INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.18' (ECDSA) to the list of known hosts. syzkaller login: [ 45.721987] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 45.747170] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 45.772178] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 45.799847] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 45.835632] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 [ 45.874896] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 [ 45.899710] ip (4484) used greatest stack depth: 16376 bytes left [ 45.934432] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 [ 46.004086] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists [ 46.322295] ip (4670) used greatest stack depth: 16176 bytes left RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: File exists RTNETLINK answers: Operation not supported [ 46.539609] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.565538] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 46.607417] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 46.663366] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 46.744598] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 46.761007] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 46.843108] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 46.985904] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 47.913915] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.920106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.935063] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 47.941242] 8021q: adding VLAN 0 to HW filter on device bond0 RTNETLINK answers: Invalid argument [ 48.050162] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.056526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.119624] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.125824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.150777] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.182110] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.300091] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.313337] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.319466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.332420] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.354526] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.360639] 8021q: adding VLAN 0 to HW filter on device bond0 executing program [ 48.402514] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.408787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.416956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.436237] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 48.444855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready executing program [ 48.454971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.479689] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 48.489635] IPVS: stopping backup sync thread 5631 ... executing program [ 48.511534] IPVS: stopping backup sync thread 5641 ... [ 48.512503] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 48.533995] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.548512] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready executing program [ 48.558601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.558610] IPVS: stopping backup sync thread 5653 ... [ 48.569125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.588054] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.597726] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready executing program executing program executing program [ 48.606138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.618816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.641807] IPVS: stopping backup sync thread 5671 ... [ 48.647371] IPVS: stopping backup sync thread 5674 ... [ 48.650959] IPVS: stopping backup sync thread 5677 ... executing program [ 48.664952] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.671207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.686155] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 48.694938] IPVS: stopping backup sync thread 5684 ... executing program executing program [ 48.710456] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.716622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.724085] [ 48.725713] ============================================ [ 48.731152] WARNING: possible recursive locking detected [ 48.736580] 4.16.0-rc7+ #5 Not tainted [ 48.740444] -------------------------------------------- [ 48.745860] syzkaller074717/5683 is trying to acquire lock: [ 48.751537] (rtnl_mutex){+.+.}, at: [<000000004f67d67a>] rtnl_lock+0x17/0x20 [ 48.758790] [ 48.758790] but task is already holding lock: [ 48.764729] (rtnl_mutex){+.+.}, at: [<000000004f67d67a>] rtnl_lock+0x17/0x20 [ 48.771979] [ 48.771979] other info that might help us debug this: [ 48.778610] Possible unsafe locking scenario: [ 48.778610] [ 48.784640] CPU0 [ 48.787189] ---- [ 48.789741] lock(rtnl_mutex); [ 48.793000] lock(rtnl_mutex); [ 48.796261] [ 48.796261] *** DEADLOCK *** [ 48.796261] [ 48.802297] May be due to missing lock nesting notation [ 48.802297] [ 48.809196] 2 locks held by syzkaller074717/5683: [ 48.814015] #0: (rtnl_mutex){+.+.}, at: [<000000004f67d67a>] rtnl_lock+0x17/0x20 [ 48.821721] #1: (ipvs->sync_mutex){+.+.}, at: [<00000000db317d80>] do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 48.830884] [ 48.830884] stack backtrace: [ 48.835352] CPU: 1 PID: 5683 Comm: syzkaller074717 Not tainted 4.16.0-rc7+ #5 [ 48.842593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.851919] Call Trace: [ 48.854481] dump_stack+0x194/0x24d [ 48.858079] ? arch_local_irq_restore+0x53/0x53 [ 48.862720] __lock_acquire+0xe8f/0x3e00 [ 48.866754] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 48.871916] ? __lock_is_held+0xb6/0x140 [ 48.875950] ? __lock_acquire+0x664/0x3e00 [ 48.880470] ? select_idle_sibling+0x86d/0xda0 [ 48.885029] ? update_curr+0x332/0xac0 [ 48.888891] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 48.894054] ? find_held_lock+0x35/0x1d0 [ 48.898089] ? trace_hardirqs_off+0x10/0x10 [ 48.902379] ? trace_hardirqs_off+0x10/0x10 [ 48.906670] ? trace_hardirqs_off+0x10/0x10 [ 48.910996] ? trace_hardirqs_off+0x10/0x10 [ 48.915293] ? dequeue_task_fair+0x490/0x490 [ 48.919671] lock_acquire+0x1d5/0x580 [ 48.923442] ? lock_acquire+0x1d5/0x580 [ 48.927389] ? rtnl_lock+0x17/0x20 [ 48.930912] ? lock_release+0xa40/0xa40 [ 48.934871] ? check_same_owner+0x320/0x320 [ 48.939162] ? try_to_wake_up+0xf9/0x15f0 [ 48.943283] ? rcu_note_context_switch+0x710/0x710 [ 48.948183] ? __might_sleep+0x95/0x190 [ 48.952126] ? rtnl_lock+0x17/0x20 [ 48.955637] __mutex_lock+0x16f/0x1a80 [ 48.959494] ? rtnl_lock+0x17/0x20 [ 48.963004] ? wait_for_completion_killable+0x63e/0x820 [ 48.968340] ? lock_downgrade+0x980/0x980 [ 48.972456] ? rtnl_lock+0x17/0x20 [ 48.975967] ? mutex_lock_io_nested+0x1900/0x1900 [ 48.980780] ? mark_held_locks+0xaf/0x100 [ 48.984900] ? _raw_spin_unlock_irq+0x27/0x70 [ 48.989364] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 48.994348] ? trace_hardirqs_on+0xd/0x10 [ 48.998464] ? _raw_spin_unlock_irq+0x27/0x70 [ 49.002933] ? wait_for_completion_killable+0x63e/0x820 [ 49.008279] ? wait_for_completion_interruptible_timeout+0x820/0x820 [ 49.014738] ? lock_downgrade+0x980/0x980 [ 49.018855] ? lock_release+0xa40/0xa40 [ 49.022801] ? __kthread_create_on_node+0x127/0x480 [ 49.027785] ? do_raw_spin_trylock+0x190/0x190 [ 49.032340] ? wake_up_q+0xe0/0xe0 [ 49.035858] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.041193] ? __kthread_create_on_node+0x36e/0x480 [ 49.046177] ? print_irqtrace_events+0x270/0x270 [ 49.050902] ? kthread_park+0x130/0x130 [ 49.054850] ? __lock_is_held+0xb6/0x140 [ 49.058883] mutex_lock_nested+0x16/0x20 [ 49.062914] ? mutex_lock_nested+0x16/0x20 [ 49.067122] rtnl_lock+0x17/0x20 [ 49.070462] ip_mc_drop_socket+0x88/0x230 [ 49.074584] inet_release+0x4e/0x1c0 [ 49.078277] sock_release+0x8d/0x1e0 [ 49.081961] start_sync_thread+0x2213/0x2b70 [ 49.086339] ? do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 49.090808] ? ip_vs_process_message_v0+0x870/0x870 [ 49.095796] ? ip_vs_sync_conn+0x3950/0x3950 [ 49.100185] ? trace_hardirqs_off+0x10/0x10 [ 49.104486] ? lock_downgrade+0x980/0x980 [ 49.108607] ? lock_release+0xa40/0xa40 [ 49.112549] ? lock_acquire+0x1d5/0x580 [ 49.116493] ? lock_acquire+0x1d5/0x580 [ 49.120438] ? find_held_lock+0x35/0x1d0 [ 49.124469] ? __might_fault+0x110/0x1d0 [ 49.128507] ? lock_release+0xa40/0xa40 [ 49.132458] ? check_same_owner+0x320/0x320 [ 49.136750] ? module_unload_free+0x5b0/0x5b0 [ 49.141217] ? __might_sleep+0x95/0x190 [ 49.145167] do_ip_vs_set_ctl+0x1139/0x1cc0 [ 49.149464] ? do_ip_vs_set_ctl+0x1139/0x1cc0 [ 49.153936] ? find_held_lock+0x35/0x1d0 [ 49.157975] ? ip_vs_genl_dump_services+0x440/0x440 [ 49.162969] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 49.168214] ? lock_downgrade+0x980/0x980 [ 49.172336] ? __lock_is_held+0xb6/0x140 [ 49.176373] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 49.181190] ? wait_for_completion+0x770/0x770 [ 49.185748] ? module_unload_free+0x5b0/0x5b0 [ 49.190213] ? handle_mm_fault+0x35b/0xb10 [ 49.194426] ? mutex_unlock+0xd/0x10 [ 49.198115] nf_setsockopt+0x67/0xc0 [ 49.201806] ? nf_setsockopt+0x67/0xc0 [ 49.205674] ip_setsockopt+0x97/0xa0 [ 49.209361] raw_setsockopt+0xb7/0xd0 [ 49.213133] sock_common_setsockopt+0x95/0xd0 [ 49.217601] SyS_setsockopt+0x189/0x360 [ 49.221544] ? SyS_recv+0x40/0x40 [ 49.224969] ? mm_fault_error+0x2c0/0x2c0 [ 49.229093] ? move_addr_to_kernel+0x60/0x60 [ 49.233471] ? do_syscall_64+0xb7/0x940 [ 49.237413] ? SyS_recv+0x40/0x40 [ 49.240838] do_syscall_64+0x281/0x940 [ 49.244692] ? __do_page_fault+0xc90/0xc90 [ 49.248903] ? _raw_spin_unlock_irq+0x27/0x70 [ 49.253370] ? finish_task_switch+0x1c1/0x7e0 [ 49.257845] ? syscall_return_slowpath+0x550/0x550 [ 49.262746] ? syscall_return_slowpath+0x2ac/0x550 [ 49.267645] ? prepare_exit_to_usermode+0x350/0x350 [ 49.272632] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 49.277974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.282803] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.287972] RIP: 0033:0x447c19 [ 49.291133] RSP: 002b:00007fec9160ed28 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.298809] RAX: ffffffffffffffda RBX: 00000000006e3a00 RCX: 0000000000447c19 [ 49.306052] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 49.313290] RBP: 00000000006e3a04 R08: 0000000000000018 R09: 0000000000000000 [ 49.320535] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 49.327776] R13: 00007ffcd9c35f8f R14: 00007fec9160f9c0 R15: 00000000006e3b80