[....] Starting enhanced syslogd: rsyslogd[ 14.903912] audit: type=1400 audit(1518871218.798:5): avc: denied { syslog } for pid=4016 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.356340] audit: type=1400 audit(1518871222.251:6): avc: denied { map } for pid=4155 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. executing program [ 24.597928] audit: type=1400 audit(1518871228.492:7): avc: denied { map } for pid=4169 comm="syzkaller384048" path="/root/syzkaller384048820" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 24.625584] [ 24.627262] ============================= [ 24.631415] WARNING: suspicious RCU usage [ 24.635573] 4.16.0-rc1+ #316 Not tainted [ 24.639639] ----------------------------- [ 24.643799] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 24.653064] [ 24.653064] other info that might help us debug this: [ 24.653064] [ 24.661211] [ 24.661211] rcu_scheduler_active = 2, debug_locks = 1 [ 24.667888] 1 lock held by syzkaller384048/4169: [ 24.672639] #0: (rcu_read_lock){....}, at: [<000000007cda68d7>] __rds_conn_create+0xe46/0x1b50 [ 24.681594] [ 24.681594] stack backtrace: [ 24.686096] CPU: 1 PID: 4169 Comm: syzkaller384048 Not tainted 4.16.0-rc1+ #316 [ 24.693517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.702841] Call Trace: [ 24.705402] dump_stack+0x194/0x257 [ 24.709003] ? arch_local_irq_restore+0x53/0x53 [ 24.713657] lockdep_rcu_suspicious+0x123/0x170 [ 24.718300] ___might_sleep+0x385/0x470 [ 24.722245] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 24.728101] ? __debug_object_init+0x235/0x1040 [ 24.732740] ? lock_acquire+0x1d5/0x580 [ 24.736687] ? debug_mutex_init+0x1c/0x60 [ 24.740810] __might_sleep+0x95/0x190 [ 24.744586] kmem_cache_alloc_trace+0x299/0x740 [ 24.749228] ? lock_acquire+0x1d5/0x580 [ 24.753170] ? lock_acquire+0x1d5/0x580 [ 24.757115] ? __rds_conn_create+0xe46/0x1b50 [ 24.761585] rds_loop_conn_alloc+0xc8/0x380 [ 24.765886] ? rds_loop_conn_free+0x290/0x290 [ 24.770355] ? __init_waitqueue_head+0x97/0x140 [ 24.774997] ? rcutorture_record_progress+0x10/0x10 [ 24.779988] ? __lockdep_init_map+0xe4/0x650 [ 24.784372] __rds_conn_create+0x112f/0x1b50 [ 24.788769] ? rds_conn_drop+0xb0/0xb0 [ 24.792625] ? find_held_lock+0x35/0x1d0 [ 24.796660] ? retint_kernel+0x10/0x10 [ 24.800518] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.805507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.810239] ? retint_kernel+0x10/0x10 [ 24.814107] ? copy_user_enhanced_fast_string+0xe/0x20 [ 24.819356] ? copyin+0x91/0xb0 [ 24.822608] ? copy_page_from_iter+0x50e/0x7c0 [ 24.827164] ? _copy_from_iter+0xf30/0xf30 [ 24.831373] ? _raw_spin_unlock_bh+0x30/0x40 [ 24.835757] ? rds_message_copy_from_user+0x29e/0x370 [ 24.840920] rds_conn_create_outgoing+0x3f/0x50 [ 24.845563] rds_sendmsg+0xda3/0x2390 [ 24.849341] ? avc_has_perm+0x43e/0x680 [ 24.853302] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.857765] ? _raw_spin_unlock_irq+0x27/0x70 [ 24.862233] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 24.867223] ? find_held_lock+0x35/0x1d0 [ 24.871262] ? sock_has_perm+0x2a4/0x420 [ 24.875296] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 24.880630] ? lock_release+0x9a2/0xa40 [ 24.884576] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 24.890431] ? __check_object_size+0x8b/0x530 [ 24.894895] ? __handle_mm_fault+0x80e/0x3ce0 [ 24.899368] ? __might_sleep+0x95/0x190 [ 24.903315] ? selinux_socket_sendmsg+0x36/0x40 [ 24.907957] ? security_socket_sendmsg+0x89/0xb0 [ 24.912684] ? rds_send_drop_to+0x19d0/0x19d0 [ 24.917154] sock_sendmsg+0xca/0x110 [ 24.920841] SYSC_sendto+0x361/0x5c0 [ 24.924531] ? SYSC_connect+0x4a0/0x4a0 [ 24.928483] ? __do_page_fault+0x5f7/0xc90 [ 24.932692] ? lock_downgrade+0x980/0x980 [ 24.936818] ? handle_mm_fault+0x43b/0x970 [ 24.941046] ? up_read+0x1a/0x40 [ 24.944385] ? __do_page_fault+0x3d6/0xc90 [ 24.948599] ? mm_fault_error+0x2c0/0x2c0 [ 24.952722] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 24.958236] SyS_sendto+0x40/0x50 [ 24.961663] ? SyS_getpeername+0x30/0x30 [ 24.965695] do_syscall_64+0x280/0x940 [ 24.969561] ? __do_page_fault+0xc90/0xc90 [ 24.973766] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.978495] ? syscall_return_slowpath+0x550/0x550 [ 24.983397] ? syscall_return_slowpath+0x2ac/0x550 [ 24.988300] ? prepare_exit_to_usermode+0x350/0x350 [ 24.993291] ? retint_user+0x18/0x18 [ 24.996981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.001800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 25.006961] RIP: 0033:0x43fd99 [ 25.010121] RSP: 002b:00007ffca1d2dac8 EFLAGS: 00000217 ORIG_RAX: 000000000000002c [ 25.017801] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd99 [ 25.025041] RDX: 00000000000001c1 RSI: 0000000020dbf000 RDI: 0000000000000003 [ 25.032289] RBP: 00000000006ca018 R08: 0000000020b2d000 R09: 0000000000000010 [ 25.039529] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004016c0 [ 25.046768] R13: 0000000000401750 R14: 0000000000000000 R15: 0000000000000000 [ 25.054089] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 25.061541] in_atomic(): 1, irqs_disabled(): 0, pid: 4169, name: syzkaller384048 [ 25.069075] 1 lock held by syzkaller384048/4169: [ 25.073825] #0: (rcu_read_lock){....}, at: [<000000007cda68d7>] __rds_conn_create+0xe46/0x1b50 [ 25.082779] CPU: 1 PID: 4169 Comm: syzkaller384048 Not tainted 4.16.0-rc1+ #316 [ 25.090202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.099526] Call Trace: [ 25.102086] dump_stack+0x194/0x257 [ 25.105687] ? arch_local_irq_restore+0x53/0x53 [ 25.110331] ? print_lock+0x9f/0xa2 [ 25.113929] ? lockdep_print_held_locks+0xc4/0x130 [ 25.118836] ___might_sleep+0x2b2/0x470 [ 25.122785] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 25.128638] ? __debug_object_init+0x235/0x1040 [ 25.133278] ? lock_acquire+0x1d5/0x580 [ 25.137223] ? debug_mutex_init+0x1c/0x60 [ 25.141346] __might_sleep+0x95/0x190 [ 25.145124] kmem_cache_alloc_trace+0x299/0x740 [ 25.149770] ? lock_acquire+0x1d5/0x580 [ 25.153713] ? lock_acquire+0x1d5/0x580 [ 25.157659] ? __rds_conn_create+0xe46/0x1b50 [ 25.162130] rds_loop_conn_alloc+0xc8/0x380 [ 25.166423] ? rds_loop_conn_free+0x290/0x290 [ 25.170891] ? __init_waitqueue_head+0x97/0x140 [ 25.175534] ? rcutorture_record_progress+0x10/0x10 [ 25.180522] ? __lockdep_init_map+0xe4/0x650 [ 25.184906] __rds_conn_create+0x112f/0x1b50 [ 25.189303] ? rds_conn_drop+0xb0/0xb0 [ 25.193162] ? find_held_lock+0x35/0x1d0 [ 25.197197] ? retint_kernel+0x10/0x10 [ 25.201056] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.206046] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.210786] ? retint_kernel+0x10/0x10 [ 25.214658] ? copy_user_enhanced_fast_string+0xe/0x20 [ 25.219907] ? copyin+0x91/0xb0 [ 25.223159] ? copy_page_from_iter+0x50e/0x7c0 [ 25.227724] ? _copy_from_iter+0xf30/0xf30 [ 25.231933] ? _raw_spin_unlock_bh+0x30/0x40 [ 25.236321] ? rds_message_copy_from_user+0x29e/0x370 [ 25.241483] rds_conn_create_outgoing+0x3f/0x50 [ 25.246125] rds_sendmsg+0xda3/0x2390 [ 25.249897] ? avc_has_perm+0x43e/0x680 [ 25.253857] ? rds_send_drop_to+0x19d0/0x19d0 [ 25.258323] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.262791] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.267781] ? find_held_lock+0x35/0x1d0 [ 25.271820] ? sock_has_perm+0x2a4/0x420 [ 25.275853] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 25.281185] ? lock_release+0x9a2/0xa40 [ 25.285131] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 25.290989] ? __check_object_size+0x8b/0x530 [ 25.295456] ? __handle_mm_fault+0x80e/0x3ce0 [ 25.299928] ? __might_sleep+0x95/0x190 [ 25.303877] ? selinux_socket_sendmsg+0x36/0x40 [ 25.308518] ? security_socket_sendmsg+0x89/0xb0 [ 25.313246] ? rds_send_drop_to+0x19d0/0x19d0 [ 25.317716] sock_sendmsg+0xca/0x110 [ 25.321402] SYSC_sendto+0x361/0x5c0 [ 25.325092] ? SYSC_connect+0x4a0/0x4a0 [ 25.329050] ? __do_page_fault+0x5f7/0xc90 [ 25.333257] ? lock_downgrade+0x980/0x980 [ 25.337382] ? handle_mm_fault+0x43b/0x970 [ 25.341601] ? up_read+0x1a/0x40 [ 25.344939] ? __do_page_fault+0x3d6/0xc90 [ 25.349150] ? mm_fault_error+0x2c0/0x2c0 [ 25.353269] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 25.358782] SyS_sendto+0x40/0x50 [ 25.362207] ? SyS_getpeername+0x30/0x30 [ 25.366239] do_syscall_64+0x280/0x940 [ 25.370094] ? __do_page_fault+0xc90/0xc90 [ 25.374300] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.379032] ? syscall_return_slowpath+0x550/0x550 [ 25.383933] ? syscall_return_slowpath+0x2ac/0x550 [ 25.388835] ? prepare_exit_to_usermode+0x350/0x350 [ 25.393821] ? retint_user+0x18/0x18 [ 25.397511] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.402329] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 25.407488] RIP: 0033:0x43fd99 [ 25.410646] RSP: 002b:00007ffca1d2dac8 EFLAGS: 00000217 ORIG_RAX: 000000000000002c [ 25.418325] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd99 [ 25.425566] RDX: 00000000000001c1 RSI: 0000000020dbf000 RDI: 0000000000000003 [ 25.432812] RBP: 00000000006ca018 R08: 0000000020b2d000 R09: 0000000000000010 [ 25.440055] R10: 0000000000000000 R11: 0000000000000217 R12: 00000000004016c0 [ 25.447294] R13: 0000000000401750 R14: 00000000