possible deadlock in lapbeth_device_event ============================================ WARNING: possible recursive locking detected 6.14.0-syzkaller-gacb4f33713b9 #0 Not tainted -------------------------------------------- dhcpcd/5021 is trying to acquire lock: ffff88804e10cd28 (&dev->lock){+.+.}-{4:4}, at: netdev_lock include/linux/netdevice.h:2751 [inline] ffff88804e10cd28 (&dev->lock){+.+.}-{4:4}, at: netif_napi_add_weight include/linux/netdevice.h:2783 [inline] ffff88804e10cd28 (&dev->lock){+.+.}-{4:4}, at: lapbeth_new_device drivers/net/wan/lapbether.c:415 [inline] ffff88804e10cd28 (&dev->lock){+.+.}-{4:4}, at: lapbeth_device_event+0x766/0xa20 drivers/net/wan/lapbether.c:460 but task is already holding lock: ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: netdev_lock include/linux/netdevice.h:2751 [inline] ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: netdev_lock_ops include/net/netdev_lock.h:42 [inline] ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 net/core/dev_api.c:67 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&dev->lock); lock(&dev->lock); *** DEADLOCK *** May be due to missing lock nesting notation 2 locks held by dhcpcd/5021: #0: ffffffff900e1888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:130 [inline] #0: ffffffff900e1888 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 net/ipv4/devinet.c:1121 #1: ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: netdev_lock include/linux/netdevice.h:2751 [inline] #1: ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: netdev_lock_ops include/net/netdev_lock.h:42 [inline] #1: ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 net/core/dev_api.c:67 stack backtrace: CPU: 0 UID: 0 PID: 5021 Comm: dhcpcd Not tainted 6.14.0-syzkaller-gacb4f33713b9 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_deadlock_bug+0x2be/0x2d0 kernel/locking/lockdep.c:3042 check_deadlock kernel/locking/lockdep.c:3094 [inline] validate_chain+0x928/0x24e0 kernel/locking/lockdep.c:3896 __lock_acquire+0xad5/0xd80 kernel/locking/lockdep.c:5235 lock_acquire+0x116/0x2f0 kernel/locking/lockdep.c:5866 __mutex_lock_common kernel/locking/mutex.c:587 [inline] __mutex_lock+0x1a5/0x10c0 kernel/locking/mutex.c:732 netdev_lock include/linux/netdevice.h:2751 [inline] netif_napi_add_weight include/linux/netdevice.h:2783 [inline] lapbeth_new_device drivers/net/wan/lapbether.c:415 [inline] lapbeth_device_event+0x766/0xa20 drivers/net/wan/lapbether.c:460 notifier_call_chain+0x1a5/0x3f0 kernel/notifier.c:85 __dev_notify_flags+0x209/0x410 net/core/dev.c:-1 netif_change_flags+0xf0/0x1a0 net/core/dev.c:9438 dev_change_flags+0x146/0x270 net/core/dev_api.c:68 devinet_ioctl+0xea4/0x1d80 net/ipv4/devinet.c:1200 inet_ioctl+0x3d9/0x4f0 net/ipv4/af_inet.c:1001 sock_do_ioctl+0x15a/0x490 net/socket.c:1190 sock_ioctl+0x644/0x900 net/socket.c:1311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl+0xf1/0x160 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f479f95bd49 Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 RSP: 002b:00007ffd1bf9f068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f479f88d6c0 RCX: 00007f479f95bd49 RDX: 00007ffd1bfaf258 RSI: 0000000000008914 RDI: 0000000000000012 RBP: 00007ffd1bfbf418 R08: 00007ffd1bfaf218 R09: 00007ffd1bfaf1c8 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffd1bfaf258 R14: 0000000000000028 R15: 0000000000008914 Warning: Permanently added '[localhost]:23725' (ED25519) to the list of known hosts. 2025/03/28 13:23:36 ignoring optional flag "sandboxArg"="0" 2025/03/28 13:23:37 parsed 1 programs [ 45.294041][ T5307] cgroup: Unknown subsys name 'net' [ 45.350055][ T5307] cgroup: Unknown subsys name 'cpuset' [ 45.352844][ T5307] cgroup: Unknown subsys name 'rlimit' [ 46.401269][ T5307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.504513][ T5315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.419698][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.423114][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.467015][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.480325][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.565139][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.568741][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.572810][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.576795][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.580605][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.107500][ T5385] chnl_net:caif_netlink_parms(): no params data found [ 54.200606][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.204229][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.207187][ T5385] bridge_slave_0: entered allmulticast mode [ 54.219855][ T5385] bridge_slave_0: entered promiscuous mode [ 54.224778][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.227579][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.238782][ T5385] bridge_slave_1: entered allmulticast mode [ 54.241861][ T5385] bridge_slave_1: entered promiscuous mode [ 54.272932][ T5385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.279886][ T5385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.298369][ T5385] team0: Port device team_slave_0 added [ 54.302274][ T5385] team0: Port device team_slave_1 added [ 54.315379][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.318029][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.327922][ T5385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.334323][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.336927][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.346773][ T5385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.366644][ T5385] hsr_slave_0: entered promiscuous mode [ 54.370028][ T5385] hsr_slave_1: entered promiscuous mode [ 54.443177][ T5385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.450635][ T5385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.455494][ T5385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.461797][ T5385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.506007][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.509257][ T5385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.512675][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.515506][ T5385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.557747][ T5385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.571097][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.575481][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.595702][ T5385] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.620402][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.624133][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.629895][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.632851][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.656705][ T5385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.699525][ T5385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.880197][ T5385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.926325][ T5385] veth0_vlan: entered promiscuous mode [ 54.943510][ T5385] veth1_vlan: entered promiscuous mode [ 55.030900][ T5385] veth0_macvtap: entered promiscuous mode [ 55.035794][ T5385] veth1_macvtap: entered promiscuous mode [ 55.056660][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.074950][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.082309][ T5385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.085719][ T5385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.100638][ T5385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.108247][ T5385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.395200][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.440534][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.503001][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.601974][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/03/28 13:23:49 executed programs: 0 [ 56.261604][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.265116][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.268088][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.281157][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.284134][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.492762][ T5412] chnl_net:caif_netlink_parms(): no params data found [ 56.582686][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.585528][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.588348][ T5412] bridge_slave_0: entered allmulticast mode [ 56.600654][ T5412] bridge_slave_0: entered promiscuous mode [ 56.609912][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.613741][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.616503][ T5412] bridge_slave_1: entered allmulticast mode [ 56.631111][ T5412] bridge_slave_1: entered promiscuous mode [ 56.659789][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.664823][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.771686][ T5412] team0: Port device team_slave_0 added [ 56.775226][ T5412] team0: Port device team_slave_1 added [ 56.797807][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.809108][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.841572][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.868848][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.871507][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.909862][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.952631][ T5412] hsr_slave_0: entered promiscuous mode [ 56.955200][ T5412] hsr_slave_1: entered promiscuous mode [ 56.957629][ T5412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.968933][ T5412] Cannot create hsr debugfs directory [ 57.771093][ T47] bridge_slave_1: left allmulticast mode [ 57.773642][ T47] bridge_slave_1: left promiscuous mode [ 57.776709][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.804416][ T47] bridge_slave_0: left allmulticast mode [ 57.806750][ T47] bridge_slave_0: left promiscuous mode [ 57.824058][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.354243][ T4668] Bluetooth: hci0: command tx timeout [ 58.374844][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.382727][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.388016][ T47] bond0 (unregistering): Released all slaves [ 58.468478][ T47] hsr_slave_0: left promiscuous mode [ 58.484876][ T47] hsr_slave_1: left promiscuous mode [ 58.488498][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.501528][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.506330][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.510828][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.521833][ T47] veth1_macvtap: left promiscuous mode [ 58.525688][ T47] veth0_macvtap: left promiscuous mode [ 58.530431][ T47] veth1_vlan: left promiscuous mode [ 58.533907][ T47] veth0_vlan: left promiscuous mode [ 58.963143][ T47] team0 (unregistering): Port device team_slave_1 removed [ 58.992765][ T47] team0 (unregistering): Port device team_slave_0 removed [ 59.393546][ T5021] [ 59.395083][ T5021] ============================================ [ 59.398368][ T5021] WARNING: possible recursive locking detected [ 59.401575][ T5021] 6.14.0-syzkaller-gacb4f33713b9 #0 Not tainted [ 59.405260][ T5021] -------------------------------------------- [ 59.407875][ T5021] dhcpcd/5021 is trying to acquire lock: [ 59.410263][ T5021] ffff88804e10cd28 (&dev->lock){+.+.}-{4:4}, at: lapbeth_device_event+0x766/0xa20 [ 59.415225][ T5021] [ 59.415225][ T5021] but task is already holding lock: [ 59.418222][ T5021] ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 59.422067][ T5021] [ 59.422067][ T5021] other info that might help us debug this: [ 59.426035][ T5021] Possible unsafe locking scenario: [ 59.426035][ T5021] [ 59.430965][ T5021] CPU0 [ 59.432495][ T5021] ---- [ 59.433792][ T5021] lock(&dev->lock); [ 59.435387][ T5021] lock(&dev->lock); [ 59.436810][ T5021] [ 59.436810][ T5021] *** DEADLOCK *** [ 59.436810][ T5021] [ 59.440197][ T5021] May be due to missing lock nesting notation [ 59.440197][ T5021] [ 59.443565][ T5021] 2 locks held by dhcpcd/5021: [ 59.445474][ T5021] #0: ffffffff900e1888 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34e/0x1d80 [ 59.448729][ T5021] #1: ffff8880341b0d28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 59.452605][ T5021] [ 59.452605][ T5021] stack backtrace: [ 59.454892][ T5021] CPU: 0 UID: 0 PID: 5021 Comm: dhcpcd Not tainted 6.14.0-syzkaller-gacb4f33713b9 #0 PREEMPT(full) [ 59.454909][ T5021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.454916][ T5021] Call Trace: [ 59.454924][ T5021] [ 59.454929][ T5021] dump_stack_lvl+0x241/0x360 [ 59.454950][ T5021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.454963][ T5021] ? __pfx__printk+0x10/0x10 [ 59.454975][ T5021] ? print_lock+0x171/0x1a0 [ 59.454988][ T5021] print_deadlock_bug+0x2be/0x2d0 [ 59.455001][ T5021] validate_chain+0x928/0x24e0 [ 59.455013][ T5021] ? stack_depot_save_flags+0x3a/0x970 [ 59.455029][ T5021] ? look_up_lock_class+0x7b/0x170 [ 59.455045][ T5021] ? register_lock_class+0x54/0x330 [ 59.455062][ T5021] __lock_acquire+0xad5/0xd80 [ 59.455078][ T5021] lock_acquire+0x116/0x2f0 [ 59.455091][ T5021] ? lapbeth_device_event+0x766/0xa20 [ 59.455110][ T5021] __mutex_lock+0x1a5/0x10c0 [ 59.455125][ T5021] ? lapbeth_device_event+0x766/0xa20 [ 59.455141][ T5021] ? ref_tracker_alloc+0x316/0x4c0 [ 59.455154][ T5021] ? lapbeth_device_event+0x766/0xa20 [ 59.455168][ T5021] ? rcu_is_watching+0x15/0xb0 [ 59.455180][ T5021] ? __pfx___mutex_lock+0x10/0x10 [ 59.455195][ T5021] ? __raw_spin_lock_init+0x45/0x100 [ 59.455207][ T5021] lapbeth_device_event+0x766/0xa20 [ 59.455221][ T5021] notifier_call_chain+0x1a5/0x3f0 [ 59.455232][ T5021] __dev_notify_flags+0x209/0x410 [ 59.455244][ T5021] ? __pfx___dev_notify_flags+0x10/0x10 [ 59.455252][ T5021] ? __dev_change_flags+0x517/0x700 [ 59.455262][ T5021] ? __pfx___mutex_lock+0x10/0x10 [ 59.455276][ T5021] ? __pfx___dev_change_flags+0x10/0x10 [ 59.455287][ T5021] ? __pfx___mutex_lock+0x10/0x10 [ 59.455301][ T5021] netif_change_flags+0xf0/0x1a0 [ 59.455313][ T5021] dev_change_flags+0x146/0x270 [ 59.455330][ T5021] devinet_ioctl+0xea4/0x1d80 [ 59.455349][ T5021] ? __pfx_devinet_ioctl+0x10/0x10 [ 59.455362][ T5021] ? get_user_ifreq+0x1bb/0x200 [ 59.455375][ T5021] inet_ioctl+0x3d9/0x4f0 [ 59.455386][ T5021] ? __pfx_inet_ioctl+0x10/0x10 [ 59.455396][ T5021] ? lockdep_hardirqs_on+0x9d/0x150 [ 59.455410][ T5021] ? tomoyo_path_number_perm+0x215/0x790 [ 59.455430][ T5021] sock_do_ioctl+0x15a/0x490 [ 59.455445][ T5021] ? __pfx_sock_do_ioctl+0x10/0x10 [ 59.455459][ T5021] ? fd_install+0x9c/0x4c0 [ 59.455477][ T5021] sock_ioctl+0x644/0x900 [ 59.455490][ T5021] ? __pfx_sock_ioctl+0x10/0x10 [ 59.455503][ T5021] ? __sys_socket+0x209/0x3c0 [ 59.455517][ T5021] ? __pfx_sock_ioctl+0x10/0x10 [ 59.455528][ T5021] __se_sys_ioctl+0xf1/0x160 [ 59.455540][ T5021] do_syscall_64+0xf3/0x230 [ 59.455554][ T5021] ? clear_bhb_loop+0x45/0xa0 [ 59.455565][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.455577][ T5021] RIP: 0033:0x7f479f95bd49 [ 59.455590][ T5021] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 59.455599][ T5021] RSP: 002b:00007ffd1bf9f068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.455613][ T5021] RAX: ffffffffffffffda RBX: 00007f479f88d6c0 RCX: 00007f479f95bd49 [ 59.455621][ T5021] RDX: 00007ffd1bfaf258 RSI: 0000000000008914 RDI: 0000000000000012 [ 59.455628][ T5021] RBP: 00007ffd1bfbf418 R08: 00007ffd1bfaf218 R09: 00007ffd1bfaf1c8 [ 59.455635][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.455641][ T5021] R13: 00007ffd1bfaf258 R14: 0000000000000028 R15: 0000000000008914 [ 59.455650][ T5021] [ 59.737375][ T5412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.752502][ T5412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.769842][ T5412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.776646][ T5412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.857966][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.873430][ T5412] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.892062][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.894687][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.905493][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.907690][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.044984][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.063584][ T5412] veth0_vlan: entered promiscuous mode [ 60.067812][ T5412] veth1_vlan: entered promiscuous mode [ 60.079853][ T5412] veth0_macvtap: entered promiscuous mode [ 60.084288][ T5412] veth1_macvtap: entered promiscuous mode [ 60.091701][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.097004][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.103379][ T5412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.106472][ T5412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.110173][ T5412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.113337][ T5412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.139557][ T5412] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 60.161448][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.163932][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.167734][ T5412] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 60.189726][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.192496][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 VM DIAGNOSIS: 13:23:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000062 RBX=ffffffff9aa26b20 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d0dec50 R8 =ffffffff8593365b R9 =1ffff11003dfd046 R10=dffffc0000000000 R11=ffffffff85933610 R12=dffffc0000000000 R13=0000000000000062 R14=0000000000000062 R15=00000000000003f8 RIP=ffffffff8593368e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f479f88d740 ffffffff 00c00000 GS =0000 ffff88808c5f1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a21df47131 CR3=0000000042fb4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056329dfb5850 000056329dfc6610 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff000000ff000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737233 73732541ee883e43 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737371 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000020 000000000000004d 4554535953425553 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e2bd35f2f56d709 00005637fed5d3db 00000000000000d1 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000301 0000000000000035 6c6c696b66722f33 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4943213f395b2249 5a6e786b6e646b7e 59647a305f474f5b 647c79303a243a78 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2648383a3a26483b 3a0a00307f617930 382433273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 syzkaller build log: go env (err=) GO111MODULE='auto' GOARCH='amd64' GOBIN='' GOCACHE='/syzkaller/.cache/go-build' GOENV='/syzkaller/.config/go/env' GOEXE='' GOEXPERIMENT='' GOFLAGS='' GOHOSTARCH='amd64' GOHOSTOS='linux' GOINSECURE='' GOMODCACHE='/syzkaller/jobs/linux/gopath/pkg/mod' GONOPROXY='' GONOSUMDB='' GOOS='linux' GOPATH='/syzkaller/jobs/linux/gopath' GOPRIVATE='' GOPROXY='https://proxy.golang.org,direct' GOROOT='/syzkaller/jobs/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.6.linux-amd64' GOSUMDB='sum.golang.org' GOTMPDIR='' GOTOOLCHAIN='auto' GOTOOLDIR='/syzkaller/jobs/linux/gopath/pkg/mod/golang.org/toolchain@v0.0.1-go1.23.6.linux-amd64/pkg/tool/linux_amd64' GOVCS='' GOVERSION='go1.23.6' GODEBUG='' GOTELEMETRY='local' GOTELEMETRYDIR='/syzkaller/.config/go/telemetry' GCCGO='gccgo' GOAMD64='v1' AR='ar' CC='gcc' CXX='g++' CGO_ENABLED='1' GOMOD='/syzkaller/jobs/linux/gopath/src/github.com/google/syzkaller/go.mod' GOWORK='' CGO_CFLAGS='-O2 -g' CGO_CPPFLAGS='' CGO_CXXFLAGS='-O2 -g' CGO_FFLAGS='-O2 -g' CGO_LDFLAGS='-O2 -g' PKG_CONFIG='pkg-config' GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2208401679=/tmp/go-build -gno-record-gcc-switches' git status (err=) HEAD detached at e28266709dd2 nothing to commit, working tree clean tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen make .descriptions tput: No value for $TERM and no -T specified tput: No value for $TERM and no -T specified Makefile:31: run command via tools/syz-env for best compatibility, see: Makefile:32: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env bin/syz-sysgen touch .descriptions GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=e28266709dd2a1d1452d4a5bbf271700e10335c6 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20250313-150626'" -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog mkdir -p ./bin/linux_amd64 g++ -o ./bin/linux_amd64/syz-executor executor/executor.cc \ -m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -std=c++17 -I. -Iexecutor/_include -DGOOS_linux=1 -DGOARCH_amd64=1 \ -DHOSTGOOS_linux=1 -DGIT_REVISION=\"e28266709dd2a1d1452d4a5bbf271700e10335c6\" /usr/bin/ld: /tmp/ccWIOeN6.o: in function `Connection::Connect(char const*, char const*)': executor.cc:(.text._ZN10Connection7ConnectEPKcS1_[_ZN10Connection7ConnectEPKcS1_]+0x104): warning: Using 'gethostbyname' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking