Warning: Permanently added '10.128.0.146' (ECDSA) to the list of known hosts.
executing program
[ 47.934250] audit: type=1400 audit(1587269330.634:8): avc: denied { execmem } for pid=6339 comm="syz-executor904" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 47.982978] ip_tables: iptables: counters copy to user failed while replacing table
[ 48.220694] IPVS: ftp: loaded support on port[0] = 21
[ 49.080651] ip_tables: iptables: counters copy to user failed while replacing table
[ 49.252111]
[ 49.253763] ======================================================
[ 49.260071] WARNING: possible circular locking dependency detected
[ 49.266365] 4.14.176-syzkaller #0 Not tainted
[ 49.270833] ------------------------------------------------------
[ 49.277130] kworker/u4:2/25 is trying to acquire lock:
[ 49.282381] (&table[i].mutex){+.+.}, at: [<ffffffff852acfad>] nf_tables_netdev_event+0x10d/0x4d0
[ 49.291377]
[ 49.291377] but task is already holding lock:
[ 49.297332] (rtnl_mutex){+.+.}, at: [<ffffffff85861080>] ip6gre_exit_net+0x70/0x580
[ 49.305220]
[ 49.305220] which lock already depends on the new lock.
[ 49.305220]
[ 49.313520]
[ 49.313520] the existing dependency chain (in reverse order) is:
[ 49.321275]
[ 49.321275] -> #2 (rtnl_mutex){+.+.}:
[ 49.326580] __mutex_lock+0xe8/0x1470
[ 49.330882] unregister_netdevice_notifier+0x5e/0x2b0
[ 49.336571] tee_tg_destroy+0x5c/0xb0
[ 49.340878] cleanup_entry+0x169/0x220
[ 49.345269] __do_replace+0x38d/0x570
[ 49.349565] do_ipt_set_ctl+0x255/0x39d
[ 49.354036] nf_setsockopt+0x5f/0xb0
[ 49.358250] ip_setsockopt+0x94/0xb0
[ 49.362463] udp_setsockopt+0x45/0x80
[ 49.366771] SyS_setsockopt+0x110/0x1e0
[ 49.371249] do_syscall_64+0x1d5/0x640
[ 49.375635] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 49.381319]
[ 49.381319] -> #1 (&xt[i].mutex){+.+.}:
[ 49.386754] __mutex_lock+0xe8/0x1470
[ 49.391079] xt_find_revision+0x89/0x200
[ 49.395672] nfnl_compat_get+0x1f7/0x8a0
[ 49.400234] nfnetlink_rcv_msg+0xa08/0xc00
[ 49.404968] netlink_rcv_skb+0x127/0x370
[ 49.409530] nfnetlink_rcv+0x1ab/0x1650
[ 49.414007] netlink_unicast+0x437/0x620
[ 49.418566] netlink_sendmsg+0x733/0xbe0
[ 49.423129] sock_sendmsg+0xc5/0x100
[ 49.427339] ___sys_sendmsg+0x70a/0x840
[ 49.431810] __sys_sendmsg+0xa3/0x120
[ 49.436106] SyS_sendmsg+0x27/0x40
[ 49.440148] do_syscall_64+0x1d5/0x640
[ 49.444536] entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 49.450218]
[ 49.450218] -> #0 (&table[i].mutex){+.+.}:
[ 49.455923] lock_acquire+0x170/0x3f0
[ 49.460227] __mutex_lock+0xe8/0x1470
[ 49.464636] nf_tables_netdev_event+0x10d/0x4d0
[ 49.469812] notifier_call_chain+0x107/0x1a0
[ 49.474724] rollback_registered_many+0x694/0xa70
[ 49.480129] unregister_netdevice_many.part.0+0x16/0x1d0
[ 49.486129] unregister_netdevice_many+0x36/0x50
[ 49.491391] ip6gre_exit_net+0x3e3/0x580
[ 49.496024] ops_exit_list.isra.0+0x9d/0x140
[ 49.500933] cleanup_net+0x3bb/0x820
[ 49.505144] process_one_work+0x813/0x1540
[ 49.509910] worker_thread+0x5d1/0x1070
[ 49.514381] kthread+0x30d/0x420
[ 49.518247] ret_from_fork+0x24/0x30
[ 49.522457]
[ 49.522457] other info that might help us debug this:
[ 49.522457]
[ 49.530584] Chain exists of:
[ 49.530584] &table[i].mutex --> &xt[i].mutex --> rtnl_mutex
[ 49.530584]
[ 49.540793] Possible unsafe locking scenario:
[ 49.540793]
[ 49.546835] CPU0 CPU1
[ 49.551475] ---- ----
[ 49.556296] lock(rtnl_mutex);
[ 49.559567] lock(&xt[i].mutex);
[ 49.565526] lock(rtnl_mutex);
[ 49.571310] lock(&table[i].mutex);
[ 49.575007]
[ 49.575007] *** DEADLOCK ***
[ 49.575007]
[ 49.581052] 4 locks held by kworker/u4:2/25:
[ 49.585490] #0: ("%s""netns"){+.+.}, at: [<ffffffff813b67f7>] process_one_work+0x727/0x1540
[ 49.594143] #1: (net_cleanup_work){+.+.}, at: [<ffffffff813b6831>] process_one_work+0x761/0x1540
[ 49.603226] #2: (net_mutex){+.+.}, at: [<ffffffff84fc9233>] cleanup_net+0x123/0x820
[ 49.611187] #3: (rtnl_mutex){+.+.}, at: [<ffffffff85861080>] ip6gre_exit_net+0x70/0x580
[ 49.619502]
[ 49.619502] stack backtrace:
[ 49.623990] CPU: 0 PID: 25 Comm: kworker/u4:2 Not tainted 4.14.176-syzkaller #0
[ 49.631426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 49.640780] Workqueue: netns cleanup_net
[ 49.644822] Call Trace:
[ 49.647395] dump_stack+0x13e/0x194
[ 49.651065] print_circular_bug.isra.0.cold+0x1c4/0x282
[ 49.656413] __lock_acquire+0x2cb3/0x4620
[ 49.660556] ? unwind_next_frame+0xbc6/0x17a0
[ 49.665033] ? trace_hardirqs_on+0x10/0x10
[ 49.669249] ? deref_stack_reg+0xc0/0xc0
[ 49.673286] ? save_trace+0x290/0x290
[ 49.677065] lock_acquire+0x170/0x3f0
[ 49.680842] ? nf_tables_netdev_event+0x10d/0x4d0
[ 49.687055] ? nf_tables_netdev_event+0x10d/0x4d0
[ 49.691875] __mutex_lock+0xe8/0x1470
[ 49.695763] ? nf_tables_netdev_event+0x10d/0x4d0
[ 49.700643] ? find_held_lock+0x2d/0x110
[ 49.704695] ? nf_tables_netdev_event+0x10d/0x4d0
[ 49.709531] ? mutex_trylock+0x1a0/0x1a0
[ 49.713576] ? trace_hardirqs_on+0x10/0x10
[ 49.717791] ? find_held_lock+0x2d/0x110
[ 49.721840] ? save_trace+0x290/0x290
[ 49.725623] ? nf_tables_netdev_event+0x10d/0x4d0
[ 49.730495] nf_tables_netdev_event+0x10d/0x4d0
[ 49.735149] ? nf_tables_netdev_init_net+0x210/0x210
[ 49.740236] ? mirred_device_event+0x143/0x180
[ 49.744805] ? __local_bh_enable_ip+0x94/0x190
[ 49.749493] ? mirred_device_event+0x50/0x180
[ 49.753992] notifier_call_chain+0x107/0x1a0
[ 49.759357] rollback_registered_many+0x694/0xa70
[ 49.764185] ? save_trace+0x290/0x290
[ 49.767997] ? find_held_lock+0x2d/0x110
[ 49.772066] ? netdev_info+0xf0/0xf0
[ 49.775758] ? __lock_is_held+0xad/0x140
[ 49.779797] unregister_netdevice_many.part.0+0x16/0x1d0
[ 49.785225] unregister_netdevice_many+0x36/0x50
[ 49.789991] ip6gre_exit_net+0x3e3/0x580
[ 49.794034] ? ip6gre_tunnel_link+0xc0/0xc0
[ 49.798355] ? ip6gre_tunnel_link+0xc0/0xc0
[ 49.802664] ops_exit_list.isra.0+0x9d/0x140
[ 49.807063] cleanup_net+0x3bb/0x820
[ 49.810758] ? net_drop_ns+0x70/0x70
[ 49.814449] ? find_held_lock+0xd0/0x110
[ 49.818491] process_one_work+0x813/0x1540
[ 49.822705] ? pwq_dec_nr_in_flight+0x2b0/0x2b0
[ 49.827350] ? worker_thread+0x15d/0x1070
[ 49.831477] ? _raw_spin_unlock_irq+0x24/0x80
[ 49.835950] worker_thread+0x5d1/0x1070
[ 49.839924] ? process_one_work+0x1540/0x1540
[ 49.844406] kthread+0x30d/0x420
[ 49.847812] ? kthread_create_on_node+0xd0/0xd0
[ 49.852475] ret_from_fork+0x24/0x30
[ 49.858263] ip_tables: iptables: counters copy to user failed while replacing table
[ 49.915080] ip_tables: iptables: counters copy to user failed while replacing table
[ 50.083999] ip_tables: iptables: counters copy to user failed while replacing table
[ 50.252887] ip_tables: iptables: counters copy to user failed while replacing table
[ 50.421031] ip_tables: iptables: counters copy to user failed while replacing table
[ 50.591749] ip_tables: iptables: counters copy to user failed while replacing table
[ 50.762858] ip_tables: iptables: counters copy to user failed while replacing table
[ 50.933670] ip_tables: iptables: counters copy to user failed while replacing table
[ 51.179453] IPVS: ftp: loaded support on port[0] = 21
[ 53.020907] net_ratelimit: 6 callbacks suppressed
[ 53.020909] ip_tables: iptables: counters copy to user failed while replacing table
[ 53.193997] ip_tables: iptables: counters copy to user failed while replacing table
[ 53.418772] IPVS: ftp: loaded support on port[0] = 21
[ 54.211718] ip_tables: iptables: counters copy to user failed while replacing table
[ 54.387713] ip_tables: iptables: counters copy to user failed while replacing table
[ 54.557888] ip_tables: iptables: counters copy to user failed while replacing table
[ 54.726582] ip_tables: iptables: counters copy to user failed while replacing table
[ 54.907892] ip_tables: iptables: counters copy to user failed while replacing table
[ 55.084469] ip_tables: iptables: counters copy to user failed while replacing table
[ 55.252484] ip_tables: iptables: counters copy to user failed while replacing table
[ 55.420369] ip_tables: iptables: counters copy to user failed while replacing table
[ 55.668168] IPVS: ftp: loaded support on port[0] = 21
[ 57.997768] IPVS: ftp: loaded support on port[0] = 21
[ 58.823476] net_ratelimit: 8 callbacks suppressed
[ 58.823479] ip_tables: iptables: counters copy to user failed while replacing table
[ 58.998753] ip_tables: iptables: counters copy to user failed while replacing table
[ 59.168641] ip_tables: iptables: counters copy to user failed while replacing table