INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. syzkaller login: [ 28.792933] IPVS: ftp: loaded support on port[0] = 21 [ 28.797785] IPVS: ftp: loaded support on port[0] = 21 [ 28.801705] IPVS: ftp: loaded support on port[0] = 21 [ 28.805194] IPVS: ftp: loaded support on port[0] = 21 [ 28.811347] IPVS: ftp: loaded support on port[0] = 21 [ 28.815795] IPVS: ftp: loaded support on port[0] = 21 [ 28.824672] IPVS: ftp: loaded support on port[0] = 21 [ 28.831206] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 30.301981] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.324197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available [ 30.357492] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.366371] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.388588] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.395729] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available [ 30.452789] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 30.477268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 32.498974] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.505109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.569056] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.575298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.582377] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.588507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.603717] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.609866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.627114] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.633271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.654376] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.660537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.700784] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.706915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.770958] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.782973] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 32.789222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.806718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.816915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.857771] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.895796] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.933786] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 32.973306] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready executing program [ 32.979555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.987595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.001736] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.009500] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.017258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.024798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program [ 33.039461] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 33.050493] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 33.053902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.068112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready executing program [ 33.088219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program [ 33.112881] IPVS: stopping backup sync thread 5681 ... [ 33.124104] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 33.133632] IPVS: stopping backup sync thread 5702 ... [ 33.133878] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 33.140659] IPVS: stopping backup sync thread 5694 ... executing program executing program [ 33.170847] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.186839] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 33.186908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.202450] IPVS: stopping backup sync thread 5714 ... [ 33.214379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program [ 33.227007] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 33.233550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.240300] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 33.244960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.249200] IPVS: stopping backup sync thread 5723 ... [ 33.266668] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready executing program executing program [ 33.272979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.281719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.289407] [ 33.291034] ============================================ [ 33.296458] WARNING: possible recursive locking detected [ 33.301878] 4.16.0-rc6+ #285 Not tainted [ 33.305911] -------------------------------------------- [ 33.311330] syzkaller459725/5721 is trying to acquire lock: [ 33.317007] (rtnl_mutex){+.+.}, at: [<000000002d94a4a7>] rtnl_lock+0x17/0x20 [ 33.324270] [ 33.324270] but task is already holding lock: [ 33.330209] (rtnl_mutex){+.+.}, at: [<000000002d94a4a7>] rtnl_lock+0x17/0x20 [ 33.337463] [ 33.337463] other info that might help us debug this: [ 33.344097] Possible unsafe locking scenario: [ 33.344097] [ 33.350125] CPU0 [ 33.352677] ---- [ 33.355227] lock(rtnl_mutex); [ 33.358474] lock(rtnl_mutex); [ 33.361723] [ 33.361723] *** DEADLOCK *** [ 33.361723] [ 33.367752] May be due to missing lock nesting notation [ 33.367752] [ 33.374648] 2 locks held by syzkaller459725/5721: [ 33.379460] #0: (rtnl_mutex){+.+.}, at: [<000000002d94a4a7>] rtnl_lock+0x17/0x20 [ 33.387156] #1: (ipvs->sync_mutex){+.+.}, at: [<000000002a6fae20>] do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 33.396321] [ 33.396321] stack backtrace: [ 33.400793] CPU: 1 PID: 5721 Comm: syzkaller459725 Not tainted 4.16.0-rc6+ #285 [ 33.408215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.417539] Call Trace: [ 33.420102] dump_stack+0x194/0x24d [ 33.423701] ? arch_local_irq_restore+0x53/0x53 [ 33.428346] __lock_acquire+0xe8f/0x3e00 [ 33.432381] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 33.437555] ? __lock_is_held+0xb6/0x140 [ 33.441593] ? __lock_acquire+0x664/0x3e00 [ 33.445798] ? select_idle_sibling+0x86d/0xda0 [ 33.450351] ? update_curr+0x332/0xac0 [ 33.454210] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 33.459373] ? find_held_lock+0x35/0x1d0 [ 33.463411] ? trace_hardirqs_off+0x10/0x10 [ 33.467724] ? trace_hardirqs_off+0x10/0x10 [ 33.472034] ? trace_hardirqs_off+0x10/0x10 [ 33.476335] ? trace_hardirqs_off+0x10/0x10 [ 33.480633] ? dequeue_task_fair+0x490/0x490 [ 33.485019] lock_acquire+0x1d5/0x580 [ 33.488795] ? lock_acquire+0x1d5/0x580 [ 33.492744] ? rtnl_lock+0x17/0x20 [ 33.496256] ? lock_release+0xa40/0xa40 [ 33.500201] ? check_same_owner+0x320/0x320 [ 33.504496] ? try_to_wake_up+0xf9/0x15f0 [ 33.508622] ? rcu_note_context_switch+0x710/0x710 [ 33.513521] ? __might_sleep+0x95/0x190 [ 33.517470] ? rtnl_lock+0x17/0x20 [ 33.520989] __mutex_lock+0x16f/0x1a80 [ 33.524850] ? rtnl_lock+0x17/0x20 [ 33.528369] ? wait_for_completion_killable+0x63e/0x820 [ 33.533709] ? lock_downgrade+0x980/0x980 [ 33.537828] ? rtnl_lock+0x17/0x20 [ 33.541348] ? mutex_lock_io_nested+0x1900/0x1900 [ 33.546166] ? mark_held_locks+0xaf/0x100 [ 33.550288] ? _raw_spin_unlock_irq+0x27/0x70 [ 33.554754] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.559741] ? trace_hardirqs_on+0xd/0x10 [ 33.563866] ? _raw_spin_unlock_irq+0x27/0x70 [ 33.568334] ? wait_for_completion_killable+0x63e/0x820 [ 33.573690] ? wait_for_completion_interruptible_timeout+0x820/0x820 [ 33.580153] ? lock_downgrade+0x980/0x980 [ 33.584279] ? lock_release+0xa40/0xa40 [ 33.588230] ? __kthread_create_on_node+0x127/0x480 [ 33.593219] ? do_raw_spin_trylock+0x190/0x190 [ 33.597770] ? wake_up_q+0xe0/0xe0 [ 33.601281] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 33.606618] ? __kthread_create_on_node+0x36e/0x480 [ 33.611605] ? print_irqtrace_events+0x270/0x270 [ 33.616331] ? kthread_park+0x130/0x130 [ 33.620279] ? __lock_is_held+0xb6/0x140 [ 33.624311] mutex_lock_nested+0x16/0x20 [ 33.628350] ? mutex_lock_nested+0x16/0x20 [ 33.632555] rtnl_lock+0x17/0x20 [ 33.635896] ip_mc_drop_socket+0x88/0x230 [ 33.640023] inet_release+0x4e/0x1c0 [ 33.643717] sock_release+0x8d/0x1e0 [ 33.647402] start_sync_thread+0x2213/0x2b70 [ 33.651789] ? do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 33.656263] ? ip_vs_process_message_v0+0x870/0x870 [ 33.661340] ? ip_vs_sync_conn+0x3950/0x3950 [ 33.665718] ? find_held_lock+0x35/0x1d0 [ 33.669751] ? release_sock+0x1d4/0x2a0 [ 33.673701] ? trace_hardirqs_off+0x10/0x10 [ 33.678003] ? lock_downgrade+0x980/0x980 [ 33.682131] ? lock_release+0xa40/0xa40 [ 33.686076] ? lock_acquire+0x1d5/0x580 [ 33.690027] ? lock_sock_nested+0xa3/0x110 [ 33.694237] ? lock_acquire+0x1d5/0x580 [ 33.698187] ? __local_bh_enable_ip+0x121/0x230 [ 33.702836] ? find_held_lock+0x35/0x1d0 [ 33.706875] ? __might_fault+0x110/0x1d0 [ 33.710906] ? trace_hardirqs_on+0xd/0x10 [ 33.715029] ? lock_release+0xa40/0xa40 [ 33.718979] ? check_same_owner+0x320/0x320 [ 33.723280] ? module_unload_free+0x5b0/0x5b0 [ 33.727751] ? __might_sleep+0x95/0x190 [ 33.731702] do_ip_vs_set_ctl+0x1139/0x1cc0 [ 33.735997] ? do_ip_vs_set_ctl+0x1139/0x1cc0 [ 33.740468] ? find_held_lock+0x35/0x1d0 [ 33.744504] ? ip_vs_genl_dump_services+0x440/0x440 [ 33.749496] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 33.754746] ? lock_downgrade+0x980/0x980 [ 33.758873] ? __lock_is_held+0xb6/0x140 [ 33.762912] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 33.767726] ? wait_for_completion+0x770/0x770 [ 33.772282] ? module_unload_free+0x5b0/0x5b0 [ 33.776751] ? handle_mm_fault+0x35b/0xb10 [ 33.780961] ? mutex_unlock+0xd/0x10 [ 33.784652] nf_setsockopt+0x67/0xc0 [ 33.788335] ? nf_setsockopt+0x67/0xc0 [ 33.792194] ip_setsockopt+0x97/0xa0 [ 33.795890] raw_setsockopt+0xb7/0xd0 [ 33.799680] sock_common_setsockopt+0x95/0xd0 [ 33.804158] SyS_setsockopt+0x189/0x360 [ 33.808103] ? SyS_recv+0x40/0x40 [ 33.811531] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 33.817044] ? do_syscall_64+0xb7/0x940 [ 33.820991] ? SyS_recv+0x40/0x40 [ 33.824418] do_syscall_64+0x281/0x940 [ 33.828276] ? __do_page_fault+0xc90/0xc90 [ 33.832478] ? _raw_spin_unlock_irq+0x27/0x70 [ 33.836943] ? finish_task_switch+0x1c1/0x7e0 [ 33.841410] ? syscall_return_slowpath+0x550/0x550 [ 33.846310] ? syscall_return_slowpath+0x2ac/0x550 [ 33.851210] ? prepare_exit_to_usermode+0x350/0x350 [ 33.856196] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 33.861537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 33.866356] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 33.871515] RIP: 0033:0x4482d9 [ 33.874675] RSP: 002b:00007f7a2a666d28 EFLAGS: 00000297 ORIG_RAX: 0000000000000036 [ 33.882351] RAX: ffffffffffffffda RBX: 00000000006e4a00 RCX: 00000000004482d9 [ 33.889764] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 33.897008] RBP: 00000000006e4a04 R08: 0000000000000018 R09: 0000000000000000 [ 33.904253] R10: 0000000020000100 R11: 0000000000000297 R12: 0000000000000000 [ 33.911501] R13: 00007ffc92fab5ef R14: 00007f7a2a6679c0 R15: 00000000006e4b80