[ 15.378601] rsyslogd (3865) used greatest stack depth: 16480 bytes left [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.954240] audit: type=1400 audit(1518362361.771:6): avc: denied { map } for pid=4017 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. executing program [ 25.338089] audit: type=1400 audit(1518362368.154:7): avc: denied { map } for pid=4031 comm="syzkaller379306" path="/root/syzkaller379306215" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 25.365231] [ 25.366949] ============================= [ 25.371099] WARNING: suspicious RCU usage [ 25.375247] 4.15.0+ #218 Not tainted [ 25.378961] ----------------------------- [ 25.383109] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section! [ 25.392377] [ 25.392377] other info that might help us debug this: [ 25.392377] [ 25.400523] [ 25.400523] rcu_scheduler_active = 2, debug_locks = 1 [ 25.407212] 1 lock held by syzkaller379306/4031: [ 25.411969] #0: (rcu_read_lock){....}, at: [<0000000002c0801f>] __rds_conn_create+0xe46/0x1b50 [ 25.420921] [ 25.420921] stack backtrace: [ 25.425418] CPU: 0 PID: 4031 Comm: syzkaller379306 Not tainted 4.15.0+ #218 [ 25.432488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.441824] Call Trace: [ 25.444387] dump_stack+0x194/0x257 [ 25.447987] ? arch_local_irq_restore+0x53/0x53 [ 25.452642] lockdep_rcu_suspicious+0x123/0x170 [ 25.457288] ___might_sleep+0x385/0x470 [ 25.461234] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 25.467090] ? __debug_object_init+0x235/0x1040 [ 25.471729] ? debug_mutex_init+0x1c/0x60 [ 25.475855] __might_sleep+0x95/0x190 [ 25.479630] kmem_cache_alloc_trace+0x299/0x740 [ 25.484273] ? lock_acquire+0x1d5/0x580 [ 25.488217] ? lock_acquire+0x1d5/0x580 [ 25.492165] ? __rds_conn_create+0xe46/0x1b50 [ 25.496636] rds_loop_conn_alloc+0xc8/0x380 [ 25.500937] ? rds_loop_conn_free+0x290/0x290 [ 25.505406] ? __init_waitqueue_head+0x97/0x140 [ 25.510055] ? rcutorture_record_progress+0x10/0x10 [ 25.515046] ? __lockdep_init_map+0xe4/0x650 [ 25.519429] __rds_conn_create+0x112f/0x1b50 [ 25.523829] ? rds_conn_drop+0xb0/0xb0 [ 25.527695] ? __raw_spin_lock_init+0x1c/0x100 [ 25.532249] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.537240] ? __lockdep_init_map+0xe4/0x650 [ 25.541622] ? lockdep_init_map+0x9/0x10 [ 25.545653] ? __init_waitqueue_head+0x97/0x140 [ 25.550293] ? init_wait_entry+0x1b0/0x1b0 [ 25.554503] ? lockdep_init_map+0x9/0x10 [ 25.558540] ? rds_message_alloc+0x28c/0x330 [ 25.562922] ? rds_message_next_extension+0x210/0x210 [ 25.568080] ? trace_hardirqs_on+0xd/0x10 [ 25.572206] ? _raw_spin_unlock_bh+0x30/0x40 [ 25.576590] ? __release_sock+0x360/0x360 [ 25.580705] ? lock_sock_nested+0x91/0x110 [ 25.584915] rds_conn_create_outgoing+0x3f/0x50 [ 25.589565] rds_sendmsg+0xda3/0x2390 [ 25.593337] ? avc_has_perm+0x43e/0x680 [ 25.597303] ? rds_send_drop_to+0x19d0/0x19d0 [ 25.601770] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.606238] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.611227] ? find_held_lock+0x35/0x1d0 [ 25.615267] ? sock_has_perm+0x2a4/0x420 [ 25.619308] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 25.624642] ? lock_release+0xa22/0xa40 [ 25.628587] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 25.634443] ? __check_object_size+0x8b/0x530 [ 25.638918] ? __might_sleep+0x95/0x190 [ 25.642874] ? selinux_socket_sendmsg+0x36/0x40 [ 25.647514] ? security_socket_sendmsg+0x89/0xb0 [ 25.652241] ? rds_send_drop_to+0x19d0/0x19d0 [ 25.656711] sock_sendmsg+0xca/0x110 [ 25.660398] SYSC_sendto+0x361/0x5c0 [ 25.664090] ? SYSC_connect+0x4a0/0x4a0 [ 25.668044] ? find_held_lock+0x35/0x1d0 [ 25.672090] ? lock_downgrade+0x980/0x980 [ 25.676236] ? up_read+0x1a/0x40 [ 25.679581] ? __do_page_fault+0x3d6/0xc90 [ 25.683794] SyS_sendto+0x40/0x50 [ 25.687222] ? SyS_getpeername+0x30/0x30 [ 25.691262] do_fast_syscall_32+0x3ee/0xfa1 [ 25.695562] ? do_int80_syscall_32+0x9d0/0x9d0 [ 25.700116] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 25.704844] ? syscall_return_slowpath+0x550/0x550 [ 25.709744] ? syscall_return_slowpath+0x2ac/0x550 [ 25.714646] ? prepare_exit_to_usermode+0x350/0x350 [ 25.719634] ? retint_user+0x18/0x18 [ 25.723322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.728141] entry_SYSENTER_compat+0x54/0x63 [ 25.732518] RIP: 0023:0xf7f44c79 [ 25.735851] RSP: 002b:00000000ff998e9c EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 25.743528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020dbf000 [ 25.750767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020b2d000 [ 25.758008] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 25.765252] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 25.772493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 25.780067] BUG: sleeping function called from invalid context at mm/slab.h:420 [ 25.787524] in_atomic(): 1, irqs_disabled(): 0, pid: 4031, name: syzkaller379306 [ 25.795062] 1 lock held by syzkaller379306/4031: [ 25.799815] #0: (rcu_read_lock){....}, at: [<0000000002c0801f>] __rds_conn_create+0xe46/0x1b50 [ 25.808757] CPU: 0 PID: 4031 Comm: syzkaller379306 Not tainted 4.15.0+ #218 [ 25.815834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.825158] Call Trace: [ 25.827716] dump_stack+0x194/0x257 [ 25.831316] ? arch_local_irq_restore+0x53/0x53 [ 25.835957] ? print_lock+0x9f/0xa2 [ 25.839556] ? lockdep_print_held_locks+0xc4/0x130 [ 25.844466] ___might_sleep+0x2b2/0x470 [ 25.848412] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 25.854265] ? __debug_object_init+0x235/0x1040 [ 25.858906] ? debug_mutex_init+0x1c/0x60 [ 25.863036] __might_sleep+0x95/0x190 [ 25.866816] kmem_cache_alloc_trace+0x299/0x740 [ 25.871465] ? lock_acquire+0x1d5/0x580 [ 25.875409] ? lock_acquire+0x1d5/0x580 [ 25.879354] ? __rds_conn_create+0xe46/0x1b50 [ 25.883825] rds_loop_conn_alloc+0xc8/0x380 [ 25.888121] ? rds_loop_conn_free+0x290/0x290 [ 25.892590] ? __init_waitqueue_head+0x97/0x140 [ 25.897231] ? rcutorture_record_progress+0x10/0x10 [ 25.902227] ? __lockdep_init_map+0xe4/0x650 [ 25.906613] __rds_conn_create+0x112f/0x1b50 [ 25.911017] ? rds_conn_drop+0xb0/0xb0 [ 25.914892] ? __raw_spin_lock_init+0x1c/0x100 [ 25.919447] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.924439] ? __lockdep_init_map+0xe4/0x650 [ 25.928822] ? lockdep_init_map+0x9/0x10 [ 25.932856] ? __init_waitqueue_head+0x97/0x140 [ 25.937498] ? init_wait_entry+0x1b0/0x1b0 [ 25.941706] ? lockdep_init_map+0x9/0x10 [ 25.945742] ? rds_message_alloc+0x28c/0x330 [ 25.950121] ? rds_message_next_extension+0x210/0x210 [ 25.955279] ? trace_hardirqs_on+0xd/0x10 [ 25.959399] ? _raw_spin_unlock_bh+0x30/0x40 [ 25.963786] ? __release_sock+0x360/0x360 [ 25.967907] ? lock_sock_nested+0x91/0x110 [ 25.972120] rds_conn_create_outgoing+0x3f/0x50 [ 25.976763] rds_sendmsg+0xda3/0x2390 [ 25.980535] ? avc_has_perm+0x43e/0x680 [ 25.984493] ? rds_send_drop_to+0x19d0/0x19d0 [ 25.988961] ? _raw_spin_unlock_irq+0x27/0x70 [ 25.993431] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.998428] ? find_held_lock+0x35/0x1d0 [ 26.002470] ? sock_has_perm+0x2a4/0x420 [ 26.006507] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 26.011843] ? lock_release+0xa22/0xa40 [ 26.015793] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 26.021651] ? __check_object_size+0x8b/0x530 [ 26.026122] ? __might_sleep+0x95/0x190 [ 26.030072] ? selinux_socket_sendmsg+0x36/0x40 [ 26.034712] ? security_socket_sendmsg+0x89/0xb0 [ 26.039439] ? rds_send_drop_to+0x19d0/0x19d0 [ 26.043911] sock_sendmsg+0xca/0x110 [ 26.047597] SYSC_sendto+0x361/0x5c0 [ 26.051285] ? SYSC_connect+0x4a0/0x4a0 [ 26.055235] ? find_held_lock+0x35/0x1d0 [ 26.059276] ? lock_downgrade+0x980/0x980 [ 26.063415] ? up_read+0x1a/0x40 [ 26.066753] ? __do_page_fault+0x3d6/0xc90 [ 26.070977] SyS_sendto+0x40/0x50 [ 26.074402] ? SyS_getpeername+0x30/0x30 [ 26.078437] do_fast_syscall_32+0x3ee/0xfa1 [ 26.082736] ? do_int80_syscall_32+0x9d0/0x9d0 [ 26.087290] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 26.092028] ? syscall_return_slowpath+0x550/0x550 [ 26.096931] ? syscall_return_slowpath+0x2ac/0x550 [ 26.101833] ? prepare_exit_to_usermode+0x350/0x350 [ 26.106824] ? retint_user+0x18/0x18 [ 26.110513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.115334] entry_SYSENTER_compat+0x54/0x63 [ 26.119711] RIP: 0023:0xf7f44c79 [ 26.123048] RSP: 002b:00000000ff998e9c EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 26.130727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020dbf000 [ 26.137968] RDX: 0000000000000000 RSI: 0