[....] Starting enhanced syslogd: rsyslogd[ 12.766690] audit: type=1400 audit(1517103641.857:5): avc: denied { syslog } for pid=3531 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.862746] audit: type=1400 audit(1517103648.953:6): avc: denied { map } for pid=3672 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.226' (ECDSA) to the list of known hosts. executing program [ 26.243143] audit: type=1400 audit(1517103655.333:7): avc: denied { map } for pid=3686 comm="syzkaller018779" path="/root/syzkaller018779014" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 26.323071] [ 26.324717] ====================================================== [ 26.331000] WARNING: possible circular locking dependency detected [ 26.337284] 4.15.0-rc9+ #283 Not tainted [ 26.341311] ------------------------------------------------------ [ 26.347609] syzkaller018779/3686 is trying to acquire lock: [ 26.353286] (rtnl_mutex){+.+.}, at: [<00000000cafeb1de>] rtnl_lock+0x17/0x20 [ 26.360536] [ 26.360536] but task is already holding lock: [ 26.366479] (sk_lock-AF_INET){+.+.}, at: [<00000000d3491a76>] ip_setsockopt+0x8c/0xb0 [ 26.374512] [ 26.374512] which lock already depends on the new lock. [ 26.374512] [ 26.382793] [ 26.382793] the existing dependency chain (in reverse order) is: [ 26.390378] [ 26.390378] -> #1 (sk_lock-AF_INET){+.+.}: [ 26.396066] lock_sock_nested+0xc2/0x110 [ 26.400622] do_ip_setsockopt.isra.12+0x1d9/0x32e0 [ 26.406038] ip_setsockopt+0x3a/0xb0 [ 26.410242] dccp_setsockopt+0x85/0xd0 [ 26.414615] sock_common_setsockopt+0x95/0xd0 [ 26.419599] SyS_setsockopt+0x189/0x360 [ 26.424060] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 26.429317] [ 26.429317] -> #0 (rtnl_mutex){+.+.}: [ 26.434568] lock_acquire+0x1d5/0x580 [ 26.438858] __mutex_lock+0x16f/0x1a80 [ 26.443230] mutex_lock_nested+0x16/0x20 [ 26.447783] rtnl_lock+0x17/0x20 [ 26.451638] register_netdevice_notifier+0xad/0x860 [ 26.457144] tee_tg_check+0x1a0/0x280 [ 26.461435] xt_check_target+0x22c/0x7d0 [ 26.465985] find_check_entry.isra.8+0x8c8/0xcb0 [ 26.471243] translate_table+0xed1/0x1610 [ 26.475880] do_ipt_set_ctl+0x370/0x5f0 [ 26.480343] nf_setsockopt+0x67/0xc0 [ 26.484549] ip_setsockopt+0xa1/0xb0 [ 26.488751] raw_setsockopt+0xb7/0xd0 [ 26.493045] sock_common_setsockopt+0x95/0xd0 [ 26.498030] SyS_setsockopt+0x189/0x360 [ 26.502496] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 26.507747] [ 26.507747] other info that might help us debug this: [ 26.507747] [ 26.515866] Possible unsafe locking scenario: [ 26.515866] [ 26.521890] CPU0 CPU1 [ 26.526524] ---- ---- [ 26.531161] lock(sk_lock-AF_INET); [ 26.534846] lock(rtnl_mutex); [ 26.540614] lock(sk_lock-AF_INET); [ 26.546812] lock(rtnl_mutex); [ 26.550069] [ 26.550069] *** DEADLOCK *** [ 26.550069] [ 26.556102] 1 lock held by syzkaller018779/3686: [ 26.560826] #0: (sk_lock-AF_INET){+.+.}, at: [<00000000d3491a76>] ip_setsockopt+0x8c/0xb0 [ 26.569294] [ 26.569294] stack backtrace: [ 26.573759] CPU: 0 PID: 3686 Comm: syzkaller018779 Not tainted 4.15.0-rc9+ #283 [ 26.581171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.590491] Call Trace: [ 26.593056] dump_stack+0x194/0x257 [ 26.596674] ? arch_local_irq_restore+0x53/0x53 [ 26.601318] print_circular_bug.isra.37+0x2cd/0x2dc [ 26.606304] ? save_trace+0xe0/0x2b0 [ 26.609988] __lock_acquire+0x30a8/0x3e00 [ 26.614105] ? print_irqtrace_events+0x270/0x270 [ 26.618830] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.623992] ? print_irqtrace_events+0x270/0x270 [ 26.628717] ? __lock_acquire+0x664/0x3e00 [ 26.632924] ? print_irqtrace_events+0x270/0x270 [ 26.637653] ? __lock_acquire+0x664/0x3e00 [ 26.641857] ? find_held_lock+0x35/0x1d0 [ 26.645889] ? check_noncircular+0x20/0x20 [ 26.650098] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.655265] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.660431] lock_acquire+0x1d5/0x580 [ 26.664217] ? lock_acquire+0x1d5/0x580 [ 26.668161] ? rtnl_lock+0x17/0x20 [ 26.671670] ? lock_release+0xa40/0xa40 [ 26.675615] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 26.681470] ? rcu_note_context_switch+0x710/0x710 [ 26.686369] ? __might_sleep+0x95/0x190 [ 26.690314] ? rtnl_lock+0x17/0x20 [ 26.693826] __mutex_lock+0x16f/0x1a80 [ 26.697680] ? rtnl_lock+0x17/0x20 [ 26.701190] ? lock_downgrade+0x980/0x980 [ 26.705314] ? rtnl_lock+0x17/0x20 [ 26.708829] ? mutex_lock_io_nested+0x1900/0x1900 [ 26.713645] ? is_bpf_text_address+0x7b/0x120 [ 26.718114] ? print_irqtrace_events+0x270/0x270 [ 26.722844] ? depot_save_stack+0x3b5/0x490 [ 26.727138] ? lock_downgrade+0x980/0x980 [ 26.731261] ? lock_release+0xa40/0xa40 [ 26.735209] ? mark_held_locks+0xaf/0x100 [ 26.739334] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 26.744422] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.749408] ? trace_hardirqs_on+0xd/0x10 [ 26.753527] ? depot_save_stack+0x3b5/0x490 [ 26.757819] ? save_stack+0xa3/0xd0 [ 26.761426] ? save_stack+0x43/0xd0 [ 26.765032] ? kasan_kmalloc+0xad/0xe0 [ 26.768895] ? kmem_cache_alloc_trace+0x136/0x750 [ 26.773710] ? tee_tg_check+0xed/0x280 [ 26.777567] ? xt_check_target+0x22c/0x7d0 [ 26.781773] ? find_check_entry.isra.8+0x8c8/0xcb0 [ 26.786674] ? translate_table+0xed1/0x1610 [ 26.790964] ? do_ipt_set_ctl+0x370/0x5f0 [ 26.795082] ? nf_setsockopt+0x67/0xc0 [ 26.798942] ? ip_setsockopt+0xa1/0xb0 [ 26.802809] ? raw_setsockopt+0xb7/0xd0 [ 26.806757] ? sock_common_setsockopt+0x95/0xd0 [ 26.811400] ? SyS_setsockopt+0x189/0x360 [ 26.815520] ? entry_SYSCALL_64_fastpath+0x29/0xa0 [ 26.820422] mutex_lock_nested+0x16/0x20 [ 26.824454] ? mutex_lock_nested+0x16/0x20 [ 26.828657] rtnl_lock+0x17/0x20 [ 26.831992] register_netdevice_notifier+0xad/0x860 [ 26.836981] ? __dev_close_many+0x330/0x330 [ 26.841273] ? __lock_is_held+0xb6/0x140 [ 26.845306] ? tee_tg_check+0xed/0x280 [ 26.849161] ? rcu_read_lock_sched_held+0x108/0x120 [ 26.854148] ? kmem_cache_alloc_trace+0x456/0x750 [ 26.858957] ? __kernel_text_address+0xd/0x40 [ 26.863421] ? wait_for_completion+0x770/0x770 [ 26.867973] tee_tg_check+0x1a0/0x280 [ 26.871741] ? tee_tg4+0x170/0x170 [ 26.875263] xt_check_target+0x22c/0x7d0 [ 26.879299] ? xt_target_seq_next+0x30/0x30 [ 26.883588] ? save_stack+0xa3/0xd0 [ 26.887182] ? kasan_slab_free+0x71/0xc0 [ 26.891209] ? kfree+0xd6/0x260 [ 26.894459] ? kvfree+0x36/0x60 [ 26.897709] ? mutex_unlock+0xd/0x10 [ 26.901392] ? xt_find_target+0x17b/0x1e0 [ 26.905526] find_check_entry.isra.8+0x8c8/0xcb0 [ 26.910254] ? ipt_do_table+0x1860/0x1860 [ 26.914372] ? mark_held_locks+0xaf/0x100 [ 26.918488] ? kfree+0xf0/0x260 [ 26.921738] ? trace_hardirqs_on+0xd/0x10 [ 26.925858] translate_table+0xed1/0x1610 [ 26.929981] ? alloc_counters.isra.11+0x7d0/0x7d0 [ 26.934797] ? kasan_check_write+0x14/0x20 [ 26.939002] ? _copy_from_user+0x99/0x110 [ 26.943131] do_ipt_set_ctl+0x370/0x5f0 [ 26.947081] ? translate_compat_table+0x1b90/0x1b90 [ 26.952070] ? mutex_unlock+0xd/0x10 [ 26.955756] ? nf_sockopt_find.constprop.0+0x1a7/0x220 [ 26.961007] nf_setsockopt+0x67/0xc0 [ 26.964701] ip_setsockopt+0xa1/0xb0 [ 26.968386] raw_setsockopt+0xb7/0xd0 [ 26.972164] sock_common_setsockopt+0x95/0xd0 [ 26.976631] SyS_setsockopt+0x189/0x360 [ 26.980578] ? SyS_recv+0x40/0x40 [ 26.984018] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 26.988847] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.993840] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.998571] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 27.003306] RIP: 0033:0x4409d9 [ 27.006466] RSP: 002b:00007ffd034d91f8 EFLAGS: 00000207 ORIG_RAX: 0000000000000036 [ 27.014144] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004409d9 [ 27.021387] RDX: 0000000000000040 RSI: 000000000000000