INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. 2018/04/24 03:22:56 parsed 1 programs 2018/04/24 03:22:56 executed programs: 0 syzkaller login: [ 24.000796] IPVS: Creating netns size=2536 id=1 [ 24.025377] IPVS: Creating netns size=2536 id=2 [ 24.039308] IPVS: stopping backup sync thread 3831 ... [ 24.046075] IPVS: stopping backup sync thread 3836 ... [ 24.056557] IPVS: Creating netns size=2536 id=3 [ 24.062811] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.062862] IPVS: stopping backup sync thread 3841 ... [ 24.081445] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.088979] IPVS: stopping backup sync thread 3852 ... [ 24.089621] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.089641] IPVS: stopping backup sync thread 3854 ... [ 24.089837] IPVS: stopping backup sync thread 3846 ... [ 24.099098] IPVS: stopping backup sync thread 3857 ... [ 24.099508] IPVS: Creating netns size=2536 id=4 [ 24.108292] IPVS: stopping backup sync thread 3860 ... [ 24.120889] IPVS: stopping backup sync thread 3864 ... [ 24.127779] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.131025] IPVS: stopping backup sync thread 3868 ... [ 24.131653] IPVS: Creating netns size=2536 id=5 [ 24.155390] IPVS: stopping backup sync thread 3876 ... [ 24.160290] IPVS: stopping backup sync thread 3880 ... [ 24.167777] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.172575] IPVS: stopping backup sync thread 3882 ... [ 24.174858] IPVS: Creating netns size=2536 id=6 [ 24.191352] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.191387] IPVS: stopping backup sync thread 3890 ... [ 24.208848] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.209604] IPVS: stopping backup sync thread 3896 ... [ 24.210086] IPVS: stopping backup sync thread 3901 ... [ 24.211721] IPVS: Creating netns size=2536 id=7 [ 24.219749] IPVS: stopping backup sync thread 3903 ... [ 24.225077] IPVS: stopping backup sync thread 3908 ... [ 24.228862] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.249432] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.256485] IPVS: stopping backup sync thread 3916 ... [ 24.261204] IPVS: stopping backup sync thread 3926 ... [ 24.265639] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.272979] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.273567] IPVS: Creating netns size=2536 id=8 [ 24.277630] IPVS: stopping backup sync thread 3910 ... [ 24.278348] IPVS: stopping backup sync thread 3932 ... [ 24.286784] IPVS: stopping backup sync thread 3934 ... [ 24.296391] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.306861] IPVS: stopping backup sync thread 3945 ... [ 24.306970] IPVS: stopping backup sync thread 3913 ... [ 24.314482] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.317062] IPVS: stopping backup sync thread 3951 ... [ 24.317850] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.317871] IPVS: stopping backup sync thread 3953 ... [ 24.318130] IPVS: stopping backup sync thread 3950 ... [ 24.318987] IPVS: stopping backup sync thread 3928 ... [ 24.328420] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.330386] IPVS: stopping backup sync thread 3956 ... [ 24.357339] IPVS: stopping backup sync thread 3965 ... [ 24.360416] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.364418] IPVS: stopping backup sync thread 3968 ... [ 24.511232] IPVS: stopping backup sync thread 3984 ... [ 24.513628] IPVS: stopping backup sync thread 3939 ... [ 24.517540] IPVS: stopping backup sync thread 3991 ... [ 24.517706] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.517998] IPVS: stopping backup sync thread 3992 ... [ 24.519363] IPVS: stopping backup sync thread 3993 ... [ 24.523506] IPVS: stopping backup sync thread 3995 ... [ 24.524793] IPVS: stopping backup sync thread 3997 ... [ 24.525893] IPVS: stopping backup sync thread 4002 ... [ 24.526745] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.527117] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.545013] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 24.547879] [ 24.547885] ============================================= [ 24.547887] [ INFO: possible recursive locking detected ] [ 24.547892] 4.9.95-g142d4b5 #7 Not tainted [ 24.547893] --------------------------------------------- [ 24.547896] syz-executor3/3989 is trying to acquire lock: [ 24.547915] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 24.547916] but task is already holding lock: [ 24.547926] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 24.547928] other info that might help us debug this: [ 24.547930] Possible unsafe locking scenario: [ 24.547930] [ 24.547931] CPU0 [ 24.547932] ---- [ 24.547936] lock(rtnl_mutex); [ 24.547939] lock(rtnl_mutex); [ 24.547941] [ 24.547941] *** DEADLOCK *** [ 24.547941] [ 24.547942] May be due to missing lock nesting notation [ 24.547942] [ 24.547946] 2 locks held by syz-executor3/3989: [ 24.547957] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 24.547969] #1: (ipvs->sync_mutex){+.+.+.}, at: [] do_ip_vs_set_ctl+0x90d/0xbd0 [ 24.547970] [ 24.547970] stack backtrace: [ 24.547977] CPU: 0 PID: 3989 Comm: syz-executor3 Not tainted 4.9.95-g142d4b5 #7 [ 24.547980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.547992] ffff8801d80f7470 ffffffff81eb0f89 ffffffff8539d0e0 ffffffff8539d0e0 [ 24.548000] ffffffff8539d0e0 ffff8801b562e8e8 521939eb62dfac6a ffff8801d80f7630 [ 24.548007] ffffffff814259ef ffffffff84c98ca0 ffffffff84fef5e8 ffffffff84c98ca4 [ 24.548009] Call Trace: [ 24.548018] [] dump_stack+0xc1/0x128 [ 24.548028] [] __lock_acquire.cold.59+0x166/0x5f8 [ 24.548038] [] ? debug_check_no_locks_freed+0x210/0x210 [ 24.548045] [] ? __lock_is_held+0xa2/0xf0 [ 24.548051] [] lock_acquire+0x130/0x3e0 [ 24.548057] [] ? rtnl_lock+0x17/0x20 [ 24.548067] [] ? rtnl_lock+0x17/0x20 [ 24.548075] [] mutex_lock_nested+0xc0/0x870 [ 24.548081] [] ? rtnl_lock+0x17/0x20 [ 24.548088] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 24.548095] [] ? qtaguid_untag+0x41a/0x620 [ 24.548101] [] ? mutex_trylock+0x3e0/0x3e0 [ 24.548108] [] ? _raw_spin_unlock_bh+0x30/0x40 [ 24.548114] [] ? qtaguid_untag+0x31e/0x620 [ 24.548121] [] ? __lock_is_held+0xa2/0xf0 [ 24.548128] [] rtnl_lock+0x17/0x20 [ 24.548136] [] ip_mc_drop_socket+0x8c/0x230 [ 24.548143] [] inet_release+0x5b/0x1d0 [ 24.548152] [] sock_release+0x96/0x1c0 [ 24.548159] [] start_sync_thread+0xa0e/0x1ea0 [ 24.548167] [] ? ip_vs_proc_sync_conn+0x952/0x952 [ 24.548175] [] ? ip_vs_sync_conn+0x2a90/0x2a90 [ 24.548182] [] ? mark_held_locks+0xc7/0x130 [ 24.548189] [] ? mutex_lock_nested+0x572/0x870 [ 24.548195] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 24.548202] [] ? mutex_lock_nested+0x596/0x870 [ 24.548208] [] ? do_ip_vs_set_ctl+0x90d/0xbd0 [ 24.548215] [] ? mutex_trylock+0x3e0/0x3e0 [ 24.548222] [] ? memcpy+0x45/0x50 [ 24.548229] [] do_ip_vs_set_ctl+0x91f/0xbd0 [ 24.548237] [] ? get_futex_key+0x1090/0x1090 [ 24.548244] [] ? ip_vs_genl_set_cmd+0x9c0/0x9c0 [ 24.548251] [] ? mutex_lock_nested+0x572/0x870 [ 24.548258] [] ? __mutex_unlock_slowpath+0x221/0x3c0 [ 24.548265] [] ? __ww_mutex_lock+0x14c0/0x14c0 [ 24.548273] [] ? sock_has_perm+0x1c2/0x3e0 [ 24.548280] [] ? mutex_unlock+0x9/0x10 [ 24.548290] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 24.548296] [] compat_nf_setsockopt+0x10d/0x130 [ 24.548303] [] compat_ip_setsockopt+0xa7/0xe0 [ 24.548310] [] inet_csk_compat_setsockopt+0x97/0x120 [ 24.548316] [] ? ip_setsockopt+0xb0/0xb0 [ 24.548324] [] compat_tcp_setsockopt+0x3d/0x70 [ 24.548330] [] compat_sock_common_setsockopt+0xb4/0x150 [ 24.548337] [] ? tcp_setsockopt+0xe0/0xe0 [ 24.548345] [] compat_SyS_setsockopt+0x14c/0x2a0 [ 24.548352] [] ? sock_common_setsockopt+0xe0/0xe0 [ 24.548359] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 24.548367] [] ? do_fast_syscall_32+0xcf/0x870 [ 24.548374] [] ? scm_detach_fds_compat+0x3b0/0x3b0 [ 24.548380] [] do_fast_syscall_32+0x2f7/0x870 [ 24.548387] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.548394] [] entry_SYSENTER_compat+0x90/0xa2 [ 24.548568] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 25.348062] IPVS: stopping backup sync thread 4007 ... [ 25.349081] IPVS: stopping backup sync thread 4006 ... [ 25.356784] IPVS: stopping backup sync thread 4008 ... [ 25.357858] IPVS: stopping backup sync thread 4004 ...