[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.015060] audit: type=1400 audit(1519112613.774:6): avc: denied { map } for pid=4137 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. syzkaller login: [ 24.321836] audit: type=1400 audit(1519112620.081:7): avc: denied { map } for pid=4151 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/20 07:43:40 parsed 1 programs 2018/02/20 07:43:40 executed programs: 0 [ 24.593106] audit: type=1400 audit(1519112620.352:8): avc: denied { map } for pid=4151 comm="syz-execprog" path="/root/syzkaller-shm762699309" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 24.630843] IPVS: ftp: loaded support on port[0] = 21 [ 24.834617] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 24.932466] ip (4229) used greatest stack depth: 16720 bytes left [ 25.296488] [ 25.298143] ===================================== [ 25.302954] WARNING: bad unlock balance detected! [ 25.307770] 4.16.0-rc1+ #232 Not tainted [ 25.311798] ------------------------------------- [ 25.316610] kworker/1:1/23 is trying to release lock (rcu_read_lock_bh) at: [ 25.323692] [] hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.330675] but there are no more locks to release! [ 25.335660] [ 25.335660] other info that might help us debug this: [ 25.342299] 5 locks held by kworker/1:1/23: [ 25.346591] #0: ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: [<00000000d51d238d>] process_one_work+0xaaf/0x1af0 [ 25.357419] #1: ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: [<0000000057209a94>] process_one_work+0xb01/0x1af0 [ 25.368759] #2: (rtnl_mutex){+.+.}, at: [<000000005b417e3e>] rtnl_lock+0x17/0x20 [ 25.376445] #3: (rcu_read_lock){....}, at: [<00000000fd4cbdd3>] ndisc_send_skb+0x826/0x1370 [ 25.385086] #4: (rcu_read_lock){....}, at: [<00000000a22701c2>] nf_hook.constprop.27+0x0/0x830 [ 25.393984] [ 25.393984] stack backtrace: [ 25.398453] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 4.16.0-rc1+ #232 [ 25.405347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.414680] Workqueue: ipv6_addrconf addrconf_dad_work [ 25.419927] Call Trace: [ 25.422498] dump_stack+0x194/0x257 [ 25.426118] ? arch_local_irq_restore+0x53/0x53 [ 25.430762] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.436185] print_unlock_imbalance_bug+0x12f/0x140 [ 25.441175] lock_release+0x6fe/0xa40 [ 25.444950] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.450377] ? lock_downgrade+0x980/0x980 [ 25.454495] ? lock_release+0xa40/0xa40 [ 25.458441] ? __raw_spin_lock_init+0x1c/0x100 [ 25.462998] ? do_raw_spin_trylock+0x190/0x190 [ 25.467559] hashlimit_mt_common.isra.10+0x1c08/0x2610 [ 25.472813] ? dsthash_find+0x5b0/0x5b0 [ 25.476762] ? __lock_acquire+0x664/0x3e00 [ 25.480969] ? ret_from_fork+0x3a/0x50 [ 25.484836] ? print_irqtrace_events+0x270/0x270 [ 25.489569] ? __unwind_start+0x169/0x330 [ 25.493691] hashlimit_mt+0x78/0x90 [ 25.497292] ? hashlimit_mt+0x78/0x90 [ 25.501066] ip6t_do_table+0x98d/0x1a30 [ 25.505018] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.510187] ? ip6t_error+0x60/0x60 [ 25.513787] ? check_noncircular+0x20/0x20 [ 25.517995] ? lock_acquire+0x1d5/0x580 [ 25.521944] ? lock_acquire+0x1d5/0x580 [ 25.525892] ? pndisc_destructor+0x340/0x340 [ 25.530274] ? lock_release+0xa40/0xa40 [ 25.534220] ip6table_raw_hook+0x65/0x80 [ 25.538259] nf_hook_slow+0xba/0x1a0 [ 25.541947] nf_hook.constprop.27+0x3f6/0x830 [ 25.546415] ? pndisc_destructor+0x340/0x340 [ 25.550795] ? find_held_lock+0x35/0x1d0 [ 25.554829] ? lock_acquire+0x1d5/0x580 [ 25.558774] ? lock_acquire+0x1d5/0x580 [ 25.562718] ? ndisc_send_skb+0x826/0x1370 [ 25.566924] ? lock_downgrade+0x980/0x980 [ 25.571050] ? lock_release+0xa40/0xa40 [ 25.574999] ? ndisc_error_report+0x180/0x180 [ 25.579470] ndisc_send_skb+0xa51/0x1370 [ 25.583505] ? nf_hook.constprop.27+0x830/0x830 [ 25.588147] ? check_noncircular+0x20/0x20 [ 25.592356] ? refcount_add_not_zero+0x133/0x200 [ 25.597086] ? refcount_dec_if_one+0x20/0x20 [ 25.601468] ? print_irqtrace_events+0x270/0x270 [ 25.606201] ndisc_send_ns+0x38a/0x870 [ 25.610061] ? ndisc_netdev_event+0x4a0/0x4a0 [ 25.614531] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.619519] ? addrconf_dad_work+0xa5e/0x1320 [ 25.623990] addrconf_dad_work+0xb9e/0x1320 [ 25.628285] ? addrconf_dad_work+0xb9e/0x1320 [ 25.632755] ? addrconf_ifdown+0x14f0/0x14f0 [ 25.637136] ? __lock_is_held+0xb6/0x140 [ 25.641175] process_one_work+0xbbf/0x1af0 [ 25.645382] ? process_one_work+0xbbf/0x1af0 [ 25.649765] ? pwq_dec_nr_in_flight+0x450/0x450 [ 25.654410] ? __schedule+0x8ea/0x2040 [ 25.658273] ? __lock_acquire+0x664/0x3e00 [ 25.662483] ? check_noncircular+0x20/0x20 [ 25.666694] ? check_noncircular+0x20/0x20 [ 25.670906] ? lock_acquire+0x1d5/0x580 [ 25.674855] ? lock_acquire+0x1d5/0x580 [ 25.678805] ? worker_thread+0x4a3/0x1990 [ 25.682926] ? lock_downgrade+0x980/0x980 [ 25.687050] ? lock_release+0xa40/0xa40 [ 25.690997] ? check_noncircular+0x20/0x20 [ 25.695208] ? do_raw_spin_trylock+0x190/0x190 [ 25.699768] worker_thread+0x223/0x1990 [ 25.703713] ? finish_task_switch+0x1e2/0x890 [ 25.708185] ? process_one_work+0x1af0/0x1af0 [ 25.712653] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.717641] ? trace_hardirqs_on+0xd/0x10 [ 25.721760] ? mmdrop+0x18/0x30 [ 25.725014] ? finish_task_switch+0x29b/0x890 [ 25.729483] ? copy_overflow+0x20/0x20 [ 25.733839] ? __schedule+0x8ea/0x2040 [ 25.737706] ? check_noncircular+0x20/0x20 [ 25.741912] ? find_held_lock+0x35/0x1d0 [ 25.745946] ? find_held_lock+0x35/0x1d0 [ 25.749982] ? find_held_lock+0x35/0x1d0 [ 25.754020] ? complete+0x62/0x80 [ 25.757450] ? __schedule+0x2040/0x2040 [ 25.761395] ? do_wait_intr_irq+0x3e0/0x3e0 [ 25.765688] ? __lockdep_init_map+0xe4/0x650 [ 25.770069] ? do_raw_spin_trylock+0x190/0x190 [ 25.774622] ? lockdep_init_map+0x9/0x10 [ 25.778657] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 25.783731] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.788722] ? trace_hardirqs_on+0xd/0x10 [ 25.792841] ? __kthread_parkme+0x175/0x240 [ 25.797134] kthread+0x33c/0x400 [ 25.800475] ? process_one_work+0x1af0/0x1af0 [ 25.804949] ? kthread_stop+0x7a0/0x7a0 [ 25.808897] ret_from_fork+0x3a/0x50 2018/02/20 07:43:45 executed programs: 573 2018/02/20 07:43:50 executed programs: 1289