[....] Starting enhanced syslogd: rsyslogd[ 16.730987] audit: type=1400 audit(1518310216.270:5): avc: denied { syslog } for pid=4018 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 22.335601] audit: type=1400 audit(1518310221.875:6): avc: denied { map } for pid=4158 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. net.ipv6.conf.syz0.accept_dad = 0 net.ipv6.conf.syz0.router_solicitations = 0 [ 28.620457] audit: type=1400 audit(1518310228.160:7): avc: denied { map } for pid=4172 comm="syzkaller270799" path="/root/syzkaller270799361" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported [ 28.872693] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument executing program [ 29.174936] [ 29.176782] ============================= [ 29.180929] WARNING: suspicious RCU usage [ 29.185061] 4.15.0+ #218 Not tainted [ 29.188763] ----------------------------- [ 29.192897] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 29.202160] [ 29.202160] other info that might help us debug this: [ 29.202160] [ 29.210290] [ 29.210290] rcu_scheduler_active = 2, debug_locks = 1 [ 29.216957] 1 lock held by syzkaller270799/4172: [ 29.221698] #0: (rcu_read_lock){....}, at: [<000000007a438a1e>] __rds_conn_create+0xe46/0x1b50 [ 29.230639] [ 29.230639] stack backtrace: [ 29.235125] CPU: 1 PID: 4172 Comm: syzkaller270799 Not tainted 4.15.0+ #218 [ 29.242194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.251519] Call Trace: [ 29.254083] dump_stack+0x194/0x257 [ 29.257687] ? arch_local_irq_restore+0x53/0x53 [ 29.262339] lockdep_rcu_suspicious+0x123/0x170 [ 29.266981] ___might_sleep+0x385/0x470 [ 29.270929] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.276781] ? debug_mutex_init+0x1c/0x60 [ 29.280901] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.285893] __might_sleep+0x95/0x190 [ 29.289677] kmem_cache_alloc+0x2a2/0x760 [ 29.293796] ? lock_acquire+0x1d5/0x580 [ 29.297741] ? __rds_conn_create+0xe46/0x1b50 [ 29.302209] ? SyS_membarrier+0x700/0x700 [ 29.306325] ? init_timer_key+0x163/0x3f0 [ 29.310446] rds_tcp_conn_alloc+0xa7/0x4e0 [ 29.314654] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 29.319031] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.323239] ? __lockdep_init_map+0xe4/0x650 [ 29.327620] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.331830] __rds_conn_create+0x112f/0x1b50 [ 29.336252] ? rds_conn_drop+0xb0/0xb0 [ 29.340109] ? __kmalloc+0x4f1/0x760 [ 29.343794] ? lock_downgrade+0x980/0x980 [ 29.347934] ? lock_release+0xa40/0xa40 [ 29.351878] ? __raw_spin_lock_init+0x1c/0x100 [ 29.356432] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.361425] ? __lockdep_init_map+0xe4/0x650 [ 29.365809] ? lockdep_init_map+0x9/0x10 [ 29.369841] ? __init_waitqueue_head+0x97/0x140 [ 29.374483] ? init_wait_entry+0x1b0/0x1b0 [ 29.378695] ? lockdep_init_map+0x9/0x10 [ 29.382739] ? rds_message_alloc+0x28c/0x330 [ 29.387126] ? rds_message_next_extension+0x210/0x210 [ 29.392284] ? trace_hardirqs_on+0xd/0x10 [ 29.396407] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.400791] ? __release_sock+0x360/0x360 [ 29.404908] ? lock_sock_nested+0x91/0x110 [ 29.409121] rds_conn_create_outgoing+0x3f/0x50 [ 29.413767] rds_sendmsg+0xda3/0x2390 [ 29.417539] ? avc_has_perm+0x43e/0x680 [ 29.421504] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.425975] ? lock_downgrade+0x980/0x980 [ 29.430101] ? find_held_lock+0x35/0x1d0 [ 29.434143] ? sock_has_perm+0x2a4/0x420 [ 29.438175] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 29.443508] ? lock_release+0xa22/0xa40 [ 29.447453] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.453309] ? __check_object_size+0x8b/0x530 [ 29.457770] ? __release_sock+0x360/0x360 [ 29.461892] ? __might_sleep+0x95/0x190 [ 29.465842] ? selinux_socket_sendmsg+0x36/0x40 [ 29.470484] ? security_socket_sendmsg+0x89/0xb0 [ 29.475219] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.479689] sock_sendmsg+0xca/0x110 [ 29.483376] SYSC_sendto+0x361/0x5c0 [ 29.487063] ? SYSC_connect+0x4a0/0x4a0 [ 29.491026] ? find_held_lock+0x35/0x1d0 [ 29.495067] ? lock_downgrade+0x980/0x980 [ 29.499209] ? up_read+0x1a/0x40 [ 29.502550] ? __do_page_fault+0x3d6/0xc90 [ 29.506768] SyS_sendto+0x40/0x50 [ 29.510194] ? SyS_getpeername+0x30/0x30 [ 29.514328] do_fast_syscall_32+0x3ee/0xfa1 [ 29.518627] ? do_int80_syscall_32+0x9d0/0x9d0 [ 29.523179] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.527905] ? syscall_return_slowpath+0x550/0x550 [ 29.532806] ? syscall_return_slowpath+0x2ac/0x550 [ 29.537705] ? prepare_exit_to_usermode+0x350/0x350 [ 29.542692] ? retint_user+0x18/0x18 [ 29.546380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.551198] entry_SYSENTER_compat+0x54/0x63 [ 29.555577] RIP: 0023:0xf7ff0c79 [ 29.558911] RSP: 002b:00000000ff9a907c EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 29.566587] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020fc2000 [ 29.573824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002069affb [ 29.581066] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 29.588308] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 29.595547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 29.603006] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 29.610472] in_atomic(): 1, irqs_disabled(): 0, pid: 4172, name: syzkaller270799 [ 29.618005] 1 lock held by syzkaller270799/4172: [ 29.622758] #0: (rcu_read_lock){....}, at: [<000000007a438a1e>] __rds_conn_create+0xe46/0x1b50 [ 29.631700] CPU: 1 PID: 4172 Comm: syzkaller270799 Not tainted 4.15.0+ #218 [ 29.638774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.648101] Call Trace: [ 29.650664] dump_stack+0x194/0x257 [ 29.654267] ? arch_local_irq_restore+0x53/0x53 [ 29.658909] ? print_lock+0x9f/0xa2 [ 29.662507] ? lockdep_print_held_locks+0xc4/0x130 [ 29.667414] ___might_sleep+0x2b2/0x470 [ 29.671359] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.677215] ? debug_mutex_init+0x1c/0x60 [ 29.681334] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.686328] __might_sleep+0x95/0x190 [ 29.690107] kmem_cache_alloc+0x2a2/0x760 [ 29.694226] ? lock_acquire+0x1d5/0x580 [ 29.698170] ? __rds_conn_create+0xe46/0x1b50 [ 29.702636] ? SyS_membarrier+0x700/0x700 [ 29.706754] ? init_timer_key+0x163/0x3f0 [ 29.710873] rds_tcp_conn_alloc+0xa7/0x4e0 [ 29.715082] ? rds_tcp_conn_free+0x2d0/0x2d0 [ 29.719463] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.723671] ? __lockdep_init_map+0xe4/0x650 [ 29.728050] ? rds_cmsg_atomic+0xff0/0xff0 [ 29.732259] __rds_conn_create+0x112f/0x1b50 [ 29.736656] ? rds_conn_drop+0xb0/0xb0 [ 29.740517] ? __kmalloc+0x4f1/0x760 [ 29.744207] ? lock_downgrade+0x980/0x980 [ 29.748329] ? lock_release+0xa40/0xa40 [ 29.752273] ? __raw_spin_lock_init+0x1c/0x100 [ 29.756827] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.761821] ? __lockdep_init_map+0xe4/0x650 [ 29.766203] ? lockdep_init_map+0x9/0x10 [ 29.770234] ? __init_waitqueue_head+0x97/0x140 [ 29.774873] ? init_wait_entry+0x1b0/0x1b0 [ 29.779085] ? lockdep_init_map+0x9/0x10 [ 29.783121] ? rds_message_alloc+0x28c/0x330 [ 29.787502] ? rds_message_next_extension+0x210/0x210 [ 29.792661] ? trace_hardirqs_on+0xd/0x10 [ 29.796784] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.801167] ? __release_sock+0x360/0x360 [ 29.805296] ? lock_sock_nested+0x91/0x110 [ 29.809508] rds_conn_create_outgoing+0x3f/0x50 [ 29.814152] rds_sendmsg+0xda3/0x2390 [ 29.817934] ? avc_has_perm+0x43e/0x680 [ 29.821891] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.826361] ? lock_downgrade+0x980/0x980 [ 29.830483] ? find_held_lock+0x35/0x1d0 [ 29.834523] ? sock_has_perm+0x2a4/0x420 [ 29.838557] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 29.843890] ? lock_release+0xa22/0xa40 [ 29.847834] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 29.853691] ? __check_object_size+0x8b/0x530 [ 29.858155] ? __release_sock+0x360/0x360 [ 29.862280] ? __might_sleep+0x95/0x190 [ 29.866231] ? selinux_socket_sendmsg+0x36/0x40 [ 29.870871] ? security_socket_sendmsg+0x89/0xb0 [ 29.875598] ? rds_send_drop_to+0x19d0/0x19d0 [ 29.880066] sock_sendmsg+0xca/0x110 [ 29.883753] SYSC_sendto+0x361/0x5c0 [ 29.887442] ? SYSC_connect+0x4a0/0x4a0 [ 29.891392] ? find_held_lock+0x35/0x1d0 [ 29.895434] ? lock_downgrade+0x980/0x980 [ 29.899578] ? up_read+0x1a/0x40 [ 29.902916] ? __do_page_fault+0x3d6/0xc90 [ 29.907131] SyS_sendto+0x40/0x50 [ 29.910558] ? SyS_getpeername+0x30/0x30 [ 29.914597] do_fast_syscall_32+0x3ee/0xfa1 [ 29.918894] ? do_int80_syscall_32+0x9d0/0x9d0 [ 29.923447] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.928176] ? syscall_return_slowpath+0x550/0x550 [ 29.933077] ? syscall_return_slowpath+0x2ac/0x550 [ 29.937980] ? prepare_exit_to_usermode+0x350/0x350 [ 29.942970] ? retint_user+0x18/0x18 [ 29.946659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.951479] entry_SYSENTER_compat+0x54/0x63 [ 29.955858] RIP: 0023:0xf7ff0c79 [ 29.959191] RSP: 002b:00000000ff9a907c EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 29.966870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020fc2000 [ 29.974109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002069affb [ 29.981348] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 29.988590] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 29.995828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000