[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.791458] audit: type=1400 audit(1519090206.438:6): avc: denied { map } for pid=4154 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.13' (ECDSA) to the list of known hosts. syzkaller login: [ 26.113249] audit: type=1400 audit(1519090214.755:7): avc: denied { map } for pid=4169 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/20 01:30:15 parsed 1 programs 2018/02/20 01:30:15 executed programs: 0 [ 26.385652] audit: type=1400 audit(1519090215.032:8): avc: denied { map } for pid=4169 comm="syz-execprog" path="/root/syzkaller-shm239101393" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 26.400461] IPVS: ftp: loaded support on port[0] = 21 [ 26.616294] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 28.000532] [ 28.002187] ===================================== [ 28.007003] WARNING: bad unlock balance detected! [ 28.011815] 4.16.0-rc2+ #320 Not tainted [ 28.015841] ------------------------------------- [ 28.020649] kworker/0:2/1828 is trying to release lock (rcu_read_lock_bh) at: [ 28.027903] [] hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 28.034880] but there are no more locks to release! [ 28.039860] [ 28.039860] other info that might help us debug this: [ 28.046496] 5 locks held by kworker/0:2/1828: [ 28.050957] #0: ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: [<00000000464e2d4b>] process_one_work+0xaaf/0x1af0 [ 28.061769] #1: ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: [<00000000357bd560>] process_one_work+0xb01/0x1af0 [ 28.073100] #2: (rtnl_mutex){+.+.}, at: [<0000000097357f56>] rtnl_lock+0x17/0x20 [ 28.080781] #3: (rcu_read_lock){....}, at: [<0000000037b11985>] mld_sendpack+0x180/0xe70 [ 28.089160] #4: (rcu_read_lock){....}, at: [<00000000af8d4798>] nf_hook.constprop.37+0x0/0x830 [ 28.098057] [ 28.098057] stack backtrace: [ 28.102525] CPU: 0 PID: 1828 Comm: kworker/0:2 Not tainted 4.16.0-rc2+ #320 [ 28.109592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.118920] Workqueue: ipv6_addrconf addrconf_dad_work [ 28.124164] Call Trace: [ 28.126723] dump_stack+0x194/0x257 [ 28.130322] ? arch_local_irq_restore+0x53/0x53 [ 28.134965] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 28.140388] print_unlock_imbalance_bug+0x12f/0x140 [ 28.145375] lock_release+0x6fe/0xa40 [ 28.149147] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 28.154566] ? lock_downgrade+0x980/0x980 [ 28.158682] ? lock_release+0xa40/0xa40 [ 28.162624] ? __raw_spin_lock_init+0x1c/0x100 [ 28.167175] ? do_raw_spin_trylock+0x190/0x190 [ 28.171729] hashlimit_mt_common.isra.10+0x1c08/0x2610 [ 28.176981] ? dsthash_find+0x5b0/0x5b0 [ 28.180927] ? __lock_acquire+0x664/0x3e00 [ 28.185133] ? ret_from_fork+0x3a/0x50 [ 28.188995] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 28.194155] ? unwind_dump+0x4d0/0x4d0 [ 28.198016] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 28.203181] ? unwind_next_frame+0x3e/0x50 [ 28.207388] hashlimit_mt+0x78/0x90 [ 28.210986] ? hashlimit_mt+0x78/0x90 [ 28.214757] ip6t_do_table+0x98d/0x1a30 [ 28.218707] ? kmem_cache_alloc_trace+0x136/0x740 [ 28.223523] ? mld_sendpack+0x617/0xe70 [ 28.227468] ? ip6t_error+0x60/0x60 [ 28.231068] ? check_noncircular+0x20/0x20 [ 28.235275] ? lock_acquire+0x1d5/0x580 [ 28.239220] ? lock_acquire+0x1d5/0x580 [ 28.243164] ? igmp6_mcf_seq_next+0x660/0x660 [ 28.247630] ? lock_release+0xa40/0xa40 [ 28.251575] ip6table_raw_hook+0x65/0x80 [ 28.255609] nf_hook_slow+0xba/0x1a0 [ 28.259299] nf_hook.constprop.37+0x3f6/0x830 [ 28.263765] ? igmp6_mcf_seq_next+0x660/0x660 [ 28.268231] ? trace_hardirqs_on+0xd/0x10 [ 28.272353] ? __local_bh_enable_ip+0x121/0x230 [ 28.276992] ? _raw_spin_unlock_bh+0x30/0x40 [ 28.281373] ? rt6_uncached_list_add+0x1b7/0x240 [ 28.286098] ? rt6_fill_node+0x18b0/0x18b0 [ 28.290307] ? icmp6_dst_alloc+0x475/0x660 [ 28.294512] ? ip6_mc_leave_src+0x1d0/0x1d0 [ 28.298806] ? icmpv6_flow_init+0x1f6/0x270 [ 28.303100] mld_sendpack+0x6c2/0xe70 [ 28.306873] ? nf_hook.constprop.37+0x830/0x830 [ 28.311516] ? mark_held_locks+0xaf/0x100 [ 28.315639] ? trace_hardirqs_on+0xd/0x10 [ 28.319756] ? __local_bh_enable_ip+0x121/0x230 [ 28.324396] mld_send_initial_cr.part.25+0x103/0x150 [ 28.329471] ipv6_mc_dad_complete+0x99/0x130 [ 28.333849] addrconf_dad_completed+0x78b/0xb90 [ 28.338487] ? addrconf_verify_work+0x20/0x20 [ 28.342961] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.347948] ? addrconf_dad_work+0x849/0x1320 [ 28.352413] addrconf_dad_work+0x3d6/0x1320 [ 28.356704] ? addrconf_dad_work+0x3d6/0x1320 [ 28.361170] ? addrconf_ifdown+0x14f0/0x14f0 [ 28.365551] ? __lock_is_held+0xb6/0x140 [ 28.369586] process_one_work+0xbbf/0x1af0 [ 28.373790] ? process_one_work+0xbbf/0x1af0 [ 28.378173] ? pwq_dec_nr_in_flight+0x450/0x450 [ 28.382814] ? __schedule+0x90d/0x2070 [ 28.386676] ? __lock_acquire+0x664/0x3e00 [ 28.390879] ? __lock_is_held+0xb6/0x140 [ 28.394908] ? check_noncircular+0x20/0x20 [ 28.399116] ? check_noncircular+0x20/0x20 [ 28.403332] ? lock_acquire+0x1d5/0x580 [ 28.407278] ? lock_acquire+0x1d5/0x580 [ 28.411222] ? worker_thread+0x4a3/0x1990 [ 28.415342] ? lock_downgrade+0x980/0x980 [ 28.419459] ? lock_release+0xa40/0xa40 [ 28.423405] ? do_raw_spin_trylock+0x190/0x190 [ 28.427959] worker_thread+0x223/0x1990 [ 28.431902] ? finish_task_switch+0x1c0/0x860 [ 28.436374] ? process_one_work+0x1af0/0x1af0 [ 28.440840] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.445826] ? trace_hardirqs_on+0xd/0x10 [ 28.449941] ? mmdrop+0x18/0x30 [ 28.453190] ? finish_task_switch+0x279/0x860 [ 28.457654] ? copy_overflow+0x20/0x20 [ 28.461516] ? __schedule+0x90d/0x2070 [ 28.465379] ? check_noncircular+0x20/0x20 [ 28.469585] ? do_raw_spin_trylock+0x190/0x190 [ 28.474137] ? find_held_lock+0x35/0x1d0 [ 28.478172] ? find_held_lock+0x35/0x1d0 [ 28.482203] ? complete+0x62/0x80 [ 28.485626] ? __schedule+0x2070/0x2070 [ 28.489570] ? do_wait_intr_irq+0x3e0/0x3e0 [ 28.493860] ? __lockdep_init_map+0xe4/0x650 [ 28.498237] ? do_raw_spin_trylock+0x190/0x190 [ 28.502791] ? lockdep_init_map+0x9/0x10 [ 28.506828] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 28.511900] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.516884] ? trace_hardirqs_on+0xd/0x10 [ 28.521005] ? __kthread_parkme+0x175/0x240 [ 28.525301] kthread+0x33c/0x400 [ 28.528638] ? process_one_work+0x1af0/0x1af0 [ 28.533105] ? kthread_stop+0x7a0/0x7a0 [ 28.537052] ret_from_fork+0x3a/0x50 2018/02/20 01:30:20 executed programs: 541 2018/02/20 01:30:25 executed programs: 1352