====================================================== EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16566 devpts: called with bogus options devpts: called with bogus options [ INFO: possible circular locking dependency detected ] binder: 7371:7375 transaction failed 29201/-28, size 0-0 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 7371:7383 ioctl 40046207 0 returned -16 binder_alloc: 7371: binder_alloc_buf, no vma binder: 7371:7383 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 7385:7386 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder: 7387:7388 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder: 7389:7390 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 7391: binder_alloc_buf, no vma binder: 7391:7392 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7393:7394 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7395:7396 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7397:7398 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 4.9.113-g47bbcd6 #10 Not tainted ------------------------------------------------------- syz-executor0/7373 is trying to acquire lock: (rtnl_mutex){+.+.+.}, at: [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 but task is already holding lock: (sk_lock-AF_INET){+.+.+.}, at: [] lock_sock include/net/sock.h:1404 [inline] (sk_lock-AF_INET){+.+.+.}, at: [] do_ip_setsockopt.isra.13+0x269/0x2b10 net/ipv4/ip_sockglue.c:636 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 lock_sock_nested+0xc6/0x120 net/core/sock.c:2511 lock_sock include/net/sock.h:1404 [inline] do_ip_setsockopt.isra.13+0x12a/0x2b10 net/ipv4/ip_sockglue.c:636 ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1240 tcp_setsockopt+0x88/0xe0 net/ipv4/tcp.c:2758 sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 SYSC_setsockopt net/socket.c:1772 [inline] SyS_setsockopt+0x166/0x260 net/socket.c:1751 do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 entry_SYSCALL_64_after_swapgs+0x5d/0xdb check_prev_add kernel/locking/lockdep.c:1828 [inline] check_prevs_add kernel/locking/lockdep.c:1938 [inline] validate_chain kernel/locking/lockdep.c:2265 [inline] __lock_acquire+0x3019/0x4070 kernel/locking/lockdep.c:3345 lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 __mutex_lock_common kernel/locking/mutex.c:521 [inline] mutex_lock_nested+0xc0/0x870 kernel/locking/mutex.c:621 rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 mrtsock_destruct+0x3b/0x1e0 net/ipv4/ipmr.c:1231 ip_ra_control+0x2c2/0x420 net/ipv4/ip_sockglue.c:360 do_ip_setsockopt.isra.13+0x15ff/0x2b10 net/ipv4/ip_sockglue.c:1137 ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1240 raw_setsockopt+0xb7/0xd0 net/ipv4/raw.c:833 sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 SYSC_setsockopt net/socket.c:1772 [inline] SyS_setsockopt+0x166/0x260 net/socket.c:1751 do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 entry_SYSCALL_64_after_swapgs+0x5d/0xdb other info that might help us debug this: Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(sk_lock-AF_INET); lock(rtnl_mutex); lock(sk_lock-AF_INET); lock(rtnl_mutex); *** DEADLOCK *** 1 lock held by syz-executor0/7373: #0: (sk_lock-AF_INET){+.+.+.}, at: [] lock_sock include/net/sock.h:1404 [inline] #0: (sk_lock-AF_INET){+.+.+.}, at: [] do_ip_setsockopt.isra.13+0x269/0x2b10 net/ipv4/ip_sockglue.c:636 stack backtrace: CPU: 1 PID: 7373 Comm: syz-executor0 Not tainted 4.9.113-g47bbcd6 #10 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 ffff88019ebdf5f8 ffffffff81eb32a9 ffffffff8559d0a0 ffffffff855e7d10 ffffffff8559d0a0 ffff88019f2b68e8 ffff88019f2b6000 ffff88019ebdf640 ffffffff81426404 0000000000000001 000000009f2b6000 0000000000000001 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] print_circular_bug.cold.51+0x1bd/0x27d kernel/locking/lockdep.c:1202 [] check_prev_add kernel/locking/lockdep.c:1828 [inline] [] check_prevs_add kernel/locking/lockdep.c:1938 [inline] [] validate_chain kernel/locking/lockdep.c:2265 [inline] [] __lock_acquire+0x3019/0x4070 kernel/locking/lockdep.c:3345 [] lock_acquire+0x130/0x3e0 kernel/locking/lockdep.c:3756 [] __mutex_lock_common kernel/locking/mutex.c:521 [inline] [] mutex_lock_nested+0xc0/0x870 kernel/locking/mutex.c:621 [] rtnl_lock+0x17/0x20 net/core/rtnetlink.c:70 [] mrtsock_destruct+0x3b/0x1e0 net/ipv4/ipmr.c:1231 [] ip_ra_control+0x2c2/0x420 net/ipv4/ip_sockglue.c:360 [] do_ip_setsockopt.isra.13+0x15ff/0x2b10 net/ipv4/ip_sockglue.c:1137 [] ip_setsockopt+0x3a/0xb0 net/ipv4/ip_sockglue.c:1240 [] raw_setsockopt+0xb7/0xd0 net/ipv4/raw.c:833 [] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2706 [] SYSC_setsockopt net/socket.c:1772 [inline] [] SyS_setsockopt+0x166/0x260 net/socket.c:1751 [] do_syscall_64+0x1a6/0x490 arch/x86/entry/common.c:282 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb binder: 7405:7412 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 EXT4-fs warning: 1 callbacks suppressed EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16544 binder: 7433:7437 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 devpts: called with bogus options devpts: called with bogus options binder: 7446:7448 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 devpts: called with bogus options devpts: called with bogus options devpts: called with bogus options devpts: called with bogus options binder: 7465:7469 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7488:7491 transaction failed 29189/-22, size 0-0 line 3013 EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16566 binder: undelivered TRANSACTION_ERROR: 29189 devpts: called with bogus options devpts: called with bogus options binder: 7497:7500 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 devpts: called with bogus options binder: 7536:7544 unknown command 536870976 binder: 7536:7544 ioctl c0306201 20000180 returned -22 EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16538 devpts: called with bogus options EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16551 devpts: called with bogus options EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16547 binder: 7602:7611 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: 7599:7608 ioctl 40046207 0 returned -16 binder: 7599:7608 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 devpts: called with bogus options binder: 7600:7610 unknown command 536870976 binder: 7600:7610 ioctl c0306201 20000180 returned -22 binder: 7614:7623 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: 7618:7624 ioctl 40046207 0 returned -16 binder: 7618:7624 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: 7617:7625 ioctl 40046207 0 returned -16 binder: 7617:7625 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 7626: binder_alloc_buf, no vma binder: 7626:7630 transaction failed 29189/-3, size 7138486884358946816-16456 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7635:7641 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 binder: 7646:7651 transaction failed 29201/-28, size 0-0 line 3136 binder: BINDER_SET_CONTEXT_MGR already set binder: 7649:7659 ioctl 40046207 0 returned -16 binder: 7649:7659 unknown command 536870976 binder: 7649:7659 ioctl c0306201 20000180 returned -22 binder: BINDER_SET_CONTEXT_MGR already set binder: 7647:7660 ioctl 40046207 0 returned -16 binder: 7647:7660 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16563 binder: BINDER_SET_CONTEXT_MGR already set binder: 7653:7667 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 7674:7677 ioctl 40046207 0 returned -16 EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16529 binder: BINDER_SET_CONTEXT_MGR already set binder: 7670:7675 ioctl 40046207 0 returned -16 binder: 7670:7675 unknown command 0 binder: 7670:7675 ioctl c0306201 20000180 returned -22 binder: release 7670:7675 transaction 40 out, still active binder: undelivered TRANSACTION_COMPLETE binder: BINDER_SET_CONTEXT_MGR already set binder: 7689:7696 ioctl 40046207 0 returned -16 binder: 7689:7696 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16519 binder: undelivered TRANSACTION_ERROR: 29201 binder: send failed reply for transaction 40, target dead binder: 7710:7712 transaction failed 29189/-22, size 0-0 line 3013 EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16526 binder_alloc: 7703: binder_alloc_buf, no vma binder: 7703:7717 transaction failed 29189/-3, size 1078485777-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7715:7724 transaction failed 29201/-28, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29201 EXT4-fs warning (device sda1): ext4_block_to_path:106: block 3624535200 > max in inode 16540 binder: BINDER_SET_CONTEXT_MGR already set binder: 7735:7745 ioctl 40046207 0 returned -16 binder_alloc: 7737: binder_alloc_buf, no vma binder: 7735:7745 transaction failed 29189/-3, size 1078485777-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 7769: binder_alloc_buf, no vma binder: BINDER_SET_CONTEXT_MGR already set binder: 7783:7789 ioctl 40046207 0 returned -16 binder_alloc: 7769: binder_alloc_buf, no vma binder: 7802:7805 transaction failed 29189/-3, size 0-0 line 3136 binder: 7769:7786 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 7821: binder_alloc_buf, no vma binder: 7821:7824 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7840:7848 unknown command 4219665 binder: 7840:7848 ioctl c0306201 20000180 returned -22 binder_alloc: 7846: binder_alloc_buf, no vma binder: 7846:7850 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 7867: binder_alloc_buf, no vma binder: BINDER_SET_CONTEXT_MGR already set binder: 7859:7874 ioctl 40046207 0 returned -16 binder: 7859:7874 got transaction to invalid handle binder: 7859:7874 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: 7870:7872 ioctl 40046207 0 returned -16 binder: BINDER_SET_CONTEXT_MGR already set binder: 7885:7889 ioctl 40046207 0 returned -16 binder: 7885:7889 got transaction to invalid handle binder: 7885:7889 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: BINDER_SET_CONTEXT_MGR already set binder: 7893:7896 ioctl 40046207 0 returned -16 binder: 7893:7896 got transaction to invalid handle binder: 7893:7896 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: 7867:7871 transaction failed 29189/-3, size 0-0 line 3136 binder_alloc: 7867: binder_alloc_buf, no vma binder: 7870:7872 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 7911:7916 ioctl 40046207 0 returned -16 binder_alloc: 7867: binder_alloc_buf, no vma binder: 7911:7916 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 7906:7915 ioctl 40046207 0 returned -16 binder: 7906:7915 got transaction to invalid handle binder: 7906:7915 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: BINDER_SET_CONTEXT_MGR already set binder: 7927:7931 ioctl 40046207 0 returned -16 binder: 7927:7931 transaction failed 29189/-22, size 0-0 line 3013 binder: 7926:7938 ioctl 40046207 0 returned -16 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7966:7971 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 binder: 7926:7938 got transaction to invalid handle binder: 7926:7938 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: 7986:7991 transaction failed 29189/-22, size 0-0 line 3013 binder: 7984:7989 got transaction to invalid handle binder: 7984:7989 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder_alloc: 8005: binder_alloc_buf, no vma binder: 8005:8016 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder_alloc: 8026: binder_alloc_buf, no vma binder: 8026:8033 transaction failed 29189/-3, size -1948312624093961985--438815126531816715 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29189 binder: 8043:8052 got transaction to invalid handle binder: BINDER_SET_CONTEXT_MGR already set binder: 8050:8056 ioctl 40046207 0 returned -16 binder_alloc: 8043: binder_alloc_buf, no vma binder: 8050:8056 transaction failed 29189/-3, size -438815126531816715-8113379701840671150 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: BINDER_SET_CONTEXT_MGR already set binder: 8066:8068 ioctl 40046207 0 returned -16 binder_alloc: 8043: binder_alloc_buf, no vma binder: 8066:8068 transaction failed 29189/-3, size 0-0 line 3136 binder: 8079:8080 unknown command 536870976 binder: 8079:8080 ioctl c0306201 20000180 returned -22 binder: 8043:8052 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 binder: undelivered TRANSACTION_ERROR: 29201 binder: 8104:8112 unknown command 536870976 binder_alloc: 8102: binder_alloc_buf, no vma binder: 8102:8111 transaction failed 29189/-3, size 0-0 line 3136 binder: undelivered TRANSACTION_ERROR: 29189 binder: 8104:8112 ioctl c0306201 20000180 returned -22 binder: 8182:8189 got transaction to invalid handle binder: 8182:8189 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: 8224:8236 unknown command 536870976 binder: 8224:8236 ioctl c0306201 20000180 returned -22 binder: 8274:8277 got transaction to invalid handle binder: 8274:8277 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: 8324:8332 unknown command 16401 binder: 8324:8332 ioctl c0306201 20000180 returned -22 binder: 8373:8380 got transaction to invalid handle binder: 8373:8380 transaction failed 29201/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: 8413:8419 unknown command 4219665 binder: 8413:8419 ioctl c0306201 20000180 returned -22 binder: 8459:8472 unknown command 4743953 binder: 8459:8472 ioctl c0306201 20000180 returned -22 binder: 8505:8516 got transaction to invalid handle binder: 8505:8516 transaction failed 29201/-22, size -602074137835014605--2724655845815490301 line 3013 binder: undelivered TRANSACTION_ERROR: 29201 binder: 8557:8569 unknown command 1279812369 binder: 8557:8569 ioctl c0306201 20000180 returned -22 binder: 8604:8615 unknown command 4743953 binder: 8604:8615 ioctl c0306201 20000180 returned -22 binder: 8624:8633 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 binder: 8644:8647 unknown command 1279812369 binder: 8644:8647 ioctl c0306201 20000180 returned -22 binder: 8688:8692 unknown command 1279812369 binder: 8688:8692 ioctl c0306201 20000180 returned -22 binder: 8737:8744 unknown command 1279812369 binder: 8737:8744 ioctl c0306201 20000180 returned -22 binder: 8765:8768 unknown command 1279812369 binder: 8765:8768 ioctl c0306201 20000180 returned -22 binder: 8810:8811 unknown command 1279812369 binder: 8810:8811 ioctl c0306201 20000180 returned -22 binder: 8848:8850 unknown command 1279812369 binder: 8848:8850 ioctl c0306201 20000180 returned -22 binder: 8914:8920 transaction failed 29189/-22, size 0-0 line 3013 binder: undelivered TRANSACTION_ERROR: 29189 9pnet: Insufficient options for proto=fd 9pnet: Insufficient options for proto=fd 9pnet: Insufficient options for proto=fd 9pnet: Insufficient options for proto=fd 9pnet: Insufficient options for proto=fd 9pnet: Insufficient options for proto=fd IPVS: Creating netns size=2536 id=9 IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready