ci-upstream-net-this-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-net-this-kasan-gce/syz-executor1679219024 <...> Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. execve("ci-upstream-net-this-kasan-gce/syz-executor1679219024", ["ci-upstream-net-this-kasan-gce/syz-executor1679219024"], 0x7ffc41d15bd0 /* 10 vars */) = 0 brk(NULL) = 0x555570e03000 brk(0x555570e03d80) = 0x555570e03d80 arch_prctl(ARCH_SET_FS, 0x555570e03400) = 0 set_tid_address(0x555570e036d0) = 5646 set_robust_list(0x555570e036e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-net-this-kasan-gce/syz-executor1679219024", 4096) = 59 getrandom("\x82\x9c\x05\xfa\xac\xca\xc1\x82", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555570e03d80 brk(0x555570e24d80) = 0x555570e24d80 brk(0x555570e25000) = 0x555570e25000 mprotect(0x7f7800638000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-this-kasan-gce/strace-static-x86_64: Process 5647 attached [pid 5647] set_robust_list(0x555570e036e0, 24 [pid 5646] <... clone resumed>, child_tidptr=0x555570e036d0) = 5647 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] getppid() = 0 [pid 5647] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5647] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5647] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5647] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5647] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5647] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5647] unshare(CLONE_NEWNS) = 0 [pid 5647] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5647] unshare(CLONE_NEWIPC) = 0 [pid 5647] unshare(CLONE_NEWCGROUP) = 0 [pid 5647] unshare(CLONE_NEWUTS) = 0 [pid 5647] unshare(CLONE_SYSVSEM) = 0 [pid 5647] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "16777216", 8) = 8 [pid 5647] close(3) = 0 [pid 5647] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "536870912", 9) = 9 [pid 5647] close(3) = 0 [pid 5647] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1024", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "8192", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1024", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1024", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5647] close(3) = 0 [pid 5647] getpid() = 1 [pid 5647] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5703] set_robust_list(0x555570e036e0, 24 [pid 5647] <... clone resumed>, child_tidptr=0x555570e036d0) = 2 [pid 5703] <... set_robust_list resumed>) = 0 [pid 5703] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5703] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5703] setpgid(0, 0) = 0 [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5703] write(3, "1000", 4) = 4 [pid 5703] close(3) = 0 [pid 5703] write(1, "executing program\n", 18) = 18 [pid 5703] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 executing program [pid 5703] ioctl(3, SIOCGIFINDEX, {ifr_name="netdevsim0", ifr_ifindex=65}) = 0 [pid 5703] ioctl(3, SIOCGIFINDEX, {ifr_name="batadv0", ifr_ifindex=18}) = 0 [pid 5703] sendmsg(3, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[{nlmsg_len=76, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|0x400, nlmsg_seq=7388454, nlmsg_pid=635427837}, "\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x12\x80\x0c\x00\x01\x00\x6d\x61\x63\x76\x6c\x61\x6e\x00\x0c\x00\x02\x80\x08\x00\x01\x00\x04\x00\x00\x00\x08\x00\x05\x00\x41\x00\x00\x00\x08\x00\x0a\x00\x12\x00\x00\x00"], iov_len=76}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE|MSG_CTRUNC|MSG_DONTWAIT|MSG_EOR|MSG_NOSIGNAL|MSG_FASTOPEN) = 76 [pid 5703] socket(AF_INET6, SOCK_STREAM, IPPROTO_MPTCP) = 4 [ 85.371408][ T192] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 85.372712][ T5703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.373809][ T5703] batman_adv: batadv0: Adding interface: macvlan2 [ 85.373818][ T5703] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.373839][ T5703] batman_adv: batadv0: Interface activated: macvlan2 [ 85.397065][ T5703] [ 85.431378][ T5703] ============================================ [ 85.437523][ T5703] WARNING: possible recursive locking detected [ 85.443691][ T5703] syzkaller #0 Not tainted [ 85.448108][ T5703] -------------------------------------------- [ 85.454256][ T5703] syz-executor167/5703 is trying to acquire lock: [ 85.460658][ T5703] ffff88807faf0e98 (&dev->lock){+.+.}-{4:4}, at: __netdev_update_features+0xd27/0x1ef0 [ 85.470324][ T5703] [ 85.470324][ T5703] but task is already holding lock: [ 85.477673][ T5703] ffff88807faf0e98 (&dev->lock){+.+.}-{4:4}, at: dev_ethtool+0x47e/0x29e0 [ 85.486196][ T5703] and the lock comparison function returns 0: [ 85.492250][ T5703] [ 85.492250][ T5703] other info that might help us debug this: [ 85.500295][ T5703] Possible unsafe locking scenario: [ 85.500295][ T5703] [ 85.507735][ T5703] CPU0 [ 85.511003][ T5703] ---- [ 85.514275][ T5703] lock(&dev->lock); [ 85.518267][ T5703] lock(&dev->lock); [ 85.522240][ T5703] [ 85.522240][ T5703] *** DEADLOCK *** [ 85.522240][ T5703] [ 85.530374][ T5703] May be due to missing lock nesting notation [ 85.530374][ T5703] [ 85.538680][ T5703] locks held by syz-executor167/5703: 2, last CPU#0: [ 85.545352][ T5703] #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x3a0/0x29e0 [ 85.554357][ T5703] #1: ffff88807faf0e98 (&dev->lock){+.+.}-{4:4}, at: dev_ethtool+0x47e/0x29e0 [ 85.563320][ T5703] [ 85.563320][ T5703] stack backtrace: [ 85.569207][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: syz-executor167 Not tainted syzkaller #0 PREEMPT(full) [ 85.578912][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.588977][ T5703] Call Trace: [ 85.592249][ T5703] [ 85.595191][ T5703] dump_stack_lvl+0xe8/0x150 [ 85.599813][ T5703] print_deadlock_bug+0x27a/0x290 [ 85.604839][ T5703] __lock_acquire+0x25db/0x2de0 [ 85.609684][ T5703] ? kernel_text_address+0xa5/0xe0 [ 85.614796][ T5703] ? lock_acquire+0x115/0x350 [ 85.619472][ T5703] lock_acquire+0x115/0x350 [ 85.623967][ T5703] ? __netdev_update_features+0xd27/0x1ef0 [ 85.629770][ T5703] __mutex_lock+0x197/0x15a0 [ 85.634352][ T5703] ? __netdev_update_features+0xd27/0x1ef0 [ 85.640155][ T5703] ? lockdep_unlock+0x5c/0xd0 [ 85.644827][ T5703] ? __lock_acquire+0x1511/0x2de0 [ 85.649899][ T5703] ? __netdev_update_features+0xd27/0x1ef0 [ 85.655706][ T5703] ? __pfx___mutex_lock+0x10/0x10 [ 85.660725][ T5703] ? cfg80211_netdev_notifier_call+0xdae/0x1340 [ 85.666981][ T5703] __netdev_update_features+0xd27/0x1ef0 [ 85.672627][ T5703] ? __pfx___netdev_update_features+0x10/0x10 [ 85.678690][ T5703] ? __lock_acquire+0x747/0x2de0 [ 85.683630][ T5703] ? consume_skb+0x89/0xb0 [ 85.688069][ T5703] ? __lock_acquire+0x747/0x2de0 [ 85.693003][ T5703] ? lock_acquire+0x115/0x350 [ 85.697675][ T5703] netdev_update_features+0x6f/0x100 [ 85.702968][ T5703] ? __pfx_netdev_update_features+0x10/0x10 [ 85.708887][ T5703] ? netif_inherit_tso_max+0x1ec/0x340 [ 85.714364][ T5703] macvlan_device_event+0x62c/0x9e0 [ 85.719595][ T5703] ? __pfx_macvlan_device_event+0x10/0x10 [ 85.725342][ T5703] ? lockdep_rtnl_is_held+0x26/0x40 [ 85.730554][ T5703] notifier_call_chain+0x1a5/0x3d0 [ 85.735674][ T5703] netdev_features_change+0x8d/0xd0 [ 85.740890][ T5703] ? __pfx_netdev_features_change+0x10/0x10 [ 85.746791][ T5703] dev_ethtool+0x1f21/0x29e0 [ 85.751395][ T5703] ? __lock_acquire+0x747/0x2de0 [ 85.756356][ T5703] ? __pfx_dev_ethtool+0x10/0x10 [ 85.761304][ T5703] ? kasan_quarantine_put+0xbb/0x1f0 [ 85.766602][ T5703] ? lock_acquire+0x115/0x350 [ 85.771284][ T5703] ? dev_load+0x21/0x1f0 [ 85.775541][ T5703] ? dev_load+0x21/0x1f0 [ 85.779799][ T5703] dev_ioctl+0x392/0x1150 [ 85.784144][ T5703] sock_do_ioctl+0x23e/0x320 [ 85.788742][ T5703] ? __pfx_sock_do_ioctl+0x10/0x10 [ 85.793861][ T5703] sock_ioctl+0x57a/0x7e0 [ 85.798199][ T5703] ? ptrace_notify+0x20c/0x290 [ 85.802967][ T5703] ? __pfx_sock_ioctl+0x10/0x10 [ 85.807839][ T5703] ? __pfx_ptrace_notify+0x10/0x10 [ 85.812961][ T5703] ? bpf_lsm_file_ioctl+0x9/0x20 [ 85.817903][ T5703] ? __pfx_sock_ioctl+0x10/0x10 [ 85.822759][ T5703] __se_sys_ioctl+0xfc/0x170 [ 85.827378][ T5703] do_syscall_64+0x166/0x520 [ 85.831980][ T5703] ? trace_irq_disable+0x3b/0x140 [ 85.837016][ T5703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.843105][ T5703] ? clear_bhb_loop+0x70/0xc0 [ 85.847797][ T5703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.853723][ T5703] RIP: 0033:0x7f78005a0b39 [ 85.858173][ T5703] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 85.877785][ T5703] RSP: 002b:00007ffccd79fcd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.886236][ T5703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f78005a0b39 [ 85.894209][ T5703] RDX: 00002000000005c0 RSI: 0000000000008946 RDI: 0000000000000004 [ 85.902187][ T5703] RBP: 00000000000f4240 R08: 0000555570e04050 R09: 0000555570e04050 [ 85.910168][ T5703] R10: 0000555570e04050 R11: 0000000000000246 R12: 00007f780060c44b [ 85.918143][ T5703] R13: 00007ffccd79fd40 R14: 0000000000000004 R15: 00007f780060c3a4 [ 85.926123][ T5703] [pid 5703] ioctl(4, SIOCETHTOOL, 0x2000000005c0 [pid 5647] kill(-2, SIGKILL) = 0 [pid 5647] kill(2, SIGKILL) = 0 [pid 5647] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5647] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 5647] getdents64(3, 0x555570e047a0 /* 2 entries */, 32768) = 48 [pid 5647] getdents64(3, 0x555570e047a0 /* 0 entries */, 32768) = 0 [pid 5647] close(3) = 0 [ 91.857333][ T1226] cfg80211: failed to load regulatory.db