./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor792282896 <...> Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. execve("./syz-executor792282896", ["./syz-executor792282896"], 0x7ffc774f97e0 /* 10 vars */) = 0 brk(NULL) = 0x555572405000 brk(0x555572405d00) = 0x555572405d00 arch_prctl(ARCH_SET_FS, 0x555572405380) = 0 set_tid_address(0x555572405650) = 5070 set_robust_list(0x555572405660, 24) = 0 rseq(0x555572405ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor792282896", 4096) = 27 getrandom("\x85\x82\xa6\x96\x89\x31\xef\x38", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555572405d00 brk(0x555572426d00) = 0x555572426d00 brk(0x555572427000) = 0x555572427000 mprotect(0x7fb580e0a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached , child_tidptr=0x555572405650) = 5071 [pid 5071] set_robust_list(0x555572405660, 24) = 0 [pid 5071] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setsid() = 1 [pid 5071] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5071] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5071] unshare(CLONE_NEWNS) = 0 [pid 5071] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5071] unshare(CLONE_NEWIPC) = 0 [pid 5071] unshare(CLONE_NEWCGROUP) = 0 [pid 5071] unshare(CLONE_NEWUTS) = 0 [pid 5071] unshare(CLONE_SYSVSEM) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "16777216", 8) = 8 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "536870912", 9) = 9 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "8192", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5071] close(3) = 0 [pid 5071] getpid() = 1 [pid 5071] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<seqnr_lock){+.-.}-{2:2}, at: hsr_dev_xmit+0x13e/0x1d0 [ 89.242086][ C1] [ 89.242086][ C1] but task is already holding lock: [ 89.249466][ C1] ffff88801edacda0 (&hsr->seqnr_lock){+.-.}-{2:2}, at: send_hsr_supervision_frame+0x276/0xad0 [ 89.259753][ C1] [ 89.259753][ C1] other info that might help us debug this: [ 89.267806][ C1] Possible unsafe locking scenario: [ 89.267806][ C1] [ 89.275275][ C1] CPU0 [ 89.278557][ C1] ---- [ 89.281838][ C1] lock(&hsr->seqnr_lock); [ 89.286641][ C1] lock(&hsr->seqnr_lock); [ 89.291220][ C1] [ 89.291220][ C1] *** DEADLOCK *** [ 89.291220][ C1] [ 89.299382][ C1] May be due to missing lock nesting notation [ 89.299382][ C1] [ 89.307713][ C1] 7 locks held by swapper/1/0: [ 89.312528][ C1] #0: ffffc90000a08c00 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x600 [ 89.322652][ C1] #1: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: hsr_announce+0xa3/0x370 [ 89.331859][ C1] #2: ffff88801edacda0 (&hsr->seqnr_lock){+.-.}-{2:2}, at: send_hsr_supervision_frame+0x276/0xad0 [ 89.342597][ C1] #3: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: hsr_forward_skb+0xae/0x2400 [ 89.352198][ C1] #4: ffffffff8e131980 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2c4/0x3b10 [ 89.362191][ C1] #5: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: br_dev_xmit+0x1b9/0x1a10 [ 89.371446][ C1] #6: ffffffff8e131980 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2c4/0x3b10 [ 89.381395][ C1] [ 89.381395][ C1] stack backtrace: [ 89.387284][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 [ 89.397434][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 89.407581][ C1] Call Trace: [ 89.410878][ C1] [ 89.413741][ C1] dump_stack_lvl+0x1e7/0x2e0 [ 89.418447][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.423680][ C1] ? print_deadlock_bug+0x479/0x620 [ 89.428914][ C1] ? _find_first_zero_bit+0xd4/0x100 [ 89.434247][ C1] validate_chain+0x15c1/0x58e0 [ 89.439138][ C1] ? tcp_ack+0x2420/0x6b60 [ 89.443596][ C1] ? __pfx_validate_chain+0x10/0x10 [ 89.448810][ C1] ? __pfx_validate_chain+0x10/0x10 [ 89.454022][ C1] ? __pfx_validate_chain+0x10/0x10 [ 89.459238][ C1] ? hlock_conflict+0x59/0x1e0 [ 89.464085][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 89.469315][ C1] ? __pfx___bfs+0x10/0x10 [ 89.473758][ C1] ? __pfx_validate_chain+0x10/0x10 [ 89.479157][ C1] ? unwind_next_frame+0x1b90/0x2a00 [ 89.484569][ C1] ? check_path+0x21/0x40 [ 89.488902][ C1] ? check_noncircular+0x259/0x4a0 [ 89.494022][ C1] ? mark_lock+0x9a/0x350 [ 89.498380][ C1] __lock_acquire+0x1346/0x1fd0 [ 89.503274][ C1] lock_acquire+0x1e4/0x530 [ 89.507800][ C1] ? hsr_dev_xmit+0x13e/0x1d0 [ 89.512503][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 89.517827][ C1] ? hsr_dev_xmit+0x13e/0x1d0 [ 89.522651][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 89.528552][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 89.534180][ C1] ? hsr_dev_xmit+0x13e/0x1d0 [ 89.540730][ C1] _raw_spin_lock_bh+0x35/0x50 [ 89.546245][ C1] ? hsr_dev_xmit+0x13e/0x1d0 [ 89.551078][ C1] hsr_dev_xmit+0x13e/0x1d0 [ 89.555612][ C1] dev_hard_start_xmit+0x26a/0x790 [ 89.560838][ C1] __dev_queue_xmit+0x19f4/0x3b10 [ 89.565902][ C1] ? __dev_queue_xmit+0x2c4/0x3b10 [ 89.571037][ C1] ? mark_lock+0x9a/0x350 [ 89.575397][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 89.580894][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 89.585954][ C1] ? skb_push+0x97/0x100 [ 89.590227][ C1] br_dev_queue_push_xmit+0x701/0x8d0 [ 89.596756][ C1] ? __pfx_lock_release+0x10/0x10 [ 89.601809][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 89.607748][ C1] NF_HOOK+0x3a7/0x460 [ 89.611864][ C1] ? NF_HOOK+0x9f/0x460 [ 89.616063][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 89.620735][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 89.626653][ C1] ? __pfx_lock_release+0x10/0x10 [ 89.631679][ C1] ? dev_hard_start_xmit+0x26a/0x790 [ 89.636992][ C1] ? hsr_forward_skb+0x183f/0x2400 [ 89.642198][ C1] ? hsr_announce+0x1a9/0x370 [ 89.646918][ C1] ? __run_timer_base+0x66a/0x8e0 [ 89.652561][ C1] ? __do_softirq+0x2bc/0x943 [ 89.657274][ C1] ? __irq_exit_rcu+0xf2/0x1c0 [ 89.662058][ C1] br_forward_finish+0xe5/0x140 [ 89.666925][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 89.672858][ C1] NF_HOOK+0x3a7/0x460 [ 89.676972][ C1] ? NF_HOOK+0x9f/0x460 [ 89.681156][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 89.686394][ C1] __br_forward+0x489/0x660 [ 89.691023][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 89.697221][ C1] ? __pfx___br_forward+0x10/0x10 [ 89.702592][ C1] ? skb_clone+0x240/0x390 [ 89.707380][ C1] maybe_deliver+0xb3/0x150 [ 89.712029][ C1] br_flood+0x2e4/0x660 [ 89.716345][ C1] br_dev_xmit+0x118c/0x1a10 [ 89.720950][ C1] ? mark_lock+0x9a/0x350 [ 89.725383][ C1] ? br_dev_xmit+0x1b9/0x1a10 [ 89.730063][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 89.735047][ C1] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 89.740713][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 89.746723][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 89.752710][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 89.757932][ C1] ? validate_xmit_skb+0xa04/0x1120 [ 89.763147][ C1] dev_hard_start_xmit+0x26a/0x790 [ 89.768447][ C1] __dev_queue_xmit+0x19f4/0x3b10 [ 89.773600][ C1] ? __dev_queue_xmit+0x2c4/0x3b10 [ 89.778856][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 89.787489][ C1] ? __copy_skb_header+0x437/0x5b0 [ 89.793166][ C1] ? __asan_memcpy+0x40/0x70 [ 89.797945][ C1] ? __copy_skb_header+0x437/0x5b0 [ 89.803172][ C1] ? __skb_clone+0x454/0x6c0 [ 89.809794][ C1] ? hsr_addr_subst_dest+0x29b/0x6f0 [ 89.815210][ C1] ? skb_clone+0x240/0x390 [ 89.819841][ C1] hsr_forward_skb+0x183f/0x2400 [ 89.824807][ C1] ? hsr_forward_skb+0xae/0x2400 [ 89.829765][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 89.835616][ C1] ? __asan_memset+0x23/0x50 [ 89.840793][ C1] ? __skb_pad+0x3d7/0x5c0 [ 89.845424][ C1] send_hsr_supervision_frame+0x548/0xad0 [ 89.851341][ C1] hsr_announce+0x1a9/0x370 [ 89.856316][ C1] ? hsr_announce+0xa3/0x370 [ 89.861570][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 89.866643][ C1] ? call_timer_fn+0xa8/0x600 [ 89.872243][ C1] call_timer_fn+0x17e/0x600 [ 89.876970][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 89.882023][ C1] ? call_timer_fn+0xc0/0x600 [ 89.886808][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 89.891842][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 89.897217][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 89.902341][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 89.907393][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 89.912444][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.917657][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 89.922881][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 89.927914][ C1] __run_timer_base+0x66a/0x8e0 [ 89.932789][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 89.938813][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 89.945087][ C1] run_timer_softirq+0xb7/0x170 [ 89.950154][ C1] __do_softirq+0x2bc/0x943 [ 89.954671][ C1] ? __irq_exit_rcu+0xf2/0x1c0 [ 89.959454][ C1] ? __pfx___do_softirq+0x10/0x10 [ 89.964631][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 89.969853][ C1] __irq_exit_rcu+0xf2/0x1c0 [ 89.974471][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 89.979704][ C1] irq_exit_rcu+0x9/0x30 [ 89.983997][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 89.989645][ C1] [ 89.992595][ C1] [ 89.995550][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.001619][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 90.007032][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 ce 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 15 4a 98 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 90.029435][ C1] RSP: 0018:ffffc90000197d08 EFLAGS: 00000246 [ 90.035533][ C1] RAX: ffff8880172c5a00 RBX: ffff8880172ee064 RCX: 0000000000020ea1 [ 90.043636][ C1] RDX: 0000000000000001 RSI: ffff8880172ee000 RDI: ffff8880172ee064 [ 90.051620][ C1] RBP: 0000000000039f18 R08: ffff8880b9537d0b R09: 1ffff110172a6fa1 [ 90.059711][ C1] R10: dffffc0000000000 R11: ffffffff8b701580 R12: ffff88801b7e8000 [ 90.067697][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8e8a2e80 [ 90.075683][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 90.081164][ C1] acpi_idle_enter+0xe4/0x140 [ 90.085866][ C1] cpuidle_enter_state+0x118/0x490 [ 90.091001][ C1] ? __pfx_menu_select+0x10/0x10 [ 90.095944][ C1] cpuidle_enter+0x5d/0xa0 [ 90.100460][ C1] do_idle+0x375/0x5d0 [ 90.104546][ C1] ? __pfx_do_idle+0x10/0x10 [ 90.109154][ C1] cpu_startup_entry+0x42/0x60 [ 90.119592][ C1] start_secondary+0x100/0x100 [ 90.124484][ C1] common_startup_64+0x13e/0x147 [ 90.129461][ C1] [pid 5071] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=1, si_utime=1 /* 0.01 s */, si_stime=130 /* 1.30 s */} --- exit_group(0) = ? +++ exited with 0 +++