[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.006481] audit: type=1400 audit(1518344483.901:6): avc: denied { map } for pid=4155 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 24.285355] audit: type=1400 audit(1518344490.180:7): avc: denied { map } for pid=4169 comm="syzkaller231458" path="/root/syzkaller231458030" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.313187] [ 24.314880] ============================= [ 24.319055] WARNING: suspicious RCU usage [ 24.323213] 4.15.0+ #222 Not tainted [ 24.326932] ----------------------------- [ 24.331096] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 24.340366] [ 24.340366] other info that might help us debug this: [ 24.340366] [ 24.348517] [ 24.348517] rcu_scheduler_active = 2, debug_locks = 1 [ 24.355189] 1 lock held by syzkaller231458/4169: [ 24.359942] #0: (rcu_read_lock){....}, at: [<00000000c13197bd>] __rds_conn_create+0xe46/0x1b50 [ 24.368890] [ 24.368890] stack backtrace: [ 24.373394] CPU: 1 PID: 4169 Comm: syzkaller231458 Not tainted 4.15.0+ #222 [ 24.380469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.389794] Call Trace: [ 24.392359] dump_stack+0x194/0x257 [ 24.395981] ? arch_local_irq_restore+0x53/0x53 [ 24.400636] lockdep_rcu_suspicious+0x123/0x170 [ 24.405279] ___might_sleep+0x385/0x470 [ 24.409227] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 24.415091] ? __debug_object_init+0x235/0x1040 [ 24.419738] ? debug_mutex_init+0x1c/0x60 [ 24.423864] __might_sleep+0x95/0x190 [ 24.427644] kmem_cache_alloc_trace+0x299/0x740 [ 24.432288] ? lock_acquire+0x1d5/0x580 [ 24.436234] ? lock_acquire+0x1d5/0x580 [ 24.440184] ? __rds_conn_create+0xe46/0x1b50 [ 24.444656] rds_loop_conn_alloc+0xc8/0x380 [ 24.448952] ? rds_loop_conn_free+0x290/0x290 [ 24.453421] ? __init_waitqueue_head+0x97/0x140 [ 24.458065] ? rcutorture_record_progress+0x10/0x10 [ 24.463063] ? __lockdep_init_map+0xe4/0x650 [ 24.467457] __rds_conn_create+0x112f/0x1b50 [ 24.471856] ? rds_conn_drop+0xb0/0xb0 [ 24.475727] ? __raw_spin_lock_init+0x1c/0x100 [ 24.480285] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.485280] ? __lockdep_init_map+0xe4/0x650 [ 24.489665] ? lockdep_init_map+0x9/0x10 [ 24.493700] ? __init_waitqueue_head+0x97/0x140 [ 24.498344] ? init_wait_entry+0x1b0/0x1b0 [ 24.502558] ? lockdep_init_map+0x9/0x10 [ 24.506599] ? rds_message_alloc+0x28c/0x330 [ 24.510983] ? rds_message_next_extension+0x210/0x210 [ 24.516145] ? trace_hardirqs_on+0xd/0x10 [ 24.520270] ? _raw_spin_unlock_bh+0x30/0x40 [ 24.524657] ? __release_sock+0x360/0x360 [ 24.528784] ? lock_sock_nested+0x91/0x110 [ 24.533008] rds_conn_create_outgoing+0x3f/0x50 [ 24.537656] rds_sendmsg+0xda3/0x2390 [ 24.541430] ? avc_has_perm+0x43e/0x680 [ 24.545391] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.549866] ? lock_downgrade+0x980/0x980 [ 24.553999] ? rw_copy_check_uvector+0x1be/0x280 [ 24.558734] ? sock_has_perm+0x2a4/0x420 [ 24.562770] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 24.568110] ? dup_iter+0x1a2/0x260 [ 24.571713] ? kasan_check_write+0x14/0x20 [ 24.575927] ? copy_msghdr_from_user+0x3a6/0x590 [ 24.580655] ? check_noncircular+0x20/0x20 [ 24.584869] ? selinux_socket_sendmsg+0x36/0x40 [ 24.589513] ? security_socket_sendmsg+0x89/0xb0 [ 24.594241] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.598711] sock_sendmsg+0xca/0x110 [ 24.602402] ___sys_sendmsg+0x767/0x8b0 [ 24.606374] ? copy_msghdr_from_user+0x590/0x590 [ 24.611128] ? __pmd_alloc+0x4e0/0x4e0 [ 24.614988] ? check_noncircular+0x20/0x20 [ 24.619197] ? lock_release+0xa40/0xa40 [ 24.623147] ? lock_acquire+0x1d5/0x580 [ 24.627096] ? check_noncircular+0x20/0x20 [ 24.631307] ? find_held_lock+0x35/0x1d0 [ 24.635345] ? __fget_light+0x2b2/0x3c0 [ 24.639293] ? fget_raw+0x20/0x20 [ 24.642721] ? handle_mm_fault+0x270/0x970 [ 24.646933] ? find_held_lock+0x35/0x1d0 [ 24.650978] ? __do_page_fault+0x5f7/0xc90 [ 24.655188] ? lock_downgrade+0x980/0x980 [ 24.659320] __sys_sendmsg+0xe5/0x210 [ 24.663099] ? __sys_sendmsg+0xe5/0x210 [ 24.667056] ? SyS_shutdown+0x290/0x290 [ 24.671031] ? __do_page_fault+0x3d6/0xc90 [ 24.675258] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 24.680775] SyS_sendmsg+0x2d/0x50 [ 24.684288] ? __sys_sendmsg+0x210/0x210 [ 24.688324] do_syscall_64+0x282/0x940 [ 24.692185] ? __do_page_fault+0xc90/0xc90 [ 24.696395] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.701124] ? syscall_return_slowpath+0x550/0x550 [ 24.706027] ? syscall_return_slowpath+0x2ac/0x550 [ 24.710930] ? prepare_exit_to_usermode+0x350/0x350 [ 24.715922] ? retint_user+0x18/0x18 [ 24.719614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.724438] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 24.729602] RIP: 0033:0x43fdf9 [ 24.732763] RSP: 002b:00007fff4a6fe3c8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 24.740443] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdf9 [ 24.747686] RDX: 0000000000000000 RSI: 0000000020159fc8 RDI: 0000000000000003 [ 24.754927] RBP: 00000000006ca018 R08: 0000000000000000 R09: 0000000000000000 [ 24.762169] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401720 [ 24.769410] R13: 00000000004017b0 R14: 0000000000000000 R15: 0000000000000000 [ 24.776717] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 24.784178] in_atomic(): 1, irqs_disabled(): 0, pid: 4169, name: syzkaller231458 [ 24.791723] 1 lock held by syzkaller231458/4169: [ 24.796477] #0: (rcu_read_lock){....}, at: [<00000000c13197bd>] __rds_conn_create+0xe46/0x1b50 [ 24.805443] CPU: 1 PID: 4169 Comm: syzkaller231458 Not tainted 4.15.0+ #222 [ 24.812523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.821853] Call Trace: [ 24.824431] dump_stack+0x194/0x257 [ 24.828044] ? arch_local_irq_restore+0x53/0x53 [ 24.832698] ? print_lock+0x9f/0xa2 [ 24.836316] ? lockdep_print_held_locks+0xc4/0x130 [ 24.841236] ___might_sleep+0x2b2/0x470 [ 24.845185] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 24.851045] ? __debug_object_init+0x235/0x1040 [ 24.855691] ? debug_mutex_init+0x1c/0x60 [ 24.859815] __might_sleep+0x95/0x190 [ 24.863594] kmem_cache_alloc_trace+0x299/0x740 [ 24.868236] ? lock_acquire+0x1d5/0x580 [ 24.872181] ? lock_acquire+0x1d5/0x580 [ 24.876129] ? __rds_conn_create+0xe46/0x1b50 [ 24.880602] rds_loop_conn_alloc+0xc8/0x380 [ 24.884897] ? rds_loop_conn_free+0x290/0x290 [ 24.889366] ? __init_waitqueue_head+0x97/0x140 [ 24.894023] ? rcutorture_record_progress+0x10/0x10 [ 24.899032] ? __lockdep_init_map+0xe4/0x650 [ 24.903431] __rds_conn_create+0x112f/0x1b50 [ 24.907839] ? rds_conn_drop+0xb0/0xb0 [ 24.911715] ? __raw_spin_lock_init+0x1c/0x100 [ 24.916287] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.921297] ? __lockdep_init_map+0xe4/0x650 [ 24.925685] ? lockdep_init_map+0x9/0x10 [ 24.929721] ? __init_waitqueue_head+0x97/0x140 [ 24.934367] ? init_wait_entry+0x1b0/0x1b0 [ 24.938578] ? lockdep_init_map+0x9/0x10 [ 24.942618] ? rds_message_alloc+0x28c/0x330 [ 24.946998] ? rds_message_next_extension+0x210/0x210 [ 24.952158] ? trace_hardirqs_on+0xd/0x10 [ 24.956286] ? _raw_spin_unlock_bh+0x30/0x40 [ 24.960675] ? __release_sock+0x360/0x360 [ 24.964794] ? lock_sock_nested+0x91/0x110 [ 24.969008] rds_conn_create_outgoing+0x3f/0x50 [ 24.973660] rds_sendmsg+0xda3/0x2390 [ 24.977434] ? avc_has_perm+0x43e/0x680 [ 24.981394] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.985867] ? lock_downgrade+0x980/0x980 [ 24.989992] ? rw_copy_check_uvector+0x1be/0x280 [ 24.994730] ? sock_has_perm+0x2a4/0x420 [ 24.998766] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 25.004103] ? dup_iter+0x1a2/0x260 [ 25.007709] ? kasan_check_write+0x14/0x20 [ 25.011922] ? copy_msghdr_from_user+0x3a6/0x590 [ 25.016651] ? check_noncircular+0x20/0x20 [ 25.020864] ? selinux_socket_sendmsg+0x36/0x40 [ 25.025505] ? security_socket_sendmsg+0x89/0xb0 [ 25.030236] ? rds_send_drop_to+0x19d0/0x19d0 [ 25.034705] sock_sendmsg+0xca/0x110 [ 25.038409] ___sys_sendmsg+0x767/0x8b0 [ 25.042360] ? copy_msghdr_from_user+0x590/0x590 [ 25.047094] ? __pmd_alloc+0x4e0/0x4e0 [ 25.050952] ? check_noncircular+0x20/0x20 [ 25.055157] ? lock_release+0xa40/0xa40 [ 25.059102] ? lock_acquire+0x1d5/0x580 [ 25.063048] ? check_noncircular+0x20/0x20 [ 25.067255] ? find_held_lock+0x35/0x1d0 [ 25.071306] ? __fget_light+0x2b2/0x3c0 [ 25.075253] ? fget_raw+0x20/0x20 [ 25.078676] ? handle_mm_fault+0x270/0x970 [ 25.082885] ? find_held_lock+0x35/0x1d0 [ 25.086931] ? __do_page_fault+0x5f7/0xc90 [ 25.091139] ? lock_downgrade+0x980/0x980 [ 25.095270] __sys_sendmsg+0xe5/0x210 [ 25.099051] ? __sys_sendmsg+0xe5/0x210 [ 25.103016] ? SyS_shutdown+0x290/0x290 [ 25.106974] ? __do_page_fault+0x3d6/0xc90 [ 25.111206] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 25.116725] SyS_sendmsg+0x2d/0x50 [ 25.120240] ? __sys_sendmsg+0x210/0x210 [ 25.124278] do_syscall_64+0x282/0x940 [ 25.128140] ? __do_page_fault+0xc90/0xc90 [ 25.132349] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.137088] ? syscall_return_slowpath+0x550/0x550 [ 25.141993] ? syscall_return_slowpath+0x2ac/0x550 [ 25.146900] ? prepare_exit_to_usermode+0x350/0x350 [ 25.151893] ? retint_user+0x18/0x18 [ 25.155584] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.160418] entry_SYSCALL_64_after_hwframe+0x26/0x9b [ 25.165580] RIP: 0033:0x43fdf9 [ 25.168742] RSP: 002b:00007fff4a6fe3c8 EFLAGS: 00000217 ORIG_RAX: 000000000000002e [ 25.176422] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fdf9 [ 25.183665] RDX: 0000000000000000 RSI: 0000000020159fc8 RDI: 000000