serialport: Connected to syzkaller.us-central1-c.ci-upstream-kasan-gce-4 port 1 (session ID: 94206b4e1d271a84654e7b01fe90a16cf32136b5b6de2442a50ac1f8cbc3c631, active connections: 1). INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-4,10.128.0.4' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 executing program syzkaller login: [ 39.937839] [ 39.938238] ================================ [ 39.938848] WARNING: inconsistent lock state [ 39.939434] 4.13.0-rc4+ #24 Not tainted [ 39.939963] -------------------------------- [ 39.940653] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 39.941462] syzkaller514697/2916 [HC0[0]:SC0[0]:HE1:SE1] takes: [ 39.942269] (slock-AF_INET){+.?...}, at: [] sk_clone_lock+0x438/0x11e0 [ 39.943504] {IN-SOFTIRQ-W} state was registered at: [ 39.944237] __lock_acquire+0xcbb/0x3dc0 [ 39.944810] lock_acquire+0x1d5/0x580 [ 39.945359] _raw_spin_lock+0x2a/0x40 [ 39.945905] sk_clone_lock+0x438/0x11e0 [ 39.946447] inet_csk_clone_lock+0x92/0x4f0 [ 39.947081] tcp_create_openreq_child+0x7e/0x1d70 [ 39.947808] tcp_v4_syn_recv_sock+0x113/0x1150 [ 39.948426] tcp_check_req+0xe7f/0x1620 [ 39.948985] tcp_v4_rcv+0x168e/0x2df0 [ 39.949526] ip_local_deliver_finish+0x2e2/0xba0 [ 39.950178] ip_local_deliver+0x1ce/0x6d0 [ 39.950741] ip_rcv_finish+0x8db/0x19c0 [ 39.951452] ip_rcv+0xc3f/0x17d0 [ 39.951917] __netif_receive_skb_core+0x1b05/0x3230 [ 39.952705] __netif_receive_skb+0x2c/0x1b0 [ 39.953307] netif_receive_skb_internal+0x16a/0x1a50 [ 39.954020] napi_gro_receive+0x3d0/0x500 [ 39.954586] receive_buf+0xaef/0x5720 [ 39.955103] virtnet_poll+0x50b/0xab0 [ 39.955621] net_rx_action+0x792/0x1910 [ 39.956164] __do_softirq+0x2f5/0xba3 [ 39.956682] irq_exit+0x1cc/0x200 [ 39.957156] do_IRQ+0xf6/0x190 [ 39.957597] ret_from_intr+0x0/0x1e [ 39.958739] native_safe_halt+0x6/0x10 [ 39.962676] default_idle+0xbf/0x460 [ 39.966440] arch_cpu_idle+0xa/0x10 [ 39.970116] default_idle_call+0x36/0x90 [ 39.974228] do_idle+0x256/0x3b0 [ 39.977661] cpu_startup_entry+0x18/0x20 [ 39.981775] start_secondary+0x277/0x310 [ 39.985890] verify_cpu+0x0/0xf1 [ 39.989326] irq event stamp: 10686 [ 39.992832] hardirqs last enabled at (10684): [] kmem_cache_free+0xd7/0x240 [ 40.001545] hardirqs last disabled at (10685): [] __local_bh_enable_ip+0x5c/0x160 [ 40.010694] softirqs last enabled at (10686): [] tun_rx_batched.isra.42+0x5bd/0x860 [ 40.020190] softirqs last disabled at (10636): [] tun_rx_batched.isra.42+0x5bd/0x860 [ 40.029611] [ 40.029611] other info that might help us debug this: [ 40.036243] Possible unsafe locking scenario: [ 40.036243] [ 40.042264] CPU0 [ 40.044819] ---- [ 40.047363] lock(slock-AF_INET); [ 40.050867] [ 40.053586] lock(slock-AF_INET); [ 40.057264] [ 40.057264] *** DEADLOCK *** [ 40.057264] [ 40.063288] 1 lock held by syzkaller514697/2916: [ 40.068004] #0: (slock-AF_INET){+.?...}, at: [] sk_clone_lock+0x438/0x11e0 [ 40.076730] [ 40.076730] stack backtrace: [ 40.081193] CPU: 1 PID: 2916 Comm: syzkaller514697 Not tainted 4.13.0-rc4+ #24 [ 40.088524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.097842] Call Trace: [ 40.100402] dump_stack+0x194/0x257 [ 40.103994] ? arch_local_irq_restore+0x53/0x53 [ 40.108634] print_usage_bug+0x421/0x480 [ 40.112662] ? save_stack_trace+0x16/0x20 [ 40.116775] ? print_irqtrace_events+0x270/0x270 [ 40.121503] ? hlock_class+0x140/0x140 [ 40.125370] mark_lock+0xe59/0x13d0 [ 40.128972] ? check_usage_forwards+0x430/0x430 [ 40.133604] ? print_usage_bug+0x480/0x480 [ 40.137803] ? find_held_lock+0x35/0x1d0 [ 40.141827] ? find_held_lock+0x35/0x1d0 [ 40.145859] ? rcu_pm_notify+0xc0/0xc0 [ 40.149719] ? netif_receive_skb+0xae/0x390 [ 40.154007] mark_held_locks+0xaf/0x100 [ 40.157949] ? __local_bh_enable_ip+0x9d/0x160 [ 40.162495] trace_hardirqs_on_caller+0x421/0x5c0 [ 40.167309] ? tun_rx_batched.isra.42+0x5bd/0x860 [ 40.172116] trace_hardirqs_on+0xd/0x10 [ 40.176058] __local_bh_enable_ip+0x9d/0x160 [ 40.180434] tun_rx_batched.isra.42+0x5fd/0x860 [ 40.185069] ? skb_get_hash_perturb+0x9d0/0x9d0 [ 40.189713] ? tun_sock_write_space+0x370/0x370 [ 40.194346] ? tun_free_netdev+0x1b0/0x1b0 [ 40.198548] ? check_noncircular+0x20/0x20 [ 40.202745] tun_get_user+0xde5/0x2910 [ 40.206609] ? tun_chr_ioctl+0x40/0x40 [ 40.210460] ? find_held_lock+0x35/0x1d0 [ 40.214489] ? release_sock+0x1d4/0x2a0 [ 40.218429] ? lock_downgrade+0x990/0x990 [ 40.222540] ? lock_downgrade+0x990/0x990 [ 40.226651] ? do_raw_spin_trylock+0x190/0x190 [ 40.231197] ? find_held_lock+0x35/0x1d0 [ 40.235224] ? __tun_get+0x1ab/0x2e0 [ 40.238908] ? lock_downgrade+0x990/0x990 [ 40.243029] ? _raw_spin_unlock_bh+0x30/0x40 [ 40.247403] ? lock_release+0xa40/0xa40 [ 40.251341] ? __lock_is_held+0xb6/0x140 [ 40.255368] ? __tun_get+0x1d4/0x2e0 [ 40.259045] ? tun_chr_close+0x60/0x60 [ 40.262898] tun_chr_write_iter+0xd8/0x190 [ 40.267099] __vfs_write+0x684/0x970 [ 40.270777] ? default_llseek+0x290/0x290 [ 40.274893] ? avc_policy_seqno+0x9/0x20 [ 40.278919] ? selinux_file_permission+0x82/0x460 [ 40.283726] ? rw_verify_area+0xe5/0x2b0 [ 40.287750] ? __fdget_raw+0x20/0x20 [ 40.291428] vfs_write+0x189/0x510 [ 40.294932] SyS_write+0xef/0x220 [ 40.298348] ? SyS_read+0x220/0x220 [ 40.301936] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 40.306919] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 40.311642] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 40.316458] RIP: 0033:0x4016f0 [ 40.319611] RSP: 002b:00007fff96394358 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.327285] RAX: ffffffffffffffda RBX: 00000000006d6ee0 RCX: 00000000004016f0 [ 40.334523] RDX: 0000000000000036 RSI: 0000000020004000 RDI: 0000000000000003 [ 40.341760] RBP: 0000000000000086 R08: 0000000000000013 R09: 0000000000000052 [ 40.349016] R10: 0000000020016ff0 R11: 0000000000000246 R12: 00000000004025e0 [ 40.356250] R13: 0000000000402670 R14: 0000000000000000 R15: 0000000000000000 [ 40.363583] BUG: scheduling while atomic: syzkaller514697/2916/0x00000002 [ 40.370492] INFO: lockdep is turned off. [ 40.374534] Modules linked in: [ 40.377705] Kernel panic - not syncing: scheduling while atomic [ 40.377705] [ 40.385206] CPU: 1 PID: 2916 Comm: syzkaller514697 Not tainted 4.13.0-rc4+ #24 [ 40.392526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.401843] Call Trace: [ 40.404401] dump_stack+0x194/0x257 [ 40.407993] ? arch_local_irq_restore+0x53/0x53 [ 40.412637] ? print_modules+0x18c/0x2f7 [ 40.416668] panic+0x1e4/0x417 [ 40.419826] ? __warn+0x1d9/0x1d9 [ 40.423246] ? lock_downgrade+0x990/0x990 [ 40.427361] __schedule_bug+0x11f/0x130 [ 40.431329] __schedule+0x1315/0x2070 [ 40.435099] ? __sched_text_start+0x8/0x8 [ 40.439213] ? lock_downgrade+0x990/0x990 [ 40.443325] ? _raw_spin_unlock_bh+0x30/0x40 [ 40.447700] ? lock_release+0xa40/0xa40 [ 40.451641] ? __lock_is_held+0xb6/0x140 [ 40.455672] ? __tun_get+0x1d4/0x2e0 [ 40.459348] ? tun_chr_close+0x60/0x60 [ 40.463203] schedule+0x108/0x440 [ 40.466637] ? tun_chr_write_iter+0x133/0x190 [ 40.471096] ? __schedule+0x2070/0x2070 [ 40.475036] ? __vfs_write+0xf7/0x970 [ 40.478803] ? default_llseek+0x290/0x290 [ 40.482920] ? __fsnotify_parent+0xb4/0x3a0 [ 40.487209] exit_to_usermode_loop+0x250/0x2d0 [ 40.491756] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 40.497257] ? rw_verify_area+0xe5/0x2b0 [ 40.501283] ? __fdget_raw+0x20/0x20 [ 40.504962] syscall_return_slowpath+0x3a7/0x450 [ 40.509684] ? prepare_exit_to_usermode+0x220/0x220 [ 40.514663] ? SyS_write+0x184/0x220 [ 40.518342] ? SyS_read+0x220/0x220 [ 40.521935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 40.526658] entry_SYSCALL_64_fastpath+0xbc/0xbe [ 40.531375] RIP: 0033:0x4016f0 [ 40.534528] RSP: 002b:00007fff96394358 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.542199] RAX: 0000000000000036 RBX: 00000000006d6ee0 RCX: 00000000004016f0 [ 40.549434] RDX: 0000000000000036 RSI: 0000000020004000 RDI: 0000000000000003 [ 40.556668] RBP: ffffffffffffffff R08: 0000000000000013 R09: 0000000000000052 [ 40.563917] R10: 0000000020016ff0 R11: 0000000000000246 R12: 00000000004025e0 [ 40.571157] R13: 0000000000402670 R14: 0000000000000000 R15: 0000000000000000 [ 40.578446] Dumping ftrace buffer: [ 40.581954] (ftrace buffer empty) [ 40.585632] Kernel Offset: disabled [ 40.589226] Rebooting in 86400 seconds..