[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.754089] audit: type=1400 audit(1519107428.279:6): avc: denied { map } for pid=4149 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.205' (ECDSA) to the list of known hosts. syzkaller login: [ 23.989181] audit: type=1400 audit(1519107434.514:7): avc: denied { map } for pid=4163 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/20 06:17:14 parsed 1 programs 2018/02/20 06:17:14 executed programs: 0 [ 24.254903] audit: type=1400 audit(1519107434.780:8): avc: denied { map } for pid=4163 comm="syz-execprog" path="/root/syzkaller-shm456392240" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 24.270185] IPVS: ftp: loaded support on port[0] = 21 [ 24.489728] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 24.863361] [ 24.865022] ===================================== [ 24.869834] WARNING: bad unlock balance detected! [ 24.874651] 4.16.0-rc1+ #232 Not tainted [ 24.878678] ------------------------------------- [ 24.883489] kworker/0:1/24 is trying to release lock (rcu_read_lock_bh) at: [ 24.890569] [] hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 24.897550] but there are no more locks to release! [ 24.902535] [ 24.902535] other info that might help us debug this: [ 24.909172] 5 locks held by kworker/0:1/24: [ 24.913458] #0: ((wq_completion)"events_power_efficient"){+.+.}, at: [<000000009340efda>] process_one_work+0xaaf/0x1af0 [ 24.924532] #1: ((work_completion)(&(&hinfo->gc_work)->work)){+.+.}, at: [<00000000cb2a0d75>] process_one_work+0xb01/0x1af0 [ 24.935947] #2: ((&idev->mc_dad_timer)){+.-.}, at: [<00000000278ec512>] call_timer_fn+0x1c6/0x820 [ 24.945108] #3: (rcu_read_lock){....}, at: [<0000000091b6fc7b>] mld_sendpack+0x180/0xe70 [ 24.953488] #4: (rcu_read_lock){....}, at: [<000000002b6b177a>] nf_hook.constprop.37+0x0/0x830 [ 24.962386] [ 24.962386] stack backtrace: [ 24.966853] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 4.16.0-rc1+ #232 [ 24.973746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.983077] Workqueue: events_power_efficient htable_gc [ 24.988408] Call Trace: [ 24.990962] [ 24.993088] dump_stack+0x194/0x257 [ 24.996687] ? arch_local_irq_restore+0x53/0x53 [ 25.001333] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.006756] print_unlock_imbalance_bug+0x12f/0x140 [ 25.011742] lock_release+0x6fe/0xa40 [ 25.015516] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.020938] ? lock_downgrade+0x980/0x980 [ 25.025060] ? lock_release+0xa40/0xa40 [ 25.029004] ? __raw_spin_lock_init+0x1c/0x100 [ 25.033561] ? do_raw_spin_trylock+0x190/0x190 [ 25.038117] hashlimit_mt_common.isra.10+0x1c08/0x2610 [ 25.043370] ? dsthash_find+0x5b0/0x5b0 [ 25.047315] ? __lock_acquire+0x664/0x3e00 [ 25.051525] ? ret_from_fork+0x3a/0x50 [ 25.055389] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.060554] ? unwind_dump+0x4d0/0x4d0 [ 25.064416] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 25.069581] ? unwind_next_frame+0x3e/0x50 [ 25.073788] hashlimit_mt+0x78/0x90 [ 25.077385] ? hashlimit_mt+0x78/0x90 [ 25.081157] ip6t_do_table+0x98d/0x1a30 [ 25.085106] ? kmem_cache_alloc_trace+0x136/0x740 [ 25.089919] ? mld_sendpack+0x617/0xe70 [ 25.093866] ? ip6t_error+0x60/0x60 [ 25.097466] ? check_noncircular+0x20/0x20 [ 25.101671] ? lock_acquire+0x1d5/0x580 [ 25.105615] ? lock_acquire+0x1d5/0x580 [ 25.109560] ? igmp6_mcf_seq_next+0x660/0x660 [ 25.114030] ? lock_release+0xa40/0xa40 [ 25.117979] ip6table_raw_hook+0x65/0x80 [ 25.122013] nf_hook_slow+0xba/0x1a0 [ 25.125700] nf_hook.constprop.37+0x3f6/0x830 [ 25.130170] ? igmp6_mcf_seq_next+0x660/0x660 [ 25.134638] ? trace_hardirqs_on+0xd/0x10 [ 25.138760] ? __local_bh_enable_ip+0x121/0x230 [ 25.143404] ? _raw_spin_unlock_bh+0x30/0x40 [ 25.147784] ? rt6_uncached_list_add+0x1b7/0x240 [ 25.152684] ? rt6_fill_node+0x18b0/0x18b0 [ 25.156891] ? icmp6_dst_alloc+0x475/0x660 [ 25.161102] ? ip6_mc_leave_src+0x1d0/0x1d0 [ 25.165394] ? icmpv6_flow_init+0x1f6/0x270 [ 25.169694] mld_sendpack+0x6c2/0xe70 [ 25.173467] ? nf_hook.constprop.37+0x830/0x830 [ 25.178118] ? mark_held_locks+0xaf/0x100 [ 25.182238] ? trace_hardirqs_on+0xd/0x10 [ 25.186357] ? __local_bh_enable_ip+0x121/0x230 [ 25.190997] mld_send_initial_cr.part.25+0x103/0x150 [ 25.196074] mld_dad_timer_expire+0x31/0x100 [ 25.200456] call_timer_fn+0x228/0x820 [ 25.204333] ? mld_send_initial_cr.part.25+0x150/0x150 [ 25.209581] ? process_timeout+0x40/0x40 [ 25.213613] ? __run_timers+0x7e3/0xb70 [ 25.217560] ? lock_downgrade+0x980/0x980 [ 25.221694] ? debug_object_deactivate+0x364/0x560 [ 25.226595] ? lock_release+0xa40/0xa40 [ 25.230542] ? mark_held_locks+0xaf/0x100 [ 25.234664] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 25.239649] ? mld_send_initial_cr.part.25+0x150/0x150 [ 25.244894] ? mld_send_initial_cr.part.25+0x150/0x150 [ 25.250140] __run_timers+0x7ee/0xb70 [ 25.253915] ? trigger_dyntick_cpu.isra.29+0x150/0x150 [ 25.259164] ? timerqueue_add+0x1e9/0x280 [ 25.263282] ? check_noncircular+0x20/0x20 [ 25.267491] ? enqueue_hrtimer+0x177/0x4b0 [ 25.271695] ? lock_release+0xa40/0xa40 [ 25.275644] ? retrigger_next_event+0x1e0/0x1e0 [ 25.280287] ? print_irqtrace_events+0x270/0x270 [ 25.285020] ? check_noncircular+0x20/0x20 [ 25.289229] ? clockevents_program_event+0x163/0x2e0 [ 25.294308] ? lock_downgrade+0x980/0x980 [ 25.298428] ? __lock_is_held+0xb6/0x140 [ 25.302462] run_timer_softirq+0x4c/0x70 [ 25.306498] __do_softirq+0x2d7/0xb85 [ 25.310272] ? ktime_get+0x26f/0x3a0 [ 25.313969] ? __irqentry_text_end+0x1f8ee4/0x1f8ee4 [ 25.319054] ? check_noncircular+0x20/0x20 [ 25.323262] ? native_apic_msr_write+0x5c/0x80 [ 25.327816] ? lapic_next_event+0x54/0x80 [ 25.331936] ? clockevents_program_event+0x108/0x2e0 [ 25.337011] ? tick_program_event+0x83/0x100 [ 25.341392] ? __lock_is_held+0xb6/0x140 [ 25.345430] irq_exit+0x1cc/0x200 [ 25.348854] smp_apic_timer_interrupt+0x16b/0x700 [ 25.353666] ? smp_reschedule_interrupt+0xe6/0x650 [ 25.358570] ? smp_call_function_single_interrupt+0x640/0x640 [ 25.364429] ? _raw_spin_lock+0x32/0x40 [ 25.368551] ? _raw_spin_unlock+0x22/0x30 [ 25.372669] ? handle_edge_irq+0x2b4/0x7c0 [ 25.376877] ? task_prio+0x50/0x50 [ 25.380392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 25.385208] apic_timer_interrupt+0xa9/0xb0 [ 25.389499] [ 25.391709] RIP: 0010:lock_is_held_type+0x18b/0x210 [ 25.396693] RSP: 0018:ffff8801d98673e8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff12 [ 25.404374] RAX: dffffc0000000000 RBX: 0000000000000282 RCX: 0000000000000006 [ 25.411614] RDX: 1ffffffff0d592cd RSI: ffffffff86b42680 RDI: 0000000000000282 [ 25.418855] RBP: ffff8801d9867408 R08: 1ffff1003b30ce5b R09: 0000000000000000 [ 25.426094] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d9854640 [ 25.433336] R13: 0000000000000000 R14: 000000000000017d R15: 0000000000000000 [ 25.440588] ? mark_held_locks+0xaf/0x100 [ 25.444705] ___might_sleep+0x39b/0x470 [ 25.448651] ? trace_event_raw_event_sched_switch+0x810/0x810 [ 25.454505] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.459498] ? htable_selective_cleanup+0x289/0x3d0 [ 25.464483] ? trace_hardirqs_on+0xd/0x10 [ 25.468602] ? __local_bh_enable_ip+0x121/0x230 [ 25.473243] ? select_all+0x10/0x10 [ 25.476842] htable_selective_cleanup+0x29c/0x3d0 [ 25.481657] ? hashlimit_ipv6_mask+0x3b0/0x3b0 [ 25.486209] ? __lock_is_held+0xb6/0x140 [ 25.490242] htable_gc+0x2e/0xc0 [ 25.493581] process_one_work+0xbbf/0x1af0 [ 25.497791] ? pwq_dec_nr_in_flight+0x450/0x450 [ 25.502431] ? __schedule+0x8ea/0x2040 [ 25.506303] ? __lock_acquire+0x664/0x3e00 [ 25.510511] ? check_noncircular+0x20/0x20 [ 25.515309] ? check_noncircular+0x20/0x20 [ 25.519519] ? lock_acquire+0x1d5/0x580 [ 25.523464] ? lock_acquire+0x1d5/0x580 [ 25.527418] ? worker_thread+0x4a3/0x1990 [ 25.531537] ? lock_downgrade+0x980/0x980 [ 25.535657] ? lock_release+0xa40/0xa40 [ 25.539605] ? retint_kernel+0x10/0x10 [ 25.543465] ? do_raw_spin_trylock+0x190/0x190 [ 25.548023] worker_thread+0x223/0x1990 [ 25.551970] ? finish_task_switch+0x1e2/0x890 [ 25.556441] ? process_one_work+0x1af0/0x1af0 [ 25.560908] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.565895] ? trace_hardirqs_on+0xd/0x10 [ 25.570018] ? mmdrop+0x18/0x30 [ 25.573269] ? finish_task_switch+0x29b/0x890 [ 25.577736] ? copy_overflow+0x20/0x20 [ 25.581599] ? __schedule+0x8ea/0x2040 [ 25.585463] ? check_noncircular+0x20/0x20 [ 25.589669] ? find_held_lock+0x35/0x1d0 [ 25.593704] ? find_held_lock+0x35/0x1d0 [ 25.597738] ? find_held_lock+0x35/0x1d0 [ 25.601773] ? complete+0x62/0x80 [ 25.605198] ? __schedule+0x2040/0x2040 [ 25.609144] ? do_wait_intr_irq+0x3e0/0x3e0 [ 25.613436] ? __lockdep_init_map+0xe4/0x650 [ 25.617815] ? do_raw_spin_trylock+0x190/0x190 [ 25.622367] ? lockdep_init_map+0x9/0x10 [ 25.626398] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 25.631472] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 25.636460] ? trace_hardirqs_on+0xd/0x10 [ 25.640578] ? __kthread_parkme+0x175/0x240 [ 25.644870] kthread+0x33c/0x400 [ 25.648207] ? process_one_work+0x1af0/0x1af0 [ 25.652673] ? kthread_stop+0x7a0/0x7a0 [ 25.656619] ret_from_fork+0x3a/0x50 2018/02/20 06:17:19 executed programs: 531 2018/02/20 06:17:24 executed programs: 1289