INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. 2018/09/23 02:58:53 parsed 1 programs 2018/09/23 02:58:54 executed programs: 0 syzkaller login: [ 163.276182] IPVS: ftp: loaded support on port[0] = 21 [ 163.281595] IPVS: ftp: loaded support on port[0] = 21 [ 163.294680] IPVS: ftp: loaded support on port[0] = 21 [ 163.324189] IPVS: ftp: loaded support on port[0] = 21 [ 163.324369] IPVS: ftp: loaded support on port[0] = 21 [ 163.331114] IPVS: ftp: loaded support on port[0] = 21 [ 164.118461] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.126087] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.134316] device bridge_slave_0 entered promiscuous mode [ 164.173186] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.179824] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.196829] device bridge_slave_0 entered promiscuous mode [ 164.212093] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.218536] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.226027] device bridge_slave_0 entered promiscuous mode [ 164.240196] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.247618] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.255083] device bridge_slave_1 entered promiscuous mode [ 164.261896] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.268258] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.276564] device bridge_slave_0 entered promiscuous mode [ 164.291988] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.298336] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.307098] device bridge_slave_1 entered promiscuous mode [ 164.320332] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.329132] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.337135] device bridge_slave_1 entered promiscuous mode [ 164.343935] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.350284] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.358441] device bridge_slave_0 entered promiscuous mode [ 164.365752] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.373383] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.380522] device bridge_slave_1 entered promiscuous mode [ 164.388185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.397363] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.405030] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.412049] device bridge_slave_0 entered promiscuous mode [ 164.420028] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.428750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.438360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.448176] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.460641] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.467524] device bridge_slave_1 entered promiscuous mode [ 164.476077] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.483687] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.491276] device bridge_slave_1 entered promiscuous mode [ 164.497769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.506171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.516076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.525840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.535289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.544345] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.603165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.627928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.660350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.671855] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.691899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.707888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.718371] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.744062] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.765132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.778892] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.808648] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.821901] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 164.834608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.845926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.856117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.863775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.871188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.881283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.892838] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.901371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.908192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.921053] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 164.936963] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.944774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.955994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.967990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.980625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.988152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.003567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.012909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.026002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.044838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.081165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.090849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.119857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.134865] team0: Port device team_slave_0 added [ 165.148422] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.156966] team0: Port device team_slave_0 added [ 165.163517] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.171869] team0: Port device team_slave_0 added [ 165.178429] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.188796] team0: Port device team_slave_0 added [ 165.199054] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.213951] team0: Port device team_slave_1 added [ 165.221211] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.228301] team0: Port device team_slave_1 added [ 165.234940] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.252667] team0: Port device team_slave_0 added [ 165.260355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.273000] team0: Port device team_slave_1 added [ 165.282477] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.289858] team0: Port device team_slave_1 added [ 165.341544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.354338] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.362396] team0: Port device team_slave_1 added [ 165.383121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.411364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.421995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.429872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.439558] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.446980] team0: Port device team_slave_0 added [ 165.464600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.472693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.484796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.501312] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.512325] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.526124] team0: Port device team_slave_1 added [ 165.536085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.550099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.566611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.576406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.584948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.593174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.607082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.620064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.633337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.641311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.652906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.660153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.688225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.705819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.717817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.726286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.734273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.742150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.749577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.757625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.768673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.790010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.815562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.824965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.844382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.856175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.863886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.871683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.879389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.887375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.899610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.910851] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.920760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.928819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.938815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.949035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.967678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.985735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.997520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.601018] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.607576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.614598] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.621647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.633186] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.640333] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.646764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.653518] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.659881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.668689] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.680353] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.686790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.693538] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.699908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.708516] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.717796] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.724234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.730951] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.737315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.746374] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.806624] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.813043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.819752] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.826176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.840246] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.856492] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.862933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.869607] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.876045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.886692] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 166.900992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.914811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.936262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.944036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.951314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.958348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.409833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.424213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.464594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.514021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.626315] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.681957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.699372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.711219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.720307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.801762] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.881865] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.892188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.901603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.958012] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 169.971290] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 169.977464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.988371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.004307] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.016696] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.038523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.049062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.075262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.091735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.098835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.217981] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.252063] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.268451] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.277673] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.290968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.298043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.307955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.316136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.333844] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.376939] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.527511] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.541045] 8021q: adding VLAN 0 to HW filter on device team0 2018/09/23 02:59:04 executed programs: 6 2018/09/23 02:59:10 executed programs: 42 [ 181.356072] [ 181.357860] ====================================================== [ 181.364162] WARNING: possible circular locking dependency detected [ 181.370469] 4.19.0-rc4-next-20180921+ #77 Not tainted [ 181.375653] ------------------------------------------------------ [ 181.381959] syz-executor3/7582 is trying to acquire lock: [ 181.387490] 000000009de2d26d (&p->lock){+.+.}, at: seq_read+0x71/0x1150 [ 181.394301] [ 181.394301] but task is already holding lock: [ 181.400253] 000000007757d5ad (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 181.407466] [ 181.407466] which lock already depends on the new lock. [ 181.407466] [ 181.415770] [ 181.415770] the existing dependency chain (in reverse order) is: [ 181.423381] [ 181.423381] -> #2 (&pipe->mutex/1){+.+.}: [ 181.429013] __mutex_lock+0x166/0x1700 [ 181.433408] mutex_lock_nested+0x16/0x20 [ 181.437973] fifo_open+0x15c/0xad0 [ 181.442020] do_dentry_open+0x499/0x1250 [ 181.446587] vfs_open+0xa0/0xd0 [ 181.450373] path_openat+0x12bc/0x5160 [ 181.454779] do_filp_open+0x255/0x380 [ 181.459085] do_open_execat+0x221/0x8e0 [ 181.463562] __do_execve_file.isra.33+0x176f/0x25d0 [ 181.469081] __x64_sys_execve+0x8f/0xc0 [ 181.473561] do_syscall_64+0x1b9/0x820 [ 181.477952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.483641] [ 181.483641] -> #1 (&sig->cred_guard_mutex){+.+.}: [ 181.489956] __mutex_lock+0x166/0x1700 [ 181.494360] mutex_lock_killable_nested+0x16/0x20 [ 181.499716] lock_trace+0x4c/0xe0 [ 181.503699] proc_pid_personality+0x1c/0xd0 [ 181.508561] proc_single_show+0x101/0x190 [ 181.513252] traverse+0x344/0x7b0 [ 181.517237] seq_read+0xc76/0x1150 [ 181.521281] do_iter_read+0x4a3/0x650 [ 181.525594] vfs_readv+0x175/0x1c0 [ 181.529665] default_file_splice_read+0x53c/0xb20 [ 181.535013] do_splice_to+0x12e/0x190 [ 181.539319] splice_direct_to_actor+0x270/0x8f0 [ 181.544528] do_splice_direct+0x2d4/0x420 [ 181.549186] do_sendfile+0x62a/0xe20 [ 181.553411] __x64_sys_sendfile64+0x15d/0x250 [ 181.558426] do_syscall_64+0x1b9/0x820 [ 181.562835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.568522] [ 181.568522] -> #0 (&p->lock){+.+.}: [ 181.573627] lock_acquire+0x1ed/0x520 [ 181.577933] __mutex_lock+0x166/0x1700 [ 181.582364] mutex_lock_nested+0x16/0x20 [ 181.586939] seq_read+0x71/0x1150 [ 181.590908] do_iter_read+0x4a3/0x650 [ 181.595214] vfs_readv+0x175/0x1c0 [ 181.599261] default_file_splice_read+0x53c/0xb20 [ 181.604605] do_splice_to+0x12e/0x190 [ 181.608917] do_splice+0x1014/0x1430 [ 181.613134] __x64_sys_splice+0x2c1/0x330 [ 181.617785] do_syscall_64+0x1b9/0x820 [ 181.622178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.627880] [ 181.627880] other info that might help us debug this: [ 181.627880] [ 181.636020] Chain exists of: [ 181.636020] &p->lock --> &sig->cred_guard_mutex --> &pipe->mutex/1 [ 181.636020] [ 181.646869] Possible unsafe locking scenario: [ 181.646869] [ 181.652926] CPU0 CPU1 [ 181.657569] ---- ---- [ 181.662227] lock(&pipe->mutex/1); [ 181.665842] lock(&sig->cred_guard_mutex); [ 181.672668] lock(&pipe->mutex/1); [ 181.678802] lock(&p->lock); [ 181.681889] [ 181.681889] *** DEADLOCK *** [ 181.681889] [ 181.687962] 1 lock held by syz-executor3/7582: [ 181.692521] #0: 000000007757d5ad (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 181.700139] [ 181.700139] stack backtrace: [ 181.704622] CPU: 0 PID: 7582 Comm: syz-executor3 Not tainted 4.19.0-rc4-next-20180921+ #77 [ 181.713001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.722351] Call Trace: [ 181.724931] dump_stack+0x1d3/0x2c4 [ 181.728547] ? dump_stack_print_info.cold.2+0x52/0x52 [ 181.733779] ? vprintk_func+0x85/0x181 [ 181.737667] print_circular_bug.isra.33.cold.54+0x1bd/0x27d [ 181.743379] ? save_trace+0xe0/0x290 [ 181.747092] __lock_acquire+0x33e4/0x4ec0 [ 181.751239] ? mark_held_locks+0x130/0x130 [ 181.755503] ? mark_held_locks+0x130/0x130 [ 181.759728] ? __lock_acquire+0x7ec/0x4ec0 [ 181.763953] ? __lock_acquire+0x7ec/0x4ec0 [ 181.768176] ? mark_held_locks+0x130/0x130 [ 181.772410] ? __lock_acquire+0x7ec/0x4ec0 [ 181.776635] ? graph_lock+0x170/0x170 [ 181.780419] ? mark_held_locks+0x130/0x130 [ 181.784640] ? graph_lock+0x170/0x170 [ 181.788429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 181.793953] ? check_preemption_disabled+0x48/0x200 [ 181.798960] lock_acquire+0x1ed/0x520 [ 181.802754] ? seq_read+0x71/0x1150 [ 181.806367] ? lock_release+0x970/0x970 [ 181.810324] ? ttwu_stat+0x5c0/0x5c0 [ 181.814028] ? seq_read+0x71/0x1150 [ 181.817640] __mutex_lock+0x166/0x1700 [ 181.821526] ? seq_read+0x71/0x1150 [ 181.825150] ? lock_downgrade+0x900/0x900 [ 181.829283] ? check_preemption_disabled+0x48/0x200 [ 181.834296] ? seq_read+0x71/0x1150 [ 181.837920] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 181.842860] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 181.848139] ? mutex_trylock+0x2b0/0x2b0 [ 181.852185] ? rcu_softirq_qs+0x20/0x20 [ 181.856160] ? aa_file_perm+0x490/0x1060 [ 181.860215] ? check_preemption_disabled+0x48/0x200 [ 181.865223] ? aa_path_link+0x5e0/0x5e0 [ 181.869189] ? __lock_is_held+0xb5/0x140 [ 181.873243] ? rcu_read_lock_sched_held+0x108/0x120 [ 181.878266] ? __alloc_pages_nodemask+0xbf1/0xdd0 [ 181.883096] ? default_file_splice_read+0x1de/0xb20 [ 181.888106] ? do_splice_to+0x12e/0x190 [ 181.892072] ? do_splice+0x1014/0x1430 [ 181.895957] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 181.901136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 181.906656] ? fsnotify+0x4e5/0xf50 [ 181.910271] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 181.915184] ? fsnotify_first_mark+0x350/0x350 [ 181.919756] ? __fsnotify_parent+0xcc/0x420 [ 181.924079] mutex_lock_nested+0x16/0x20 [ 181.928125] ? _copy_from_user+0xdf/0x150 [ 181.932274] ? mutex_lock_nested+0x16/0x20 [ 181.936508] seq_read+0x71/0x1150 [ 181.939947] ? rw_verify_area+0x118/0x360 [ 181.944081] do_iter_read+0x4a3/0x650 [ 181.947871] vfs_readv+0x175/0x1c0 [ 181.951424] ? compat_rw_copy_check_uvector+0x440/0x440 [ 181.956776] ? aa_file_perm+0x469/0x1060 [ 181.960823] ? lock_downgrade+0x900/0x900 [ 181.964975] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 181.969916] ? kasan_check_read+0x11/0x20 [ 181.974046] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 181.979046] ? iov_iter_pipe+0xbf/0x2f0 [ 181.983008] default_file_splice_read+0x53c/0xb20 [ 181.987841] ? iter_file_splice_write+0x1050/0x1050 [ 181.992852] ? aa_path_link+0x5e0/0x5e0 [ 181.996827] ? __fget+0x4aa/0x740 [ 182.000266] ? lock_downgrade+0x900/0x900 [ 182.004400] ? check_preemption_disabled+0x48/0x200 [ 182.009403] ? rcu_softirq_qs+0x20/0x20 [ 182.013366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 182.018905] ? fsnotify+0x4e5/0xf50 [ 182.022519] ? fsnotify_first_mark+0x350/0x350 [ 182.027086] ? __fsnotify_parent+0xcc/0x420 [ 182.031393] ? fsnotify+0xf50/0xf50 [ 182.035023] ? security_file_permission+0x1c2/0x230 [ 182.040038] ? iter_file_splice_write+0x1050/0x1050 [ 182.045054] do_splice_to+0x12e/0x190 [ 182.048867] do_splice+0x1014/0x1430 [ 182.052568] ? finish_task_switch+0x1f5/0x900 [ 182.057051] ? opipe_prep.part.13+0x3b0/0x3b0 [ 182.061544] __x64_sys_splice+0x2c1/0x330 [ 182.065685] do_syscall_64+0x1b9/0x820 [ 182.069564] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 182.074930] ? syscall_return_slowpath+0x5e0/0x5e0 [ 182.079846] ? trace_hardirqs_off+0x310/0x310 [ 182.084327] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 182.089327] ? recalc_sigpending_tsk+0x180/0x180 [ 182.094070] ? kasan_check_write+0x14/0x20 [ 182.098290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.103119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.108294] RIP: 0033:0x457679 [ 182.111472] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 182.130357] RSP: 002b:00007fae9a6c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 182.138050] RAX: ffffffffffffffda RBX: 00007fae9a6c16d4 RCX: 0000000000457679 [ 182.145300] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 182.152560] RBP: 000000000072c2c0 R08: 0000000000000200 R09: 0000000000000000 [ 182.159826] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 182.167079] R13: 00000000004d77e8 R14: 00000000004c4f5d R15: 0000000000000006 [ 182.184054] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 182.190510] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 182.201213] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 182.214876] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 182.235018] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 182.241526] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 182.251257] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 182.257701] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 182.267553] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 182.274810] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 182.285797] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 182.296587] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 183.146680] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 183.154765] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 183.171555] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 183.185668] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 183.206228] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 183.212755] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 183.222977] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 183.229425] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 183.239313] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 183.245793] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 183.256836] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 183.263346] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' 2018/09/23 02:59:15 executed programs: 72 [ 184.114824] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 184.121469] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 184.136449] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 184.143941] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 184.164466] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 184.176719] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 184.187763] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 184.198806] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 184.209849] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 184.216442] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 184.227140] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 184.233879] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 185.094418] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 185.104561] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 185.122565] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 185.129951] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 185.148818] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 185.155584] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 185.165723] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 185.172221] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 185.182103] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 185.188516] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 185.199907] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 185.207292] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 186.043632] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 186.050123] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 186.072074] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 186.078537] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 186.091758] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 186.099017] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 186.128079] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 186.134846] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 186.144902] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 186.151404] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 186.166663] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 186.173767] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 187.003194] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 187.012512] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 187.024771] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 187.031390] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 187.054363] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 187.061011] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 187.075441] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 187.084196] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 187.097957] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 187.106006] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 187.119878] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 187.126952] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 187.954069] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 187.961849] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 187.975447] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 187.982364] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 188.004844] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 188.014115] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 188.026874] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 188.038290] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 188.053646] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 188.065871] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 188.094805] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 188.101535] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 188.894021] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 188.901677] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 188.913199] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 188.923560] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 188.954574] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 188.961145] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 188.978361] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 188.996999] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 189.011722] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 189.018179] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 189.043035] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 189.049973] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' 2018/09/23 02:59:21 executed programs: 108 [ 189.834789] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 189.843209] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 189.853114] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 189.859540] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 189.903289] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 189.909848] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 189.923584] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 189.930823] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 189.951350] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 189.958023] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 190.024726] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 190.031407] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 190.774226] kobject: 'loop1' (00000000a40dd890): kobject_uevent_env [ 190.780992] kobject: 'loop1' (00000000a40dd890): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 190.793159] kobject: 'loop2' (0000000008dc3faa): kobject_uevent_env [ 190.806224] kobject: 'loop2' (0000000008dc3faa): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 190.853431] kobject: 'loop5' (00000000e2c0bb6f): kobject_uevent_env [ 190.859919] kobject: 'loop5' (00000000e2c0bb6f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 190.883828] kobject: 'loop4' (0000000014bef05c): kobject_uevent_env [ 190.890668] kobject: 'loop4' (0000000014bef05c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 190.901664] kobject: 'loop0' (0000000033bfdff8): kobject_uevent_env [ 190.908122] kobject: 'loop0' (0000000033bfdff8): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 190.973921] kobject: 'loop3' (000000009ea06b4d): kobject_uevent_env [ 190.980992] kobject: 'loop3' (000000009ea06b4d): fill_kobj_path: path = '/devices/virtual/block/loop3'