audit: type=1400 audit(1557542116.662:301167): avc: denied { net_admin } for pid=644 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 audit: type=1400 audit(1557542116.662:301168): avc: denied { net_admin } for pid=32204 comm="syz-executor.0" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 INFO: task init:1 blocked for more than 140 seconds. Not tainted 4.9.141+ #1 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. init D23880 1 0 0x00000004 ffff8801da5f8000 ffff880195725280 ffff8801d4c58580 ffff880194d597c0 ffff8801db621018 ffff8801da607580 ffffffff828075c2 ffff8801da5f88b0 000000000000015c 0000000000000000 0000000000000000 ffff8801db6218f0 Call Trace: [] schedule+0x7f/0x1b0 kernel/sched/core.c:3553 [] schedule_timeout+0x735/0xe20 kernel/time/timer.c:1771 [] __down_common kernel/locking/semaphore.c:221 [inline] [] __down+0x191/0x2b0 kernel/locking/semaphore.c:238 [] down+0x5e/0x80 kernel/locking/semaphore.c:61 [] console_lock+0x2c/0x80 kernel/printk/printk.c:2217 [] console_device+0x1c/0xc0 kernel/printk/printk.c:2554 [] tty_lookup_driver drivers/tty/tty_io.c:2008 [inline] [] tty_open_by_driver drivers/tty/tty_io.c:2053 [inline] [] tty_open+0x6f5/0xdf0 drivers/tty/tty_io.c:2130 [] chrdev_open+0x22d/0x5c0 fs/char_dev.c:392 [] do_dentry_open+0x3ef/0xc90 fs/open.c:766 [] vfs_open+0x11c/0x210 fs/open.c:879 [] do_last fs/namei.c:3410 [inline] [] path_openat+0x542/0x2790 fs/namei.c:3534 [] do_filp_open+0x197/0x270 fs/namei.c:3568 [] do_sys_open+0x30d/0x5c0 fs/open.c:1072 [] SYSC_open fs/open.c:1090 [inline] [] SyS_open+0x2d/0x40 fs/open.c:1085 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 1 lock held by init/1: #0: (tty_mutex){+.+.+.}, at: [] tty_open_by_driver drivers/tty/tty_io.c:2052 [inline] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 drivers/tty/tty_io.c:2130 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [] check_hung_uninterruptible_tasks kernel/hung_task.c:168 [inline] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 kernel/hung_task.c:239 #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1900: #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 fs/file.c:781 2 locks held by getty/2028: #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 drivers/tty/tty_ldsem.c:367 #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 drivers/tty/n_tty.c:2142 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1 ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40 ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000002 Call Trace: [] __dump_stack lib/dump_stack.c:15 [inline] [] dump_stack+0xc1/0x128 lib/dump_stack.c:51 [] nmi_cpu_backtrace.cold.0+0x48/0x87 lib/nmi_backtrace.c:99 [] nmi_trigger_cpumask_backtrace+0x12c/0x151 lib/nmi_backtrace.c:60 [] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [] check_hung_task kernel/hung_task.c:125 [inline] [] check_hung_uninterruptible_tasks kernel/hung_task.c:182 [inline] [] watchdog+0x6ad/0xa20 kernel/hung_task.c:239 [] kthread+0x26d/0x300 kernel/kthread.c:211 [] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 2625 Comm: syz-executor.0 Not tainted 4.9.141+ #1 task: ffff8801971ec740 task.stack: ffff880167480000 RIP: 0010:[] c [] trace_hardirqs_on_caller+0x52/0x590 kernel/locking/lockdep.c:2701 RSP: 0018:ffff880167487990 EFLAGS: 00000002 RAX: 0000000000000003 RBX: ffff8801971ec740 RCX: 0000000000000001 RDX: 0000000000000004 RSI: 0000000000000001 RDI: ffffffff831f2500 RBP: ffff8801674879a0 R08: ffff8801971ed060 R09: 0000000000000001 R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff82816fba R13: 0000000000000206 R14: 0000000000000019 R15: 0000000000000001 FS: 00007f92ee32c700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000000f CR3: 000000018d071000 CR4: 00000000001606b0 Stack: 0000000000000206c ffffffff84239d00c ffff8801674879b0c ffffffff812073adc ffff8801674879d0c ffffffff82816fbac 0000000000000000c ffffffff84239d00c ffff880167487a18c ffffffff819eac8cc ffffffff819eab62c ffff8801772a9dd0c Call Trace: [] trace_hardirqs_on+0xd/0x10 kernel/locking/lockdep.c:2743 [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:162 [inline] [] _raw_spin_unlock_irqrestore+0x5a/0x70 kernel/locking/spinlock.c:191 [] spin_unlock_irqrestore include/linux/spinlock.h:362 [inline] [] avc_reclaim_node security/selinux/avc.c:541 [inline] [] avc_alloc_node+0x31c/0x3c0 security/selinux/avc.c:559 [] avc_update_node+0x3d/0x910 security/selinux/avc.c:829 [] avc_denied+0x11d/0x160 security/selinux/avc.c:990 [] avc_has_perm_noaudit+0x2cf/0x2f0 security/selinux/avc.c:1118 [] cred_has_capability+0x13a/0x2e0 security/selinux/hooks.c:1666 [] selinux_capable+0x36/0x40 security/selinux/hooks.c:2178 [] security_capable+0x88/0xc0 security/security.c:189 [] ns_capable_common+0xd4/0x150 kernel/capability.c:373 [] ns_capable+0x22/0x30 kernel/capability.c:395 [] pfkey_create+0x15c/0x8e0 net/key/af_key.c:150 [] __sock_create+0x2f1/0x5f0 net/socket.c:1195 [] sock_create net/socket.c:1235 [inline] [] SYSC_socket net/socket.c:1265 [inline] [] SyS_socket+0xee/0x1f0 net/socket.c:1245 [] do_syscall_64+0x19f/0x550 arch/x86/entry/common.c:285 [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c89 cf8 c83 ce0 c07 c83 cc0 c03 c38 cd0 c7c c08 c84 cd2 c0f c85 cc2 c03 c00 c00 c8b c1d caf cb6 cfe c01 c85 cdb c0f c84 c30 c03 c00 c00 c65 c48 c8b c1c c25 c00 c7e c01 c00 c<48> c8d cbb cac c08 c00 c00 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 cfa c48 c