[....] Starting enhanced syslogd: rsyslogd[ 15.799351] audit: type=1400 audit(1518208997.572:5): avc: denied { syslog } for pid=4012 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.683659] audit: type=1400 audit(1518209000.456:6): avc: denied { map } for pid=4151 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.199' (ECDSA) to the list of known hosts. [ 30.088572] audit: type=1400 audit(1518209011.861:7): avc: denied { map } for pid=4167 comm="syzkaller023508" path="/root/syzkaller023508909" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 30.090939] executing program [ 30.114652] audit: type=1400 audit(1518209011.863:8): avc: denied { create } for pid=4167 comm="syzkaller023508" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 30.116214] ============================= [ 30.140072] audit: type=1400 audit(1518209011.863:9): avc: denied { write } for pid=4167 comm="syzkaller023508" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 30.144208] WARNING: suspicious RCU usage [ 30.172224] 4.15.0+ #216 Not tainted [ 30.175940] ----------------------------- [ 30.180093] net/tipc/bearer.c:177 suspicious rcu_dereference_protected() usage! [ 30.187542] [ 30.187542] other info that might help us debug this: [ 30.187542] [ 30.195687] [ 30.195687] rcu_scheduler_active = 2, debug_locks = 1 [ 30.202362] 2 locks held by syzkaller023508/4167: [ 30.207206] #0: (cb_lock){++++}, at: [<00000000523bbb47>] genl_rcv+0x19/0x40 [ 30.214599] #1: (genl_mutex){+.+.}, at: [<00000000c57273b3>] genl_rcv_msg+0x115/0x140 [ 30.222765] [ 30.222765] stack backtrace: [ 30.227279] CPU: 1 PID: 4167 Comm: syzkaller023508 Not tainted 4.15.0+ #216 [ 30.234359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.243684] Call Trace: [ 30.246249] dump_stack+0x194/0x257 [ 30.249856] ? arch_local_irq_restore+0x53/0x53 [ 30.254510] lockdep_rcu_suspicious+0x123/0x170 [ 30.259156] tipc_bearer_find+0x2b4/0x3b0 [ 30.263290] ? tipc_media_addr_printf+0x3a0/0x3a0 [ 30.268115] tipc_nl_compat_link_set+0x329/0x9f0 [ 30.272853] tipc_nl_compat_doit+0x15b/0x670 [ 30.277240] ? security_capable+0x8e/0xc0 [ 30.281377] ? tipc_nl_compat_link_stat_dump+0x3000/0x3000 [ 30.286979] ? ns_capable_common+0xcf/0x160 [ 30.291278] ? ns_capable+0x22/0x30 [ 30.294880] ? __netlink_ns_capable+0xe1/0x120 [ 30.299441] tipc_nl_compat_recv+0x1135/0x18f0 [ 30.303998] ? tipc_nl_compat_doit+0x670/0x670 [ 30.308553] ? tipc_nl_node_dump+0x1290/0x1290 [ 30.313106] ? tipc_nl_compat_bearer_enable+0x5c0/0x5c0 [ 30.318444] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 30.323450] ? __radix_tree_lookup+0x435/0x5e0 [ 30.328015] genl_family_rcv_msg+0x7b7/0xfb0 [ 30.332409] ? genl_rcv+0x40/0x40 [ 30.335840] ? lock_downgrade+0x980/0x980 [ 30.339977] ? __lock_is_held+0xb6/0x140 [ 30.344035] genl_rcv_msg+0xb2/0x140 [ 30.347728] netlink_rcv_skb+0x14b/0x380 [ 30.351763] ? genl_family_rcv_msg+0xfb0/0xfb0 [ 30.356320] ? netlink_ack+0xa10/0xa10 [ 30.360180] ? genl_rcv+0x19/0x40 [ 30.363610] ? netlink_skb_destructor+0x1d0/0x1d0 [ 30.368428] ? selinux_nlmsg_lookup+0x32b/0x430 [ 30.373074] genl_rcv+0x28/0x40 [ 30.376329] netlink_unicast+0x4c4/0x6b0 [ 30.380367] ? netlink_attachskb+0x8a0/0x8a0 [ 30.384757] ? security_netlink_send+0x81/0xb0 [ 30.389321] netlink_sendmsg+0xa4a/0xe60 [ 30.393363] ? netlink_unicast+0x6b0/0x6b0 [ 30.397576] ? security_socket_sendmsg+0x89/0xb0 [ 30.402306] ? netlink_unicast+0x6b0/0x6b0 [ 30.406516] sock_sendmsg+0xca/0x110 [ 30.410207] ___sys_sendmsg+0x767/0x8b0 [ 30.414158] ? copy_msghdr_from_user+0x590/0x590 [ 30.418889] ? _raw_spin_unlock+0x22/0x30 [ 30.423018] ? __pmd_alloc+0x4e0/0x4e0 [ 30.426886] ? check_noncircular+0x20/0x20 [ 30.431102] ? __fget_light+0x2b2/0x3c0 [ 30.435053] ? fget_raw+0x20/0x20 [ 30.438486] ? handle_mm_fault+0x270/0x970 [ 30.442703] ? find_held_lock+0x35/0x1d0 [ 30.446751] __sys_sendmsg+0xe5/0x210 [ 30.450524] ? __sys_sendmsg+0xe5/0x210 [ 30.454475] ? SyS_shutdown+0x290/0x290 [ 30.458430] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 30.462983] ? vmacache_find+0x5f/0x280 [ 30.466955] compat_SyS_sendmsg+0x2a/0x40 [ 30.471083] ? compat_SyS_getsockopt+0x420/0x420 [ 30.475814] do_fast_syscall_32+0x3ee/0xfa1 [ 30.480129] ? do_int80_syscall_32+0x9d0/0x9d0 [ 30.484686] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 30.489414] ? syscall_return_slowpath+0x550/0x550 [ 30.494317] ? syscall_return_slowpath+0x2ac/0x550 [ 30.499219] ? prepare_exit_to_usermode+0x350/0x350 [ 30.504221] ? retint_user+0x18/0x18 [ 30.507921] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 30.512746] entry_SYSENTER_compat+0x54/0x63 [ 30.517127] RIP: 0023:0xf7f39c79 [ 30.520461] RSP: 002b:00000000ffdbf11c EFLAGS: 00000203 ORIG_RAX: 0000000000000172 [ 30.528142] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003000 [ 30.535383] RDX: 0000000000000000 RSI: 0000000000000167 R