Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. 2018/12/11 20:16:54 parsed 1 programs 2018/12/11 20:16:57 executed programs: 0 [ 195.615874] audit: type=1400 audit(1544559422.463:5): avc: denied { associate } for pid=2122 comm="syz-executor5" name="syz5" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2018/12/11 20:17:02 executed programs: 6 2018/12/11 20:17:07 executed programs: 462 2018/12/11 20:17:12 executed programs: 916 2018/12/11 20:17:17 executed programs: 1357 [ 214.442920] [ 214.444592] ====================================================== [ 214.450894] [ INFO: possible circular locking dependency detected ] [ 214.457301] 4.9.144+ #79 Not tainted [ 214.460990] ------------------------------------------------------- [ 214.467368] syz-executor4/9747 is trying to acquire lock: [ 214.472877] (&p->lock){+.+.+.}, at: [<ffffffff8158108d>] seq_read+0xdd/0x12d0 [ 214.480589] but task is already holding lock: [ 214.485230] (&pipe->mutex/1){+.+.+.}, at: [<ffffffff81523e9e>] pipe_lock+0x5e/0x70 [ 214.493506] which lock already depends on the new lock. [ 214.493506] [ 214.500508] [ 214.500508] the existing dependency chain (in reverse order) is: [ 214.508115] -> #2 (&pipe->mutex/1){+.+.+.}: [ 214.513288] lock_acquire+0x130/0x3e0 [ 214.517605] mutex_lock_nested+0xc0/0x900 [ 214.522271] fifo_open+0x15c/0x9e0 [ 214.526324] do_dentry_open+0x3ef/0xc90 [ 214.530809] vfs_open+0x11c/0x210 [ 214.534761] path_openat+0x661/0x2d90 [ 214.539058] do_filp_open+0x197/0x270 [ 214.543354] do_open_execat+0x10f/0x640 [ 214.547832] do_execveat_common.isra.14+0x687/0x1ed0 [ 214.553439] SyS_execve+0x42/0x50 [ 214.557405] do_syscall_64+0x19f/0x550 [ 214.561803] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 214.567402] -> #1 (&sig->cred_guard_mutex){+.+.+.}: [ 214.573137] lock_acquire+0x130/0x3e0 [ 214.577456] mutex_lock_killable_nested+0xcc/0x9f0 [ 214.582898] do_io_accounting+0x1fb/0x7e0 [ 214.587547] proc_tgid_io_accounting+0x22/0x30 [ 214.592629] proc_single_show+0xfd/0x170 [ 214.597190] traverse+0x363/0x920 [ 214.601144] seq_read+0xd1b/0x12d0 [ 214.605184] do_loop_readv_writev.part.1+0xd5/0x280 [ 214.610720] do_readv_writev+0x56e/0x7b0 [ 214.615300] vfs_readv+0x84/0xc0 [ 214.619174] do_preadv+0x197/0x240 [ 214.623214] SyS_preadv+0x30/0x40 [ 214.627173] do_syscall_64+0x19f/0x550 [ 214.631561] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 214.637173] -> #0 (&p->lock){+.+.+.}: [ 214.641632] __lock_acquire+0x3189/0x4a10 [ 214.646278] lock_acquire+0x130/0x3e0 [ 214.650579] mutex_lock_nested+0xc0/0x900 [ 214.655311] seq_read+0xdd/0x12d0 [ 214.659264] proc_reg_read+0xfd/0x180 [ 214.663560] do_loop_readv_writev.part.1+0xd5/0x280 [ 214.669073] do_readv_writev+0x56e/0x7b0 [ 214.673639] vfs_readv+0x84/0xc0 [ 214.677511] default_file_splice_read+0x451/0x7f0 [ 214.682856] do_splice_to+0x10c/0x170 [ 214.687160] SyS_splice+0x10d2/0x14d0 [ 214.691459] do_syscall_64+0x19f/0x550 [ 214.695856] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 214.701453] [ 214.701453] other info that might help us debug this: [ 214.701453] [ 214.709572] Chain exists of: &p->lock --> &sig->cred_guard_mutex --> &pipe->mutex/1 [ 214.718659] Possible unsafe locking scenario: [ 214.718659] [ 214.724697] CPU0 CPU1 [ 214.729346] ---- ---- [ 214.733992] lock(&pipe->mutex/1); [ 214.737976] lock(&sig->cred_guard_mutex); [ 214.745029] lock(&pipe->mutex/1); [ 214.751511] lock(&p->lock); [ 214.754849] [ 214.754849] *** DEADLOCK *** [ 214.754849] [ 214.760884] 1 lock held by syz-executor4/9747: [ 214.765437] #0: (&pipe->mutex/1){+.+.+.}, at: [<ffffffff81523e9e>] pipe_lock+0x5e/0x70 [ 214.774378] [ 214.774378] stack backtrace: [ 214.778852] CPU: 1 PID: 9747 Comm: syz-executor4 Not tainted 4.9.144+ #79 [ 214.785753] ffff8801ca34f278 ffffffff81b43b89 ffffffff83ca4fd0 ffffffff83cac290 [ 214.793750] ffffffff83ca6fe0 ffff8801cbba08d0 ffff8801cbba0000 ffff8801ca34f2c0 [ 214.801775] ffffffff813ff290 0000000000000001 00000000cbba08b0 0000000000000001 [ 214.809785] Call Trace: [ 214.812355] [<ffffffff81b43b89>] dump_stack+0xc1/0x128 [ 214.817711] [<ffffffff813ff290>] print_circular_bug.cold.36+0x2f7/0x432 [ 214.824531] [<ffffffff8120a699>] __lock_acquire+0x3189/0x4a10 [ 214.830515] [<ffffffff810ac9dd>] ? unwind_next_frame+0x7d/0xd0 [ 214.836551] [<ffffffff81207510>] ? trace_hardirqs_on+0x10/0x10 [ 214.842588] [<ffffffff812040e9>] ? add_lock_to_list.isra.9.constprop.25+0x149/0x280 [ 214.850495] [<ffffffff8120ca30>] lock_acquire+0x130/0x3e0 [ 214.856113] [<ffffffff8158108d>] ? seq_read+0xdd/0x12d0 [ 214.861545] [<ffffffff8158108d>] ? seq_read+0xdd/0x12d0 [ 214.866975] [<ffffffff8280c6b0>] mutex_lock_nested+0xc0/0x900 [ 214.872941] [<ffffffff8158108d>] ? seq_read+0xdd/0x12d0 [ 214.878377] [<ffffffff8280c5f0>] ? mutex_trylock+0x3e0/0x3e0 [ 214.884263] [<ffffffff81206f07>] ? mark_held_locks+0xc7/0x130 [ 214.890219] [<ffffffff814267a3>] ? get_page_from_freelist+0xda3/0x1d80 [ 214.896953] [<ffffffff814f2315>] ? kasan_unpoison_shadow+0x35/0x50 [ 214.903335] [<ffffffff8158108d>] seq_read+0xdd/0x12d0 [ 214.908589] [<ffffffff815e1a04>] ? fsnotify+0x114/0x1100 [ 214.914111] [<ffffffff81580fb0>] ? seq_lseek+0x3c0/0x3c0 [ 214.919636] [<ffffffff815e18f0>] ? __fsnotify_inode_delete+0x30/0x30 [ 214.926195] [<ffffffff8165c89d>] proc_reg_read+0xfd/0x180 [ 214.931799] [<ffffffff81580fb0>] ? seq_lseek+0x3c0/0x3c0 [ 214.937322] [<ffffffff8150a075>] do_loop_readv_writev.part.1+0xd5/0x280 [ 214.944141] [<ffffffff8150b71e>] do_readv_writev+0x56e/0x7b0 [ 214.950006] [<ffffffff8150b1b0>] ? vfs_write+0x520/0x520 [ 214.955521] [<ffffffff814f2315>] ? kasan_unpoison_shadow+0x35/0x50 [ 214.961907] [<ffffffff81b817f2>] ? push_pipe+0x3e2/0x770 [ 214.967424] [<ffffffff81b88f5e>] ? iov_iter_get_pages_alloc+0x2be/0xee0 [ 214.974244] [<ffffffff8150b9e4>] vfs_readv+0x84/0xc0 [ 214.979415] [<ffffffff815acb21>] default_file_splice_read+0x451/0x7f0 [ 214.986064] [<ffffffff815ac6d0>] ? do_splice_direct+0x270/0x270 [ 214.992187] [<ffffffff81207510>] ? trace_hardirqs_on+0x10/0x10 [ 214.998228] [<ffffffff814f2c0c>] ? kasan_slab_free+0xac/0x190 [ 215.004181] [<ffffffff814ef53e>] ? kmem_cache_free+0xbe/0x310 [ 215.010138] [<ffffffff81207510>] ? trace_hardirqs_on+0x10/0x10 [ 215.016178] [<ffffffff815e18f0>] ? __fsnotify_inode_delete+0x30/0x30 [ 215.022752] [<ffffffff815e2cf0>] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 215.031227] [<ffffffff819eed39>] ? avc_policy_seqno+0x9/0x20 [ 215.037098] [<ffffffff81a04042>] ? selinux_file_permission+0x82/0x470 [ 215.043743] [<ffffffff819e607f>] ? security_file_permission+0x8f/0x1e0 [ 215.050473] [<ffffffff8150a745>] ? rw_verify_area+0xe5/0x2a0 [ 215.056335] [<ffffffff815ac6d0>] ? do_splice_direct+0x270/0x270 [ 215.062460] [<ffffffff815abc1c>] do_splice_to+0x10c/0x170 [ 215.068062] [<ffffffff815b1172>] SyS_splice+0x10d2/0x14d0 [ 215.073662] [<ffffffff81495314>] ? __might_fault+0x114/0x1d0 [ 215.079523] [<ffffffff815b00a0>] ? compat_SyS_vmsplice+0x160/0x160 [ 215.085905] [<ffffffff81005598>] ? do_syscall_64+0x48/0x550 [ 215.091701] [<ffffffff815b00a0>] ? compat_SyS_vmsplice+0x160/0x160 [ 215.098086] [<ffffffff810056ef>] do_syscall_64+0x19f/0x550 [ 215.103785] [<ffffffff82818cd3>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 2018/12/11 20:17:22 executed programs: 1735 2018/12/11 20:17:27 executed programs: 2260