INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.275792] sshd (4403) used greatest stack depth: 16888 bytes left Warning: Permanently added '10.128.0.16' (ECDSA) to the list of known hosts. [ 46.977141] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 47.003714] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 47.028616] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 [ 47.056030] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 [ 47.084946] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 47.119153] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 [ 47.173884] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 [ 47.221723] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available [ 47.793877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.816900] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 47.900363] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 47.927248] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 47.996701] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 48.062371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 48.115383] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 48.125613] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 49.124759] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.130920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.141476] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.147626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.307645] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.328121] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.399571] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.405685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.474947] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.481085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.494335] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.500517] 8021q: adding VLAN 0 to HW filter on device bond0 executing program [ 49.522138] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.528507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.538881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.547184] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 49.554582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready executing program [ 49.575986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.584586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.591847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.603779] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 49.611239] IPVS: stopping backup sync thread 5597 ... executing program [ 49.625990] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 49.631756] IPVS: stopping backup sync thread 5602 ... executing program executing program [ 49.675005] IPVS: stopping backup sync thread 5617 ... [ 49.678774] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 49.692714] IPVS: stopping backup sync thread 5624 ... executing program executing program [ 49.729584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.742570] IPVS: stopping backup sync thread 5638 ... [ 49.743369] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.757470] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 49.758464] IPVS: stopping backup sync thread 5642 ... executing program [ 49.776890] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.784590] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.790764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.798070] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 49.819802] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 executing program executing program [ 49.830767] IPVS: stopping backup sync thread 5652 ... [ 49.840912] IPVS: stopping backup sync thread 5665 ... executing program executing program [ 49.889423] IPVS: stopping backup sync thread 5682 ... [ 49.889898] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 49.903594] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 49.904526] IPVS: stopping backup sync thread 5684 ... [ 49.920433] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 49.926555] 8021q: adding VLAN 0 to HW filter on device bond0 executing program [ 49.975652] IPVS: stopping backup sync thread 5703 ... [ 49.976636] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 49.982005] IPVS: stopping backup sync thread 5706 ... [ 49.997593] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.003798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.011470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program executing program [ 50.026512] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.032650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.040127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.049551] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.057992] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.064297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready executing program [ 50.071796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.083962] [ 50.085591] ============================================ [ 50.091011] WARNING: possible recursive locking detected [ 50.096434] 4.16.0-rc7+ #370 Not tainted [ 50.100462] -------------------------------------------- [ 50.105878] syzkaller507490/5710 is trying to acquire lock: [ 50.111551] (rtnl_mutex){+.+.}, at: [<0000000047f3961b>] rtnl_lock+0x17/0x20 [ 50.118842] [ 50.118842] but task is already holding lock: [ 50.125392] (rtnl_mutex){+.+.}, at: [<0000000047f3961b>] rtnl_lock+0x17/0x20 [ 50.132641] [ 50.132641] other info that might help us debug this: [ 50.139271] Possible unsafe locking scenario: [ 50.139271] [ 50.145304] CPU0 [ 50.147857] ---- [ 50.150408] lock(rtnl_mutex); [ 50.153655] lock(rtnl_mutex); [ 50.156902] [ 50.156902] *** DEADLOCK *** [ 50.156902] [ 50.162927] May be due to missing lock nesting notation [ 50.162927] [ 50.169822] 2 locks held by syzkaller507490/5710: [ 50.174631] #0: (rtnl_mutex){+.+.}, at: [<0000000047f3961b>] rtnl_lock+0x17/0x20 [ 50.182322] #1: (ipvs->sync_mutex){+.+.}, at: [<000000002b2926a2>] do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 50.191506] [ 50.191506] stack backtrace: [ 50.195972] CPU: 1 PID: 5710 Comm: syzkaller507490 Not tainted 4.16.0-rc7+ #370 [ 50.203382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.212727] Call Trace: [ 50.215286] dump_stack+0x194/0x24d [ 50.218885] ? arch_local_irq_restore+0x53/0x53 [ 50.223525] __lock_acquire+0xe8f/0x3e00 [ 50.227559] ? rcu_read_unlock+0x35/0x70 [ 50.231590] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 50.236753] ? __lock_is_held+0xb6/0x140 [ 50.240786] ? __lock_acquire+0x664/0x3e00 [ 50.244995] ? select_idle_sibling+0x86d/0xda0 [ 50.249553] ? update_curr+0x332/0xac0 [ 50.253411] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 50.258572] ? find_held_lock+0x35/0x1d0 [ 50.262694] ? __lock_is_held+0xb6/0x140 [ 50.266724] ? __x2apic_send_IPI_dest+0x5c/0x80 [ 50.271363] ? x2apic_send_IPI+0x6f/0xa0 [ 50.275399] ? native_smp_send_reschedule+0x63/0x90 [ 50.280385] ? trace_hardirqs_off+0x10/0x10 [ 50.284676] ? trace_hardirqs_off+0x10/0x10 [ 50.288966] ? trace_hardirqs_off+0x10/0x10 [ 50.293255] ? trace_hardirqs_off+0x10/0x10 [ 50.297546] ? dequeue_task_fair+0x490/0x490 [ 50.301924] lock_acquire+0x1d5/0x580 [ 50.305693] ? lock_acquire+0x1d5/0x580 [ 50.309638] ? rtnl_lock+0x17/0x20 [ 50.313146] ? lock_release+0xa40/0xa40 [ 50.317092] ? check_same_owner+0x320/0x320 [ 50.321385] ? try_to_wake_up+0xf9/0x15f0 [ 50.325505] ? rcu_note_context_switch+0x710/0x710 [ 50.330405] ? __might_sleep+0x95/0x190 [ 50.334352] ? rtnl_lock+0x17/0x20 [ 50.337864] __mutex_lock+0x16f/0x1a80 [ 50.341719] ? rtnl_lock+0x17/0x20 [ 50.345229] ? wait_for_completion_killable+0x63e/0x820 [ 50.350560] ? lock_downgrade+0x980/0x980 [ 50.354675] ? rtnl_lock+0x17/0x20 [ 50.358185] ? mutex_lock_io_nested+0x1900/0x1900 [ 50.362996] ? mark_held_locks+0xaf/0x100 [ 50.367118] ? _raw_spin_unlock_irq+0x27/0x70 [ 50.371583] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 50.376567] ? trace_hardirqs_on+0xd/0x10 [ 50.380682] ? _raw_spin_unlock_irq+0x27/0x70 [ 50.385145] ? wait_for_completion_killable+0x63e/0x820 [ 50.390478] ? wait_for_completion_interruptible_timeout+0x820/0x820 [ 50.396936] ? lock_downgrade+0x980/0x980 [ 50.401053] ? lock_release+0xa40/0xa40 [ 50.404999] ? __kthread_create_on_node+0x127/0x480 [ 50.409991] ? do_raw_spin_trylock+0x190/0x190 [ 50.414545] ? wake_up_q+0xe0/0xe0 [ 50.418062] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 50.423397] ? __kthread_create_on_node+0x36e/0x480 [ 50.428385] ? print_irqtrace_events+0x270/0x270 [ 50.433111] ? kthread_park+0x130/0x130 [ 50.437060] ? __lock_is_held+0xb6/0x140 [ 50.441094] mutex_lock_nested+0x16/0x20 [ 50.445128] ? mutex_lock_nested+0x16/0x20 [ 50.449345] rtnl_lock+0x17/0x20 [ 50.452686] ip_mc_drop_socket+0x88/0x230 [ 50.456816] inet_release+0x4e/0x1c0 [ 50.460502] sock_release+0x8d/0x1e0 [ 50.464187] start_sync_thread+0x2213/0x2b70 [ 50.468568] ? do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 50.473038] ? ip_vs_process_message_v0+0x870/0x870 [ 50.478032] ? ip_vs_sync_conn+0x3950/0x3950 [ 50.482420] ? trace_hardirqs_off+0x10/0x10 [ 50.486713] ? lock_downgrade+0x980/0x980 [ 50.490832] ? lock_release+0xa40/0xa40 [ 50.494782] ? lock_acquire+0x1d5/0x580 [ 50.498728] ? find_held_lock+0x35/0x1d0 [ 50.502760] ? __might_fault+0x110/0x1d0 [ 50.506790] ? lock_release+0xa40/0xa40 [ 50.510829] ? check_same_owner+0x320/0x320 [ 50.515121] ? module_unload_free+0x5b0/0x5b0 [ 50.519586] ? __might_sleep+0x95/0x190 [ 50.523535] do_ip_vs_set_ctl+0x1139/0x1cc0 [ 50.527832] ? do_ip_vs_set_ctl+0x1139/0x1cc0 [ 50.532303] ? find_held_lock+0x35/0x1d0 [ 50.536338] ? ip_vs_genl_dump_services+0x440/0x440 [ 50.541322] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 50.546575] ? lock_downgrade+0x980/0x980 [ 50.550694] ? __lock_is_held+0xb6/0x140 [ 50.554729] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 50.559540] ? wait_for_completion+0x770/0x770 [ 50.564099] ? module_unload_free+0x5b0/0x5b0 [ 50.568564] ? handle_mm_fault+0x35b/0xb10 [ 50.572772] ? mutex_unlock+0xd/0x10 [ 50.576460] nf_setsockopt+0x67/0xc0 [ 50.580141] ? nf_setsockopt+0x67/0xc0 [ 50.583997] ip_setsockopt+0x97/0xa0 [ 50.587688] raw_setsockopt+0xb7/0xd0 [ 50.591462] sock_common_setsockopt+0x95/0xd0 [ 50.595933] SyS_setsockopt+0x189/0x360 [ 50.599888] ? SyS_recv+0x40/0x40 [ 50.603334] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 50.608864] ? do_syscall_64+0xb7/0x940 [ 50.612828] ? SyS_recv+0x40/0x40 [ 50.616263] do_syscall_64+0x281/0x940 [ 50.620128] ? __do_page_fault+0xc90/0xc90 [ 50.624349] ? _raw_spin_unlock_irq+0x27/0x70 [ 50.628826] ? finish_task_switch+0x1c1/0x7e0 [ 50.633304] ? syscall_return_slowpath+0x550/0x550 [ 50.638218] ? syscall_return_slowpath+0x2ac/0x550 [ 50.643129] ? prepare_exit_to_usermode+0x350/0x350 [ 50.648130] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 50.653477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 50.658303] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 50.663476] RIP: 0033:0x447c19 [ 50.666645] RSP: 002b:00007f7c9e3e8d28 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.674331] RAX: ffffffffffffffda RBX: 00000000006e3a00 RCX: 0000000000447c19 [ 50.681592] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 50.688841] RBP: 00000000006e3a04 R08: 0000000000000018 R09: 0000000000000000 [ 50.696087] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 50.703344] R13: 00007ffee02c86cf R14: 00007f7c9e3e99c0 R15: 00000000006e3b80