid 3647] set_robust_list(0x7ff82ce389e0, 24 [pid 3645] <... clone resumed>, parent_tid=[3647], tls=0x7ff82ce38700, child_tidptr=0x7ff82ce389d0) = 3647 [pid 3645] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] <... set_robust_list resumed>) = 0 [pid 3645] <... futex resumed>) = 0 [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3647] openat(AT_FDCWD, "/dev/virtual_nci", O_RDWR) = 3 [pid 3647] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] <... futex resumed>) = 0 [pid 3645] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3647] <... futex resumed>) = 1 [pid 3647] ioctl(3, _IOC(_IOC_NONE, 0, 0, 0), 0x200000c0) = 0 [pid 3647] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] <... futex resumed>) = 0 [pid 3645] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3647] <... futex resumed>) = 1 [pid 3647] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 3647] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3645] <... futex resumed>) = 0 [pid 3647] futex(0x7ff82cf0f428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3645] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3645] <... futex resumed>) = 0 [pid 3647] sendto(4, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12 [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3647] <... sendto resumed>) = 28 [pid 3647] recvfrom(4, [{nlmsg_len=472, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3645}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x66\x63\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x1f\x00\x00\x00\x80\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0b\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 472 [pid 3647] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3645}, {error=0, msg={nlmsg_len=28, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 3647] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3645] <... futex resumed>) = 0 [pid 3645] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 59.575455][ T3638] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [pid 3647] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x1c\x00\x00\x00\x1d\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x02\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00", iov_len=28}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3645] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3645] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff82cdf7000 [pid 3645] mprotect(0x7ff82cdf8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3645] clone(child_stack=0x7ff82ce173f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3651], tls=0x7ff82ce17700, child_tidptr=0x7ff82ce179d0) = 3651 [pid 3645] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3651 attached [pid 3651] set_robust_list(0x7ff82ce179e0, 24) = 0 [pid 3651] write(3, "\x40\x00\x00\x00\x00\x00", 6) = 6 [pid 3651] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] <... futex resumed>) = 0 [pid 3645] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3651] <... futex resumed>) = 1 [pid 3651] write(3, "\x40\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 20) = 20 [pid 3651] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3645] <... futex resumed>) = 0 [pid 3645] futex(0x7ff82cf0f438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3645] futex(0x7ff82cf0f43c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3651] <... futex resumed>) = 1 [pid 3651] write(3, "\x41\x00\x00\x00", 4) = 4 [pid 3647] <... sendmsg resumed>) = 28 [pid 3651] futex(0x7ff82cf0f43c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] futex(0x7ff82cf0f42c, FUTEX_WAKE_PRIVATE, 1000000 [pid 3651] <... futex resumed>) = 1 [pid 3647] <... futex resumed>) = 0 [pid 3645] <... futex resumed>) = 0 [pid 3651] futex(0x7ff82cf0f438, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3647] futex(0x7ff82cf0f428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3645] futex(0x7ff82cf0f428, FUTEX_WAKE_PRIVATE, 1000000 [pid 3647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3645] <... futex resumed>) = 0 [pid 3647] sendmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x24\x00\x00\x00\x1d\x00\x01\x00\x23\x01\x00\x00\x34\x02\x00\x00\x06\x00\x00\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x03\x00\xff\xff\xff\xff", iov_len=36}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 3645] futex(0x7ff82cf0f42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3645] exit_group(0) = ? [pid 3651] <... futex resumed>) = ? [pid 3651] +++ exited with 0 +++ [pid 3647] <... sendmsg resumed>) = ? [ 59.846557][ T3647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 59.855429][ T3647] nci: nci_start_poll: failed to set local general bytes