[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[   24.957716] random: sshd: uninitialized urandom read (32 bytes read)
[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   29.183188] random: sshd: uninitialized urandom read (32 bytes read)
[   29.445060] random: sshd: uninitialized urandom read (32 bytes read)
[   30.021982] random: sshd: uninitialized urandom read (32 bytes read)
[   99.098855] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts.
[  104.656474] random: sshd: uninitialized urandom read (32 bytes read)
2018/09/23 02:57:49 parsed 1 programs
[  105.834135] random: cc1: uninitialized urandom read (8 bytes read)
2018/09/23 02:57:51 executed programs: 0
[  107.003336] IPVS: ftp: loaded support on port[0] = 21
[  107.010422] IPVS: ftp: loaded support on port[0] = 21
[  107.018974] IPVS: ftp: loaded support on port[0] = 21
[  107.020477] IPVS: ftp: loaded support on port[0] = 21
[  107.032927] IPVS: ftp: loaded support on port[0] = 21
[  107.034361] IPVS: ftp: loaded support on port[0] = 21
[  108.243766] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.250316] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.257936] device bridge_slave_0 entered promiscuous mode
[  108.303585] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.309956] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.328049] device bridge_slave_0 entered promiscuous mode
[  108.351378] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.357823] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.366494] device bridge_slave_0 entered promiscuous mode
[  108.376784] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.384464] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.392511] device bridge_slave_0 entered promiscuous mode
[  108.399579] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.406807] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.414763] device bridge_slave_1 entered promiscuous mode
[  108.435404] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.445605] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.453631] device bridge_slave_1 entered promiscuous mode
[  108.463124] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.469480] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.477550] device bridge_slave_0 entered promiscuous mode
[  108.486506] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.494068] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.502092] device bridge_slave_1 entered promiscuous mode
[  108.511343] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.517726] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.525480] device bridge_slave_0 entered promiscuous mode
[  108.533362] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  108.541719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  108.551601] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.557998] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.565492] device bridge_slave_1 entered promiscuous mode
[  108.575111] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.582894] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.589911] device bridge_slave_1 entered promiscuous mode
[  108.596879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  108.607805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  108.618242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  108.628814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  108.637814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  108.647401] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.655409] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.663090] device bridge_slave_1 entered promiscuous mode
[  108.678083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  108.688144] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  108.698116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  108.721065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  108.802351] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  108.813059] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  108.820758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  108.833361] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  108.844442] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  108.863805] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  108.885017] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  108.908857] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  108.919162] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  108.930570] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  108.948926] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  108.962760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  108.970720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  108.983623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.003497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.011533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.021034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  109.030380] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  109.041779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  109.052517] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  109.064806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.072576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.082327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  109.090455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  109.110758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.125674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.142339] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  109.152835] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  109.161605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.174880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  109.191799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.244816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  109.266477] team0: Port device team_slave_0 added
[  109.272233] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  109.290320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  109.314684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  109.331352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  109.341797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  109.349170] team0: Port device team_slave_0 added
[  109.380168] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  109.388986] team0: Port device team_slave_1 added
[  109.411208] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  109.418605] team0: Port device team_slave_0 added
[  109.430396] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  109.444113] team0: Port device team_slave_1 added
[  109.510647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.530726] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  109.542468] team0: Port device team_slave_1 added
[  109.552613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.560515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  109.574169] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  109.583348] team0: Port device team_slave_0 added
[  109.610943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  109.623179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.654574] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  109.662825] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  109.670298] team0: Port device team_slave_0 added
[  109.683792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.694195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  109.703357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  109.716643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  109.726932] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  109.739460] team0: Port device team_slave_0 added
[  109.746791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  109.757108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  109.770105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  109.779365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.788396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  109.800923] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  109.809441] team0: Port device team_slave_1 added
[  109.817451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  109.835651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.853564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  109.865832] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  109.873977] team0: Port device team_slave_1 added
[  109.880264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  109.890485] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  109.900675] team0: Port device team_slave_1 added
[  109.910927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  109.929818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  109.948180] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  109.958375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  109.975238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  109.987524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  110.000373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  110.009593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.022425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.030423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  110.039467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  110.047645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  110.060054] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  110.067920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  110.075700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  110.097323] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  110.113206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  110.122152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  110.133536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.143802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.161691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  110.169584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  110.178540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  110.187518] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  110.205704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  110.228889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  110.237457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.248980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.261956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.269762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.286588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  110.299183] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  110.314735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  110.332156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.340180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.351929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.359877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.368641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.376628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.696242] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.702809] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.709791] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.716224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.743214] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  110.920154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.969969] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.976440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.983174] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.989544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.013841] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  111.037318] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.043802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.050477] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.056943] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.070707] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  111.100951] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.107438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.114185] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.120572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.148426] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  111.172540] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.178926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.185644] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.192067] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.202434] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  111.267018] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.273437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.280115] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.286549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.295765] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  111.932187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.939583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.955708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.972041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  111.979548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.757797] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.829026] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.986331] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.015848] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  114.062426] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.078346] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  114.222223] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.237620] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  114.306413] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  114.319271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.328754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.344253] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.355795] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  114.372532] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  114.380977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.407817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.497288] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  114.551699] 8021q: adding VLAN 0 to HW filter on device team0
[  114.600114] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  114.613956] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  114.625098] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  114.646319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.658842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.678901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.696537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.735011] 8021q: adding VLAN 0 to HW filter on device team0
[  114.810737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  114.832107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.839204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  114.896661] 8021q: adding VLAN 0 to HW filter on device team0
[  114.940579] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  114.954755] 8021q: adding VLAN 0 to HW filter on device team0
[  114.961336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  114.968880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.109373] 8021q: adding VLAN 0 to HW filter on device team0
[  115.209224] 8021q: adding VLAN 0 to HW filter on device team0
2018/09/23 02:58:01 executed programs: 6
2018/09/23 02:58:06 executed programs: 38
[  123.392800] 
[  123.394465] ======================================================
[  123.400787] WARNING: possible circular locking dependency detected
[  123.407119] 4.19.0-rc4+ #26 Not tainted
[  123.411085] ------------------------------------------------------
[  123.417395] syz-executor0/7265 is trying to acquire lock:
[  123.422915] 0000000096079ddd (&p->lock){+.+.}, at: seq_read+0x71/0x1150
[  123.429693] 
[  123.429693] but task is already holding lock:
[  123.435659] 000000004814d86c (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80
[  123.442853] 
[  123.442853] which lock already depends on the new lock.
[  123.442853] 
[  123.451155] 
[  123.451155] the existing dependency chain (in reverse order) is:
[  123.458774] 
[  123.458774] -> #2 (&pipe->mutex/1){+.+.}:
[  123.464396]        __mutex_lock+0x166/0x1700
[  123.468794]        mutex_lock_nested+0x16/0x20
[  123.473420]        fifo_open+0x15c/0xad0
[  123.477466]        do_dentry_open+0x499/0x1250
[  123.482031]        vfs_open+0xa0/0xd0
[  123.485814]        path_openat+0x12bf/0x5160
[  123.490203]        do_filp_open+0x255/0x380
[  123.494507]        do_open_execat+0x221/0x8e0
[  123.498996]        __do_execve_file.isra.33+0x173f/0x2540
[  123.504518]        __x64_sys_execve+0x8f/0xc0
[  123.509016]        do_syscall_64+0x1b9/0x820
[  123.513635]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  123.519321] 
[  123.519321] -> #1 (&sig->cred_guard_mutex){+.+.}:
[  123.525632]        __mutex_lock+0x166/0x1700
[  123.530021]        mutex_lock_killable_nested+0x16/0x20
[  123.535364]        lock_trace+0x4c/0xe0
[  123.539319]        proc_pid_personality+0x1c/0xd0
[  123.544285]        proc_single_show+0x101/0x190
[  123.549267]        traverse+0x344/0x7b0
[  123.553250]        seq_read+0xc76/0x1150
[  123.557296]        do_iter_read+0x4a3/0x650
[  123.561612]        vfs_readv+0x175/0x1c0
[  123.565662]        default_file_splice_read+0x53c/0xb20
[  123.571034]        do_splice_to+0x12e/0x190
[  123.575359]        splice_direct_to_actor+0x270/0x8f0
[  123.580572]        do_splice_direct+0x2d4/0x420
[  123.585237]        do_sendfile+0x62a/0xe20
[  123.589511]        __x64_sys_sendfile64+0x15d/0x250
[  123.594643]        do_syscall_64+0x1b9/0x820
[  123.599064]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  123.604763] 
[  123.604763] -> #0 (&p->lock){+.+.}:
[  123.609870]        lock_acquire+0x1ed/0x520
[  123.614188]        __mutex_lock+0x166/0x1700
[  123.618578]        mutex_lock_nested+0x16/0x20
[  123.623162]        seq_read+0x71/0x1150
[  123.627132]        do_iter_read+0x4a3/0x650
[  123.631454]        vfs_readv+0x175/0x1c0
[  123.635501]        default_file_splice_read+0x53c/0xb20
[  123.640845]        do_splice_to+0x12e/0x190
[  123.645155]        do_splice+0x1014/0x1430
[  123.649371]        __x64_sys_splice+0x2c1/0x330
[  123.654033]        do_syscall_64+0x1b9/0x820
[  123.658434]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  123.664139] 
[  123.664139] other info that might help us debug this:
[  123.664139] 
[  123.672259] Chain exists of:
[  123.672259]   &p->lock --> &sig->cred_guard_mutex --> &pipe->mutex/1
[  123.672259] 
[  123.683113]  Possible unsafe locking scenario:
[  123.683113] 
[  123.689156]        CPU0                    CPU1
[  123.693800]        ----                    ----
[  123.698443]   lock(&pipe->mutex/1);
[  123.702059]                                lock(&sig->cred_guard_mutex);
[  123.708899]                                lock(&pipe->mutex/1);
[  123.715030]   lock(&p->lock);
[  123.718117] 
[  123.718117]  *** DEADLOCK ***
[  123.718117] 
[  123.724168] 1 lock held by syz-executor0/7265:
[  123.728793]  #0: 000000004814d86c (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80
[  123.736443] 
[  123.736443] stack backtrace:
[  123.740925] CPU: 1 PID: 7265 Comm: syz-executor0 Not tainted 4.19.0-rc4+ #26
[  123.748087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  123.757418] Call Trace:
[  123.760022]  dump_stack+0x1c4/0x2b4
[  123.763656]  ? dump_stack_print_info.cold.2+0x52/0x52
[  123.768839]  ? vprintk_func+0x85/0x181
[  123.772763]  print_circular_bug.isra.33.cold.54+0x1bd/0x27d
[  123.778467]  ? save_trace+0xe0/0x290
[  123.782174]  __lock_acquire+0x33e4/0x4ec0
[  123.786340]  ? mark_held_locks+0x130/0x130
[  123.790560]  ? __lock_acquire+0x7ec/0x4ec0
[  123.794792]  ? __lock_acquire+0x7ec/0x4ec0
[  123.799034]  ? mark_held_locks+0x130/0x130
[  123.803250]  ? print_usage_bug+0xc0/0xc0
[  123.807324]  ? mark_held_locks+0x130/0x130
[  123.811557]  ? mark_held_locks+0x130/0x130
[  123.815794]  ? __lock_acquire+0x7ec/0x4ec0
[  123.820017]  ? graph_lock+0x170/0x170
[  123.823801]  ? mark_held_locks+0x130/0x130
[  123.828025]  lock_acquire+0x1ed/0x520
[  123.831818]  ? seq_read+0x71/0x1150
[  123.835457]  ? lock_release+0x970/0x970
[  123.839416]  ? arch_local_save_flags+0x40/0x40
[  123.843985]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  123.849518]  ? should_fail+0x22d/0xd01
[  123.853421]  ? seq_read+0x71/0x1150
[  123.857036]  __mutex_lock+0x166/0x1700
[  123.860911]  ? seq_read+0x71/0x1150
[  123.864535]  ? seq_read+0x71/0x1150
[  123.868160]  ? mutex_trylock+0x2b0/0x2b0
[  123.872212]  ? graph_lock+0x170/0x170
[  123.876016]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  123.881537]  ? check_preemption_disabled+0x48/0x200
[  123.886538]  ? check_preemption_disabled+0x48/0x200
[  123.891541]  ? __lock_is_held+0xb5/0x140
[  123.895591]  ? rcu_read_lock_sched_held+0x108/0x120
[  123.900610]  ? __alloc_pages_nodemask+0xb5a/0xde0
[  123.905436]  ? default_file_splice_read+0x1de/0xb20
[  123.910448]  ? do_splice_to+0x12e/0x190
[  123.914420]  ? do_splice+0x1014/0x1430
[  123.918294]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  123.923469]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  123.928998]  ? fsnotify+0xaef/0x1330
[  123.932710]  ? fsnotify_first_mark+0x350/0x350
[  123.937296]  mutex_lock_nested+0x16/0x20
[  123.941375]  ? _copy_from_user+0xdf/0x150
[  123.945516]  ? mutex_lock_nested+0x16/0x20
[  123.949734]  seq_read+0x71/0x1150
[  123.953195]  ? rw_verify_area+0x118/0x360
[  123.957348]  do_iter_read+0x4a3/0x650
[  123.961172]  vfs_readv+0x175/0x1c0
[  123.964707]  ? compat_rw_copy_check_uvector+0x440/0x440
[  123.970059]  ? pipe_lock+0x6e/0x80
[  123.973587]  ? lock_release+0x970/0x970
[  123.977561]  ? arch_local_save_flags+0x40/0x40
[  123.982144]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  123.987144]  ? iov_iter_pipe+0xbf/0x2f0
[  123.991116]  default_file_splice_read+0x53c/0xb20
[  123.995958]  ? iter_file_splice_write+0x1050/0x1050
[  124.000967]  ? find_held_lock+0x36/0x1c0
[  124.005023]  ? __fget+0x4aa/0x740
[  124.008463]  ? lock_downgrade+0x900/0x900
[  124.012600]  ? check_preemption_disabled+0x48/0x200
[  124.017619]  ? rcu_bh_qs+0xc0/0xc0
[  124.021170]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  124.026723]  ? fsnotify+0xaef/0x1330
[  124.030456]  ? fsnotify_first_mark+0x350/0x350
[  124.035089]  ? fsnotify+0x1330/0x1330
[  124.038917]  ? security_file_permission+0x1c2/0x230
[  124.043948]  ? iter_file_splice_write+0x1050/0x1050
[  124.048963]  do_splice_to+0x12e/0x190
[  124.052750]  do_splice+0x1014/0x1430
[  124.056458]  ? finish_task_switch+0x1f5/0x900
[  124.060938]  ? opipe_prep.part.13+0x3b0/0x3b0
[  124.065426]  __x64_sys_splice+0x2c1/0x330
[  124.069580]  do_syscall_64+0x1b9/0x820
[  124.073453]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  124.078818]  ? syscall_return_slowpath+0x5e0/0x5e0
[  124.083733]  ? trace_hardirqs_on_caller+0x310/0x310
[  124.088747]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  124.093763]  ? recalc_sigpending_tsk+0x180/0x180
[  124.098524]  ? kasan_check_write+0x14/0x20
[  124.102746]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  124.107580]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  124.112751] RIP: 0033:0x457679
[  124.115931] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  124.134875] RSP: 002b:00007f910ad02c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  124.142586] RAX: ffffffffffffffda RBX: 00007f910ad036d4 RCX: 0000000000457679
[  124.149861] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004
[  124.157130] RBP: 000000000072c2c0 R08: 0000000000000200 R09: 0000000000000000
[  124.164391] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  124.171654] R13: 00000000004d77e8 R14: 00000000004c4f5d R15: 0000000000000006
[  124.185450] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  124.192555] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  124.215423] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  124.222623] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  124.239786] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  124.246610] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  124.324697] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  124.335359] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  124.354092] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  124.361976] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  124.372020] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  124.378542] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  125.130560] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  125.137184] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  125.166342] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  125.172933] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  125.183654] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  125.190667] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  125.264480] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  125.275708] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  125.288031] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  125.295287] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  125.307368] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  125.313944] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  126.077767] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  126.084424] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  126.108635] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  126.115488] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  126.129543] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  126.143094] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  126.204343] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  126.216151] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  126.231416] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  126.238610] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  126.248517] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  126.255930] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  127.024392] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  127.031962] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  127.050454] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  127.057555] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  127.081699] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  127.088304] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  127.144369] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  127.156880] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  127.168067] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  127.188150] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  127.199059] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  127.205532] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
2018/09/23 02:58:12 executed programs: 70
[  127.986858] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  127.993984] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  128.004476] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  128.011016] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  128.028639] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  128.039579] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  128.084756] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  128.092018] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  128.113972] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  128.125285] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  128.138543] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  128.149692] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  128.924856] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  128.935790] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  128.948058] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  128.955360] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  128.975613] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  128.984909] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  129.035557] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  129.043340] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  129.057025] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  129.064466] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  129.074578] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  129.081165] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  129.864417] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  129.872512] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  129.890300] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  129.899936] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  129.925078] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  129.932646] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  129.995455] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  130.002553] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  130.017065] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  130.024398] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  130.035151] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  130.041632] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  130.804182] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  130.810683] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  130.833935] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  130.840775] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  130.856599] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  130.866109] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  130.954086] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  130.960550] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  130.975658] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  130.994036] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  131.004446] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  131.010869] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  131.743808] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  131.750446] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  131.766633] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  131.773913] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  131.795529] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  131.804342] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  131.915402] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  131.926174] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  131.942304] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  131.949628] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  131.959979] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  131.967186] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  132.683872] kobject: 'loop0' (00000000cf0f8978): kobject_uevent_env
[  132.690374] kobject: 'loop0' (00000000cf0f8978): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  132.705860] kobject: 'loop4' (00000000076b82a0): kobject_uevent_env
[  132.713055] kobject: 'loop4' (00000000076b82a0): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  132.744335] kobject: 'loop5' (000000003ce955c1): kobject_uevent_env
[  132.751079] kobject: 'loop5' (000000003ce955c1): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  132.865088] kobject: 'loop1' (00000000a8c719dc): kobject_uevent_env
[  132.871979] kobject: 'loop1' (00000000a8c719dc): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  132.889655] kobject: 'loop2' (00000000bdfc5808): kobject_uevent_env
[  132.896178] kobject: 'loop2' (00000000bdfc5808): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  132.906101] kobject: 'loop3' (00000000b18e3d2d): kobject_uevent_env
[  132.913366] kobject: 'loop3' (00000000b18e3d2d): fill_kobj_path: path = '/devices/virtual/block/loop3'