[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 15.665834] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 15.798593] random: sshd: uninitialized urandom read (32 bytes read) [ 16.120302] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 16.951713] random: sshd: uninitialized urandom read (32 bytes read) [ 17.079946] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.4' (ECDSA) to the list of known hosts. [ 22.477739] random: sshd: uninitialized urandom read (32 bytes read) 2018/05/12 10:58:01 parsed 1 programs 2018/05/12 10:58:01 executed programs: 0 [ 22.973842] IPVS: Creating netns size=2536 id=1 [ 23.006932] IPVS: Creating netns size=2536 id=2 [ 23.022014] IPVS: Creating netns size=2536 id=3 [ 23.042247] IPVS: stopping backup sync thread 3729 ... [ 23.042579] IPVS: stopping backup sync thread 3731 ... [ 23.049424] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.055612] IPVS: stopping backup sync thread 3738 ... [ 23.061175] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.062150] IPVS: stopping backup sync thread 3733 ... [ 23.069557] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.077836] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.084041] IPVS: Creating netns size=2536 id=4 [ 23.087329] IPVS: stopping backup sync thread 3744 ... [ 23.097360] IPVS: stopping backup sync thread 3747 ... [ 23.114650] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.118926] IPVS: stopping backup sync thread 3761 ... [ 23.121983] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.135408] IPVS: Creating netns size=2536 id=5 [ 23.143875] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.157661] IPVS: stopping backup sync thread 3757 ... [ 23.157942] IPVS: stopping backup sync thread 3763 ... [ 23.162195] IPVS: stopping backup sync thread 3765 ... [ 23.171029] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.173663] IPVS: Creating netns size=2536 id=6 [ 23.194379] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.199293] IPVS: stopping backup sync thread 3780 ... [ 23.199378] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.204371] IPVS: stopping backup sync thread 3795 ... [ 23.207460] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.219731] IPVS: stopping backup sync thread 3785 ... [ 23.219896] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.227036] IPVS: Creating netns size=2536 id=7 [ 23.244382] IPVS: stopping backup sync thread 3797 ... [ 23.245324] IPVS: stopping backup sync thread 3790 ... [ 23.249530] IPVS: stopping backup sync thread 3811 ... [ 23.266950] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.268163] IPVS: stopping backup sync thread 3819 ... [ 23.272930] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.282330] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.283708] IPVS: Creating netns size=2536 id=8 [ 23.316728] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.316789] IPVS: stopping backup sync thread 3831 ... [ 23.335264] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.360068] IPVS: stopping backup sync thread 3840 ... [ 23.366361] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.443790] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.511737] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.512312] IPVS: stopping backup sync thread 3823 ... [ 23.513349] IPVS: stopping backup sync thread 3842 ... [ 23.514018] IPVS: stopping backup sync thread 3825 ... [ 23.514103] IPVS: stopping backup sync thread 3838 ... [ 23.516101] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.516226] IPVS: stopping backup sync thread 3845 ... [ 23.516828] IPVS: stopping backup sync thread 3814 ... [ 23.516911] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.520694] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.527932] IPVS: stopping backup sync thread 3863 ... [ 23.531028] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.531263] IPVS: stopping backup sync thread 3805 ... [ 23.540912] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.544706] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.547523] IPVS: stopping backup sync thread 3869 ... [ 23.552711] IPVS: stopping backup sync thread 3870 ... [ 23.554514] IPVS: stopping backup sync thread 3868 ... [ 23.564669] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.575772] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.588050] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.590613] IPVS: stopping backup sync thread 3872 ... [ 23.590739] IPVS: stopping backup sync thread 3892 ... [ 23.595534] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.596649] IPVS: stopping backup sync thread 3882 ... [ 23.599985] IPVS: stopping backup sync thread 3887 ... [ 23.610930] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.621221] IPVS: stopping backup sync thread 3895 ... [ 23.621957] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.623813] IPVS: stopping backup sync thread 3902 ... [ 23.624025] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.636559] IPVS: stopping backup sync thread 3904 ... [ 23.636587] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.644692] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.666083] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.667257] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.863379] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.917420] IPVS: stopping backup sync thread 3928 ... [ 23.922123] IPVS: stopping backup sync thread 3925 ... [ 23.922186] IPVS: stopping backup sync thread 3934 ... [ 23.924826] IPVS: stopping backup sync thread 3933 ... [ 23.925459] IPVS: stopping backup sync thread 3924 ... [ 23.927776] IPVS: stopping backup sync thread 3939 ... [ 23.928962] IPVS: stopping backup sync thread 3919 ... [ 23.930149] IPVS: stopping backup sync thread 3918 ... [ 23.936680] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.936752] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.946870] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.951858] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.968685] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 23.969191] [ 23.969193] ============================================= [ 23.969195] [ INFO: possible recursive locking detected ] [ 23.969199] 4.9.99-gc2f9bce #22 Not tainted [ 23.969201] --------------------------------------------- [ 23.969204] syz-executor4/3960 is trying to acquire lock: [ 23.969224] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 23.969226] but task is already holding lock: [ 23.969237] (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 23.969239] other info that might help us debug this: [ 23.969241] Possible unsafe locking scenario: [ 23.969241] [ 23.969242] CPU0 [ 23.969243] ---- [ 23.969247] lock(rtnl_mutex); [ 23.969256] lock(rtnl_mutex); [ 23.969257] [ 23.969257] *** DEADLOCK *** [ 23.969257] [ 23.969259] May be due to missing lock nesting notation [ 23.969259] [ 23.969263] 2 locks held by syz-executor4/3960: [ 23.969275] #0: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 [ 23.969288] #1: (ipvs->sync_mutex){+.+.+.}, at: [] do_ip_vs_set_ctl+0x90d/0xbd0 [ 23.969290] [ 23.969290] stack backtrace: [ 23.969296] CPU: 0 PID: 3960 Comm: syz-executor4 Not tainted 4.9.99-gc2f9bce #22 [ 23.969299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.969310] ffff8801d8b67410 ffffffff81eb0f09 ffffffff8559cf30 ffffffff8559cf30 [ 23.969319] ffffffff8559cf30 ffff8801d8f0d0e8 bdd6c1b1fa547de9 ffff8801d8b675d0 [ 23.969328] ffffffff814258ff ffffffff84e98ca0 ffffffff851f0ea8 ffffffff84e98ca4 [ 23.969330] Call Trace: [ 23.969340] [] dump_stack+0xc1/0x128 [ 23.969350] [] __lock_acquire.cold.59+0x166/0x5f8 [ 23.969360] [] ? debug_check_no_locks_freed+0x210/0x210 [ 23.969367] [] ? __lock_is_held+0xa2/0xf0 [ 23.969374] [] lock_acquire+0x130/0x3e0 [ 23.969380] [] ? rtnl_lock+0x17/0x20 [ 23.969388] [] ? rtnl_lock+0x17/0x20 [ 23.969397] [] mutex_lock_nested+0xc0/0x870 [ 23.969404] [] ? rtnl_lock+0x17/0x20 [ 23.969411] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 23.969418] [] ? qtaguid_untag+0x41a/0x620 [ 23.969425] [] ? mutex_trylock+0x3e0/0x3e0 [ 23.969432] [] ? _raw_spin_unlock_bh+0x30/0x40 [ 23.969438] [] ? qtaguid_untag+0x31e/0x620 [ 23.969444] [] ? __lock_is_held+0xa2/0xf0 [ 23.969454] [] rtnl_lock+0x17/0x20 [ 23.969461] [] ip_mc_drop_socket+0x8c/0x230 [ 23.969466] [] inet_release+0x5b/0x1d0 [ 23.969473] [] sock_release+0x96/0x1c0 [ 23.969479] [] start_sync_thread+0xa0e/0x1ea0 [ 23.969486] [] ? ip_vs_proc_sync_conn+0x952/0x952 [ 23.969492] [] ? ip_vs_sync_conn+0x2a90/0x2a90 [ 23.969498] [] ? mark_held_locks+0xc7/0x130 [ 23.969504] [] ? mutex_lock_nested+0x572/0x870 [ 23.969511] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 23.969518] [] ? mutex_lock_nested+0x596/0x870 [ 23.969523] [] ? do_ip_vs_set_ctl+0x90d/0xbd0 [ 23.969530] [] ? mutex_trylock+0x3e0/0x3e0 [ 23.969537] [] ? memcpy+0x45/0x50 [ 23.969543] [] do_ip_vs_set_ctl+0x91f/0xbd0 [ 23.969550] [] ? __lock_acquire+0x654/0x4070 [ 23.969556] [] ? ip_vs_genl_set_cmd+0x9c0/0x9c0 [ 23.969564] [] ? mutex_lock_nested+0x572/0x870 [ 23.969571] [] ? __mutex_unlock_slowpath+0x25b/0x3c0 [ 23.969578] [] ? __mutex_unlock_slowpath+0x221/0x3c0 [ 23.969585] [] ? __ww_mutex_lock+0x14c0/0x14c0 [ 23.969593] [] ? check_preemption_disabled+0x3b/0x170 [ 23.969599] [] ? mutex_unlock+0x9/0x10 [ 23.969607] [] nf_setsockopt+0x6d/0xc0 [ 23.969613] [] ip_setsockopt+0x9a/0xb0 [ 23.969621] [] udp_setsockopt+0x4a/0x90 [ 23.969629] [] ipv6_setsockopt+0x10a/0x130 [ 23.969634] [] udpv6_setsockopt+0x4a/0x90 [ 23.969641] [] sock_common_setsockopt+0x9a/0xe0 [ 23.969648] [] SyS_setsockopt+0x166/0x260 [ 23.969659] [] ? SyS_recv+0x40/0x40 [ 23.969667] [] ? f_getown+0xb0/0xb0 [ 23.969674] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 23.969681] [] ? do_syscall_64+0x48/0x490 [ 23.969687] [] ? SyS_recv+0x40/0x40 [ 23.969693] [] do_syscall_64+0x1a6/0x490 [ 23.969700] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 24.750069] IPVS: stopping backup sync thread 3963 ... [ 24.751655] IPVS: stopping backup sync thread 3964 ... [ 24.769187] IPVS: stopping backup sync thread 3966 ... [ 24.777956] IPVS: stopping backup sync thread 3969 ... [ 24.777966] IPVS: stopping backup sync thread 3976 ...