[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.751173] audit: type=1400 audit(1518381509.153:6): avc: denied { map } for pid=4144 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.003281] audit: type=1400 audit(1518381515.406:7): avc: denied { map } for pid=4158 comm="syzkaller115269" path="/root/syzkaller115269908" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.031035] [ 24.032741] ============================= [ 24.036898] WARNING: suspicious RCU usage [ 24.041055] 4.15.0+ #218 Not tainted [ 24.044774] ----------------------------- [ 24.048938] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 24.058210] [ 24.058210] other info that might help us debug this: [ 24.058210] [ 24.066360] [ 24.066360] rcu_scheduler_active = 2, debug_locks = 1 [ 24.073042] 1 lock held by syzkaller115269/4158: [ 24.077802] #0: (rcu_read_lock){....}, at: [<000000002439470a>] __rds_conn_create+0xe46/0x1b50 [ 24.086755] [ 24.086755] stack backtrace: [ 24.091260] CPU: 0 PID: 4158 Comm: syzkaller115269 Not tainted 4.15.0+ #218 [ 24.098335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.107659] Call Trace: [ 24.110229] dump_stack+0x194/0x257 [ 24.113836] ? arch_local_irq_restore+0x53/0x53 [ 24.118490] lockdep_rcu_suspicious+0x123/0x170 [ 24.123614] ___might_sleep+0x385/0x470 [ 24.127565] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 24.133426] ? debug_mutex_init+0x1c/0x60 [ 24.137552] __might_sleep+0x95/0x190 [ 24.141335] kmem_cache_alloc_trace+0x299/0x740 [ 24.145979] ? lock_acquire+0x1d5/0x580 [ 24.149927] ? lock_acquire+0x1d5/0x580 [ 24.153875] ? __rds_conn_create+0xe46/0x1b50 [ 24.158347] rds_loop_conn_alloc+0xc8/0x380 [ 24.162642] ? rds_loop_conn_free+0x290/0x290 [ 24.167112] ? __init_waitqueue_head+0x97/0x140 [ 24.171755] ? rcutorture_record_progress+0x10/0x10 [ 24.176748] ? __lockdep_init_map+0xe4/0x650 [ 24.181133] __rds_conn_create+0x112f/0x1b50 [ 24.185532] ? rds_conn_drop+0xb0/0xb0 [ 24.189404] ? __raw_spin_lock_init+0x1c/0x100 [ 24.193963] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.198957] ? __lockdep_init_map+0xe4/0x650 [ 24.203340] ? lockdep_init_map+0x9/0x10 [ 24.207372] ? __init_waitqueue_head+0x97/0x140 [ 24.212020] ? init_wait_entry+0x1b0/0x1b0 [ 24.216241] ? lockdep_init_map+0x9/0x10 [ 24.220281] ? rds_message_alloc+0x28c/0x330 [ 24.224664] ? rds_message_next_extension+0x210/0x210 [ 24.229827] ? trace_hardirqs_on+0xd/0x10 [ 24.233953] ? _raw_spin_unlock_bh+0x30/0x40 [ 24.238340] ? __release_sock+0x360/0x360 [ 24.242461] ? lock_sock_nested+0x91/0x110 [ 24.246674] rds_conn_create_outgoing+0x3f/0x50 [ 24.251320] rds_sendmsg+0xda3/0x2390 [ 24.255095] ? avc_has_perm+0x43e/0x680 [ 24.259057] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.263537] ? __might_fault+0x110/0x1d0 [ 24.267573] ? lock_downgrade+0x980/0x980 [ 24.271700] ? compat_rw_copy_check_uvector+0x25f/0x2f0 [ 24.277041] ? sock_has_perm+0x2a4/0x420 [ 24.281079] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 24.286436] ? iov_iter_get_pages+0x1150/0x1150 [ 24.291091] ? selinux_socket_sendmsg+0x36/0x40 [ 24.295733] ? security_socket_sendmsg+0x89/0xb0 [ 24.300466] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.304937] sock_sendmsg+0xca/0x110 [ 24.308630] ___sys_sendmsg+0x767/0x8b0 [ 24.312582] ? copy_msghdr_from_user+0x590/0x590 [ 24.317313] ? release_sock+0x1d4/0x2a0 [ 24.321269] ? __handle_mm_fault+0x80e/0x3ce0 [ 24.325742] ? __pmd_alloc+0x4e0/0x4e0 [ 24.329605] ? check_noncircular+0x20/0x20 [ 24.333817] ? __fget_light+0x2b2/0x3c0 [ 24.337764] ? fget_raw+0x20/0x20 [ 24.341197] ? handle_mm_fault+0x270/0x970 [ 24.345408] ? find_held_lock+0x35/0x1d0 [ 24.349458] __sys_sendmsg+0xe5/0x210 [ 24.353230] ? __sys_sendmsg+0xe5/0x210 [ 24.357183] ? SyS_shutdown+0x290/0x290 [ 24.361137] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 24.365689] ? vmacache_find+0x5f/0x280 [ 24.369661] compat_SyS_sendmsg+0x2a/0x40 [ 24.373784] ? compat_SyS_getsockopt+0x420/0x420 [ 24.378535] do_fast_syscall_32+0x3ee/0xfa1 [ 24.382839] ? do_int80_syscall_32+0x9d0/0x9d0 [ 24.387394] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.392123] ? syscall_return_slowpath+0x550/0x550 [ 24.397030] ? syscall_return_slowpath+0x2ac/0x550 [ 24.401933] ? prepare_exit_to_usermode+0x350/0x350 [ 24.406927] ? retint_user+0x18/0x18 [ 24.410620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.415453] entry_SYSENTER_compat+0x54/0x63 [ 24.419834] RIP: 0023:0xf7ff1c79 [ 24.423170] RSP: 002b:00000000ffbd35ac EFLAGS: 00000217 ORIG_RAX: 0000000000000172 [ 24.430850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020159fc8 [ 24.438094] RDX: 0000000000000000 RSI: 000000000000016a RDI: 0000000000000003 [ 24.445337] RBP: 0000000020adf000 R08: 0000000000000000 R09: 0000000000000000 [ 24.452588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 24.459832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.467137] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 24.474590] in_atomic(): 1, irqs_disabled(): 0, pid: 4158, name: syzkaller115269 [ 24.482133] 1 lock held by syzkaller115269/4158: [ 24.486889] #0: (rcu_read_lock){....}, at: [<000000002439470a>] __rds_conn_create+0xe46/0x1b50 [ 24.495850] CPU: 0 PID: 4158 Comm: syzkaller115269 Not tainted 4.15.0+ #218 [ 24.502928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.512253] Call Trace: [ 24.514820] dump_stack+0x194/0x257 [ 24.518425] ? arch_local_irq_restore+0x53/0x53 [ 24.523071] ? print_lock+0x9f/0xa2 [ 24.526681] ? lockdep_print_held_locks+0xc4/0x130 [ 24.531592] ___might_sleep+0x2b2/0x470 [ 24.535543] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 24.541403] ? debug_mutex_init+0x1c/0x60 [ 24.545531] __might_sleep+0x95/0x190 [ 24.549312] kmem_cache_alloc_trace+0x299/0x740 [ 24.553956] ? lock_acquire+0x1d5/0x580 [ 24.557903] ? lock_acquire+0x1d5/0x580 [ 24.561853] ? __rds_conn_create+0xe46/0x1b50 [ 24.566327] rds_loop_conn_alloc+0xc8/0x380 [ 24.570623] ? rds_loop_conn_free+0x290/0x290 [ 24.575095] ? __init_waitqueue_head+0x97/0x140 [ 24.579741] ? rcutorture_record_progress+0x10/0x10 [ 24.584732] ? __lockdep_init_map+0xe4/0x650 [ 24.589120] __rds_conn_create+0x112f/0x1b50 [ 24.593525] ? rds_conn_drop+0xb0/0xb0 [ 24.597398] ? __raw_spin_lock_init+0x1c/0x100 [ 24.601954] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.606949] ? __lockdep_init_map+0xe4/0x650 [ 24.611331] ? lockdep_init_map+0x9/0x10 [ 24.615368] ? __init_waitqueue_head+0x97/0x140 [ 24.620010] ? init_wait_entry+0x1b0/0x1b0 [ 24.624221] ? lockdep_init_map+0x9/0x10 [ 24.628261] ? rds_message_alloc+0x28c/0x330 [ 24.632645] ? rds_message_next_extension+0x210/0x210 [ 24.637806] ? trace_hardirqs_on+0xd/0x10 [ 24.641934] ? _raw_spin_unlock_bh+0x30/0x40 [ 24.646322] ? __release_sock+0x360/0x360 [ 24.650442] ? lock_sock_nested+0x91/0x110 [ 24.654656] rds_conn_create_outgoing+0x3f/0x50 [ 24.659308] rds_sendmsg+0xda3/0x2390 [ 24.663080] ? avc_has_perm+0x43e/0x680 [ 24.667049] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.671530] ? __might_fault+0x110/0x1d0 [ 24.675575] ? lock_downgrade+0x980/0x980 [ 24.679705] ? compat_rw_copy_check_uvector+0x25f/0x2f0 [ 24.685043] ? sock_has_perm+0x2a4/0x420 [ 24.689078] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 24.694417] ? iov_iter_get_pages+0x1150/0x1150 [ 24.699071] ? selinux_socket_sendmsg+0x36/0x40 [ 24.703717] ? security_socket_sendmsg+0x89/0xb0 [ 24.708444] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.712916] sock_sendmsg+0xca/0x110 [ 24.716605] ___sys_sendmsg+0x767/0x8b0 [ 24.720565] ? copy_msghdr_from_user+0x590/0x590 [ 24.725291] ? release_sock+0x1d4/0x2a0 [ 24.729245] ? __handle_mm_fault+0x80e/0x3ce0 [ 24.733721] ? __pmd_alloc+0x4e0/0x4e0 [ 24.737580] ? check_noncircular+0x20/0x20 [ 24.741793] ? __fget_light+0x2b2/0x3c0 [ 24.745743] ? fget_raw+0x20/0x20 [ 24.749175] ? handle_mm_fault+0x270/0x970 [ 24.753387] ? find_held_lock+0x35/0x1d0 [ 24.757438] __sys_sendmsg+0xe5/0x210 [ 24.761214] ? __sys_sendmsg+0xe5/0x210 [ 24.765162] ? SyS_shutdown+0x290/0x290 [ 24.769114] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 24.773667] ? vmacache_find+0x5f/0x280 [ 24.777637] compat_SyS_sendmsg+0x2a/0x40 [ 24.781760] ? compat_SyS_getsockopt+0x420/0x420 [ 24.786494] do_fast_syscall_32+0x3ee/0xfa1 [ 24.790796] ? do_int80_syscall_32+0x9d0/0x9d0 [ 24.795354] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.800085] ? syscall_return_slowpath+0x550/0x550 [ 24.804988] ? syscall_return_slowpath+0x2ac/0x550 [ 24.809892] ? prepare_exit_to_usermode+0x350/0x350 [ 24.814886] ? retint_user+0x18/0x18 [ 24.818578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.823400] entry_SYSENTER_compat+0x54/0x63 [ 24.827781] RIP: 0023:0xf7ff1c79 [ 24.831118] RSP: 002b:00000000ffbd35ac EFLAGS: 00000217 ORIG_RAX: 0000000000000172 [ 24.838798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020159fc8 [ 24.846044] RDX: 0000000000000000 RSI: 000000000000016a RDI: 0000000000000003 [ 24.853294] RBP: 0000000020adf000 R08: 00