./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3314779431 <...> Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. execve("./syz-executor3314779431", ["./syz-executor3314779431"], 0x7ffecbd6a090 /* 10 vars */) = 0 brk(NULL) = 0x555561848000 brk(0x555561848d00) = 0x555561848d00 arch_prctl(ARCH_SET_FS, 0x555561848380) = 0 set_tid_address(0x555561848650) = 5846 set_robust_list(0x555561848660, 24) = 0 rseq(0x555561848ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3314779431", 4096) = 28 getrandom("\x62\xa4\x49\x81\x3f\x98\x22\xe8", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555561848d00 brk(0x555561869d00) = 0x555561869d00 brk(0x55556186a000) = 0x55556186a000 mprotect(0x7f6a53854000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555561848650) = 5847 ./strace-static-x86_64: Process 5847 attached [pid 5847] set_robust_list(0x555561848660, 24) = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] getppid() = 0 [pid 5847] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5847] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5847] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5847] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5847] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5847] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5847] unshare(CLONE_NEWNS) = 0 [pid 5847] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5847] unshare(CLONE_NEWIPC) = 0 [pid 5847] unshare(CLONE_NEWCGROUP) = 0 [pid 5847] unshare(CLONE_NEWUTS) = 0 [pid 5847] unshare(CLONE_SYSVSEM) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "16777216", 8) = 8 [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "536870912", 9) = 9 [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1024", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "8192", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1024", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1024", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5847] close(3) = 0 [pid 5847] getpid() = 1 [pid 5847] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< #3 (lock#7){+.+.}-{3:3}: [ 73.350987][ T5847] lock_acquire+0x1ed/0x550 [ 73.356028][ T5847] __mutex_lock+0x136/0xd70 [ 73.361046][ T5847] cma_init+0x1e/0x140 [ 73.365644][ T5847] do_one_initcall+0x248/0x880 [ 73.370932][ T5847] do_initcall_level+0x157/0x210 [ 73.376395][ T5847] do_initcalls+0x3f/0x80 [ 73.381242][ T5847] kernel_init_freeable+0x435/0x5d0 [ 73.386951][ T5847] kernel_init+0x1d/0x2b0 [ 73.391804][ T5847] ret_from_fork+0x4b/0x80 [ 73.396731][ T5847] ret_from_fork_asm+0x1a/0x30 [ 73.402005][ T5847] [ 73.402005][ T5847] -> #2 (rtnl_mutex){+.+.}-{3:3}: [ 73.409194][ T5847] lock_acquire+0x1ed/0x550 [ 73.414204][ T5847] __mutex_lock+0x136/0xd70 [ 73.419211][ T5847] do_ip_setsockopt+0x127d/0x3cd0 [ 73.424748][ T5847] ip_setsockopt+0x63/0x100 [ 73.429769][ T5847] smc_setsockopt+0x275/0xe50 [ 73.434952][ T5847] do_sock_setsockopt+0x3af/0x720 [ 73.440490][ T5847] __sys_setsockopt+0x1a2/0x250 [ 73.445851][ T5847] __x64_sys_setsockopt+0xb5/0xd0 [ 73.451381][ T5847] do_syscall_64+0xf3/0x230 [ 73.456390][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.462806][ T5847] [ 73.462806][ T5847] -> #1 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 73.471394][ T5847] lock_acquire+0x1ed/0x550 [ 73.476404][ T5847] __mutex_lock+0x136/0xd70 [ 73.481405][ T5847] smc_switch_to_fallback+0x35/0xdb0 [ 73.487192][ T5847] smc_sendmsg+0x11f/0x530 [ 73.492112][ T5847] __sock_sendmsg+0x221/0x270 [ 73.497291][ T5847] __sys_sendto+0x39b/0x4f0 [ 73.502300][ T5847] __x64_sys_sendto+0xde/0x100 [ 73.507561][ T5847] do_syscall_64+0xf3/0x230 [ 73.512563][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.518959][ T5847] [ 73.518959][ T5847] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 73.526591][ T5847] validate_chain+0x18ef/0x5920 [ 73.531945][ T5847] __lock_acquire+0x1384/0x2050 [ 73.537304][ T5847] lock_acquire+0x1ed/0x550 [ 73.542311][ T5847] lock_sock_nested+0x48/0x100 [ 73.547573][ T5847] sock_set_reuseaddr+0x17/0x60 [ 73.552926][ T5847] siw_create_listen+0x196/0xfe0 [ 73.558368][ T5847] iw_cm_listen+0x15e/0x230 [ 73.563373][ T5847] rdma_listen+0x941/0xd60 [ 73.568301][ T5847] cma_listen_on_dev+0x3e3/0x6f0 [ 73.573741][ T5847] cma_add_one+0x7d7/0xcd0 [ 73.578675][ T5847] add_client_context+0x536/0x8b0 [ 73.584204][ T5847] enable_device_and_get+0x1e6/0x440 [ 73.589994][ T5847] ib_register_device+0x10d4/0x13e0 [ 73.595705][ T5847] siw_newlink+0x9d9/0xe50 [ 73.600622][ T5847] nldev_newlink+0x5c0/0x640 [ 73.605709][ T5847] rdma_nl_rcv+0x6dd/0x9e0 [ 73.610634][ T5847] netlink_unicast+0x7f6/0x990 [ 73.615903][ T5847] netlink_sendmsg+0x8e4/0xcb0 [ 73.621180][ T5847] __sock_sendmsg+0x221/0x270 [ 73.626367][ T5847] ____sys_sendmsg+0x52a/0x7e0 [ 73.631645][ T5847] __sys_sendmsg+0x292/0x380 [ 73.636755][ T5847] do_syscall_64+0xf3/0x230 [ 73.641766][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.648170][ T5847] [ 73.648170][ T5847] other info that might help us debug this: [ 73.648170][ T5847] [ 73.658386][ T5847] Chain exists of: [ 73.658386][ T5847] sk_lock-AF_INET --> rtnl_mutex --> lock#7 [ 73.658386][ T5847] [ 73.670206][ T5847] Possible unsafe locking scenario: [ 73.670206][ T5847] [ 73.677661][ T5847] CPU0 CPU1 [ 73.683007][ T5847] ---- ---- [ 73.688347][ T5847] lock(lock#7); [ 73.691967][ T5847] lock(rtnl_mutex); [ 73.698443][ T5847] lock(lock#7); [ 73.704580][ T5847] lock(sk_lock-AF_INET); [ 73.708982][ T5847] [ 73.708982][ T5847] *** DEADLOCK *** [ 73.708982][ T5847] [ 73.717103][ T5847] 6 locks held by syz-executor331/5847: [ 73.722632][ T5847] #0: ffffffff9a7a1918 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv+0x32d/0x9e0 [ 73.732620][ T5847] #1: ffffffff8fa50fb0 (link_ops_rwsem){++++}-{3:3}, at: nldev_newlink+0x42a/0x640 [ 73.742515][ T5847] #2: ffffffff8fa43bd0 (devices_rwsem){++++}-{3:3}, at: enable_device_and_get+0x12e/0x440 [ 73.752497][ T5847] #3: ffffffff8fa43ed0 (clients_rwsem){++++}-{3:3}, at: enable_device_and_get+0x196/0x440 [ 73.762481][ T5847] #4: ffff88807fc405d0 (&device->client_data_rwsem){++++}-{3:3}, at: add_client_context+0x4f4/0x8b0 [ 73.773346][ T5847] #5: ffffffff8fa64d48 (lock#7){+.+.}-{3:3}, at: cma_add_one+0x6bc/0xcd0 [ 73.781859][ T5847] [ 73.781859][ T5847] stack backtrace: [ 73.787739][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: syz-executor331 Not tainted 6.12.0-rc6-syzkaller-01219-g2696e451dfb0 #0 [ 73.798823][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.808862][ T5847] Call Trace: [ 73.812126][ T5847] [ 73.815042][ T5847] dump_stack_lvl+0x241/0x360 [ 73.819701][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.824883][ T5847] ? __pfx__printk+0x10/0x10 [ 73.829463][ T5847] print_circular_bug+0x13a/0x1b0 [ 73.834469][ T5847] check_noncircular+0x36a/0x4a0 [ 73.839387][ T5847] ? __pfx_check_noncircular+0x10/0x10 [ 73.844840][ T5847] ? lockdep_lock+0x123/0x2b0 [ 73.849500][ T5847] validate_chain+0x18ef/0x5920 [ 73.854328][ T5847] ? __lock_acquire+0x1384/0x2050 [ 73.859339][ T5847] ? __pfx_validate_chain+0x10/0x10 [ 73.864696][ T5847] ? mark_lock+0x9a/0x360 [ 73.869006][ T5847] ? mark_lock+0x9a/0x360 [ 73.873317][ T5847] ? look_up_lock_class+0x77/0x170 [ 73.878418][ T5847] ? register_lock_class+0x102/0x980 [ 73.883692][ T5847] ? __pfx_register_lock_class+0x10/0x10 [ 73.889304][ T5847] ? mark_lock+0x9a/0x360 [ 73.893613][ T5847] __lock_acquire+0x1384/0x2050 [ 73.898446][ T5847] lock_acquire+0x1ed/0x550 [ 73.902936][ T5847] ? sock_set_reuseaddr+0x17/0x60 [ 73.907944][ T5847] ? __pfx_lock_acquire+0x10/0x10 [ 73.912953][ T5847] ? apparmor_socket_post_create+0x2b7/0x2e0 [ 73.918924][ T5847] ? bpf_lsm_socket_post_create+0x9/0x10 [ 73.924571][ T5847] lock_sock_nested+0x48/0x100 [ 73.929319][ T5847] ? sock_set_reuseaddr+0x17/0x60 [ 73.934327][ T5847] sock_set_reuseaddr+0x17/0x60 [ 73.939156][ T5847] siw_create_listen+0x196/0xfe0 [ 73.944075][ T5847] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 73.949963][ T5847] ? __pfx_siw_create_listen+0x10/0x10 [ 73.955416][ T5847] iw_cm_listen+0x15e/0x230 [ 73.959898][ T5847] rdma_listen+0x941/0xd60 [ 73.964309][ T5847] ? __pfx_rdma_listen+0x10/0x10 [ 73.969238][ T5847] ? rdma_restrack_add+0x288/0x7b0 [ 73.974337][ T5847] ? _cma_attach_to_dev+0x295/0x490 [ 73.979519][ T5847] cma_listen_on_dev+0x3e3/0x6f0 [ 73.984443][ T5847] cma_add_one+0x7d7/0xcd0 [ 73.988839][ T5847] ? __pfx_cma_add_one+0x10/0x10 [ 73.993758][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 73.998589][ T5847] add_client_context+0x536/0x8b0 [ 74.003601][ T5847] ? __pfx_add_client_context+0x10/0x10 [ 74.009135][ T5847] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 74.014747][ T5847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.020712][ T5847] enable_device_and_get+0x1e6/0x440 [ 74.026000][ T5847] ? __pfx_enable_device_and_get+0x10/0x10 [ 74.031812][ T5847] ? device_add+0x460/0xbf0 [ 74.036294][ T5847] ib_register_device+0x10d4/0x13e0 [ 74.041476][ T5847] ? __pfx_ib_register_device+0x10/0x10 [ 74.047004][ T5847] ? xa_load+0x2dd/0x350 [ 74.051226][ T5847] ? xa_load+0x147/0x350 [ 74.055443][ T5847] ? __asan_memset+0x23/0x50 [ 74.060036][ T5847] ? lockdep_init_map_type+0xa1/0x910 [ 74.065401][ T5847] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 74.071204][ T5847] ? ib_device_set_netdev+0x5b6/0x6b0 [ 74.076566][ T5847] ? __raw_spin_lock_init+0x45/0x100 [ 74.081836][ T5847] siw_newlink+0x9d9/0xe50 [ 74.086237][ T5847] nldev_newlink+0x5c0/0x640 [ 74.090814][ T5847] ? __pfx_nldev_newlink+0x10/0x10 [ 74.095926][ T5847] ? __pfx_aa_get_newest_label+0x10/0x10 [ 74.101544][ T5847] ? __pfx_aa_get_newest_label+0x10/0x10 [ 74.107161][ T5847] ? bpf_lsm_capable+0x9/0x10 [ 74.111822][ T5847] ? security_capable+0x7e/0x2d0 [ 74.116746][ T5847] ? __pfx_nldev_newlink+0x10/0x10 [ 74.121865][ T5847] rdma_nl_rcv+0x6dd/0x9e0 [ 74.126280][ T5847] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 74.131204][ T5847] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.136388][ T5847] netlink_unicast+0x7f6/0x990 [ 74.141137][ T5847] ? __pfx_netlink_unicast+0x10/0x10 [ 74.146401][ T5847] ? __virt_addr_valid+0x183/0x530 [ 74.151514][ T5847] ? __check_object_size+0x48e/0x900 [ 74.156787][ T5847] netlink_sendmsg+0x8e4/0xcb0 [ 74.161571][ T5847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.166855][ T5847] ? aa_sock_msg_perm+0x91/0x160 [ 74.171808][ T5847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.177093][ T5847] __sock_sendmsg+0x221/0x270 [ 74.181762][ T5847] ____sys_sendmsg+0x52a/0x7e0 [ 74.186550][ T5847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.191826][ T5847] ? do_raw_spin_lock+0x14f/0x370 [ 74.196836][ T5847] __sys_sendmsg+0x292/0x380 [ 74.201414][ T5847] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.206518][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.212842][ T5847] ? _raw_spin_unlock_irq+0x2e/0x50 [ 74.218028][ T5847] ? ptrace_notify+0x279/0x380 [ 74.222784][ T5847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.229101][ T5847] ? exc_page_fault+0x590/0x8c0 [ 74.233939][ T5847] do_syscall_64+0xf3/0x230 [ 74.238427][ T5847] ? clear_bhb_loop+0x35/0x90 [ 74.243093][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.248985][ T5847] RIP: 0033:0x7f6a537db819 [ 74.253398][ T5847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.272990][ T5847] RSP: 002b:00007ffe43eb0c48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.281387][ T5847] RAX: ffffffffffffffda RBX: 00007f6a53829482 RCX: 00007f6a537db819 [ 74.289340][ T5847] RDX: 00000000200040c0 RSI: 00000000200004c0 RDI: 0000000000000005 [ 74.297319][ T5847] RBP: 00007f6a53829460 R08: 0000555500000000 R09: 0000555500000000 [pid 5847] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x38\x00\x00\x00\x03\x14\x7d\xf8\xfc\xff\xff\xff\xfb\xdb\xdf\x25\x09\x00\x02\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x08\x00\x41\x00\x73\x69\x77\x00\x14\x00\x33\x00\x62\x72\x69\x64\x67\x65\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=56}], msg_iovlen=1, msg_controllen=0, msg_flags=MSG_PROBE|MSG_CONFIRM|MSG_NOSIGNAL|MSG_BATCH}, MSG_DONTWAIT|MSG_EOR|MSG_NOSIGNAL|MSG_FASTOPEN) = 56 [pid 5847] exit_group(1) = ? [pid 5847] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=1, si_utime=0, si_stime=101 /* 1.01 s */} --- exit_group(0) = ? +++ exited with 0 +++ [ 74.305277][ T5847] R10: 0000555500000000 R11: 000000