[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.471764] audit: type=1400 audit(1517441062.967:6): avc: denied { map } for pid=4082 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 syzkaller login: [ 23.772632] audit: type=1400 audit(1517441069.268:7): avc: denied { map } for pid=4096 comm="syzkaller222997" path="/root/syzkaller222997156" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 24.158318] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program [ 24.495933] [ 24.497606] ====================================================== [ 24.503905] WARNING: possible circular locking dependency detected [ 24.510213] 4.15.0-rc9+ #218 Not tainted [ 24.514252] ------------------------------------------------------ [ 24.520541] syzkaller222997/4096 is trying to acquire lock: [ 24.526219] (rtnl_mutex){+.+.}, at: [<000000006020e13a>] rtnl_lock+0x17/0x20 [ 24.534260] [ 24.534260] but task is already holding lock: [ 24.540203] (sk_lock-AF_INET){+.+.}, at: [<0000000097d3397c>] ip_setsockopt+0x8c/0xb0 [ 24.548240] [ 24.548240] which lock already depends on the new lock. [ 24.548240] [ 24.556523] [ 24.556523] the existing dependency chain (in reverse order) is: [ 24.564111] [ 24.564111] -> #1 (sk_lock-AF_INET){+.+.}: [ 24.569806] lock_sock_nested+0xc2/0x110 [ 24.574363] do_ip_getsockopt+0x1b3/0x2170 [ 24.579090] ip_getsockopt+0x90/0x220 [ 24.583379] tcp_getsockopt+0x82/0xd0 [ 24.587686] sock_common_getsockopt+0x95/0xd0 [ 24.592686] SyS_getsockopt+0x178/0x340 [ 24.597157] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 24.602416] [ 24.602416] -> #0 (rtnl_mutex){+.+.}: [ 24.607684] lock_acquire+0x1d5/0x580 [ 24.611977] __mutex_lock+0x16f/0x1a80 [ 24.616361] mutex_lock_nested+0x16/0x20 [ 24.621448] rtnl_lock+0x17/0x20 [ 24.625308] register_netdevice_notifier+0xad/0x860 [ 24.630816] tee_tg_check+0x1a0/0x280 [ 24.635118] xt_check_target+0x22c/0x7d0 [ 24.639670] find_check_entry.isra.8+0x8c8/0xcb0 [ 24.644916] translate_table+0xed1/0x1610 [ 24.649561] do_ipt_set_ctl+0x370/0x5f0 [ 24.654034] nf_setsockopt+0x67/0xc0 [ 24.658241] ip_setsockopt+0xa1/0xb0 [ 24.662458] sctp_setsockopt+0x2b6/0x61d0 [ 24.667109] sock_common_setsockopt+0x95/0xd0 [ 24.672094] SyS_setsockopt+0x189/0x360 [ 24.676561] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 24.681814] [ 24.681814] other info that might help us debug this: [ 24.681814] [ 24.689925] Possible unsafe locking scenario: [ 24.689925] [ 24.695952] CPU0 CPU1 [ 24.700598] ---- ---- [ 24.705233] lock(sk_lock-AF_INET); [ 24.708918] lock(rtnl_mutex); [ 24.714683] lock(sk_lock-AF_INET); [ 24.720895] lock(rtnl_mutex); [ 24.724144] [ 24.724144] *** DEADLOCK *** [ 24.724144] [ 24.730172] 1 lock held by syzkaller222997/4096: [ 24.734894] #0: (sk_lock-AF_INET){+.+.}, at: [<0000000097d3397c>] ip_setsockopt+0x8c/0xb0 [ 24.743366] [ 24.743366] stack backtrace: [ 24.747834] CPU: 1 PID: 4096 Comm: syzkaller222997 Not tainted 4.15.0-rc9+ #218 [ 24.755249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.764573] Call Trace: [ 24.767134] dump_stack+0x194/0x257 [ 24.771319] ? arch_local_irq_restore+0x53/0x53 [ 24.775964] print_circular_bug.isra.37+0x2cd/0x2dc [ 24.780952] ? save_trace+0xe0/0x2b0 [ 24.784650] __lock_acquire+0x30a8/0x3e00 [ 24.788768] ? print_irqtrace_events+0x270/0x270 [ 24.793496] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.798665] ? print_irqtrace_events+0x270/0x270 [ 24.803402] ? __lock_acquire+0x664/0x3e00 [ 24.807608] ? rcutorture_record_progress+0x10/0x10 [ 24.812597] ? print_irqtrace_events+0x270/0x270 [ 24.817334] ? __lock_acquire+0x664/0x3e00 [ 24.821557] ? add_lock_to_list.isra.28+0x24d/0x352 [ 24.826547] ? check_noncircular+0x20/0x20 [ 24.830754] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.835921] ? __lock_acquire+0x664/0x3e00 [ 24.840126] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 24.845288] lock_acquire+0x1d5/0x580 [ 24.849058] ? lock_acquire+0x1d5/0x580 [ 24.853018] ? rtnl_lock+0x17/0x20 [ 24.856537] ? lock_release+0xa40/0xa40 [ 24.860484] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 24.866354] ? rcu_note_context_switch+0x710/0x710 [ 24.871258] ? find_held_lock+0x35/0x1d0 [ 24.875294] ? __might_sleep+0x95/0x190 [ 24.879251] ? rtnl_lock+0x17/0x20 [ 24.882764] __mutex_lock+0x16f/0x1a80 [ 24.886621] ? rtnl_lock+0x17/0x20 [ 24.890138] ? check_noncircular+0x20/0x20 [ 24.894350] ? lock_downgrade+0x980/0x980 [ 24.898473] ? rtnl_lock+0x17/0x20 [ 24.901986] ? find_held_lock+0x35/0x1d0 [ 24.906027] ? mutex_lock_io_nested+0x1900/0x1900 [ 24.910850] ? is_bpf_text_address+0x7b/0x120 [ 24.915331] ? print_irqtrace_events+0x270/0x270 [ 24.920083] ? depot_save_stack+0x3b5/0x490 [ 24.924376] ? lock_downgrade+0x980/0x980 [ 24.928494] ? lock_release+0xa40/0xa40 [ 24.932448] ? mark_held_locks+0xaf/0x100 [ 24.936579] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 24.941662] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.946648] ? trace_hardirqs_on+0xd/0x10 [ 24.950768] ? depot_save_stack+0x3b5/0x490 [ 24.955061] ? save_stack+0xa3/0xd0 [ 24.958656] ? save_stack+0x43/0xd0 [ 24.962250] ? kasan_kmalloc+0xad/0xe0 [ 24.966107] ? kmem_cache_alloc_trace+0x136/0x750 [ 24.970920] ? tee_tg_check+0xed/0x280 [ 24.974778] ? xt_check_target+0x22c/0x7d0 [ 24.978984] ? find_check_entry.isra.8+0x8c8/0xcb0 [ 24.983882] ? translate_table+0xed1/0x1610 [ 24.988174] ? do_ipt_set_ctl+0x370/0x5f0 [ 24.992292] ? nf_setsockopt+0x67/0xc0 [ 24.996149] ? ip_setsockopt+0xa1/0xb0 [ 25.000008] ? sctp_setsockopt+0x2b6/0x61d0 [ 25.004306] ? sock_common_setsockopt+0x95/0xd0 [ 25.008955] ? SyS_setsockopt+0x189/0x360 [ 25.013074] ? entry_SYSCALL_64_fastpath+0x29/0xa0 [ 25.017972] mutex_lock_nested+0x16/0x20 [ 25.022005] ? print_irqtrace_events+0x270/0x270 [ 25.026735] ? mutex_lock_nested+0x16/0x20 [ 25.030941] rtnl_lock+0x17/0x20 [ 25.034280] register_netdevice_notifier+0xad/0x860 [ 25.039267] ? __dev_close_many+0x350/0x350 [ 25.043559] ? __lock_is_held+0xb6/0x140 [ 25.047591] ? tee_tg_check+0xed/0x280 [ 25.051449] ? rcu_read_lock_sched_held+0x108/0x120 [ 25.056436] ? kmem_cache_alloc_trace+0x456/0x750 [ 25.061251] ? __kernel_text_address+0xd/0x40 [ 25.065716] ? wait_for_completion+0x770/0x770 [ 25.070270] tee_tg_check+0x1a0/0x280 [ 25.074043] ? tee_tg4+0x170/0x170 [ 25.077554] xt_check_target+0x22c/0x7d0 [ 25.081589] ? xt_target_seq_next+0x30/0x30 [ 25.085882] ? save_stack+0xa3/0xd0 [ 25.089489] ? kasan_slab_free+0x71/0xc0 [ 25.093530] ? kfree+0xd6/0x260 [ 25.096780] ? kvfree+0x36/0x60 [ 25.100036] ? translate_table+0xdd2/0x1610 [ 25.104338] ? mutex_unlock+0xd/0x10 [ 25.108027] ? xt_find_target+0x17b/0x1e0 [ 25.112153] find_check_entry.isra.8+0x8c8/0xcb0 [ 25.116881] ? ipt_do_table+0x1860/0x1860 [ 25.121004] ? mark_held_locks+0xaf/0x100 [ 25.125131] ? kfree+0xf0/0x260 [ 25.128384] ? trace_hardirqs_on+0xd/0x10 [ 25.132506] translate_table+0xed1/0x1610 [ 25.136630] ? alloc_counters.isra.11+0x7d0/0x7d0 [ 25.141446] ? kasan_check_write+0x14/0x20 [ 25.145654] ? _copy_from_user+0x99/0x110 [ 25.149770] do_ipt_set_ctl+0x370/0x5f0 [ 25.153714] ? translate_compat_table+0x1b90/0x1b90 [ 25.158704] ? mutex_unlock+0xd/0x10 [ 25.162389] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 25.167638] nf_setsockopt+0x67/0xc0 [ 25.171325] ip_setsockopt+0xa1/0xb0 [ 25.175028] sctp_setsockopt+0x2b6/0x61d0 [ 25.179150] ? sctp_setsockopt_paddr_thresholds+0x550/0x550 [ 25.184836] ? __thp_get_unmapped_area+0x130/0x130 [ 25.189738] ? __lock_acquire+0x664/0x3e00 [ 25.193957] ? __lock_acquire+0x664/0x3e00 [ 25.198168] ? is_bpf_text_address+0xa4/0x120 [ 25.202639] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.207810] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.212984] ? check_noncircular+0x20/0x20 [ 25.217204] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.222366] ? save_stack+0xa3/0xd0 [ 25.225964] ? save_stack+0x43/0xd0 [ 25.229563] ? kasan_kmalloc+0xad/0xe0 [ 25.233420] ? kasan_slab_alloc+0x12/0x20 [ 25.237538] ? kmem_cache_alloc+0x12e/0x760 [ 25.241831] ? selinux_file_alloc_security+0xae/0x190 [ 25.247001] ? security_file_alloc+0x6d/0xa0 [ 25.251385] ? get_empty_filp+0x189/0x4f0 [ 25.255499] ? alloc_file+0x26/0x390 [ 25.259185] ? sock_alloc_file+0x1f3/0x560 [ 25.263390] ? sock_map_fd+0x34/0x90 [ 25.267072] ? SyS_socket+0x125/0x1d0 [ 25.270857] ? entry_SYSCALL_64_fastpath+0x29/0xa0 [ 25.275756] ? kasan_slab_alloc+0x12/0x20 [ 25.279881] ? kmem_cache_alloc+0x12e/0x760 [ 25.284176] ? get_empty_filp+0xfb/0x4f0 [ 25.288207] ? alloc_file+0x26/0x390 [ 25.291901] ? sock_alloc_file+0x1f3/0x560 [ 25.296108] ? find_held_lock+0x35/0x1d0 [ 25.300140] ? avc_has_perm+0x35e/0x680 [ 25.304089] ? lock_downgrade+0x980/0x980 [ 25.308215] ? lock_release+0xa40/0xa40 [ 25.312168] ? check_noncircular+0x20/0x20 [ 25.316373] ? __pmd_alloc+0x4e0/0x4e0 [ 25.320230] ? __lockdep_init_map+0xe4/0x650 [ 25.324606] ? find_held_lock+0x35/0x1d0 [ 25.328646] ? avc_has_perm+0x43e/0x680 [ 25.332595] ? avc_has_perm_noaudit+0x520/0x520 [ 25.337239] ? __do_page_fault+0x5f7/0xc90 [ 25.341446] ? lock_downgrade+0x980/0x980 [ 25.345570] ? handle_mm_fault+0x410/0x8d0 [ 25.349779] ? down_read_trylock+0xdb/0x170 [ 25.354073] ? __do_page_fault+0x32d/0xc90 [ 25.358281] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 25.362833] ? vmacache_find+0x5f/0x280 [ 25.366779] ? sock_has_perm+0x2a4/0x420 [ 25.370812] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 25.376146] ? __do_page_fault+0x3d6/0xc90 [ 25.380363] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 25.386047] ? selinux_netlbl_sock_rcv_skb+0x730/0x730 [ 25.391300] sock_common_setsockopt+0x95/0xd0 [ 25.395767] SyS_setsockopt+0x189/0x360 [ 25.399712] ? SyS_recv+0x40/0x40 [ 25.403137] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 25.407954] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.412943] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.417669] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 25.422404] RIP: 0033:0x445be9 [ 25.425563] RSP: 002b:00007fffa8271af8 EFLAGS: 00000203 ORIG_RAX: 0000000000000036 [ 25.433243] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000445be9 [ 25.440483] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 25.447734] RBP: 00007fff