Warning: Permanently added '10.128.0.146' (ECDSA) to the list of known hosts. executing program [ 47.934250] audit: type=1400 audit(1587269330.634:8): avc: denied { execmem } for pid=6339 comm="syz-executor904" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 47.982978] ip_tables: iptables: counters copy to user failed while replacing table [ 48.220694] IPVS: ftp: loaded support on port[0] = 21 [ 49.080651] ip_tables: iptables: counters copy to user failed while replacing table [ 49.252111] [ 49.253763] ====================================================== [ 49.260071] WARNING: possible circular locking dependency detected [ 49.266365] 4.14.176-syzkaller #0 Not tainted [ 49.270833] ------------------------------------------------------ [ 49.277130] kworker/u4:2/25 is trying to acquire lock: [ 49.282381] (&table[i].mutex){+.+.}, at: [] nf_tables_netdev_event+0x10d/0x4d0 [ 49.291377] [ 49.291377] but task is already holding lock: [ 49.297332] (rtnl_mutex){+.+.}, at: [] ip6gre_exit_net+0x70/0x580 [ 49.305220] [ 49.305220] which lock already depends on the new lock. [ 49.305220] [ 49.313520] [ 49.313520] the existing dependency chain (in reverse order) is: [ 49.321275] [ 49.321275] -> #2 (rtnl_mutex){+.+.}: [ 49.326580] __mutex_lock+0xe8/0x1470 [ 49.330882] unregister_netdevice_notifier+0x5e/0x2b0 [ 49.336571] tee_tg_destroy+0x5c/0xb0 [ 49.340878] cleanup_entry+0x169/0x220 [ 49.345269] __do_replace+0x38d/0x570 [ 49.349565] do_ipt_set_ctl+0x255/0x39d [ 49.354036] nf_setsockopt+0x5f/0xb0 [ 49.358250] ip_setsockopt+0x94/0xb0 [ 49.362463] udp_setsockopt+0x45/0x80 [ 49.366771] SyS_setsockopt+0x110/0x1e0 [ 49.371249] do_syscall_64+0x1d5/0x640 [ 49.375635] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.381319] [ 49.381319] -> #1 (&xt[i].mutex){+.+.}: [ 49.386754] __mutex_lock+0xe8/0x1470 [ 49.391079] xt_find_revision+0x89/0x200 [ 49.395672] nfnl_compat_get+0x1f7/0x8a0 [ 49.400234] nfnetlink_rcv_msg+0xa08/0xc00 [ 49.404968] netlink_rcv_skb+0x127/0x370 [ 49.409530] nfnetlink_rcv+0x1ab/0x1650 [ 49.414007] netlink_unicast+0x437/0x620 [ 49.418566] netlink_sendmsg+0x733/0xbe0 [ 49.423129] sock_sendmsg+0xc5/0x100 [ 49.427339] ___sys_sendmsg+0x70a/0x840 [ 49.431810] __sys_sendmsg+0xa3/0x120 [ 49.436106] SyS_sendmsg+0x27/0x40 [ 49.440148] do_syscall_64+0x1d5/0x640 [ 49.444536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 49.450218] [ 49.450218] -> #0 (&table[i].mutex){+.+.}: [ 49.455923] lock_acquire+0x170/0x3f0 [ 49.460227] __mutex_lock+0xe8/0x1470 [ 49.464636] nf_tables_netdev_event+0x10d/0x4d0 [ 49.469812] notifier_call_chain+0x107/0x1a0 [ 49.474724] rollback_registered_many+0x694/0xa70 [ 49.480129] unregister_netdevice_many.part.0+0x16/0x1d0 [ 49.486129] unregister_netdevice_many+0x36/0x50 [ 49.491391] ip6gre_exit_net+0x3e3/0x580 [ 49.496024] ops_exit_list.isra.0+0x9d/0x140 [ 49.500933] cleanup_net+0x3bb/0x820 [ 49.505144] process_one_work+0x813/0x1540 [ 49.509910] worker_thread+0x5d1/0x1070 [ 49.514381] kthread+0x30d/0x420 [ 49.518247] ret_from_fork+0x24/0x30 [ 49.522457] [ 49.522457] other info that might help us debug this: [ 49.522457] [ 49.530584] Chain exists of: [ 49.530584] &table[i].mutex --> &xt[i].mutex --> rtnl_mutex [ 49.530584] [ 49.540793] Possible unsafe locking scenario: [ 49.540793] [ 49.546835] CPU0 CPU1 [ 49.551475] ---- ---- [ 49.556296] lock(rtnl_mutex); [ 49.559567] lock(&xt[i].mutex); [ 49.565526] lock(rtnl_mutex); [ 49.571310] lock(&table[i].mutex); [ 49.575007] [ 49.575007] *** DEADLOCK *** [ 49.575007] [ 49.581052] 4 locks held by kworker/u4:2/25: [ 49.585490] #0: ("%s""netns"){+.+.}, at: [] process_one_work+0x727/0x1540 [ 49.594143] #1: (net_cleanup_work){+.+.}, at: [] process_one_work+0x761/0x1540 [ 49.603226] #2: (net_mutex){+.+.}, at: [] cleanup_net+0x123/0x820 [ 49.611187] #3: (rtnl_mutex){+.+.}, at: [] ip6gre_exit_net+0x70/0x580 [ 49.619502] [ 49.619502] stack backtrace: [ 49.623990] CPU: 0 PID: 25 Comm: kworker/u4:2 Not tainted 4.14.176-syzkaller #0 [ 49.631426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.640780] Workqueue: netns cleanup_net [ 49.644822] Call Trace: [ 49.647395] dump_stack+0x13e/0x194 [ 49.651065] print_circular_bug.isra.0.cold+0x1c4/0x282 [ 49.656413] __lock_acquire+0x2cb3/0x4620 [ 49.660556] ? unwind_next_frame+0xbc6/0x17a0 [ 49.665033] ? trace_hardirqs_on+0x10/0x10 [ 49.669249] ? deref_stack_reg+0xc0/0xc0 [ 49.673286] ? save_trace+0x290/0x290 [ 49.677065] lock_acquire+0x170/0x3f0 [ 49.680842] ? nf_tables_netdev_event+0x10d/0x4d0 [ 49.687055] ? nf_tables_netdev_event+0x10d/0x4d0 [ 49.691875] __mutex_lock+0xe8/0x1470 [ 49.695763] ? nf_tables_netdev_event+0x10d/0x4d0 [ 49.700643] ? find_held_lock+0x2d/0x110 [ 49.704695] ? nf_tables_netdev_event+0x10d/0x4d0 [ 49.709531] ? mutex_trylock+0x1a0/0x1a0 [ 49.713576] ? trace_hardirqs_on+0x10/0x10 [ 49.717791] ? find_held_lock+0x2d/0x110 [ 49.721840] ? save_trace+0x290/0x290 [ 49.725623] ? nf_tables_netdev_event+0x10d/0x4d0 [ 49.730495] nf_tables_netdev_event+0x10d/0x4d0 [ 49.735149] ? nf_tables_netdev_init_net+0x210/0x210 [ 49.740236] ? mirred_device_event+0x143/0x180 [ 49.744805] ? __local_bh_enable_ip+0x94/0x190 [ 49.749493] ? mirred_device_event+0x50/0x180 [ 49.753992] notifier_call_chain+0x107/0x1a0 [ 49.759357] rollback_registered_many+0x694/0xa70 [ 49.764185] ? save_trace+0x290/0x290 [ 49.767997] ? find_held_lock+0x2d/0x110 [ 49.772066] ? netdev_info+0xf0/0xf0 [ 49.775758] ? __lock_is_held+0xad/0x140 [ 49.779797] unregister_netdevice_many.part.0+0x16/0x1d0 [ 49.785225] unregister_netdevice_many+0x36/0x50 [ 49.789991] ip6gre_exit_net+0x3e3/0x580 [ 49.794034] ? ip6gre_tunnel_link+0xc0/0xc0 [ 49.798355] ? ip6gre_tunnel_link+0xc0/0xc0 [ 49.802664] ops_exit_list.isra.0+0x9d/0x140 [ 49.807063] cleanup_net+0x3bb/0x820 [ 49.810758] ? net_drop_ns+0x70/0x70 [ 49.814449] ? find_held_lock+0xd0/0x110 [ 49.818491] process_one_work+0x813/0x1540 [ 49.822705] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 49.827350] ? worker_thread+0x15d/0x1070 [ 49.831477] ? _raw_spin_unlock_irq+0x24/0x80 [ 49.835950] worker_thread+0x5d1/0x1070 [ 49.839924] ? process_one_work+0x1540/0x1540 [ 49.844406] kthread+0x30d/0x420 [ 49.847812] ? kthread_create_on_node+0xd0/0xd0 [ 49.852475] ret_from_fork+0x24/0x30 [ 49.858263] ip_tables: iptables: counters copy to user failed while replacing table [ 49.915080] ip_tables: iptables: counters copy to user failed while replacing table [ 50.083999] ip_tables: iptables: counters copy to user failed while replacing table [ 50.252887] ip_tables: iptables: counters copy to user failed while replacing table [ 50.421031] ip_tables: iptables: counters copy to user failed while replacing table [ 50.591749] ip_tables: iptables: counters copy to user failed while replacing table [ 50.762858] ip_tables: iptables: counters copy to user failed while replacing table [ 50.933670] ip_tables: iptables: counters copy to user failed while replacing table [ 51.179453] IPVS: ftp: loaded support on port[0] = 21 [ 53.020907] net_ratelimit: 6 callbacks suppressed [ 53.020909] ip_tables: iptables: counters copy to user failed while replacing table [ 53.193997] ip_tables: iptables: counters copy to user failed while replacing table [ 53.418772] IPVS: ftp: loaded support on port[0] = 21 [ 54.211718] ip_tables: iptables: counters copy to user failed while replacing table [ 54.387713] ip_tables: iptables: counters copy to user failed while replacing table [ 54.557888] ip_tables: iptables: counters copy to user failed while replacing table [ 54.726582] ip_tables: iptables: counters copy to user failed while replacing table [ 54.907892] ip_tables: iptables: counters copy to user failed while replacing table [ 55.084469] ip_tables: iptables: counters copy to user failed while replacing table [ 55.252484] ip_tables: iptables: counters copy to user failed while replacing table [ 55.420369] ip_tables: iptables: counters copy to user failed while replacing table [ 55.668168] IPVS: ftp: loaded support on port[0] = 21 [ 57.997768] IPVS: ftp: loaded support on port[0] = 21 [ 58.823476] net_ratelimit: 8 callbacks suppressed [ 58.823479] ip_tables: iptables: counters copy to user failed while replacing table [ 58.998753] ip_tables: iptables: counters copy to user failed while replacing table [ 59.168641] ip_tables: iptables: counters copy to user failed while replacing table