[....] Starting enhanced syslogd: rsyslogd[ 15.622867] audit: type=1400 audit(1518361004.801:5): avc: denied { syslog } for pid=3968 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 19.904083] audit: type=1400 audit(1518361009.082:6): avc: denied { map } for pid=4108 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.228' (ECDSA) to the list of known hosts. executing program [ 26.235430] audit: type=1400 audit(1518361015.414:7): avc: denied { map } for pid=4122 comm="syzkaller233882" path="/root/syzkaller233882181" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 26.261708] [ 26.263545] ============================= [ 26.267703] WARNING: suspicious RCU usage [ 26.271872] 4.15.0+ #222 Not tainted [ 26.275595] ----------------------------- [ 26.279762] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 26.289037] [ 26.289037] other info that might help us debug this: [ 26.289037] [ 26.297189] [ 26.297189] rcu_scheduler_active = 2, debug_locks = 1 [ 26.303859] 1 lock held by syzkaller233882/4122: [ 26.308619] #0: (rcu_read_lock){....}, at: [<00000000d21c7ee6>] __rds_conn_create+0xe46/0x1b50 [ 26.317569] [ 26.317569] stack backtrace: [ 26.322076] CPU: 0 PID: 4122 Comm: syzkaller233882 Not tainted 4.15.0+ #222 [ 26.329154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.338486] Call Trace: [ 26.341068] dump_stack+0x194/0x257 [ 26.344718] ? arch_local_irq_restore+0x53/0x53 [ 26.349386] lockdep_rcu_suspicious+0x123/0x170 [ 26.354042] ___might_sleep+0x385/0x470 [ 26.358007] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 26.363876] ? __debug_object_init+0x235/0x1040 [ 26.368530] ? debug_mutex_init+0x1c/0x60 [ 26.372660] __might_sleep+0x95/0x190 [ 26.376448] kmem_cache_alloc_trace+0x299/0x740 [ 26.381109] ? lock_acquire+0x1d5/0x580 [ 26.385067] ? lock_acquire+0x1d5/0x580 [ 26.389041] ? __rds_conn_create+0xe46/0x1b50 [ 26.393536] rds_loop_conn_alloc+0xc8/0x380 [ 26.397840] ? rds_loop_conn_free+0x290/0x290 [ 26.402334] ? __init_waitqueue_head+0x97/0x140 [ 26.406985] ? rcutorture_record_progress+0x10/0x10 [ 26.411982] ? __lockdep_init_map+0xe4/0x650 [ 26.416375] __rds_conn_create+0x112f/0x1b50 [ 26.421228] ? rds_conn_drop+0xb0/0xb0 [ 26.425098] ? find_held_lock+0x35/0x1d0 [ 26.429140] ? retint_kernel+0x10/0x10 [ 26.433018] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.438044] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.442798] ? retint_kernel+0x10/0x10 [ 26.446676] ? copy_user_enhanced_fast_string+0xe/0x20 [ 26.451932] ? copyin+0x91/0xb0 [ 26.455210] ? copy_page_from_iter+0x50e/0x7c0 [ 26.459778] ? _copy_from_iter+0xf30/0xf30 [ 26.463996] ? _raw_spin_unlock_bh+0x30/0x40 [ 26.468395] ? rds_message_copy_from_user+0x29e/0x370 [ 26.473566] rds_conn_create_outgoing+0x3f/0x50 [ 26.478219] rds_sendmsg+0xda3/0x2390 [ 26.481998] ? avc_has_perm+0x43e/0x680 [ 26.485968] ? rds_send_drop_to+0x19d0/0x19d0 [ 26.490453] ? find_held_lock+0x35/0x1d0 [ 26.494500] ? sock_has_perm+0x2a4/0x420 [ 26.498543] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 26.503885] ? lock_release+0xa02/0xa40 [ 26.507840] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 26.513706] ? __check_object_size+0x8b/0x530 [ 26.518180] ? __handle_mm_fault+0x80e/0x3ce0 [ 26.522671] ? __might_sleep+0x95/0x190 [ 26.526627] ? selinux_socket_sendmsg+0x36/0x40 [ 26.531283] ? security_socket_sendmsg+0x89/0xb0 [ 26.536035] ? rds_send_drop_to+0x19d0/0x19d0 [ 26.540524] sock_sendmsg+0xca/0x110 [ 26.544221] SYSC_sendto+0x361/0x5c0 [ 26.547918] ? SYSC_connect+0x4a0/0x4a0 [ 26.551876] ? __do_page_fault+0x5f7/0xc90 [ 26.556118] ? lock_downgrade+0x980/0x980 [ 26.560253] ? handle_mm_fault+0x43b/0x970 [ 26.564480] ? up_read+0x1a/0x40 [ 26.567826] ? __do_page_fault+0x3d6/0xc90 [ 26.572052] ? mm_fault_error+0x2c0/0x2c0 [ 26.576179] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 26.581702] SyS_sendto+0x40/0x50 [ 26.585134] ? SyS_getpeername+0x30/0x30 [ 26.589177] do_syscall_64+0x282/0x940 [ 26.593049] ? __do_page_fault+0xc90/0xc90 [ 26.597272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.602020] ? syscall_return_slowpath+0x550/0x550 [ 26.606941] ? syscall_return_slowpath+0x2ac/0x550 [ 26.611850] ? prepare_exit_to_usermode+0x350/0x350 [ 26.616847] ? retint_user+0x18/0x18 [ 26.620545] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.625372] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 26.630538] RIP: 0033:0x43fd99 [ 26.633713] RSP: 002b:00007ffdeee40968 EFLAGS: 00000217 ORIG_RAX: 000000000000002c [ 26.641399] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd99 [ 26.648648] RDX: 000000000000ff4e RSI: 0000000020fbffff RDI: 0000000000000003 [ 26.655984] RBP: 00000000006ca018 R08: 0000000020fc9000 R09: 0000000000000010 [ 26.663234] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004016c0 [ 26.670484] R13: 0000000000401750 R14: 0000000000000000 R15: 0000000000000000 [ 26.677803] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 26.685280] in_atomic(): 1, irqs_disabled(): 0, pid: 4122, name: syzkaller233882 [ 26.692846] 1 lock held by syzkaller233882/4122: [ 26.697604] #0: (rcu_read_lock){....}, at: [<00000000d21c7ee6>] __rds_conn_create+0xe46/0x1b50 [ 26.706562] CPU: 0 PID: 4122 Comm: syzkaller233882 Not tainted 4.15.0+ #222 [ 26.713659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.722993] Call Trace: [ 26.725569] dump_stack+0x194/0x257 [ 26.729186] ? arch_local_irq_restore+0x53/0x53 [ 26.733834] ? print_lock+0x9f/0xa2 [ 26.737453] ? lockdep_print_held_locks+0xc4/0x130 [ 26.742379] ___might_sleep+0x2b2/0x470 [ 26.746344] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 26.752204] ? __debug_object_init+0x235/0x1040 [ 26.756857] ? debug_mutex_init+0x1c/0x60 [ 26.760988] __might_sleep+0x95/0x190 [ 26.764776] kmem_cache_alloc_trace+0x299/0x740 [ 26.769435] ? lock_acquire+0x1d5/0x580 [ 26.773386] ? lock_acquire+0x1d5/0x580 [ 26.777339] ? __rds_conn_create+0xe46/0x1b50 [ 26.781816] rds_loop_conn_alloc+0xc8/0x380 [ 26.786125] ? rds_loop_conn_free+0x290/0x290 [ 26.790599] ? __init_waitqueue_head+0x97/0x140 [ 26.795251] ? rcutorture_record_progress+0x10/0x10 [ 26.800247] ? __lockdep_init_map+0xe4/0x650 [ 26.804640] __rds_conn_create+0x112f/0x1b50 [ 26.809077] ? rds_conn_drop+0xb0/0xb0 [ 26.812944] ? find_held_lock+0x35/0x1d0 [ 26.816985] ? retint_kernel+0x10/0x10 [ 26.820856] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.825854] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.830595] ? retint_kernel+0x10/0x10 [ 26.834473] ? copy_user_enhanced_fast_string+0xe/0x20 [ 26.839732] ? copyin+0x91/0xb0 [ 26.842999] ? copy_page_from_iter+0x50e/0x7c0 [ 26.847570] ? _copy_from_iter+0xf30/0xf30 [ 26.851797] ? _raw_spin_unlock_bh+0x30/0x40 [ 26.856192] ? rds_message_copy_from_user+0x29e/0x370 [ 26.861368] rds_conn_create_outgoing+0x3f/0x50 [ 26.866042] rds_sendmsg+0xda3/0x2390 [ 26.869835] ? avc_has_perm+0x43e/0x680 [ 26.873805] ? rds_send_drop_to+0x19d0/0x19d0 [ 26.878293] ? find_held_lock+0x35/0x1d0 [ 26.882344] ? sock_has_perm+0x2a4/0x420 [ 26.886382] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 26.891724] ? lock_release+0xa02/0xa40 [ 26.895688] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 26.901592] ? __check_object_size+0x8b/0x530 [ 26.906068] ? __handle_mm_fault+0x80e/0x3ce0 [ 26.910550] ? __might_sleep+0x95/0x190 [ 26.914518] ? selinux_socket_sendmsg+0x36/0x40 [ 26.919170] ? security_socket_sendmsg+0x89/0xb0 [ 26.923919] ? rds_send_drop_to+0x19d0/0x19d0 [ 26.928409] sock_sendmsg+0xca/0x110 [ 26.932114] SYSC_sendto+0x361/0x5c0 [ 26.935807] ? SYSC_connect+0x4a0/0x4a0 [ 26.939767] ? __do_page_fault+0x5f7/0xc90 [ 26.943996] ? lock_downgrade+0x980/0x980 [ 26.948135] ? handle_mm_fault+0x43b/0x970 [ 26.952375] ? up_read+0x1a/0x40 [ 26.955722] ? __do_page_fault+0x3d6/0xc90 [ 26.959942] ? mm_fault_error+0x2c0/0x2c0 [ 26.964073] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 26.969594] SyS_sendto+0x40/0x50 [ 26.973032] ? SyS_getpeername+0x30/0x30 [ 26.977083] do_syscall_64+0x282/0x940 [ 26.980955] ? __do_page_fault+0xc90/0xc90 [ 26.985168] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.989903] ? syscall_return_slowpath+0x550/0x550 [ 26.994809] ? syscall_return_slowpath+0x2ac/0x550 [ 26.999721] ? prepare_exit_to_usermode+0x350/0x350 [ 27.004720] ? retint_user+0x18/0x18 [ 27.008417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 27.013247] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 27.018414] RIP: 0033:0x43fd99 [ 27.021581] RSP: 002b:00007ffdeee40968 EFLAGS: 00000217 ORIG_RAX: 000000000000002c [ 27.029268] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd99 [ 27.036526] RDX: 0000000000