[....] Starting enhanced syslogd: rsyslogd[ 11.449224] audit: type=1400 audit(1515021341.273:5): avc: denied { syslog } for pid=3308 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 17.289542] audit: type=1400 audit(1515021347.114:6): avc: denied { map } for pid=3448 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.240' (ECDSA) to the list of known hosts. executing program [ 23.435486] audit: type=1400 audit(1515021353.260:7): avc: denied { map } for pid=3462 comm="syzkaller221540" path="/root/syzkaller221540402" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 23.439627] FAULT_INJECTION: forcing a failure. [ 23.439627] name failslab, interval 1, probability 0, space 0, times 1 [ 23.439639] CPU: 0 PID: 3462 Comm: syzkaller221540 Not tainted 4.15.0-rc6-next-20180103+ #87 [ 23.439642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.439644] Call Trace: [ 23.439657] dump_stack+0x137/0x198 [ 23.439672] should_fail+0x4d4/0x580 [ 23.439685] should_failslab+0xec/0x120 [ 23.439693] __kmalloc_track_caller+0x5f/0x760 [ 23.439702] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 23.439714] ? kstrdup_const+0x39/0x50 [ 23.439722] kstrdup+0x39/0x70 [ 23.439728] kstrdup_const+0x39/0x50 [ 23.439737] kvasprintf_const+0x10e/0x160 [ 23.439746] kobject_set_name_vargs+0x5b/0x140 [ 23.439756] dev_set_name+0xb4/0xf0 [ 23.439761] ? device_initialize+0x430/0x430 [ 23.439768] ? __lockdep_init_map+0xe4/0x650 [ 23.439775] ? lockdep_init_map+0x9/0x10 [ 23.439781] ? __init_waitqueue_head+0x3a/0x90 [ 23.439794] netdev_register_kobject+0xc3/0x360 [ 23.439804] register_netdevice+0xacc/0xf30 [ 23.439813] ? netdev_change_features+0xa0/0xa0 [ 23.439827] ppp_dev_configure+0x854/0xc40 [ 23.439837] ? ppp_exit_net+0x570/0x570 [ 23.439849] ppp_ioctl+0x1491/0x2200 [ 23.439855] ? check_noncircular+0x20/0x20 [ 23.439863] ? ppp_unregister_channel+0x500/0x500 [ 23.439880] ? __might_sleep+0x95/0x190 [ 23.439887] ? ppp_unregister_channel+0x500/0x500 [ 23.439896] do_vfs_ioctl+0x190/0xfe0 [ 23.439902] ? selinux_file_ioctl+0x354/0x540 [ 23.439909] ? ioctl_preallocate+0x1c0/0x1c0 [ 23.439916] ? __sb_end_write+0xa0/0xd0 [ 23.439931] ? security_file_ioctl+0x89/0xb0 [ 23.439939] SyS_ioctl+0x8f/0xc0 [ 23.439948] entry_SYSCALL_64_fastpath+0x23/0x9a [ 23.439952] RIP: 0033:0x440649 [ 23.439955] RSP: 002b:00007fff8dc7fdc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 23.439960] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000440649 [ 23.439962] RDX: 0000000020001000 RSI: 00000000c004743e RDI: 0000000000000003 [ 23.439965] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000035 [ 23.439967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401f10 [ 23.439970] R13: 0000000000401fa0 R14: 0000000000000000 R15: 0000000000000000 [ 23.440080] [ 23.440082] ============================================ [ 23.440082] WARNING: possible recursive locking detected [ 23.440085] 4.15.0-rc6-next-20180103+ #87 Not tainted [ 23.440086] -------------------------------------------- [ 23.440088] syzkaller221540/3462 is trying to acquire lock: [ 23.440089] (&pn->all_ppp_mutex){+.+.}, at: [<00000000709ea4fe>] ppp_dev_uninit+0x1be/0x390 [ 23.440097] [ 23.440097] but task is already holding lock: [ 23.440097] (&pn->all_ppp_mutex){+.+.}, at: [<00000000752caad5>] ppp_dev_configure+0x6a4/0xc40 [ 23.440103] [ 23.440103] other info that might help us debug this: [ 23.440104] Possible unsafe locking scenario: [ 23.440104] [ 23.440105] CPU0 [ 23.440105] ---- [ 23.440106] lock(&pn->all_ppp_mutex); [ 23.440108] lock(&pn->all_ppp_mutex); [ 23.440110] [ 23.440110] *** DEADLOCK *** [ 23.440110] [ 23.440111] May be due to missing lock nesting notation [ 23.440111] [ 23.440113] 3 locks held by syzkaller221540/3462: [ 23.440114] #0: (ppp_mutex){+.+.}, at: [<000000000235c4ad>] ppp_ioctl+0x9e/0x2200 [ 23.440120] #1: (rtnl_mutex){+.+.}, at: [<000000002fbce150>] rtnl_lock+0x17/0x20 [ 23.440128] #2: (&pn->all_ppp_mutex){+.+.}, at: [<00000000752caad5>] ppp_dev_configure+0x6a4/0xc40 [ 23.440133] [ 23.440133] stack backtrace: [ 23.440137] CPU: 0 PID: 3462 Comm: syzkaller221540 Not tainted 4.15.0-rc6-next-20180103+ #87 [ 23.440138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.440139] Call Trace: [ 23.440144] dump_stack+0x137/0x198 [ 23.440149] __lock_acquire+0xec3/0x3cf0 [ 23.440156] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.440160] ? check_noncircular+0x20/0x20 [ 23.440164] ? add_lock_to_list.isra.28+0x1fd/0x2b2 [ 23.440168] ? __lock_is_held+0xb6/0x140 [ 23.440172] ? __lock_acquire+0x63e/0x3cf0 [ 23.440176] lock_acquire+0x16b/0x420 [ 23.440179] ? lock_acquire+0x16b/0x420 [ 23.440182] ? ppp_dev_uninit+0x1be/0x390 [ 23.440187] __mutex_lock+0xec/0x1550 [ 23.440189] ? ppp_dev_uninit+0x1be/0x390 [ 23.440193] ? check_noncircular+0x20/0x20 [ 23.440199] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 23.440203] ? ppp_dev_uninit+0x1be/0x390 [ 23.440206] ? mutex_lock_io_nested+0x1400/0x1400 [ 23.440210] ? find_held_lock+0x35/0x1e0 [ 23.440214] ? mark_held_locks+0xaf/0x100 [ 23.440217] ? ppp_dev_uninit+0x1b4/0x390 [ 23.440224] ? __local_bh_enable_ip+0x121/0x230 [ 23.440227] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 23.440230] ? ppp_dev_uninit+0x1b4/0x390 [ 23.440234] mutex_lock_nested+0x16/0x20 [ 23.440237] ? mutex_lock_nested+0x16/0x20 [ 23.440240] ppp_dev_uninit+0x1be/0x390 [ 23.440243] ? ppp_init_net+0x390/0x390 [ 23.440247] register_netdevice+0x8bf/0xf30 [ 23.440252] ? netdev_change_features+0xa0/0xa0 [ 23.440257] ppp_dev_configure+0x854/0xc40 [ 23.440261] ? ppp_exit_net+0x570/0x570 [ 23.440265] ppp_ioctl+0x1491/0x2200 [ 23.440269] ? check_noncircular+0x20/0x20 [ 23.440273] ? ppp_unregister_channel+0x500/0x500 [ 23.440278] ? __might_sleep+0x95/0x190 [ 23.440282] ? ppp_unregister_channel+0x500/0x500 [ 23.440286] do_vfs_ioctl+0x190/0xfe0 [ 23.440291] ? selinux_file_ioctl+0x354/0x540 [ 23.440297] ? ioctl_preallocate+0x1c0/0x1c0 [ 23.440301] ? __sb_end_write+0xa0/0xd0 [ 23.440309] ? security_file_ioctl+0x89/0xb0 [ 23.440314] SyS_ioctl+0x8f/0xc0 [ 23.440319] entry_SYSCALL_64_fastpath+0x23/0x9a [ 23.440322] RIP: 0033:0x440649 [ 23.440323] RSP: 002b:00007fff8dc7fdc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 23.440327] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000440649 [ 23.440329] RDX: 0000000020001000 RSI: 00000000c004743e RDI: 0000000000000003 [ 23.440331] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000035 [ 23.440333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401f10 [ 23.440335] R13: 0000000000401fa0 R14: 0000000000000000 R15: 0000000000000000