Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.279168] audit: type=1800 audit(1578287134.561:33): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.967249] kauditd_printk_skb: 1 callbacks suppressed [ 45.967264] audit: type=1400 audit(1578287139.251:35): avc: denied { map } for pid=7837 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. executing program [ 52.691729] audit: type=1400 audit(1578287145.971:36): avc: denied { map } for pid=7849 comm="syz-executor099" path="/root/syz-executor099390593" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 52.696205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor099'. [ 52.738200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor099'. [ 52.812399] [ 52.814057] ============================================ [ 52.819586] WARNING: possible recursive locking detected [ 52.825034] 4.19.93-syzkaller #0 Not tainted [ 52.829434] -------------------------------------------- [ 52.834878] syz-executor099/7849 is trying to acquire lock: [ 52.840583] 0000000069183552 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 52.847443] [ 52.847443] but task is already holding lock: [ 52.853409] 0000000069183552 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 52.861128] [ 52.861128] other info that might help us debug this: [ 52.867793] Possible unsafe locking scenario: [ 52.867793] [ 52.873845] CPU0 [ 52.876532] ---- [ 52.879103] lock(rtnl_mutex); [ 52.882376] lock(rtnl_mutex); [ 52.885647] [ 52.885647] *** DEADLOCK *** [ 52.885647] [ 52.891820] May be due to missing lock nesting notation [ 52.891820] [ 52.898741] 1 lock held by syz-executor099/7849: [ 52.903477] #0: 0000000069183552 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 52.911634] [ 52.911634] stack backtrace: [ 52.916140] CPU: 1 PID: 7849 Comm: syz-executor099 Not tainted 4.19.93-syzkaller #0 [ 52.923929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.933277] Call Trace: [ 52.935868] dump_stack+0x197/0x210 [ 52.939506] __lock_acquire.cold+0x20f/0x4a7 [ 52.943922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 52.949461] ? number+0x957/0xc70 [ 52.952924] ? mark_held_locks+0x100/0x100 [ 52.957164] ? enable_ptr_key_workfn+0x30/0x30 [ 52.961749] ? find_held_lock+0x35/0x130 [ 52.965819] ? __lock_is_held+0xb6/0x140 [ 52.969884] ? rtnl_lock+0x17/0x20 [ 52.973432] lock_acquire+0x16f/0x3f0 [ 52.977239] ? rtnl_lock+0x17/0x20 [ 52.980788] ? rtnl_lock+0x17/0x20 [ 52.984333] __mutex_lock+0xf7/0x1300 [ 52.988143] ? rtnl_lock+0x17/0x20 [ 52.991691] ? trace_hardirqs_on+0x67/0x220 [ 52.996023] ? rtnl_lock+0x17/0x20 [ 52.999583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.005131] ? full_name_hash+0xc0/0x100 [ 53.009197] ? mutex_trylock+0x1e0/0x1e0 [ 53.013261] ? memcpy+0x46/0x50 [ 53.016543] ? dev_alloc_name_ns+0x3ad/0x470 [ 53.020958] ? __dev_get_by_name+0x160/0x160 [ 53.025374] ? hsr_dev_close+0x10/0x10 [ 53.029296] mutex_lock_nested+0x16/0x20 [ 53.033359] ? mutex_lock_nested+0x16/0x20 [ 53.040724] rtnl_lock+0x17/0x20 [ 53.044094] hsr_dev_destroy+0x1f/0xc0 [ 53.047983] ? hsr_dev_close+0x10/0x10 [ 53.051878] register_netdevice+0xc3c/0xff0 [ 53.056204] ? netdev_change_features+0xb0/0xb0 [ 53.060879] ? hsr_get_max_mtu+0x1db/0x2b0 [ 53.065123] ? hsr_add_port+0x4c7/0x6b0 [ 53.069110] hsr_dev_finalize+0x4fc/0x780 [ 53.073266] hsr_newlink+0x26b/0x380 [ 53.076985] ? hsr_dev_finalize+0x780/0x780 [ 53.081326] ? rtnl_create_link+0x148/0xa00 [ 53.085651] ? netlink_ns_capable+0x26/0x30 [ 53.089979] ? hsr_dev_finalize+0x780/0x780 [ 53.094308] rtnl_newlink+0x1042/0x1600 [ 53.098293] ? rtnl_link_unregister+0x250/0x250 [ 53.102969] ? find_held_lock+0x35/0x130 [ 53.107039] ? is_bpf_text_address+0xac/0x170 [ 53.111539] ? __lock_acquire+0x6ee/0x49c0 [ 53.115780] ? __lock_acquire+0x6ee/0x49c0 [ 53.120019] ? mark_held_locks+0x100/0x100 [ 53.124258] ? mark_held_locks+0x100/0x100 [ 53.128493] ? __lock_acquire+0x6ee/0x49c0 [ 53.132733] ? avc_has_perm_noaudit+0x38f/0x570 [ 53.137405] ? __lock_acquire+0x6ee/0x49c0 [ 53.141648] ? mark_held_locks+0x100/0x100 [ 53.145884] ? avc_has_perm_noaudit+0x3b6/0x570 [ 53.150556] ? avc_has_extended_perms+0x10f0/0x10f0 [ 53.155583] ? avc_has_extended_perms+0x10f0/0x10f0 [ 53.160621] ? find_held_lock+0x35/0x130 [ 53.164683] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 53.169099] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 53.174641] ? rtnl_link_unregister+0x250/0x250 [ 53.179314] rtnetlink_rcv_msg+0x463/0xb00 [ 53.183557] ? rtnetlink_put_metrics+0x560/0x560 [ 53.188330] ? netlink_deliver_tap+0x22d/0xc20 [ 53.192917] ? find_held_lock+0x35/0x130 [ 53.196984] netlink_rcv_skb+0x17d/0x460 [ 53.201052] ? rtnetlink_put_metrics+0x560/0x560 [ 53.205811] ? netlink_ack+0xb30/0xb30 [ 53.209699] ? kasan_check_read+0x11/0x20 [ 53.213835] ? netlink_deliver_tap+0x254/0xc20 [ 53.218465] rtnetlink_rcv+0x1d/0x30 [ 53.222160] netlink_unicast+0x53a/0x730 [ 53.226202] ? netlink_attachskb+0x770/0x770 [ 53.230595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.236149] netlink_sendmsg+0x8ae/0xd70 [ 53.240194] ? netlink_unicast+0x730/0x730 [ 53.244417] ? selinux_socket_sendmsg+0x36/0x40 [ 53.249085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.254608] ? security_socket_sendmsg+0x8d/0xc0 [ 53.259349] ? netlink_unicast+0x730/0x730 [ 53.263569] sock_sendmsg+0xd7/0x130 [ 53.267268] ___sys_sendmsg+0x803/0x920 [ 53.271228] ? copy_msghdr_from_user+0x430/0x430 [ 53.276005] ? __might_fault+0x12b/0x1e0 [ 53.280088] ? __might_fault+0x12b/0x1e0 [ 53.284136] ? lock_downgrade+0x880/0x880 [ 53.288269] ? kasan_check_read+0x11/0x20 [ 53.292400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 53.297917] ? __fget_light+0x1a9/0x230 [ 53.301885] ? __fdget+0x1b/0x20 [ 53.305239] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 53.310812] __sys_sendmsg+0x105/0x1d0 [ 53.314693] ? __ia32_sys_shutdown+0x80/0x80 [ 53.319089] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 53.323842] ? do_syscall_64+0x26/0x620 [ 53.327812] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.333166] ? do_syscall_64+0x26/0x620 [ 53.337123] __x64_sys_sendmsg+0x78/0xb0 [ 53.341179] do_syscall_64+0xfd/0x620 [ 53.344964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.350269] RIP: 0033:0x4408e9 [ 53.353450] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 53.372338] RSP: 002b:00007ffdf80b35d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.380031] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004408e9 [ 53.387334] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 53.394592] RBP: 00000000006cb018 R08: 0000000000000002 R09: 00000000004002c8 [ 53.401848] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000402170 [ 53.409115] R13: 0000000000402200 R14: 0000000000000000 R15: 0000000000000000