[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 17.679551] audit: type=1400 audit(1519115375.304:6): avc: denied { map } for pid=4144 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.45' (ECDSA) to the list of known hosts. syzkaller login: [ 23.957347] audit: type=1400 audit(1519115381.582:7): avc: denied { map } for pid=4158 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/20 08:29:41 parsed 1 programs 2018/02/20 08:29:41 executed programs: 0 [ 24.223313] audit: type=1400 audit(1519115381.847:8): avc: denied { map } for pid=4158 comm="syz-execprog" path="/root/syzkaller-shm215383136" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 24.236498] IPVS: ftp: loaded support on port[0] = 21 [ 24.458454] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 25.887520] [ 25.889176] ===================================== [ 25.893985] WARNING: bad unlock balance detected! [ 25.898797] 4.16.0-rc1+ #232 Not tainted [ 25.902828] ------------------------------------- [ 25.907638] kworker/0:1/23 is trying to release lock (rcu_read_lock_bh) at: [ 25.914716] [] hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.921695] but there are no more locks to release! [ 25.926675] [ 25.926675] other info that might help us debug this: [ 25.933309] 5 locks held by kworker/0:1/23: [ 25.937600] #0: ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: [<00000000b0791c1f>] process_one_work+0xaaf/0x1af0 [ 25.948410] #1: ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: [<000000003d64b420>] process_one_work+0xb01/0x1af0 [ 25.959737] #2: (rtnl_mutex){+.+.}, at: [<00000000be286e09>] rtnl_lock+0x17/0x20 [ 25.967418] #3: (rcu_read_lock){....}, at: [<0000000008d75f4f>] mld_sendpack+0x180/0xe70 [ 25.975796] #4: (rcu_read_lock){....}, at: [<00000000fb501597>] nf_hook.constprop.37+0x0/0x830 [ 25.984693] [ 25.984693] stack backtrace: [ 25.989158] CPU: 0 PID: 23 Comm: kworker/0:1 Not tainted 4.16.0-rc1+ #232 [ 25.996050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.005381] Workqueue: ipv6_addrconf addrconf_dad_work [ 26.010628] Call Trace: [ 26.013187] dump_stack+0x194/0x257 [ 26.016783] ? arch_local_irq_restore+0x53/0x53 [ 26.021425] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 26.026845] print_unlock_imbalance_bug+0x12f/0x140 [ 26.031830] lock_release+0x6fe/0xa40 [ 26.035604] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 26.041025] ? lock_downgrade+0x980/0x980 [ 26.045144] ? lock_release+0xa40/0xa40 [ 26.049089] ? __raw_spin_lock_init+0x1c/0x100 [ 26.053640] ? do_raw_spin_trylock+0x190/0x190 [ 26.058194] hashlimit_mt_common.isra.10+0x1c08/0x2610 [ 26.063442] ? dsthash_find+0x5b0/0x5b0 [ 26.067385] ? __lock_acquire+0x664/0x3e00 [ 26.071591] ? ret_from_fork+0x3a/0x50 [ 26.075451] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.080614] ? unwind_dump+0x4d0/0x4d0 [ 26.084473] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 26.089634] ? unwind_next_frame+0x3e/0x50 [ 26.093839] hashlimit_mt+0x78/0x90 [ 26.097434] ? hashlimit_mt+0x78/0x90 [ 26.101209] ip6t_do_table+0x98d/0x1a30 [ 26.105155] ? kmem_cache_alloc_trace+0x136/0x740 [ 26.109969] ? mld_sendpack+0x617/0xe70 [ 26.113914] ? ip6t_error+0x60/0x60 [ 26.117511] ? check_noncircular+0x20/0x20 [ 26.121714] ? lock_acquire+0x1d5/0x580 [ 26.125656] ? lock_acquire+0x1d5/0x580 [ 26.129601] ? igmp6_mcf_seq_next+0x660/0x660 [ 26.134070] ? lock_release+0xa40/0xa40 [ 26.138019] ip6table_raw_hook+0x65/0x80 [ 26.142055] nf_hook_slow+0xba/0x1a0 [ 26.145739] nf_hook.constprop.37+0x3f6/0x830 [ 26.150203] ? igmp6_mcf_seq_next+0x660/0x660 [ 26.154669] ? trace_hardirqs_on+0xd/0x10 [ 26.158790] ? __local_bh_enable_ip+0x121/0x230 [ 26.163432] ? _raw_spin_unlock_bh+0x30/0x40 [ 26.167813] ? rt6_uncached_list_add+0x1b7/0x240 [ 26.172543] ? rt6_fill_node+0x18b0/0x18b0 [ 26.176748] ? icmp6_dst_alloc+0x475/0x660 [ 26.180956] ? ip6_mc_leave_src+0x1d0/0x1d0 [ 26.185246] ? icmpv6_flow_init+0x1f6/0x270 [ 26.189542] mld_sendpack+0x6c2/0xe70 [ 26.193312] ? nf_hook.constprop.37+0x830/0x830 [ 26.197951] ? mark_held_locks+0xaf/0x100 [ 26.202070] ? trace_hardirqs_on+0xd/0x10 [ 26.206188] ? __local_bh_enable_ip+0x121/0x230 [ 26.210826] mld_send_initial_cr.part.25+0x103/0x150 [ 26.215902] ipv6_mc_dad_complete+0x99/0x130 [ 26.220280] addrconf_dad_completed+0x78b/0xb90 [ 26.224921] ? addrconf_verify_work+0x20/0x20 [ 26.229386] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.234371] ? addrconf_dad_work+0x849/0x1320 [ 26.238837] addrconf_dad_work+0x3d6/0x1320 [ 26.243127] ? addrconf_dad_work+0x3d6/0x1320 [ 26.247591] ? addrconf_ifdown+0x14f0/0x14f0 [ 26.251971] ? __lock_is_held+0xb6/0x140 [ 26.256005] process_one_work+0xbbf/0x1af0 [ 26.260213] ? process_one_work+0xbbf/0x1af0 [ 26.264596] ? pwq_dec_nr_in_flight+0x450/0x450 [ 26.269236] ? __schedule+0x8ea/0x2040 [ 26.273094] ? retint_kernel+0x10/0x10 [ 26.276955] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.281941] ? check_noncircular+0x20/0x20 [ 26.286148] ? retint_kernel+0x10/0x10 [ 26.290010] ? lock_acquire+0x1d5/0x580 [ 26.293959] ? lock_acquire+0x1d5/0x580 [ 26.297902] ? worker_thread+0x4a3/0x1990 [ 26.302020] ? lock_downgrade+0x980/0x980 [ 26.306138] ? lock_release+0xa40/0xa40 [ 26.310082] ? retint_kernel+0x10/0x10 [ 26.313939] ? do_raw_spin_trylock+0x190/0x190 [ 26.318493] worker_thread+0x223/0x1990 [ 26.322440] ? finish_task_switch+0x1e2/0x890 [ 26.326912] ? process_one_work+0x1af0/0x1af0 [ 26.331377] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.336362] ? trace_hardirqs_on+0xd/0x10 [ 26.340481] ? mmdrop+0x18/0x30 [ 26.343730] ? finish_task_switch+0x29b/0x890 [ 26.348199] ? copy_overflow+0x20/0x20 [ 26.352061] ? __schedule+0x8ea/0x2040 [ 26.355920] ? check_noncircular+0x20/0x20 [ 26.360127] ? find_held_lock+0x35/0x1d0 [ 26.364158] ? find_held_lock+0x35/0x1d0 [ 26.368190] ? find_held_lock+0x35/0x1d0 [ 26.372221] ? complete+0x62/0x80 [ 26.375646] ? __schedule+0x2040/0x2040 [ 26.379592] ? do_wait_intr_irq+0x3e0/0x3e0 [ 26.383883] ? __lockdep_init_map+0xe4/0x650 [ 26.388261] ? do_raw_spin_trylock+0x190/0x190 [ 26.392814] ? lockdep_init_map+0x9/0x10 [ 26.396844] ? _raw_spin_unlock_irqrestore+0x31/0xba [ 26.401919] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.406907] ? trace_hardirqs_on+0xd/0x10 [ 26.411027] ? __kthread_parkme+0x175/0x240 [ 26.415324] kthread+0x33c/0x400 [ 26.418663] ? process_one_work+0x1af0/0x1af0 [ 26.423126] ? kthread_stop+0x7a0/0x7a0 [ 26.427070] ret_from_fork+0x3a/0x50 2018/02/20 08:29:46 executed programs: 532 2018/02/20 08:29:51 executed programs: 1336