[....] Starting enhanced syslogd: rsyslogd[ 15.911381] audit: type=1400 audit(1517311298.958:5): avc: denied { syslog } for pid=4003 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.515302] audit: type=1400 audit(1517311302.562:6): avc: denied { map } for pid=4142 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 26.625051] audit: type=1400 audit(1517311309.671:7): avc: denied { map } for pid=4156 comm="syzkaller672655" path="/root/syzkaller672655438" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 27.015615] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program [ 27.367118] [ 27.368766] ====================================================== [ 27.375055] WARNING: possible circular locking dependency detected [ 27.381358] 4.15.0-rc9+ #216 Not tainted [ 27.385407] ------------------------------------------------------ [ 27.391696] syzkaller672655/4156 is trying to acquire lock: [ 27.397374] (rtnl_mutex){+.+.}, at: [<00000000a943eea3>] rtnl_lock+0x17/0x20 [ 27.404627] [ 27.404627] but task is already holding lock: [ 27.410573] (sk_lock-AF_INET){+.+.}, at: [<000000008dbf7044>] ip_setsockopt+0x8c/0xb0 [ 27.418604] [ 27.418604] which lock already depends on the new lock. [ 27.418604] [ 27.426891] [ 27.426891] the existing dependency chain (in reverse order) is: [ 27.434481] [ 27.434481] -> #1 (sk_lock-AF_INET){+.+.}: [ 27.440171] lock_sock_nested+0xc2/0x110 [ 27.444728] do_ip_getsockopt+0x1b3/0x2170 [ 27.449452] ip_getsockopt+0x90/0x220 [ 27.453741] tcp_getsockopt+0x82/0xd0 [ 27.458033] sock_common_getsockopt+0x95/0xd0 [ 27.463021] SyS_getsockopt+0x178/0x340 [ 27.467489] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 27.472735] [ 27.472735] -> #0 (rtnl_mutex){+.+.}: [ 27.477989] lock_acquire+0x1d5/0x580 [ 27.482290] __mutex_lock+0x16f/0x1a80 [ 27.486670] mutex_lock_nested+0x16/0x20 [ 27.491224] rtnl_lock+0x17/0x20 [ 27.495099] register_netdevice_notifier+0xad/0x860 [ 27.500634] tee_tg_check+0x1a0/0x280 [ 27.504929] xt_check_target+0x22c/0x7d0 [ 27.509481] find_check_entry.isra.8+0x8c8/0xcb0 [ 27.514726] translate_table+0xed1/0x1610 [ 27.519364] do_ipt_set_ctl+0x370/0x5f0 [ 27.523830] nf_setsockopt+0x67/0xc0 [ 27.528038] ip_setsockopt+0xa1/0xb0 [ 27.532248] raw_setsockopt+0xb7/0xd0 [ 27.536541] sock_common_setsockopt+0x95/0xd0 [ 27.541527] SyS_setsockopt+0x189/0x360 [ 27.545995] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 27.551240] [ 27.551240] other info that might help us debug this: [ 27.551240] [ 27.559348] Possible unsafe locking scenario: [ 27.559348] [ 27.565373] CPU0 CPU1 [ 27.570015] ---- ---- [ 27.574661] lock(sk_lock-AF_INET); [ 27.578343] lock(rtnl_mutex); [ 27.584114] lock(sk_lock-AF_INET); [ 27.590313] lock(rtnl_mutex); [ 27.593582] [ 27.593582] *** DEADLOCK *** [ 27.593582] [ 27.599796] 1 lock held by syzkaller672655/4156: [ 27.604516] #0: (sk_lock-AF_INET){+.+.}, at: [<000000008dbf7044>] ip_setsockopt+0x8c/0xb0 [ 27.612988] [ 27.612988] stack backtrace: [ 27.617464] CPU: 1 PID: 4156 Comm: syzkaller672655 Not tainted 4.15.0-rc9+ #216 [ 27.624878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.634205] Call Trace: [ 27.636768] dump_stack+0x194/0x257 [ 27.640362] ? arch_local_irq_restore+0x53/0x53 [ 27.645006] print_circular_bug.isra.37+0x2cd/0x2dc [ 27.649995] ? save_trace+0xe0/0x2b0 [ 27.653685] __lock_acquire+0x30a8/0x3e00 [ 27.657803] ? print_irqtrace_events+0x270/0x270 [ 27.662531] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 27.667690] ? check_noncircular+0x20/0x20 [ 27.671904] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 27.677071] ? __debug_object_init+0x235/0x1040 [ 27.681717] ? lock_downgrade+0x980/0x980 [ 27.685836] ? print_irqtrace_events+0x270/0x270 [ 27.690563] ? __lock_acquire+0x664/0x3e00 [ 27.694767] ? debug_object_activate+0x307/0x730 [ 27.699493] ? check_noncircular+0x20/0x20 [ 27.703697] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 27.708858] ? check_noncircular+0x20/0x20 [ 27.713068] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 27.718234] lock_acquire+0x1d5/0x580 [ 27.722005] ? lock_acquire+0x1d5/0x580 [ 27.725956] ? rtnl_lock+0x17/0x20 [ 27.729467] ? lock_release+0xa40/0xa40 [ 27.733411] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 27.739268] ? rcu_note_context_switch+0x710/0x710 [ 27.744167] ? __might_sleep+0x95/0x190 [ 27.748114] ? rtnl_lock+0x17/0x20 [ 27.751624] __mutex_lock+0x16f/0x1a80 [ 27.755489] ? rtnl_lock+0x17/0x20 [ 27.759007] ? rtnl_lock+0x17/0x20 [ 27.762528] ? rcu_read_lock_sched_held+0x108/0x120 [ 27.767516] ? __alloc_pages_nodemask+0xadb/0xd80 [ 27.772335] ? mutex_lock_io_nested+0x1900/0x1900 [ 27.777147] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 27.782131] ? is_bpf_text_address+0x7b/0x120 [ 27.786598] ? print_irqtrace_events+0x270/0x270 [ 27.791327] ? depot_save_stack+0x3b5/0x490 [ 27.795622] ? lock_downgrade+0x980/0x980 [ 27.799830] ? lock_release+0xa40/0xa40 [ 27.803777] ? mark_held_locks+0xaf/0x100 [ 27.807901] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 27.812978] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 27.817963] ? trace_hardirqs_on+0xd/0x10 [ 27.822083] ? depot_save_stack+0x3b5/0x490 [ 27.826378] ? save_stack+0xa3/0xd0 [ 27.829974] ? save_stack+0x43/0xd0 [ 27.833579] ? kasan_kmalloc+0xad/0xe0 [ 27.837438] ? kmem_cache_alloc_trace+0x136/0x750 [ 27.842248] ? tee_tg_check+0xed/0x280 [ 27.846118] ? xt_check_target+0x22c/0x7d0 [ 27.850345] ? find_check_entry.isra.8+0x8c8/0xcb0 [ 27.855243] ? translate_table+0xed1/0x1610 [ 27.859533] ? do_ipt_set_ctl+0x370/0x5f0 [ 27.863652] ? nf_setsockopt+0x67/0xc0 [ 27.867512] ? ip_setsockopt+0xa1/0xb0 [ 27.871387] ? raw_setsockopt+0xb7/0xd0 [ 27.875333] ? sock_common_setsockopt+0x95/0xd0 [ 27.879973] ? SyS_setsockopt+0x189/0x360 [ 27.884092] ? entry_SYSCALL_64_fastpath+0x29/0xa0 [ 27.888995] mutex_lock_nested+0x16/0x20 [ 27.893037] ? mutex_lock_nested+0x16/0x20 [ 27.897249] rtnl_lock+0x17/0x20 [ 27.900594] register_netdevice_notifier+0xad/0x860 [ 27.905589] ? __dev_close_many+0x350/0x350 [ 27.909887] ? __lock_is_held+0xb6/0x140 [ 27.913926] ? tee_tg_check+0xed/0x280 [ 27.917782] ? rcu_read_lock_sched_held+0x108/0x120 [ 27.922776] ? kmem_cache_alloc_trace+0x456/0x750 [ 27.927590] ? __kernel_text_address+0xd/0x40 [ 27.932055] ? wait_for_completion+0x770/0x770 [ 27.936614] tee_tg_check+0x1a0/0x280 [ 27.940383] ? tee_tg4+0x170/0x170 [ 27.943898] xt_check_target+0x22c/0x7d0 [ 27.947930] ? xt_target_seq_next+0x30/0x30 [ 27.952222] ? save_stack+0xa3/0xd0 [ 27.955826] ? kasan_slab_free+0x71/0xc0 [ 27.959856] ? kfree+0xd6/0x260 [ 27.963103] ? kvfree+0x36/0x60 [ 27.966354] ? mutex_unlock+0xd/0x10 [ 27.970038] ? xt_find_target+0x17b/0x1e0 [ 27.974165] find_check_entry.isra.8+0x8c8/0xcb0 [ 27.978893] ? ipt_do_table+0x1860/0x1860 [ 27.983020] ? mark_held_locks+0xaf/0x100 [ 27.987144] ? kfree+0xf0/0x260 [ 27.990403] ? trace_hardirqs_on+0xd/0x10 [ 27.994522] translate_table+0xed1/0x1610 [ 27.998646] ? alloc_counters.isra.11+0x7d0/0x7d0 [ 28.003552] ? kasan_check_write+0x14/0x20 [ 28.007756] ? _copy_from_user+0x99/0x110 [ 28.011968] do_ipt_set_ctl+0x370/0x5f0 [ 28.015915] ? translate_compat_table+0x1b90/0x1b90 [ 28.020910] ? mutex_unlock+0xd/0x10 [ 28.024597] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 28.029853] nf_setsockopt+0x67/0xc0 [ 28.033558] ip_setsockopt+0xa1/0xb0 [ 28.037254] raw_setsockopt+0xb7/0xd0 [ 28.041030] sock_common_setsockopt+0x95/0xd0 [ 28.045506] SyS_setsockopt+0x189/0x360 [ 28.049450] ? SyS_recv+0x40/0x40 [ 28.052873] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 28.057687] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.062691] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 28.067425] entry_SYSCALL_64_