[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 68.678282][ T25] audit: type=1804 audit(1632958377.795:2): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 69.932725][ T25] audit: type=1804 audit(1632958379.055:3): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 [ 69.937824][ T6531] MPTCP: kernel_bind error, err=-98 [ 69.956023][ T6531] [ 69.963724][ T6531] ============================================ [ 69.970194][ T6531] WARNING: possible recursive locking detected [ 69.976782][ T6531] 5.15.0-rc2-syzkaller #0 Not tainted [ 69.982147][ T6531] -------------------------------------------- [ 69.988279][ T6531] syz-executor816/6531 is trying to acquire lock: [ 69.994853][ T6531] ffff88807c3b2460 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_close+0x267/0x7b0 [ 70.003909][ T6531] [ 70.003909][ T6531] but task is already holding lock: [ 70.011343][ T6531] ffff888077c90c20 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_close+0x23/0x7b0 [ 70.020313][ T6531] [ 70.020313][ T6531] other info that might help us debug this: [ 70.028442][ T6531] Possible unsafe locking scenario: [ 70.028442][ T6531] [ 70.035871][ T6531] CPU0 [ 70.039134][ T6531] ---- [ 70.042566][ T6531] lock(k-sk_lock-AF_INET); [ 70.047318][ T6531] lock(k-sk_lock-AF_INET); [ 70.051884][ T6531] [ 70.051884][ T6531] *** DEADLOCK *** [ 70.051884][ T6531] [ 70.060020][ T6531] May be due to missing lock nesting notation [ 70.060020][ T6531] [ 70.068419][ T6531] 3 locks held by syz-executor816/6531: [ 70.073939][ T6531] #0: ffffffff8d177690 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 70.082104][ T6531] #1: ffffffff8d177748 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x3e0/0x580 [ 70.091047][ T6531] #2: ffff888077c90c20 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_close+0x23/0x7b0 [ 70.100767][ T6531] [ 70.100767][ T6531] stack backtrace: [ 70.106758][ T6531] CPU: 1 PID: 6531 Comm: syz-executor816 Not tainted 5.15.0-rc2-syzkaller #0 [ 70.115514][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.125570][ T6531] Call Trace: [ 70.128853][ T6531] dump_stack_lvl+0xcd/0x134 [ 70.133430][ T6531] __lock_acquire.cold+0x149/0x3ab [ 70.138536][ T6531] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.144517][ T6531] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.150500][ T6531] lock_acquire+0x1ab/0x510 [ 70.154998][ T6531] ? mptcp_close+0x267/0x7b0 [ 70.159625][ T6531] ? lock_release+0x720/0x720 [ 70.164469][ T6531] ? mptcp_close+0x23/0x7b0 [ 70.169066][ T6531] lock_sock_fast+0x36/0x100 [ 70.173651][ T6531] ? mptcp_close+0x267/0x7b0 [ 70.178238][ T6531] mptcp_close+0x267/0x7b0 [ 70.182649][ T6531] inet_release+0x12e/0x280 [ 70.187464][ T6531] sock_release+0x87/0x1b0 [ 70.191884][ T6531] mptcp_pm_nl_create_listen_socket+0x238/0x2c0 [ 70.198124][ T6531] ? mptcp_event_put_token_and_ssk+0x3a0/0x3a0 [ 70.204806][ T6531] ? rcu_read_lock_sched_held+0x3a/0x70 [ 70.210342][ T6531] mptcp_nl_cmd_add_addr+0x359/0x930 [ 70.215610][ T6531] ? mptcp_pm_create_subflow_or_signal_addr+0x2540/0x2540 [ 70.222725][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.229071][ T6531] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 70.236435][ T6531] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 70.244236][ T6531] genl_family_rcv_msg_doit+0x228/0x320 [ 70.249769][ T6531] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 70.257474][ T6531] ? mutex_lock_io_nested+0x1150/0x1150 [ 70.263029][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.269255][ T6531] ? ns_capable+0xd9/0x100 [ 70.273654][ T6531] genl_rcv_msg+0x328/0x580 [ 70.278156][ T6531] ? genl_get_cmd+0x480/0x480 [ 70.282814][ T6531] ? mptcp_pm_create_subflow_or_signal_addr+0x2540/0x2540 [ 70.289911][ T6531] ? lock_release+0x720/0x720 [ 70.294579][ T6531] netlink_rcv_skb+0x153/0x420 [ 70.299761][ T6531] ? genl_get_cmd+0x480/0x480 [ 70.304437][ T6531] ? netlink_ack+0xa60/0xa60 [ 70.309048][ T6531] ? netlink_deliver_tap+0x1b1/0xc30 [ 70.314430][ T6531] ? _copy_from_iter+0x12b/0x1320 [ 70.320141][ T6531] genl_rcv+0x24/0x40 [ 70.324112][ T6531] netlink_unicast+0x533/0x7d0 [ 70.328862][ T6531] ? netlink_attachskb+0x890/0x890 [ 70.334133][ T6531] ? __virt_addr_valid+0x5d/0x2d0 [ 70.339141][ T6531] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.345369][ T6531] ? __phys_addr_symbol+0x2c/0x70 [ 70.350634][ T6531] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 70.356425][ T6531] ? __check_object_size+0x16e/0x3f0 [ 70.361698][ T6531] netlink_sendmsg+0x86d/0xdb0 [ 70.366742][ T6531] ? netlink_unicast+0x7d0/0x7d0 [ 70.371671][ T6531] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.377820][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.384045][ T6531] ? netlink_unicast+0x7d0/0x7d0 [ 70.388973][ T6531] sock_sendmsg+0xcf/0x120 [ 70.393470][ T6531] sock_no_sendpage+0xf3/0x130 [ 70.398314][ T6531] ? sk_page_frag_refill+0x1d0/0x1d0 [ 70.403626][ T6531] ? find_held_lock+0x2d/0x110 [ 70.408387][ T6531] kernel_sendpage.part.0+0x1a0/0x340 [ 70.413776][ T6531] sock_sendpage+0xe5/0x140 [ 70.418299][ T6531] ? __sock_recv_ts_and_drops+0x430/0x430 [ 70.424215][ T6531] pipe_to_sendpage+0x2ad/0x380 [ 70.429092][ T6531] ? propagate_umount+0x19f0/0x19f0 [ 70.434359][ T6531] ? __put_page+0xef/0x400 [ 70.438920][ T6531] __splice_from_pipe+0x43e/0x8a0 [ 70.443953][ T6531] ? propagate_umount+0x19f0/0x19f0 [ 70.449852][ T6531] generic_splice_sendpage+0xd4/0x140 [ 70.455219][ T6531] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 70.460622][ T6531] ? security_file_permission+0xab/0xd0 [ 70.466254][ T6531] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 70.471355][ T6531] direct_splice_actor+0x110/0x180 [ 70.476622][ T6531] splice_direct_to_actor+0x34b/0x8c0 [ 70.481973][ T6531] ? generic_file_splice_read+0x6d0/0x6d0 [ 70.487983][ T6531] ? do_splice_to+0x250/0x250 [ 70.492812][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.499737][ T6531] ? security_file_permission+0xab/0xd0 [ 70.505484][ T6531] do_splice_direct+0x1b3/0x280 [ 70.510601][ T6531] ? splice_direct_to_actor+0x8c0/0x8c0 [ 70.516151][ T6531] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.522380][ T6531] ? security_file_permission+0xab/0xd0 [ 70.527932][ T6531] do_sendfile+0xae9/0x1240 [ 70.532526][ T6531] ? do_pwritev+0x270/0x270 [ 70.537106][ T6531] ? __context_tracking_exit+0xb8/0xe0 [ 70.542568][ T6531] ? lock_downgrade+0x6e0/0x6e0 [ 70.547664][ T6531] ? lock_downgrade+0x6e0/0x6e0 [ 70.552499][ T6531] __x64_sys_sendfile64+0x1cc/0x210 [ 70.557780][ T6531] ? __ia32_sys_sendfile+0x220/0x220 [ 70.563147][ T6531] ? syscall_enter_from_user_mode+0x21/0x70 [ 70.569042][ T6531] do_syscall_64+0x35/0xb0 [ 70.573544][ T6531] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.579549][ T6531] RIP: 0033:0x7f1155c2f969 [ 70.583952][ T6531] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.604094][ T6531] RSP: 002b:00007ffff5634778 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 70.612500][ T6531] RAX: ffffffffffffffda RBX: 00007f1155c73072 RCX: 00007f1155c2f969 [ 70.620546][ T6531] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 70.628527][ T6531] RBP: 0000000000000000 R08: 00007ffff5634918 R09: 00007ffff5634918 [ 70.636516][ T6531] R10: 0000000100000002 R11: 0000000000000246 R12: 00007ffff563478c [ 70.644676][ T6531] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 executing program [ 71.646743][ T25] audit: type=1804 audit(1632958380.765:4): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 71.650881][ T6534] MPTCP: kernel_bind error, err=-98 [ 72.614034][ T25] audit: type=1804 audit(1632958381.735:5): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 72.617154][ T6535] MPTCP: kernel_bind error, err=-98 [ 73.568743][ T25] audit: type=1804 audit(1632958382.695:6): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 73.572989][ T6536] MPTCP: kernel_bind error, err=-98 [ 74.533728][ T25] audit: type=1804 audit(1632958383.655:7): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 74.537786][ T6537] MPTCP: kernel_bind error, err=-98 [ 75.523847][ T25] audit: type=1804 audit(1632958384.645:8): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 75.530124][ T6538] MPTCP: kernel_bind error, err=-98 [ 76.505597][ T25] audit: type=1804 audit(1632958385.625:9): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 76.509644][ T6539] MPTCP: kernel_bind error, err=-98 [ 77.463914][ T25] audit: type=1804 audit(1632958386.585:10): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 77.467498][ T6540] MPTCP: kernel_bind error, err=-98 [ 78.401202][ T25] audit: type=1804 audit(1632958387.525:11): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 executing program [ 78.405781][ T6541] MPTCP: kernel_bind error, err=-98 [ 79.366422][ T25] audit: type=1804 audit(1632958388.485:12): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor816" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0