[....] Starting enhanced syslogd: rsyslogd[ 15.634537] audit: type=1400 audit(1519107529.574:5): avc: denied { syslog } for pid=4005 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 20.295910] audit: type=1400 audit(1519107534.236:6): avc: denied { map } for pid=4145 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.218' (ECDSA) to the list of known hosts. [ 26.563750] audit: type=1400 audit(1519107540.504:7): avc: denied { map } for pid=4159 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/20 06:19:00 parsed 1 programs 2018/02/20 06:19:00 executed programs: 0 [ 26.830204] audit: type=1400 audit(1519107540.770:8): avc: denied { map } for pid=4159 comm="syz-execprog" path="/root/syzkaller-shm149828963" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 26.842889] IPVS: ftp: loaded support on port[0] = 21 [ 27.066489] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 27.999258] [ 28.000921] ===================================== [ 28.005732] WARNING: bad unlock balance detected! [ 28.010541] 4.16.0-rc2+ #320 Not tainted [ 28.014567] ------------------------------------- [ 28.019377] swapper/1/0 is trying to release lock (rcu_read_lock_bh) at: [ 28.026209] [] hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 28.033188] but there are no more locks to release! [ 28.038170] [ 28.038170] other info that might help us debug this: [ 28.044805] 3 locks held by swapper/1/0: [ 28.048829] #0: ((&idev->mc_ifc_timer)){+.-.}, at: [<0000000053d6b0e1>] call_timer_fn+0x1c6/0x820 [ 28.057986] #1: (rcu_read_lock){....}, at: [<000000001d23bef2>] mld_sendpack+0x180/0xe70 [ 28.066367] #2: (rcu_read_lock){....}, at: [<00000000c9cd4d17>] nf_hook.constprop.37+0x0/0x830 [ 28.075264] [ 28.075264] stack backtrace: [ 28.079731] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.16.0-rc2+ #320 [ 28.086363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.095945] Call Trace: [ 28.098499] [ 28.100621] dump_stack+0x194/0x257 [ 28.104217] ? arch_local_irq_restore+0x53/0x53 [ 28.108855] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 28.114277] print_unlock_imbalance_bug+0x12f/0x140 [ 28.119261] lock_release+0x6fe/0xa40 [ 28.123031] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 28.128450] ? lock_downgrade+0x980/0x980 [ 28.132568] ? lock_release+0xa40/0xa40 [ 28.136509] ? __raw_spin_lock_init+0x1c/0x100 [ 28.141060] ? do_raw_spin_trylock+0x190/0x190 [ 28.145614] hashlimit_mt_common.isra.10+0x1c08/0x2610 [ 28.150862] ? dsthash_find+0x5b0/0x5b0 [ 28.154803] ? __lock_acquire+0x664/0x3e00 [ 28.159009] ? secondary_startup_64+0xa5/0xb0 [ 28.163478] ? memset+0x31/0x40 [ 28.166731] ? unwind_dump+0x4d0/0x4d0 [ 28.170589] ? __unwind_start+0x169/0x330 [ 28.174710] hashlimit_mt+0x78/0x90 [ 28.178306] ? hashlimit_mt+0x78/0x90 [ 28.182075] ip6t_do_table+0x98d/0x1a30 [ 28.186024] ? kmem_cache_alloc_trace+0x136/0x740 [ 28.190836] ? mld_sendpack+0x617/0xe70 [ 28.194793] ? ip6t_error+0x60/0x60 [ 28.198396] ? check_noncircular+0x20/0x20 [ 28.202600] ? lock_acquire+0x1d5/0x580 [ 28.206541] ? lock_acquire+0x1d5/0x580 [ 28.210485] ? igmp6_mcf_seq_next+0x660/0x660 [ 28.214949] ? lock_release+0xa40/0xa40 [ 28.218895] ip6table_raw_hook+0x65/0x80 [ 28.222926] nf_hook_slow+0xba/0x1a0 [ 28.226610] nf_hook.constprop.37+0x3f6/0x830 [ 28.231075] ? igmp6_mcf_seq_next+0x660/0x660 [ 28.235538] ? trace_hardirqs_on+0xd/0x10 [ 28.239654] ? __local_bh_enable_ip+0x121/0x230 [ 28.244293] ? _raw_spin_unlock_bh+0x30/0x40 [ 28.248672] ? rt6_uncached_list_add+0x1b7/0x240 [ 28.253400] ? rt6_fill_node+0x18b0/0x18b0 [ 28.257606] ? icmp6_dst_alloc+0x475/0x660 [ 28.261808] ? ip6_mc_leave_src+0x1d0/0x1d0 [ 28.266099] ? icmpv6_flow_init+0x1f6/0x270 [ 28.270389] mld_sendpack+0x6c2/0xe70 [ 28.274164] ? nf_hook.constprop.37+0x830/0x830 [ 28.278803] ? mark_held_locks+0xaf/0x100 [ 28.282921] ? trace_hardirqs_on+0xd/0x10 [ 28.287037] ? __local_bh_enable_ip+0x121/0x230 [ 28.291673] mld_ifc_timer_expire+0x3d9/0x770 [ 28.296141] call_timer_fn+0x228/0x820 [ 28.299997] ? mld_dad_timer_expire+0x100/0x100 [ 28.304636] ? process_timeout+0x40/0x40 [ 28.308667] ? __run_timers+0x7e3/0xb70 [ 28.312613] ? lock_downgrade+0x980/0x980 [ 28.316733] ? debug_object_deactivate+0x364/0x560 [ 28.321628] ? lock_release+0xa40/0xa40 [ 28.325573] ? do_raw_spin_trylock+0x190/0x190 [ 28.330124] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 28.335109] ? mld_dad_timer_expire+0x100/0x100 [ 28.339753] ? mld_dad_timer_expire+0x100/0x100 [ 28.344391] __run_timers+0x7ee/0xb70 [ 28.348163] ? trigger_dyntick_cpu.isra.29+0x150/0x150 [ 28.353410] ? timerqueue_add+0x1e9/0x280 [ 28.357527] ? check_noncircular+0x20/0x20 [ 28.361729] ? enqueue_hrtimer+0x177/0x4b0 [ 28.365931] ? lock_release+0xa40/0xa40 [ 28.369872] ? retrigger_next_event+0x1e0/0x1e0 [ 28.374509] ? find_held_lock+0x35/0x1d0 [ 28.378542] ? clockevents_program_event+0x163/0x2e0 [ 28.383614] ? lock_downgrade+0x980/0x980 [ 28.387732] ? rcu_pm_notify+0xc0/0xc0 [ 28.391589] run_timer_softirq+0x4c/0x70 [ 28.395618] __do_softirq+0x2d7/0xb85 [ 28.399388] ? ktime_get+0x26f/0x3a0 [ 28.403071] ? __irqentry_text_end+0x1f8ad4/0x1f8ad4 [ 28.408142] ? do_timer+0x50/0x50 [ 28.411566] ? native_apic_msr_write+0x5c/0x80 [ 28.416117] ? lapic_next_event+0x54/0x80 [ 28.420234] ? clockevents_program_event+0x108/0x2e0 [ 28.425306] ? tick_program_event+0x83/0x100 [ 28.429686] ? rcu_pm_notify+0xc0/0xc0 [ 28.433544] irq_exit+0x1cc/0x200 [ 28.436964] smp_apic_timer_interrupt+0x16b/0x700 [ 28.441772] ? smp_reschedule_interrupt+0xe6/0x650 [ 28.446667] ? smp_call_function_single_interrupt+0x640/0x640 [ 28.452525] ? _raw_spin_lock+0x32/0x40 [ 28.456471] ? _raw_spin_unlock+0x22/0x30 [ 28.460586] ? handle_edge_irq+0x2b4/0x7c0 [ 28.464789] ? task_prio+0x50/0x50 [ 28.468302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.473113] apic_timer_interrupt+0x8e/0xa0 [ 28.477401] [ 28.479609] RIP: 0010:native_safe_halt+0x6/0x10 [ 28.484244] RSP: 0018:ffff8801d9f1fcb0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff12 [ 28.491920] RAX: dffffc0000000000 RBX: 1ffff1003b3e3f99 RCX: 0000000000000000 [ 28.499160] RDX: 1ffffffff0d592d8 RSI: 0000000000000001 RDI: ffffffff86ac96c0 [ 28.506397] RBP: ffff8801d9f1fcb0 R08: 0000000000000000 R09: 0000000000000000 [ 28.513635] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 28.520872] R13: ffff8801d9f1fd68 R14: ffffffff8726ac60 R15: 0000000000000000 [ 28.528119] default_idle+0xbf/0x430 [ 28.531803] ? __sched_text_end+0x4/0x4 [ 28.535746] ? rcu_eqs_special_set+0x1e0/0x1e0 [ 28.540297] ? tsc_verify_tsc_adjust+0xf6/0x3e0 [ 28.544936] ? set_cpu_sd_state_idle+0x1dc/0x2d0 [ 28.549664] ? mark_tsc_async_resets+0x30/0x30 [ 28.554220] arch_cpu_idle+0xa/0x10 [ 28.557815] default_idle_call+0x36/0x90 [ 28.561845] do_idle+0x24a/0x3b0 [ 28.565178] ? complete+0x62/0x80 [ 28.568598] cpu_startup_entry+0x104/0x120 [ 28.572800] ? cpu_in_idle+0x20/0x20 [ 28.576484] start_secondary+0x40a/0x590 [ 28.580515] ? set_cpu_sibling_map+0x1660/0x1660 [ 28.585242] secondary_startup_64+0xa5/0xb0 2018/02/20 06:19:05 executed programs: 580 2018/02/20 06:19:10 executed programs: 1415