[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 25.443944] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.677962] random: sshd: uninitialized urandom read (32 bytes read) [ 29.087878] random: sshd: uninitialized urandom read (32 bytes read) [ 29.747188] random: sshd: uninitialized urandom read (32 bytes read) [ 82.881631] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. [ 88.619261] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/23 16:11:04 parsed 1 programs [ 89.791415] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/23 16:11:06 executed programs: 0 [ 91.181482] IPVS: ftp: loaded support on port[0] = 21 [ 91.191710] IPVS: ftp: loaded support on port[0] = 21 [ 91.194517] IPVS: ftp: loaded support on port[0] = 21 [ 91.203236] IPVS: ftp: loaded support on port[0] = 21 [ 91.209463] IPVS: ftp: loaded support on port[0] = 21 [ 91.227385] IPVS: ftp: loaded support on port[0] = 21 [ 92.103898] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.114542] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.122291] device bridge_slave_0 entered promiscuous mode [ 92.130871] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.137741] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.144805] device bridge_slave_0 entered promiscuous mode [ 92.152358] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.159733] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.167148] device bridge_slave_0 entered promiscuous mode [ 92.179879] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.188972] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.196430] device bridge_slave_0 entered promiscuous mode [ 92.204244] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.211133] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.218405] device bridge_slave_1 entered promiscuous mode [ 92.226328] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.232674] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.240104] device bridge_slave_1 entered promiscuous mode [ 92.246962] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.253325] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.262729] device bridge_slave_0 entered promiscuous mode [ 92.274184] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.281195] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.288677] device bridge_slave_1 entered promiscuous mode [ 92.296443] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.302800] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.309933] device bridge_slave_1 entered promiscuous mode [ 92.318106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.326553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.336949] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.343292] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.351777] device bridge_slave_1 entered promiscuous mode [ 92.359671] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.368426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.379323] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.389379] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.400208] device bridge_slave_0 entered promiscuous mode [ 92.407872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.416243] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.424681] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.436455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.443919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.475081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.492511] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.501197] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.509144] device bridge_slave_1 entered promiscuous mode [ 92.548622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 92.579497] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.598602] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.620851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 92.629868] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.643270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.660636] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.675657] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.686529] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.697132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.732421] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.772292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.794969] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.838018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.850923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.863439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.895873] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 92.903100] team0: Port device team_slave_0 added [ 92.918586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 92.928954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.938206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 92.945379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.968721] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 92.978178] team0: Port device team_slave_1 added [ 92.983715] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 92.992514] team0: Port device team_slave_0 added [ 92.999740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 93.009625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.020048] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.027812] team0: Port device team_slave_0 added [ 93.033752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.043861] team0: Port device team_slave_0 added [ 93.050706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 93.069288] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.084253] team0: Port device team_slave_1 added [ 93.094394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.107062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.116770] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.123869] team0: Port device team_slave_1 added [ 93.131062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 93.154154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.176371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.183861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.191973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.199455] team0: Port device team_slave_1 added [ 93.206255] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.213820] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.221607] team0: Port device team_slave_0 added [ 93.228757] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 93.240188] team0: Port device team_slave_0 added [ 93.248292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.262766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.272273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.280703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.288817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.297439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.309717] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.321185] team0: Port device team_slave_1 added [ 93.333905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.344821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.374405] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 93.396995] team0: Port device team_slave_1 added [ 93.402366] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.413885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.426027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.434099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.448568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.459878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.476680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.495611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.506314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.521182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.531122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.538626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.552727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.563942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.585727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.593584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.607973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.616046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.623446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.631475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.646417] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.657048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.671564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.686237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.694080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.708838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.716939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.736090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 93.747996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.769301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.787424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.796256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.805095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.823314] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 93.841042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.857869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.273137] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.279692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.286740] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.293124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.301760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.461808] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.468272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.474991] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.481472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.497531] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.511375] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.517827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.524503] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.530941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.555117] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.570123] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.576569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.583228] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.589645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.602194] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.690893] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.697350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.704032] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.710474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.721703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.789322] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.795772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.802472] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.808943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.824293] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 94.847852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.855520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.873032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.896640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.903697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.911018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.301112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.379351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.460652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.480275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.526728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.570378] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.700226] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.716146] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.729798] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.803071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.835623] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.841894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.850132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.873505] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 97.973311] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 97.987636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.996394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.017379] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.026537] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.035033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.046111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.065665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.073121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.091694] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 98.153444] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.171444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.184476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.245010] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.324709] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 98.335684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.347729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.360517] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.369156] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.383001] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.472390] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.606434] 8021q: adding VLAN 0 to HW filter on device team0 2018/09/23 16:11:16 executed programs: 6 2018/09/23 16:11:21 executed programs: 40 2018/09/23 16:11:26 executed programs: 72 2018/09/23 16:11:31 executed programs: 106 [ 120.096171] [ 120.097823] ====================================================== [ 120.104117] WARNING: possible circular locking dependency detected [ 120.110426] 4.19.0-rc4+ #250 Not tainted [ 120.114486] ------------------------------------------------------ [ 120.120817] syz-executor3/7889 is trying to acquire lock: [ 120.126139] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 120.126367] 000000008a75b959 (&p->lock){+.+.}, at: seq_read+0x71/0x1150 [ 120.132809] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 120.133242] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 120.140046] [ 120.140046] but task is already holding lock: [ 120.140051] 00000000b9bb3a3d (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 120.140082] [ 120.140082] which lock already depends on the new lock. [ 120.140082] [ 120.140085] [ 120.140085] the existing dependency chain (in reverse order) is: [ 120.140089] [ 120.140089] -> #2 (&pipe->mutex/1){+.+.}: [ 120.140116] __mutex_lock+0x166/0x1700 [ 120.140132] mutex_lock_nested+0x16/0x20 [ 120.154525] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 120.155992] fifo_open+0x15c/0xad0 [ 120.156006] do_dentry_open+0x499/0x1250 [ 120.156018] vfs_open+0xa0/0xd0 [ 120.156042] path_openat+0x12bf/0x5160 [ 120.156056] do_filp_open+0x255/0x380 [ 120.156068] do_open_execat+0x221/0x8e0 [ 120.156081] __do_execve_file.isra.33+0x173f/0x2540 [ 120.156093] __x64_sys_execve+0x8f/0xc0 [ 120.156107] do_syscall_64+0x1b9/0x820 [ 120.156122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 120.156127] [ 120.156127] -> #1 (&sig->cred_guard_mutex){+.+.}: [ 120.156151] __mutex_lock+0x166/0x1700 [ 120.156162] mutex_lock_killable_nested+0x16/0x20 [ 120.156173] lock_trace+0x4c/0xe0 [ 120.156183] proc_pid_personality+0x1c/0xd0 [ 120.156193] proc_single_show+0x101/0x190 [ 120.156204] traverse+0x344/0x7b0 [ 120.156215] seq_read+0xc76/0x1150 [ 120.156228] do_iter_read+0x4a3/0x650 [ 120.156239] vfs_readv+0x175/0x1c0 [ 120.156252] default_file_splice_read+0x53c/0xb20 [ 120.156274] do_splice_to+0x12e/0x190 [ 120.310583] splice_direct_to_actor+0x270/0x8f0 [ 120.315771] do_splice_direct+0x2d4/0x420 [ 120.320432] do_sendfile+0x62a/0xe20 [ 120.324652] __x64_sys_sendfile64+0x15d/0x250 [ 120.329657] do_syscall_64+0x1b9/0x820 [ 120.334061] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 120.339752] [ 120.339752] -> #0 (&p->lock){+.+.}: [ 120.344859] lock_acquire+0x1ed/0x520 [ 120.349175] __mutex_lock+0x166/0x1700 [ 120.353589] mutex_lock_nested+0x16/0x20 [ 120.358178] seq_read+0x71/0x1150 [ 120.362171] do_iter_read+0x4a3/0x650 [ 120.366478] vfs_readv+0x175/0x1c0 [ 120.370528] default_file_splice_read+0x53c/0xb20 [ 120.375876] do_splice_to+0x12e/0x190 [ 120.380200] do_splice+0x1014/0x1430 [ 120.384422] __x64_sys_splice+0x2c1/0x330 [ 120.389082] do_syscall_64+0x1b9/0x820 [ 120.393484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 120.399178] [ 120.399178] other info that might help us debug this: [ 120.399178] [ 120.407310] Chain exists of: [ 120.407310] &p->lock --> &sig->cred_guard_mutex --> &pipe->mutex/1 [ 120.407310] [ 120.418160] Possible unsafe locking scenario: [ 120.418160] [ 120.424203] CPU0 CPU1 [ 120.428852] ---- ---- [ 120.433508] lock(&pipe->mutex/1); [ 120.437137] lock(&sig->cred_guard_mutex); [ 120.443965] lock(&pipe->mutex/1); [ 120.450321] lock(&p->lock); [ 120.453407] [ 120.453407] *** DEADLOCK *** [ 120.453407] [ 120.459462] 1 lock held by syz-executor3/7889: [ 120.464044] #0: 00000000b9bb3a3d (&pipe->mutex/1){+.+.}, at: pipe_lock+0x6e/0x80 [ 120.471672] [ 120.471672] stack backtrace: [ 120.476160] CPU: 1 PID: 7889 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #250 [ 120.483411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 120.492756] Call Trace: [ 120.495339] dump_stack+0x1c4/0x2b4 [ 120.498950] ? dump_stack_print_info.cold.2+0x52/0x52 [ 120.504124] ? vprintk_func+0x85/0x181 [ 120.508010] print_circular_bug.isra.33.cold.54+0x1bd/0x27d [ 120.513714] ? save_trace+0xe0/0x290 [ 120.517414] __lock_acquire+0x33e4/0x4ec0 [ 120.521547] ? mark_held_locks+0x130/0x130 [ 120.525772] ? mark_held_locks+0x130/0x130 [ 120.530002] ? __lock_acquire+0x7ec/0x4ec0 [ 120.534235] ? select_task_rq_fair+0x34f0/0x34f0 [ 120.538977] ? __enqueue_entity+0x10d/0x1f0 [ 120.543289] ? mark_held_locks+0x130/0x130 [ 120.547646] ? print_usage_bug+0xc0/0xc0 [ 120.551705] ? pick_next_task_fair+0x98e/0x17c0 [ 120.556362] ? __lock_acquire+0x7ec/0x4ec0 [ 120.560587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.566108] ? check_preemption_disabled+0x48/0x200 [ 120.571113] ? find_held_lock+0x36/0x1c0 [ 120.575170] ? graph_lock+0x170/0x170 [ 120.578971] ? mark_held_locks+0xc7/0x130 [ 120.583106] ? _raw_spin_unlock_irq+0x27/0x80 [ 120.587586] ? _raw_spin_unlock_irq+0x27/0x80 [ 120.592071] ? lockdep_hardirqs_on+0x421/0x5c0 [ 120.596658] lock_acquire+0x1ed/0x520 [ 120.600466] ? seq_read+0x71/0x1150 [ 120.604111] ? lock_release+0x970/0x970 [ 120.608093] ? arch_local_save_flags+0x40/0x40 [ 120.612675] ? finish_task_switch+0x1f5/0x900 [ 120.617185] ? seq_read+0x71/0x1150 [ 120.620809] __mutex_lock+0x166/0x1700 [ 120.624682] ? seq_read+0x71/0x1150 [ 120.628303] ? lock_downgrade+0x900/0x900 [ 120.632470] ? check_preemption_disabled+0x48/0x200 [ 120.637474] ? seq_read+0x71/0x1150 [ 120.641098] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 120.646915] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 120.652211] ? mutex_trylock+0x2b0/0x2b0 [ 120.656283] ? rcu_bh_qs+0xc0/0xc0 [ 120.659818] ? aa_file_perm+0x490/0x1060 [ 120.663874] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 120.668628] ? lockdep_hardirqs_on+0x421/0x5c0 [ 120.673220] ? aa_path_link+0x5e0/0x5e0 [ 120.677203] ? trace_hardirqs_off+0x310/0x310 [ 120.681712] ? retint_kernel+0x1b/0x2d [ 120.685600] ? trace_hardirqs_on+0x310/0x310 [ 120.690017] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 120.694770] ? retint_kernel+0x2d/0x2d [ 120.698679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.704210] ? fsnotify+0xaef/0x1330 [ 120.707945] ? rw_verify_area+0xf6/0x360 [ 120.712004] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 120.716947] ? common_file_perm+0x236/0x7f0 [ 120.721256] ? fsnotify_first_mark+0x350/0x350 [ 120.725824] mutex_lock_nested+0x16/0x20 [ 120.729884] ? _copy_from_user+0xdf/0x150 [ 120.734055] ? mutex_lock_nested+0x16/0x20 [ 120.738277] seq_read+0x71/0x1150 [ 120.741742] ? rw_verify_area+0x118/0x360 [ 120.745890] do_iter_read+0x4a3/0x650 [ 120.749695] vfs_readv+0x175/0x1c0 [ 120.753242] ? compat_rw_copy_check_uvector+0x440/0x440 [ 120.758600] ? aa_file_perm+0x469/0x1060 [ 120.762657] ? lock_downgrade+0x900/0x900 [ 120.766832] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 120.772628] ? kasan_check_read+0x11/0x20 [ 120.776761] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 120.781780] ? iov_iter_pipe+0xbf/0x2f0 [ 120.785773] default_file_splice_read+0x53c/0xb20 [ 120.790632] ? iter_file_splice_write+0x1050/0x1050 [ 120.795652] ? aa_path_link+0x5e0/0x5e0 [ 120.799623] ? __fget+0x4aa/0x740 [ 120.803075] ? lock_downgrade+0x900/0x900 [ 120.807210] ? check_preemption_disabled+0x48/0x200 [ 120.812215] ? rcu_bh_qs+0xc0/0xc0 [ 120.815744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 120.821267] ? fsnotify+0xaef/0x1330 [ 120.824971] ? common_file_perm+0x236/0x7f0 [ 120.829285] ? fsnotify_first_mark+0x350/0x350 [ 120.833860] ? fsnotify+0x1330/0x1330 [ 120.837666] ? security_file_permission+0x1c2/0x230 [ 120.842682] ? iter_file_splice_write+0x1050/0x1050 [ 120.847698] do_splice_to+0x12e/0x190 [ 120.851514] do_splice+0x1014/0x1430 [ 120.855226] ? finish_task_switch+0x1f5/0x900 [ 120.859708] ? opipe_prep.part.13+0x3b0/0x3b0 [ 120.864193] __x64_sys_splice+0x2c1/0x330 [ 120.868333] do_syscall_64+0x1b9/0x820 [ 120.872207] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 120.877556] ? syscall_return_slowpath+0x5e0/0x5e0 [ 120.882471] ? trace_hardirqs_on_caller+0x310/0x310 [ 120.887471] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 120.892470] ? recalc_sigpending_tsk+0x180/0x180 [ 120.897218] ? kasan_check_write+0x14/0x20 [ 120.901444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 120.906284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 120.911460] RIP: 0033:0x457679 [ 120.914638] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 120.933526] RSP: 002b:00007fd264be0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 120.941221] RAX: ffffffffffffffda RBX: 00007fd264be16d4 RCX: 0000000000457679 [ 120.948491] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 120.955749] RBP: 000000000072c2c0 R08: 0000000000000200 R09: 0000000000000000 [ 120.963039] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 120.970310] R13: 00000000004d77e8 R14: 00000000004c4f5d R15: 0000000000000006 [ 121.019781] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 121.026495] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 121.056018] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 121.065306] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 121.075365] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 121.081815] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 121.095213] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 121.102223] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 121.112761] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 121.123884] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 121.140117] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 121.148104] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' 2018/09/23 16:11:37 executed programs: 134 [ 121.958661] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 121.969495] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 121.983673] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 122.006107] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 122.016511] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 122.022939] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 122.032932] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 122.039562] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 122.051229] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 122.062660] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 122.117903] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 122.124558] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 122.907689] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 122.914263] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 122.934899] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 122.949244] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 122.959530] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 122.968478] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 122.979154] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 122.986077] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 123.000218] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 123.007310] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 123.047693] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 123.054879] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 123.847720] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 123.854425] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 123.877618] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 123.887412] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 123.907003] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 123.919579] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 123.930682] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 123.937411] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 123.953281] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 123.959899] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 123.989913] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 123.996643] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 124.797919] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 124.805573] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 124.840607] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 124.848060] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 124.867946] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 124.874402] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 124.884845] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 124.891827] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 124.902518] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 124.909005] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 124.939367] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 124.947885] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 125.738849] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 125.745658] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 125.778548] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 125.785120] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 125.803144] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 125.817961] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 125.828530] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 125.834977] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 125.845313] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 125.851780] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 125.908388] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 125.915691] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 126.709465] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 126.716379] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 126.738755] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 126.746139] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 126.768699] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 126.776684] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 126.788649] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 126.795084] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 126.804989] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 126.811781] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 126.868394] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 126.875480] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' 2018/09/23 16:11:42 executed programs: 170 [ 127.668219] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 127.674723] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 127.689573] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 127.696585] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 127.720977] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 127.731696] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 127.747962] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 127.754395] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 127.764600] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 127.771209] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 127.828330] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 127.835382] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 128.618265] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 128.627968] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 128.649240] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 128.661884] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 128.679070] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 128.690258] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 128.702859] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 128.709692] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 128.719923] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 128.726782] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 128.768408] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 128.775066] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 129.559118] kobject: 'loop1' (000000009d8b2c78): kobject_uevent_env [ 129.569596] kobject: 'loop1' (000000009d8b2c78): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 129.592356] kobject: 'loop5' (00000000b421e2ff): kobject_uevent_env [ 129.603806] kobject: 'loop5' (00000000b421e2ff): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 129.613900] kobject: 'loop2' (00000000a64ffe72): kobject_uevent_env [ 129.621978] kobject: 'loop2' (00000000a64ffe72): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 129.637759] kobject: 'loop3' (000000005eb2a9f0): kobject_uevent_env [ 129.644772] kobject: 'loop3' (000000005eb2a9f0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 129.655090] kobject: 'loop4' (0000000090b7eef9): kobject_uevent_env [ 129.662496] kobject: 'loop4' (0000000090b7eef9): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 129.707424] kobject: 'loop0' (00000000b19dfb84): kobject_uevent_env [ 129.714048] kobject: 'loop0' (00000000b19dfb84): fill_kobj_path: path = '/devices/virtual/block/loop0'