[....] Starting enhanced syslogd: rsyslogd[ 15.945605] audit: type=1400 audit(1519982859.413:5): avc: denied { syslog } for pid=4068 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.612746] audit: type=1400 audit(1519982862.080:6): avc: denied { map } for pid=4205 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. executing program [ 24.937137] audit: type=1400 audit(1519982868.404:7): avc: denied { map } for pid=4219 comm="syzkaller422792" path="/root/syzkaller422792076" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.948105] TCP: request_sock_TCP: Possible SYN flooding on port 20003. Sending cookies. Check SNMP counters. [ 30.175188] [ 30.176838] ============================================ [ 30.182256] WARNING: possible recursive locking detected [ 30.187674] 4.16.0-rc3+ #335 Not tainted [ 30.191697] -------------------------------------------- [ 30.197116] syzkaller422792/4223 is trying to acquire lock: [ 30.202792] (sk_lock-AF_SMC){+.+.}, at: [<0000000061eecceb>] smc_close_non_accepted+0x1d/0x370 [ 30.211610] [ 30.211610] but task is already holding lock: [ 30.217544] (sk_lock-AF_SMC){+.+.}, at: [<000000001eb3fef6>] smc_close_active+0x8d9/0x11f0 [ 30.226009] [ 30.226009] other info that might help us debug this: [ 30.232640] Possible unsafe locking scenario: [ 30.232640] [ 30.238666] CPU0 [ 30.241214] ---- [ 30.243763] lock(sk_lock-AF_SMC); [ 30.247359] lock(sk_lock-AF_SMC); [ 30.250963] [ 30.250963] *** DEADLOCK *** [ 30.250963] [ 30.256989] May be due to missing lock nesting notation [ 30.256989] [ 30.263880] 1 lock held by syzkaller422792/4223: [ 30.268598] #0: (sk_lock-AF_SMC){+.+.}, at: [<000000001eb3fef6>] smc_close_active+0x8d9/0x11f0 [ 30.277507] [ 30.277507] stack backtrace: [ 30.281975] CPU: 1 PID: 4223 Comm: syzkaller422792 Not tainted 4.16.0-rc3+ #335 [ 30.289390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.298715] Call Trace: [ 30.301279] dump_stack+0x194/0x24d [ 30.304873] ? arch_local_irq_restore+0x53/0x53 [ 30.309530] __lock_acquire+0xe8f/0x3e00 [ 30.313583] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 30.318747] ? free_object+0x150/0x230 [ 30.322603] ? lock_release+0xa40/0xa40 [ 30.326545] ? trace_hardirqs_off+0x10/0x10 [ 30.330834] ? trace_hardirqs_off+0x10/0x10 [ 30.335129] ? trace_hardirqs_off+0x10/0x10 [ 30.339420] ? trace_hardirqs_off+0x10/0x10 [ 30.343711] ? smc_accept_dequeue+0x273/0x7c0 [ 30.348175] ? lock_downgrade+0x980/0x980 [ 30.352297] ? find_held_lock+0x35/0x1d0 [ 30.356332] lock_acquire+0x1d5/0x580 [ 30.360109] ? lock_sock_nested+0xa3/0x110 [ 30.364308] ? lock_acquire+0x1d5/0x580 [ 30.368253] ? smc_close_non_accepted+0x1d/0x370 [ 30.372975] ? lock_release+0xa40/0xa40 [ 30.376920] ? check_same_owner+0x320/0x320 [ 30.381210] ? do_raw_spin_trylock+0x190/0x190 [ 30.385760] ? lock_sock_nested+0x44/0x110 [ 30.389962] lock_sock_nested+0xc2/0x110 [ 30.393993] ? smc_close_non_accepted+0x1d/0x370 [ 30.398718] smc_close_non_accepted+0x1d/0x370 [ 30.403274] smc_close_active+0x9aa/0x11f0 [ 30.407479] ? smc_close_wake_tx_prepared+0x90/0x90 [ 30.412466] ? find_held_lock+0x35/0x1d0 [ 30.416496] ? print_irqtrace_events+0x270/0x270 [ 30.421221] ? find_held_lock+0x35/0x1d0 [ 30.425257] ? lock_acquire+0x1d5/0x580 [ 30.429203] ? lock_sock_nested+0xa3/0x110 [ 30.433406] ? lock_acquire+0x1d5/0x580 [ 30.437352] ? smc_release+0x367/0x580 [ 30.441212] ? do_raw_spin_trylock+0x190/0x190 [ 30.445763] ? __local_bh_enable_ip+0x121/0x230 [ 30.450402] ? __init_waitqueue_head+0x140/0x140 [ 30.455124] ? trace_hardirqs_on+0xd/0x10 [ 30.459238] ? __local_bh_enable_ip+0x121/0x230 [ 30.463877] smc_release+0x379/0x580 [ 30.467566] sock_release+0x8d/0x1e0 [ 30.471247] ? sock_alloc_file+0x560/0x560 [ 30.475451] sock_close+0x16/0x20 [ 30.478875] __fput+0x327/0x7e0 [ 30.482125] ? fput+0x140/0x140 [ 30.485377] ? check_same_owner+0x320/0x320 [ 30.489676] ? _raw_spin_unlock_irq+0x27/0x70 [ 30.494140] ____fput+0x15/0x20 [ 30.497389] task_work_run+0x199/0x270 [ 30.501244] ? task_work_cancel+0x210/0x210 [ 30.505533] ? _raw_spin_unlock+0x22/0x30 [ 30.509650] ? switch_task_namespaces+0x87/0xc0 [ 30.514295] do_exit+0x9bb/0x1ad0 [ 30.517724] ? find_held_lock+0x35/0x1d0 [ 30.521772] ? mm_update_next_owner+0x930/0x930 [ 30.526410] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 30.531567] ? lock_downgrade+0x980/0x980 [ 30.535684] ? __unqueue_futex+0x1c0/0x290 [ 30.539888] ? lock_release+0xa40/0xa40 [ 30.543828] ? fault_in_user_writeable+0x90/0x90 [ 30.548550] ? do_raw_spin_trylock+0x190/0x190 [ 30.553097] ? futex_wake+0x680/0x680 [ 30.556869] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 30.561938] ? futex_wait+0x6a9/0x9a0 [ 30.565716] ? switched_to_fair+0xa0/0xa0 [ 30.569831] ? trace_hardirqs_off+0x10/0x10 [ 30.574120] ? __enqueue_entity+0x109/0x1e0 [ 30.578410] ? memset+0x31/0x40 [ 30.581657] ? find_held_lock+0x35/0x1d0 [ 30.585691] ? get_signal+0x7a9/0x16d0 [ 30.589547] ? lock_downgrade+0x980/0x980 [ 30.593666] do_group_exit+0x149/0x400 [ 30.597521] ? do_raw_spin_trylock+0x190/0x190 [ 30.602067] ? SyS_exit+0x30/0x30 [ 30.605491] ? _raw_spin_unlock_irq+0x27/0x70 [ 30.609955] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.614944] get_signal+0x73a/0x16d0 [ 30.618632] ? ptrace_notify+0x130/0x130 [ 30.622667] ? __schedule+0x903/0x1ec0 [ 30.626525] ? __sched_text_start+0x8/0x8 [ 30.630643] do_signal+0x90/0x1e90 [ 30.634152] ? setup_sigcontext+0x7d0/0x7d0 [ 30.638441] ? trace_hardirqs_off+0x10/0x10 [ 30.642732] ? schedule+0xf5/0x430 [ 30.646240] ? __schedule+0x1ec0/0x1ec0 [ 30.650191] ? exit_to_usermode_loop+0x8c/0x2f0 [ 30.654827] exit_to_usermode_loop+0x258/0x2f0 [ 30.659376] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 30.664880] ? do_syscall_64+0xb7/0x940 [ 30.668822] do_syscall_64+0x6ec/0x940 [ 30.672680] ? _raw_spin_unlock_irq+0x27/0x70 [ 30.677143] ? finish_task_switch+0x1c1/0x7e0 [ 30.681606] ? syscall_return_slowpath+0x550/0x550 [ 30.686501] ? syscall_return_slowpath+0x2ac/0x550 [ 30.691396] ? prepare_exit_to_usermode+0x350/0x350 [ 30.696379] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 30.701710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.706519] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 30.711675] RIP: 0033:0x445659 [ 30.714831] RSP: 002b:00007f7678acbdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.722505] RAX: fffffffffffffe00 RBX: 00000000006dac6c