INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. 2018/04/18 15:45:37 parsed 1 programs 2018/04/18 15:45:37 executed programs: 0 syzkaller login: [ 38.428419] IPVS: Creating netns size=2536 id=1 [ 38.458601] IPVS: stopping backup sync thread 3676 ... [ 38.464241] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.464624] IPVS: Creating netns size=2536 id=2 [ 38.475372] IPVS: Creating netns size=2536 id=3 [ 38.492575] IPVS: stopping backup sync thread 3692 ... [ 38.493144] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.509933] IPVS: stopping backup sync thread 3695 ... [ 38.510370] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.510651] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.510705] IPVS: stopping backup sync thread 3701 ... [ 38.511235] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.515070] IPVS: Creating netns size=2536 id=4 [ 38.536522] IPVS: stopping backup sync thread 3704 ... [ 38.543459] IPVS: Creating netns size=2536 id=5 [ 38.548483] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.559430] IPVS: stopping backup sync thread 3706 ... [ 38.560197] IPVS: stopping backup sync thread 3727 ... [ 38.567888] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.567949] IPVS: stopping backup sync thread 3735 ... [ 38.568419] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.574841] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.576137] IPVS: stopping backup sync thread 3721 ... [ 38.578305] IPVS: stopping backup sync thread 3734 ... [ 38.581212] IPVS: stopping backup sync thread 3737 ... [ 38.583661] IPVS: stopping backup sync thread 3738 ... [ 38.583883] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.583944] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.584403] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.587570] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.589396] IPVS: Creating netns size=2536 id=6 [ 38.611753] IPVS: stopping backup sync thread 3751 ... [ 38.612919] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.622728] IPVS: Creating netns size=2536 id=7 [ 38.641847] IPVS: stopping backup sync thread 3775 ... [ 38.647497] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.654186] IPVS: stopping backup sync thread 3783 ... [ 38.654656] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.658921] IPVS: Creating netns size=2536 id=8 [ 38.672860] IPVS: stopping backup sync thread 3791 ... [ 38.675897] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.807677] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.824811] IPVS: stopping backup sync thread 3754 ... [ 38.825400] IPVS: stopping backup sync thread 3755 ... [ 38.827206] IPVS: stopping backup sync thread 3795 ... [ 38.828557] IPVS: stopping backup sync thread 3767 ... [ 38.829984] IPVS: stopping backup sync thread 3781 ... [ 38.830000] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.835899] IPVS: stopping backup sync thread 3785 ... [ 38.836236] IPVS: stopping backup sync thread 3752 ... [ 38.836264] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.848624] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.849914] IPVS: stopping backup sync thread 3820 ... [ 38.852901] IPVS: stopping backup sync thread 3823 ... [ 38.856641] IPVS: stopping backup sync thread 3797 ... [ 38.856676] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.860110] IPVS: stopping backup sync thread 3816 ... [ 38.860892] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.861154] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.866302] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.866507] IPVS: stopping backup sync thread 3826 ... [ 38.866629] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.866711] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.867202] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.886750] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.887674] IPVS: stopping backup sync thread 3840 ... [ 38.890284] IPVS: stopping backup sync thread 3837 ... [ 38.895002] IPVS: stopping backup sync thread 3846 ... [ 38.897882] IPVS: stopping backup sync thread 3843 ... [ 38.909001] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.909227] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.909616] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.909663] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 38.911756] IPVS: stopping backup sync thread 3858 ... [ 38.929963] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.110562] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.128084] IPVS: stopping backup sync thread 3845 ... [ 39.131731] IPVS: stopping backup sync thread 3876 ... [ 39.131758] IPVS: stopping backup sync thread 3848 ... [ 39.133390] IPVS: stopping backup sync thread 3872 ... [ 39.135268] IPVS: stopping backup sync thread 3874 ... [ 39.137144] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.141378] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.141597] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.141844] IPVS: stopping backup sync thread 3869 ... [ 39.141859] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.143803] IPVS: stopping backup sync thread 3883 ... [ 39.144132] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.148404] IPVS: stopping backup sync thread 3873 ... [ 39.166534] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.169389] IPVS: stopping backup sync thread 3907 ... [ 39.169523] IPVS: stopping backup sync thread 3905 ... [ 39.171255] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.171315] IPVS: stopping backup sync thread 3910 ... [ 39.172489] IPVS: stopping backup sync thread 3908 ... [ 39.180392] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.188800] IPVS: stopping backup sync thread 3904 ... [ 39.188839] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.189125] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.189252] IPVS: stopping backup sync thread 3924 ... [ 39.195041] IPVS: stopping backup sync thread 3927 ... [ 39.196003] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.214235] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.214552] IPVS: stopping backup sync thread 3935 ... [ 39.214714] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.224858] IPVS: stopping backup sync thread 3941 ... [ 39.224880] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.227421] IPVS: stopping backup sync thread 3945 ... [ 39.227862] IPVS: stopping backup sync thread 3944 ... [ 39.233785] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.234023] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.234507] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.248657] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.460284] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.473470] IPVS: stopping backup sync thread 3968 ... [ 39.474314] IPVS: stopping backup sync thread 3970 ... [ 39.477019] IPVS: stopping backup sync thread 3957 ... [ 39.477230] IPVS: stopping backup sync thread 3964 ... [ 39.480240] IPVS: stopping backup sync thread 3961 ... [ 39.481243] IPVS: stopping backup sync thread 3960 ... [ 39.481446] IPVS: stopping backup sync thread 3977 ... [ 39.483070] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.483277] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.483461] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.483522] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.496212] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 39.498786] IPVS: stopping backup sync thread 3966 ... [ 39.509249] [ 39.509251] ============================================= [ 39.509252] [ INFO: possible recursive locking detected ] [ 39.509255] 4.9.94-g8683408 #3 Not tainted [ 39.509256] --------------------------------------------- [ 39.509258] syz-executor3/3996 is trying to acquire lock: [ 39.509275] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 39.509276] but task is already holding lock: [ 39.509282] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 39.509284] other info that might help us debug this: [ 39.509285] Possible unsafe locking scenario: [ 39.509285] [ 39.509285] CPU0 [ 39.509286] ---- [ 39.509289] lock(rtnl_mutex); [ 39.509291] lock(rtnl_mutex); [ 39.509292] [ 39.509292] *** DEADLOCK *** [ 39.509292] [ 39.509293] May be due to missing lock nesting notation [ 39.509293] [ 39.509295] 2 locks held by syz-executor3/3996: [ 39.509302] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 39.509312] #1: (ipvs->sync_mutex){+.+.+.}, at: [] do_ip_vs_set_ctl+0x90d/0xbd0 [ 39.509313] [ 39.509313] stack backtrace: [ 39.509317] CPU: 0 PID: 3996 Comm: syz-executor3 Not tainted 4.9.94-g8683408 #3 [ 39.509319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.509327] ffff8801d977f480 ffffffff81d9b509 ffffffff85373290 ffffffff85373290 [ 39.509332] ffffffff85373290 ffff8801d83bb8e8 af1f91ae2ae435e6 ffff8801d977f640 [ 39.509337] ffffffff814258ef ffffffff84c6eca0 ffffffff84fc2e80 ffffffff84c6eca4 [ 39.509338] Call Trace: [ 39.509346] [] dump_stack+0xc1/0x128 [ 39.509353] [] __lock_acquire.cold.59+0x166/0x5f8 [ 39.509361] [] ? debug_check_no_locks_freed+0x210/0x210 [ 39.509366] [] ? __lock_is_held+0xa2/0xf0 [ 39.509370] [] lock_acquire+0x130/0x3e0 [ 39.509374] [] ? rtnl_lock+0x17/0x20 [ 39.509380] [] ? rtnl_lock+0x17/0x20 [ 39.509390] [] mutex_lock_nested+0xc0/0x870 [ 39.509394] [] ? rtnl_lock+0x17/0x20 [ 39.509398] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 39.509403] [] ? qtaguid_untag+0x41a/0x620 [ 39.509408] [] ? mutex_trylock+0x3e0/0x3e0 [ 39.509413] [] ? _raw_spin_unlock_bh+0x30/0x40 [ 39.509416] [] ? qtaguid_untag+0x31e/0x620 [ 39.509420] [] ? __lock_is_held+0xa2/0xf0 [ 39.509425] [] rtnl_lock+0x17/0x20 [ 39.509431] [] ip_mc_drop_socket+0x8c/0x230 [ 39.509435] [] inet_release+0x5b/0x1d0 [ 39.509441] [] sock_release+0x96/0x1c0 [ 39.509445] [] start_sync_thread+0xa0e/0x1ea0 [ 39.509451] [] ? ip_vs_proc_sync_conn+0x952/0x952 [ 39.509455] [] ? ip_vs_sync_conn+0x2a90/0x2a90 [ 39.509459] [] ? mark_held_locks+0xc7/0x130 [ 39.509463] [] ? mutex_lock_nested+0x572/0x870 [ 39.509468] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 39.509472] [] ? mutex_lock_nested+0x596/0x870 [ 39.509475] [] ? do_ip_vs_set_ctl+0x90d/0xbd0 [ 39.509480] [] ? mutex_trylock+0x3e0/0x3e0 [ 39.509484] [] ? memcpy+0x45/0x50 [ 39.509488] [] do_ip_vs_set_ctl+0x91f/0xbd0 [ 39.509492] [] ? ip_vs_genl_set_cmd+0x9c0/0x9c0 [ 39.509497] [] ? mutex_lock_nested+0x572/0x870 [ 39.509502] [] ? __mutex_unlock_slowpath+0x221/0x3c0 [ 39.509506] [] ? __ww_mutex_lock+0x14c0/0x14c0 [ 39.509511] [] ? sock_has_perm+0x292/0x3e0 [ 39.509515] [] ? mutex_unlock+0x9/0x10 [ 39.509520] [] ? nf_sockopt_find.constprop.0+0x1b1/0x230 [ 39.509524] [] nf_setsockopt+0x6d/0xc0 [ 39.509529] [] ip_setsockopt+0x9a/0xb0 [ 39.509533] [] tcp_setsockopt+0x88/0xe0 [ 39.509538] [] sock_common_setsockopt+0x9a/0xe0 [ 39.509542] [] SyS_setsockopt+0x166/0x260 [ 39.509546] [] ? SyS_recv+0x40/0x40 [ 39.509550] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 39.509554] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 39.509559] [] ? do_syscall_64+0x48/0x490 [ 39.509563] [] ? SyS_recv+0x40/0x40 [ 39.509566] [] do_syscall_64+0x1a6/0x490 [ 39.509571] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 40.305567] IPVS: stopping backup sync thread 4001 ... [ 40.308032] IPVS: stopping backup sync thread 4002 ... [ 40.309057] IPVS: stopping backup sync thread 4003 ... [ 40.311027] IPVS: stopping backup sync thread 4004 ... [ 40.311063] IPVS: stopping backup sync thread 4005 ...