INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.47' (ECDSA) to the list of known hosts. syzkaller login: [ 106.892495] IPVS: ftp: loaded support on port[0] = 21 [ 106.893239] IPVS: ftp: loaded support on port[0] = 21 [ 106.899881] IPVS: ftp: loaded support on port[0] = 21 [ 106.905498] IPVS: ftp: loaded support on port[0] = 21 [ 106.911320] IPVS: ftp: loaded support on port[0] = 21 [ 106.914779] IPVS: ftp: loaded support on port[0] = 21 [ 106.920935] IPVS: ftp: loaded support on port[0] = 21 [ 106.926451] IPVS: ftp: loaded support on port[0] = 21 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.accept_dad = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 net.ipv6.conf.syz_tun.router_solicitations = 0 RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists RTNETLINK answers: File exists [ 107.527057] ip (4635) used greatest stack depth: 16360 bytes left RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 107.945487] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.960620] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.970518] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.978076] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 107.989055] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available [ 107.996452] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 108.003419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 108.011406] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 109.836702] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 109.842988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.858872] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 109.864990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.877678] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 109.883889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.906836] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 109.913178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.934293] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 109.940591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.955514] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 109.961711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.976052] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 109.982167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.008185] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 110.014314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.118976] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.134368] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.193358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.201606] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.228352] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.235836] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.243082] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.251345] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 110.353614] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.359969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.370893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.384958] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready executing program [ 110.403585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.413700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready executing program executing program [ 110.449618] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 110.455766] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 1, id = 0 [ 110.464670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.470666] IPVS: stopping backup sync thread 5682 ... [ 110.471718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.485694] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready executing program executing program executing program [ 110.497697] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 1, id = 0 [ 110.507805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.522466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.536616] IPVS: stopping backup sync thread 5690 ... [ 110.542857] [ 110.544504] ============================================ executing program [ 110.549426] IPVS: sync thread started: state = BACKUP, mcast_ifn = gretap0, syncid = 1, id = 0 [ 110.549932] WARNING: possible recursive locking detected [ 110.549939] 4.16.0-rc6+ #284 Not tainted [ 110.564493] IPVS: stopping backup sync thread 5702 ... [ 110.568167] -------------------------------------------- [ 110.568172] syzkaller934645/5689 is trying to acquire lock: [ 110.568174] (rtnl_mutex){+.+.}, at: [<00000000ab846ef1>] rtnl_lock+0x17/0x20 [ 110.568196] [ 110.568196] but task is already holding lock: [ 110.568197] (rtnl_mutex){+.+.}, at: [<00000000ab846ef1>] rtnl_lock+0x17/0x20 [ 110.568212] [ 110.568212] other info that might help us debug this: [ 110.612493] Possible unsafe locking scenario: [ 110.612493] [ 110.618525] CPU0 [ 110.621078] ---- [ 110.623630] lock(rtnl_mutex); [ 110.626882] lock(rtnl_mutex); [ 110.630134] [ 110.630134] *** DEADLOCK *** [ 110.630134] [ 110.636163] May be due to missing lock nesting notation [ 110.636163] [ 110.643061] 2 locks held by syzkaller934645/5689: [ 110.647870] #0: (rtnl_mutex){+.+.}, at: [<00000000ab846ef1>] rtnl_lock+0x17/0x20 [ 110.655559] #1: (ipvs->sync_mutex){+.+.}, at: [<0000000065ffc0b6>] do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 110.664721] [ 110.664721] stack backtrace: [ 110.669193] CPU: 0 PID: 5689 Comm: syzkaller934645 Not tainted 4.16.0-rc6+ #284 [ 110.676614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 110.685950] Call Trace: [ 110.688519] dump_stack+0x194/0x24d [ 110.692123] ? arch_local_irq_restore+0x53/0x53 [ 110.696777] __lock_acquire+0xe8f/0x3e00 [ 110.700808] ? rcu_read_unlock+0x35/0x70 [ 110.704846] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 110.710018] ? __lock_is_held+0xb6/0x140 [ 110.714066] ? __lock_acquire+0x664/0x3e00 [ 110.718273] ? select_idle_sibling+0x86d/0xda0 [ 110.722828] ? update_curr+0x332/0xac0 [ 110.726722] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 110.731884] ? find_held_lock+0x35/0x1d0 [ 110.735924] ? trace_hardirqs_off+0x10/0x10 [ 110.740248] ? trace_hardirqs_off+0x10/0x10 [ 110.744558] ? trace_hardirqs_off+0x10/0x10 [ 110.749428] ? trace_hardirqs_off+0x10/0x10 [ 110.753725] ? dequeue_task_fair+0x490/0x490 [ 110.758106] lock_acquire+0x1d5/0x580 [ 110.761886] ? lock_acquire+0x1d5/0x580 [ 110.765838] ? rtnl_lock+0x17/0x20 [ 110.769353] ? lock_release+0xa40/0xa40 [ 110.773303] ? check_same_owner+0x320/0x320 [ 110.777705] ? try_to_wake_up+0xf9/0x15f0 [ 110.781826] ? rcu_note_context_switch+0x710/0x710 [ 110.786726] ? __might_sleep+0x95/0x190 [ 110.790671] ? rtnl_lock+0x17/0x20 [ 110.794188] __mutex_lock+0x16f/0x1a80 [ 110.798054] ? rtnl_lock+0x17/0x20 [ 110.801568] ? wait_for_completion_killable+0x63e/0x820 [ 110.806904] ? lock_downgrade+0x980/0x980 [ 110.811026] ? rtnl_lock+0x17/0x20 [ 110.814544] ? mutex_lock_io_nested+0x1900/0x1900 [ 110.819358] ? mark_held_locks+0xaf/0x100 [ 110.823478] ? _raw_spin_unlock_irq+0x27/0x70 [ 110.827948] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 110.832942] ? trace_hardirqs_on+0xd/0x10 [ 110.837086] ? _raw_spin_unlock_irq+0x27/0x70 [ 110.841570] ? wait_for_completion_killable+0x63e/0x820 [ 110.846913] ? wait_for_completion_interruptible_timeout+0x820/0x820 [ 110.853378] ? lock_downgrade+0x980/0x980 [ 110.857502] ? lock_release+0xa40/0xa40 [ 110.861448] ? __kthread_create_on_node+0x127/0x480 [ 110.866436] ? do_raw_spin_trylock+0x190/0x190 [ 110.870993] ? wake_up_q+0xe0/0xe0 [ 110.874509] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 110.879850] ? __kthread_create_on_node+0x36e/0x480 [ 110.884840] ? print_irqtrace_events+0x270/0x270 [ 110.889568] ? kthread_park+0x130/0x130 [ 110.893519] ? __lock_is_held+0xb6/0x140 [ 110.897556] mutex_lock_nested+0x16/0x20 [ 110.901601] ? mutex_lock_nested+0x16/0x20 [ 110.905808] rtnl_lock+0x17/0x20 [ 110.909147] ip_mc_drop_socket+0x88/0x230 [ 110.913269] inet_release+0x4e/0x1c0 [ 110.916963] sock_release+0x8d/0x1e0 [ 110.920652] start_sync_thread+0x2213/0x2b70 [ 110.925047] ? do_ip_vs_set_ctl+0x10f8/0x1cc0 [ 110.929516] ? ip_vs_process_message_v0+0x870/0x870 [ 110.934504] ? ip_vs_sync_conn+0x3950/0x3950 [ 110.938885] ? trace_hardirqs_off+0x10/0x10 [ 110.943178] ? lock_downgrade+0x980/0x980 [ 110.947298] ? lock_release+0xa40/0xa40 [ 110.951242] ? lock_acquire+0x1d5/0x580 [ 110.955195] ? find_held_lock+0x35/0x1d0 [ 110.959234] ? __might_fault+0x110/0x1d0 [ 110.963274] ? lock_release+0xa40/0xa40 [ 110.967228] ? check_same_owner+0x320/0x320 [ 110.971533] ? module_unload_free+0x5b0/0x5b0 [ 110.976002] ? __might_sleep+0x95/0x190 [ 110.979959] do_ip_vs_set_ctl+0x1139/0x1cc0 [ 110.984255] ? do_ip_vs_set_ctl+0x1139/0x1cc0 [ 110.988726] ? ip_vs_genl_dump_services+0x440/0x440 [ 110.993730] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 110.998990] ? lock_downgrade+0x980/0x980 [ 111.003110] ? lock_release+0xa40/0xa40 [ 111.007062] ? __lock_is_held+0xb6/0x140 [ 111.011105] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 111.015920] ? wait_for_completion+0x770/0x770 [ 111.020472] ? module_unload_free+0x5b0/0x5b0 [ 111.024943] nf_setsockopt+0x67/0xc0 [ 111.028629] ? nf_setsockopt+0x67/0xc0 [ 111.032488] ip_setsockopt+0x97/0xa0 [ 111.036177] tcp_setsockopt+0x82/0xd0 [ 111.039953] sock_common_setsockopt+0x95/0xd0 [ 111.044419] SyS_setsockopt+0x189/0x360 [ 111.048363] ? SyS_recv+0x40/0x40 [ 111.051787] ? lock_release+0xa40/0xa40 [ 111.055737] ? __switch_to+0x6df/0x13c0 [ 111.059685] ? do_syscall_64+0xb7/0x940 [ 111.063634] ? SyS_recv+0x40/0x40 [ 111.067067] do_syscall_64+0x281/0x940 [ 111.070928] ? _raw_spin_unlock_irq+0x27/0x70 [ 111.075397] ? finish_task_switch+0x1c1/0x7e0 [ 111.079867] ? syscall_return_slowpath+0x550/0x550 [ 111.084767] ? syscall_return_slowpath+0x2ac/0x550 [ 111.089666] ? prepare_exit_to_usermode+0x350/0x350 [ 111.094657] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 111.099994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 111.104811] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 111.109973] RIP: 0033:0x448ab9 [ 111.113132] RSP: 002b:00007f94763dcdb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.120810] RAX: ffffffffffffffda RBX: 000000000070003c RCX: 0000000000448ab9 [ 111.128052] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 111.135294] RBP: 0000000000700038 R08: 0000000000000018 R09: 0000000000000000 [ 111.142540] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 111.149786] R13: 000000000080fdff R14: 00007f94763dd9c0 R15: 0000000000002710