[....] Starting OpenBSD Secure Shell server: sshd[ 24.564558] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 29.429747] random: sshd: uninitialized urandom read (32 bytes read) [ 29.766307] random: sshd: uninitialized urandom read (32 bytes read) [ 30.421971] random: sshd: uninitialized urandom read (32 bytes read) [ 74.619795] random: sshd: uninitialized urandom read (32 bytes read) [ 74.763310] sshd (5319) used greatest stack depth: 16152 bytes left Warning: Permanently added '10.128.10.25' (ECDSA) to the list of known hosts. [ 80.293122] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/23 03:17:05 parsed 1 programs [ 81.787486] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/23 03:17:07 executed programs: 0 [ 82.997311] IPVS: ftp: loaded support on port[0] = 21 [ 83.006228] IPVS: ftp: loaded support on port[0] = 21 [ 83.009289] IPVS: ftp: loaded support on port[0] = 21 [ 83.019513] IPVS: ftp: loaded support on port[0] = 21 [ 83.024348] IPVS: ftp: loaded support on port[0] = 21 [ 83.029507] IPVS: ftp: loaded support on port[0] = 21 [ 84.330767] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.348345] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.356255] device bridge_slave_0 entered promiscuous mode [ 84.401138] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.410309] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.419056] device bridge_slave_0 entered promiscuous mode [ 84.427466] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.434881] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.442716] device bridge_slave_0 entered promiscuous mode [ 84.452725] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.460412] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.468289] device bridge_slave_0 entered promiscuous mode [ 84.477631] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.484658] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.492013] device bridge_slave_0 entered promiscuous mode [ 84.502335] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.509499] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.517338] device bridge_slave_0 entered promiscuous mode [ 84.524313] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.530672] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.538778] device bridge_slave_1 entered promiscuous mode [ 84.546792] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.555515] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.564112] device bridge_slave_1 entered promiscuous mode [ 84.572852] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.580211] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.587817] device bridge_slave_1 entered promiscuous mode [ 84.596413] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.602772] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.612086] device bridge_slave_1 entered promiscuous mode [ 84.620525] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.630034] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.638181] device bridge_slave_1 entered promiscuous mode [ 84.651485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.659429] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.666689] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.680227] device bridge_slave_1 entered promiscuous mode [ 84.688999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.698692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.707452] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.718692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.737893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.748546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 84.762477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.776865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.800130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.810651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 84.819940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 85.006129] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.027729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.042914] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.057154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.074626] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.090659] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.124324] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.136335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.148135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.164396] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 85.181850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.193926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.201249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.214494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.229536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.240524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.253551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.262110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 85.289933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.299476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.309624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 85.327208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.348961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 85.359968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.369357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.377703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.524777] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 85.534966] team0: Port device team_slave_0 added [ 85.552444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 85.562312] team0: Port device team_slave_0 added [ 85.609879] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.624949] team0: Port device team_slave_1 added [ 85.632768] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.641444] team0: Port device team_slave_1 added [ 85.649468] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 85.661061] team0: Port device team_slave_0 added [ 85.669531] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 85.680348] team0: Port device team_slave_0 added [ 85.689150] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 85.698493] team0: Port device team_slave_0 added [ 85.705004] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 85.712344] team0: Port device team_slave_0 added [ 85.723735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.748270] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.756647] team0: Port device team_slave_1 added [ 85.779189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.789852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.797245] team0: Port device team_slave_1 added [ 85.809133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.825266] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.832677] team0: Port device team_slave_1 added [ 85.842750] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 85.854440] team0: Port device team_slave_1 added [ 85.860375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.874868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.889226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.928585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 85.940771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.950584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.964246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.978810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.987370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.996025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.004815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 86.012057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.020241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.031700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 86.042247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 86.056371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 86.063992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.072018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.097912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.105986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.113636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.121372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.130148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 86.143631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 86.151321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 86.164551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 86.171784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.186177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.201059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.209696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.217793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.225735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.233666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.241350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.251735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 86.271765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 86.279070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.290025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.305190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.313263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.324596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 86.337859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.348982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.363772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 86.374475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.382429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.417093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 86.431064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.440358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.990569] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.997129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.004083] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.010463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.020968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.030822] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.037233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.043945] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.050312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.058419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.068181] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.074594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.081249] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.087680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.096441] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.151594] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.158016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.164733] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.171100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.181597] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.199457] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.205863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.212539] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.218973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.228763] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.257110] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.263525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.270179] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.276601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.290205] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 87.965226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.978657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.992752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.001854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.009432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.016983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.791619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.812495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.824160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.836811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.906798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.948317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.045650] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.066228] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.081500] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.103703] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.144122] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.247073] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 90.288352] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.306199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.315538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.326170] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.338259] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.352471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.360740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.373742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.386751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.424121] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.430294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.444554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.477866] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.485309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.495614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.579826] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.604765] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.620135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 90.626881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.638381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.654673] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.722024] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.781781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.910551] 8021q: adding VLAN 0 to HW filter on device team0 2018/09/23 03:17:17 executed programs: 6 [ 96.996801] [ 96.998473] ====================================================== [ 97.004784] WARNING: possible circular locking dependency detected [ 97.011101] 4.19.0-rc4+ #152 Not tainted [ 97.015159] ------------------------------------------------------ [ 97.021466] syz-executor5/7119 is trying to acquire lock: [ 97.026984] 00000000038cc7c1 (&p->lock){+.+.}, at: seq_read+0x71/0x1150 [ 97.033758] [ 97.033758] but task is already holding lock: [ 97.039713] 0000000005a9aed7 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 97.046905] [ 97.046905] which lock already depends on the new lock. [ 97.046905] [ 97.055225] [ 97.055225] the existing dependency chain (in reverse order) is: [ 97.062826] [ 97.062826] -> #2 (&pipe->mutex/1){+.+.}: [ 97.068452] __mutex_lock+0x166/0x1700 [ 97.072843] mutex_lock_nested+0x16/0x20 [ 97.077418] fifo_open+0x15c/0xad0 [ 97.081463] do_dentry_open+0x499/0x1250 [ 97.086028] vfs_open+0xa0/0xd0 [ 97.089810] path_openat+0x12bf/0x5160 [ 97.094202] do_filp_open+0x255/0x380 [ 97.098507] do_open_execat+0x221/0x8e0 [ 97.102994] __do_execve_file.isra.33+0x173f/0x2540 [ 97.108544] __ia32_compat_sys_execve+0x94/0xc0 [ 97.113720] do_fast_syscall_32+0x34d/0xfb2 [ 97.118548] entry_SYSENTER_compat+0x70/0x7f [ 97.123462] [ 97.123462] -> #1 (&sig->cred_guard_mutex){+.+.}: [ 97.129775] __mutex_lock+0x166/0x1700 [ 97.134168] mutex_lock_killable_nested+0x16/0x20 [ 97.139520] lock_trace+0x4c/0xe0 [ 97.143496] proc_pid_personality+0x1c/0xd0 [ 97.148330] proc_single_show+0x101/0x190 [ 97.152990] traverse+0x344/0x7b0 [ 97.156970] seq_read+0xc76/0x1150 [ 97.161024] do_iter_read+0x4a3/0x650 [ 97.165334] vfs_readv+0x175/0x1c0 [ 97.169380] default_file_splice_read+0x53c/0xb20 [ 97.174741] do_splice_to+0x12e/0x190 [ 97.179061] splice_direct_to_actor+0x270/0x8f0 [ 97.184265] do_splice_direct+0x2d4/0x420 [ 97.188922] do_sendfile+0x62a/0xe20 [ 97.193150] __ia32_compat_sys_sendfile+0x190/0x2a0 [ 97.198679] do_fast_syscall_32+0x34d/0xfb2 [ 97.203512] entry_SYSENTER_compat+0x70/0x7f [ 97.208426] [ 97.208426] -> #0 (&p->lock){+.+.}: [ 97.213525] lock_acquire+0x1ed/0x520 [ 97.217832] __mutex_lock+0x166/0x1700 [ 97.222236] mutex_lock_nested+0x16/0x20 [ 97.226811] seq_read+0x71/0x1150 [ 97.230767] do_iter_read+0x4a3/0x650 [ 97.235069] vfs_readv+0x175/0x1c0 [ 97.239112] default_file_splice_read+0x53c/0xb20 [ 97.244461] do_splice_to+0x12e/0x190 [ 97.248777] do_splice+0x1014/0x1430 [ 97.253015] __ia32_sys_splice+0x2bf/0x320 [ 97.257767] do_fast_syscall_32+0x34d/0xfb2 [ 97.262602] entry_SYSENTER_compat+0x70/0x7f [ 97.267538] [ 97.267538] other info that might help us debug this: [ 97.267538] [ 97.275679] Chain exists of: [ 97.275679] &p->lock --> &sig->cred_guard_mutex --> &pipe->mutex/1 [ 97.275679] [ 97.286526] Possible unsafe locking scenario: [ 97.286526] [ 97.292569] CPU0 CPU1 [ 97.297216] ---- ---- [ 97.301859] lock(&pipe->mutex/1); [ 97.305472] lock(&sig->cred_guard_mutex); [ 97.312301] lock(&pipe->mutex/1); [ 97.318427] lock(&p->lock); [ 97.321515] [ 97.321515] *** DEADLOCK *** [ 97.321515] [ 97.327558] 1 lock held by syz-executor5/7119: [ 97.332115] #0: 0000000005a9aed7 (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 97.339929] [ 97.339929] stack backtrace: [ 97.344421] CPU: 1 PID: 7119 Comm: syz-executor5 Not tainted 4.19.0-rc4+ #152 [ 97.351672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 97.361004] Call Trace: [ 97.363585] dump_stack+0x1c4/0x2b4 [ 97.367213] ? dump_stack_print_info.cold.2+0x52/0x52 [ 97.372402] ? vprintk_func+0x85/0x181 [ 97.376292] print_circular_bug.isra.33.cold.54+0x1bd/0x27d [ 97.381983] ? save_trace+0xe0/0x290 [ 97.385695] __lock_acquire+0x33e4/0x4ec0 [ 97.389840] ? mark_held_locks+0x130/0x130 [ 97.394057] ? __lock_acquire+0x7ec/0x4ec0 [ 97.398275] ? __lock_acquire+0x7ec/0x4ec0 [ 97.402509] ? mark_held_locks+0x130/0x130 [ 97.406740] ? __lock_acquire+0x7ec/0x4ec0 [ 97.410973] ? graph_lock+0x170/0x170 [ 97.414759] ? mark_held_locks+0x130/0x130 [ 97.418996] lock_acquire+0x1ed/0x520 [ 97.422791] ? seq_read+0x71/0x1150 [ 97.426409] ? lock_release+0x970/0x970 [ 97.430398] ? arch_local_save_flags+0x40/0x40 [ 97.434973] ? seq_read+0x71/0x1150 [ 97.438585] __mutex_lock+0x166/0x1700 [ 97.442464] ? seq_read+0x71/0x1150 [ 97.446087] ? lock_downgrade+0x900/0x900 [ 97.450227] ? check_preemption_disabled+0x48/0x200 [ 97.455239] ? seq_read+0x71/0x1150 [ 97.458854] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 97.464647] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 97.469942] ? mutex_trylock+0x2b0/0x2b0 [ 97.473987] ? rcu_bh_qs+0xc0/0xc0 [ 97.477517] ? aa_file_perm+0x490/0x1060 [ 97.481567] ? aa_path_link+0x5e0/0x5e0 [ 97.485540] ? __lock_is_held+0xb5/0x140 [ 97.489590] ? rcu_read_lock_sched_held+0x108/0x120 [ 97.494590] ? __alloc_pages_nodemask+0xb5a/0xde0 [ 97.499422] ? default_file_splice_read+0x1de/0xb20 [ 97.504426] ? do_splice_to+0x12e/0x190 [ 97.508382] ? do_splice+0x1014/0x1430 [ 97.512263] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 97.517437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.522957] ? fsnotify+0xaef/0x1330 [ 97.526658] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 97.531573] ? common_file_perm+0x236/0x7f0 [ 97.535878] ? fsnotify_first_mark+0x350/0x350 [ 97.540619] mutex_lock_nested+0x16/0x20 [ 97.544678] ? _copy_from_user+0xdf/0x150 [ 97.548822] ? mutex_lock_nested+0x16/0x20 [ 97.553047] seq_read+0x71/0x1150 [ 97.556493] ? rw_verify_area+0x118/0x360 [ 97.560623] do_iter_read+0x4a3/0x650 [ 97.564415] vfs_readv+0x175/0x1c0 [ 97.567959] ? compat_rw_copy_check_uvector+0x440/0x440 [ 97.573322] ? aa_file_perm+0x469/0x1060 [ 97.577366] ? lock_downgrade+0x900/0x900 [ 97.581507] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 97.587285] ? kasan_check_read+0x11/0x20 [ 97.591433] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 97.596443] ? iov_iter_pipe+0xbf/0x2f0 [ 97.600411] default_file_splice_read+0x53c/0xb20 [ 97.605243] ? iter_file_splice_write+0x1050/0x1050 [ 97.610252] ? aa_path_link+0x5e0/0x5e0 [ 97.614226] ? __fget+0x4aa/0x740 [ 97.617664] ? lock_downgrade+0x900/0x900 [ 97.621794] ? check_preemption_disabled+0x48/0x200 [ 97.626808] ? rcu_bh_qs+0xc0/0xc0 [ 97.630349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 97.635872] ? fsnotify+0xaef/0x1330 [ 97.639577] ? common_file_perm+0x236/0x7f0 [ 97.643882] ? fsnotify_first_mark+0x350/0x350 [ 97.648448] ? fsnotify+0x1330/0x1330 [ 97.652249] ? security_file_permission+0x1c2/0x230 [ 97.657258] ? iter_file_splice_write+0x1050/0x1050 [ 97.662301] do_splice_to+0x12e/0x190 [ 97.666099] do_splice+0x1014/0x1430 [ 97.669798] ? find_held_lock+0x36/0x1c0 [ 97.673844] ? opipe_prep.part.13+0x3b0/0x3b0 [ 97.678335] __ia32_sys_splice+0x2bf/0x320 [ 97.682567] do_fast_syscall_32+0x34d/0xfb2 [ 97.686946] ? do_int80_syscall_32+0x890/0x890 [ 97.691534] ? entry_SYSENTER_compat+0x68/0x7f [ 97.696110] ? trace_hardirqs_off_caller+0xbb/0x310 [ 97.701126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 97.705960] ? trace_hardirqs_on_caller+0x310/0x310 [ 97.710974] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 97.715995] ? recalc_sigpending_tsk+0x180/0x180 [ 97.720733] ? kasan_check_write+0x14/0x20 [ 97.724954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 97.729778] entry_SYSENTER_compat+0x70/0x7f [ 97.734179] RIP: 0023:0xf7f62ca9 [ 97.737530] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 97.756415] RSP: 002b:00000000f7e980cc EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 97.764109] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 97.771377] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000200 [ 97.778637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.785890] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 97.793147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.806969] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 97.813703] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 97.828497] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 97.835837] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 97.896713] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 97.903335] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 97.922117] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 97.934314] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 97.944584] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 97.951162] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 97.977272] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 97.983890] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' 2018/09/23 03:17:23 executed programs: 38 [ 98.746883] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 98.753880] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 98.774324] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 98.782901] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 98.857193] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 98.863769] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 98.877026] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 98.891019] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 98.902135] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 98.909651] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 98.923985] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 98.930449] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 99.686277] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 99.692776] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 99.709340] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 99.720498] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 99.826482] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 99.836002] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 99.859755] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 99.868076] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 99.878319] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 99.885542] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 99.895561] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 99.902003] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 100.636176] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 100.643361] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 100.662168] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 100.673583] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 100.787484] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 100.798893] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 100.810181] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 100.825577] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 100.839022] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 100.846062] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 100.856118] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 100.862534] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 101.579671] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 101.587535] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 101.600906] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 101.608944] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 101.736076] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 101.742632] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 101.757233] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 101.763995] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 101.778971] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 101.792606] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 101.810936] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 101.818129] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 102.516861] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 102.523518] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 102.566979] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 102.573642] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 102.685624] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 102.692333] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 102.739301] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 102.746250] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 102.756648] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 102.767603] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 102.777522] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 102.783967] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 103.455840] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 103.462442] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 103.507130] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 103.514333] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 103.637136] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 103.644242] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 103.687581] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 103.694724] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 103.704700] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 103.712661] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 103.728472] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 103.737220] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' 2018/09/23 03:17:28 executed programs: 74 [ 104.405537] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 104.415024] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 104.445726] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 104.452388] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 104.595910] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 104.602503] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 104.666518] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 104.676912] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 104.687028] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 104.695504] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 104.706651] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 104.713895] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 105.346615] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 105.355605] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 105.396324] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 105.403564] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 105.535564] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 105.542690] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 105.595370] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 105.602224] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 105.626979] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 105.633644] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 105.649311] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 105.656631] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 106.286217] kobject: 'loop2' (000000004606d3db): kobject_uevent_env [ 106.292718] kobject: 'loop2' (000000004606d3db): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 106.345589] kobject: 'loop5' (00000000478de54e): kobject_uevent_env [ 106.352630] kobject: 'loop5' (00000000478de54e): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 106.475523] kobject: 'loop1' (000000001605d1de): kobject_uevent_env [ 106.482412] kobject: 'loop1' (000000001605d1de): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 106.525946] kobject: 'loop4' (00000000dcb2c5e3): kobject_uevent_env [ 106.532492] kobject: 'loop4' (00000000dcb2c5e3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 106.566788] kobject: 'loop3' (000000008018cfa5): kobject_uevent_env [ 106.573707] kobject: 'loop3' (000000008018cfa5): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 106.615754] kobject: 'loop0' (00000000ab8525d0): kobject_uevent_env [ 106.622691] kobject: 'loop0' (00000000ab8525d0): fill_kobj_path: path = '/devices/virtual/block/loop0'