[....] Starting enhanced syslogd: rsyslogd[ 16.001654] audit: type=1400 audit(1518273279.086:5): avc: denied { syslog } for pid=3998 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.179959] audit: type=1400 audit(1518273285.264:6): avc: denied { map } for pid=4138 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 28.444746] audit: type=1400 audit(1518273291.529:7): avc: denied { map } for pid=4152 comm="syzkaller230567" path="/root/syzkaller230567573" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 28.813991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program [ 29.125668] [ 29.127377] ============================= [ 29.131643] WARNING: suspicious RCU usage [ 29.135790] 4.15.0+ #217 Not tainted [ 29.139504] ----------------------------- [ 29.143649] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 29.152916] [ 29.152916] other info that might help us debug this: [ 29.152916] [ 29.161060] [ 29.161060] rcu_scheduler_active = 2, debug_locks = 1 [ 29.167725] 1 lock held by syzkaller230567/4152: [ 29.172474] #0: (rcu_read_lock){....}, at: [<0000000039544f91>] __rds_conn_create+0xe46/0x1b50 [ 29.181418] [ 29.181418] stack backtrace: [ 29.185918] CPU: 1 PID: 4152 Comm: syzkaller230567 Not tainted 4.15.0+ #217 [ 29.193025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.202354] Call Trace: [ 29.204914] dump_stack+0x194/0x257 [ 29.208529] ? arch_local_irq_restore+0x53/0x53 [ 29.213182] lockdep_rcu_suspicious+0x123/0x170 [ 29.217830] ___might_sleep+0x385/0x470 [ 29.221778] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.227638] ? debug_mutex_init+0x1c/0x60 [ 29.231762] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.236770] __might_sleep+0x95/0x190 [ 29.240552] kmem_cache_alloc+0x2a2/0x760 [ 29.244674] ? lock_acquire+0x1d5/0x580 [ 29.248624] ? __rds_conn_create+0xe46/0x1b50 [ 29.253094] ? SyS_membarrier+0x700/0x700 [ 29.257214] ? init_timer_key+0x163/0x3f0 [ 29.261340] rds_tcp_conn_alloc+0xa7/0x4e0 [ 29.265551] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 29.269933] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.274144] ? __lockdep_init_map+0xe4/0x650 [ 29.278526] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.282737] __rds_conn_create+0x112f/0x1b50 [ 29.287138] ? rds_conn_drop+0xb0/0xb0 [ 29.291011] ? __raw_spin_lock_init+0x1c/0x100 [ 29.295574] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.300568] ? __lockdep_init_map+0xe4/0x650 [ 29.304955] ? lockdep_init_map+0x9/0x10 [ 29.308988] ? __init_waitqueue_head+0x97/0x140 [ 29.313634] ? init_wait_entry+0x1b0/0x1b0 [ 29.317855] ? lockdep_init_map+0x9/0x10 [ 29.321903] ? rds_message_alloc+0x28c/0x330 [ 29.326290] ? rds_message_next_extension+0x210/0x210 [ 29.331453] ? trace_hardirqs_on+0xd/0x10 [ 29.335580] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.339966] ? __release_sock+0x360/0x360 [ 29.344096] ? lock_sock_nested+0x91/0x110 [ 29.348311] rds_conn_create_outgoing+0x3f/0x50 [ 29.352957] rds_sendmsg+0xda3/0x2390 [ 29.356733] ? avc_has_perm+0x43e/0x680 [ 29.360692] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.365158] ? release_sock+0x1d4/0x2a0 [ 29.369119] ? lock_downgrade+0x980/0x980 [ 29.373245] ? find_held_lock+0x35/0x1d0 [ 29.377296] ? sock_has_perm+0x2a4/0x420 [ 29.381336] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 29.386672] ? lock_release+0xa02/0xa40 [ 29.390621] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.396481] ? __check_object_size+0x8b/0x530 [ 29.400949] ? __release_sock+0x360/0x360 [ 29.405077] ? __might_sleep+0x95/0x190 [ 29.409039] ? selinux_socket_sendmsg+0x36/0x40 [ 29.413687] ? security_socket_sendmsg+0x89/0xb0 [ 29.418431] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.422901] sock_sendmsg+0xca/0x110 [ 29.426590] SYSC_sendto+0x361/0x5c0 [ 29.430282] ? SYSC_connect+0x4a0/0x4a0 [ 29.434238] ? security_socket_bind+0x89/0xb0 [ 29.438708] ? SYSC_bind+0x290/0x410 [ 29.442417] ? up_read+0x1a/0x40 [ 29.445762] ? __do_page_fault+0x3d6/0xc90 [ 29.449977] SyS_sendto+0x40/0x50 [ 29.453406] ? SyS_getpeername+0x30/0x30 [ 29.457444] do_fast_syscall_32+0x3ee/0xfa1 [ 29.461744] ? do_int80_syscall_32+0x9d0/0x9d0 [ 29.466310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.471052] ? syscall_return_slowpath+0x550/0x550 [ 29.475960] ? syscall_return_slowpath+0x2ac/0x550 [ 29.480863] ? prepare_exit_to_usermode+0x350/0x350 [ 29.485854] ? sysret32_from_system_call+0x5/0x3b [ 29.490676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.495514] entry_SYSENTER_compat+0x54/0x63 [ 29.499904] RIP: 0023:0xf7f12c79 [ 29.503241] RSP: 002b:00000000ffa7c33c EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 29.510920] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020fc2000 [ 29.518164] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002069affb [ 29.525405] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 29.532659] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 29.539903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 29.547301] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 29.554752] in_atomic(): 1, irqs_disabled(): 0, pid: 4152, name: syzkaller230567 [ 29.562289] 1 lock held by syzkaller230567/4152: [ 29.567056] #0: (rcu_read_lock){....}, at: [<0000000039544f91>] __rds_conn_create+0xe46/0x1b50 [ 29.576038] CPU: 1 PID: 4152 Comm: syzkaller230567 Not tainted 4.15.0+ #217 [ 29.583129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.592457] Call Trace: [ 29.595027] dump_stack+0x194/0x257 [ 29.598648] ? arch_local_irq_restore+0x53/0x53 [ 29.603293] ? print_lock+0x9f/0xa2 [ 29.606897] ? lockdep_print_held_locks+0xc4/0x130 [ 29.611804] ___might_sleep+0x2b2/0x470 [ 29.615775] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.621629] ? debug_mutex_init+0x1c/0x60 [ 29.625753] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.630746] __might_sleep+0x95/0x190 [ 29.634527] kmem_cache_alloc+0x2a2/0x760 [ 29.638648] ? lock_acquire+0x1d5/0x580 [ 29.642596] ? __rds_conn_create+0xe46/0x1b50 [ 29.647070] ? SyS_membarrier+0x700/0x700 [ 29.651190] ? init_timer_key+0x163/0x3f0 [ 29.655315] rds_tcp_conn_alloc+0xa7/0x4e0 [ 29.659525] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 29.663903] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.668116] ? __lockdep_init_map+0xe4/0x650 [ 29.672498] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.676706] __rds_conn_create+0x112f/0x1b50 [ 29.681106] ? rds_conn_drop+0xb0/0xb0 [ 29.684976] ? __raw_spin_lock_init+0x1c/0x100 [ 29.689537] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.694530] ? __lockdep_init_map+0xe4/0x650 [ 29.698917] ? lockdep_init_map+0x9/0x10 [ 29.702952] ? __init_waitqueue_head+0x97/0x140 [ 29.707593] ? init_wait_entry+0x1b0/0x1b0 [ 29.711806] ? lockdep_init_map+0x9/0x10 [ 29.715844] ? rds_message_alloc+0x28c/0x330 [ 29.720225] ? rds_message_next_extension+0x210/0x210 [ 29.725385] ? trace_hardirqs_on+0xd/0x10 [ 29.729509] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.733894] ? __release_sock+0x360/0x360 [ 29.738016] ? lock_sock_nested+0x91/0x110 [ 29.742235] rds_conn_create_outgoing+0x3f/0x50 [ 29.746880] rds_sendmsg+0xda3/0x2390 [ 29.750655] ? avc_has_perm+0x43e/0x680 [ 29.754616] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.759082] ? release_sock+0x1d4/0x2a0 [ 29.763043] ? lock_downgrade+0x980/0x980 [ 29.767176] ? find_held_lock+0x35/0x1d0 [ 29.771221] ? sock_has_perm+0x2a4/0x420 [ 29.775258] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 29.780596] ? lock_release+0xa02/0xa40 [ 29.784543] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.790401] ? __check_object_size+0x8b/0x530 [ 29.794868] ? __release_sock+0x360/0x360 [ 29.798995] ? __might_sleep+0x95/0x190 [ 29.802950] ? selinux_socket_sendmsg+0x36/0x40 [ 29.807592] ? security_socket_sendmsg+0x89/0xb0 [ 29.812321] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.816792] sock_sendmsg+0xca/0x110 [ 29.820481] SYSC_sendto+0x361/0x5c0 [ 29.824184] ? SYSC_connect+0x4a0/0x4a0 [ 29.828142] ? security_socket_bind+0x89/0xb0 [ 29.832613] ? SYSC_bind+0x290/0x410 [ 29.836324] ? up_read+0x1a/0x40 [ 29.839665] ? __do_page_fault+0x3d6/0xc90 [ 29.843880] SyS_sendto+0x40/0x50 [ 29.847315] ? SyS_getpeername+0x30/0x30 [ 29.851360] do_fast_syscall_32+0x3ee/0xfa1 [ 29.855674] ? do_int80_syscall_32+0x9d0/0x9d0 [ 29.860230] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.864962] ? syscall_return_slowpath+0x550/0x550 [ 29.869867] ? syscall_return_slowpath+0x2ac/0x550 [ 29.874770] ? prepare_exit_to_usermode+0x350/0x350 [ 29.879764] ? sysret32_from_system_call+0x5/0x3b [ 29.884586] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.889407] entry_SYSENTER_compat+0x54/0x63 [ 29.893786] RIP: 0023:0xf7f12c79 [ 29.897124] RSP: 002b:00000000ffa7c33c EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 29.904805] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020fc2000 [ 29.912050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002069affb [ 29.919293] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 29.926535] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 29.933778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000