[....] Starting enhanced syslogd: rsyslogd[ 15.377388] audit: type=1400 audit(1519084770.353:5): avc: denied { syslog } for pid=4014 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 18.950667] audit: type=1400 audit(1519084773.926:6): avc: denied { map } for pid=4154 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.15.210' (ECDSA) to the list of known hosts. [ 39.160806] audit: type=1400 audit(1519084794.136:7): avc: denied { map } for pid=4171 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/19 23:59:54 parsed 1 programs 2018/02/19 23:59:54 executed programs: 0 [ 39.406043] audit: type=1400 audit(1519084794.381:8): avc: denied { map } for pid=4171 comm="syz-execprog" path="/root/syzkaller-shm138602887" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.416098] IPVS: ftp: loaded support on port[0] = 21 [ 39.635418] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 40.415446] [ 40.417088] ===================================== [ 40.421896] WARNING: bad unlock balance detected! [ 40.426705] 4.16.0-rc2+ #320 Not tainted [ 40.430729] ------------------------------------- [ 40.435552] swapper/0/0 is trying to release lock (rcu_read_lock_bh) at: [ 40.442366] [] hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 40.449341] but there are no more locks to release! [ 40.454319] [ 40.454319] other info that might help us debug this: [ 40.460952] 3 locks held by swapper/0/0: [ 40.464977] #0: ((&idev->mc_ifc_timer)){+.-.}, at: [<00000000b37251a6>] call_timer_fn+0x1c6/0x820 [ 40.474134] #1: (rcu_read_lock){....}, at: [<0000000086f9bd45>] mld_sendpack+0x180/0xe70 [ 40.482529] #2: (rcu_read_lock){....}, at: [<00000000ed041d3d>] nf_hook.constprop.37+0x0/0x830 [ 40.491425] [ 40.491425] stack backtrace: [ 40.495889] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.16.0-rc2+ #320 [ 40.502537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.511858] Call Trace: [ 40.514412] [ 40.516536] dump_stack+0x194/0x257 [ 40.520132] ? arch_local_irq_restore+0x53/0x53 [ 40.524770] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 40.530190] print_unlock_imbalance_bug+0x12f/0x140 [ 40.535171] lock_release+0x6fe/0xa40 [ 40.538939] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 40.544355] ? lock_downgrade+0x980/0x980 [ 40.548472] ? lock_release+0xa40/0xa40 [ 40.552419] ? __raw_spin_lock_init+0x1c/0x100 [ 40.557001] ? do_raw_spin_trylock+0x190/0x190 [ 40.561554] hashlimit_mt_common.isra.10+0x1c08/0x2610 [ 40.566804] ? lock_downgrade+0x980/0x980 [ 40.570920] ? dsthash_find+0x5b0/0x5b0 [ 40.574861] ? __lock_acquire+0x664/0x3e00 [ 40.579062] ? is_bpf_text_address+0x7b/0x120 [ 40.583527] ? lock_downgrade+0x95a/0x980 [ 40.587650] ? unwind_dump+0x4d0/0x4d0 [ 40.591506] ? rcutorture_record_progress+0x10/0x10 [ 40.596494] ? x86_64_start_kernel+0x77/0x7a [ 40.600871] hashlimit_mt+0x78/0x90 [ 40.604464] ? hashlimit_mt+0x78/0x90 [ 40.608231] ip6t_do_table+0x98d/0x1a30 [ 40.612183] ? kmem_cache_alloc_trace+0x136/0x740 [ 40.616994] ? mld_sendpack+0x617/0xe70 [ 40.620943] ? ip6t_error+0x60/0x60 [ 40.624538] ? check_noncircular+0x20/0x20 [ 40.628741] ? lock_acquire+0x1d5/0x580 [ 40.632682] ? lock_acquire+0x1d5/0x580 [ 40.636624] ? igmp6_mcf_seq_next+0x660/0x660 [ 40.641087] ? lock_release+0xa40/0xa40 [ 40.645029] ip6table_raw_hook+0x65/0x80 [ 40.649056] nf_hook_slow+0xba/0x1a0 [ 40.652738] nf_hook.constprop.37+0x3f6/0x830 [ 40.657201] ? igmp6_mcf_seq_next+0x660/0x660 [ 40.661664] ? trace_hardirqs_on+0xd/0x10 [ 40.665780] ? __local_bh_enable_ip+0x121/0x230 [ 40.670417] ? _raw_spin_unlock_bh+0x30/0x40 [ 40.674793] ? rt6_uncached_list_add+0x1b7/0x240 [ 40.679531] ? rt6_fill_node+0x18b0/0x18b0 [ 40.683733] ? icmp6_dst_alloc+0x475/0x660 [ 40.687935] ? ip6_mc_leave_src+0x1d0/0x1d0 [ 40.692223] ? icmpv6_flow_init+0x1f6/0x270 [ 40.696513] mld_sendpack+0x6c2/0xe70 [ 40.700285] ? nf_hook.constprop.37+0x830/0x830 [ 40.704921] ? mark_held_locks+0xaf/0x100 [ 40.709037] ? trace_hardirqs_on+0xd/0x10 [ 40.713150] ? __local_bh_enable_ip+0x121/0x230 [ 40.718271] mld_ifc_timer_expire+0x3d9/0x770 [ 40.722739] call_timer_fn+0x228/0x820 [ 40.726592] ? mld_dad_timer_expire+0x100/0x100 [ 40.731227] ? process_timeout+0x40/0x40 [ 40.735256] ? __run_timers+0x7e3/0xb70 [ 40.739197] ? lock_downgrade+0x980/0x980 [ 40.743315] ? debug_object_deactivate+0x364/0x560 [ 40.748209] ? lock_release+0xa40/0xa40 [ 40.752151] ? do_raw_spin_trylock+0x190/0x190 [ 40.756703] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 40.761685] ? mld_dad_timer_expire+0x100/0x100 [ 40.766320] ? mld_dad_timer_expire+0x100/0x100 [ 40.770957] __run_timers+0x7ee/0xb70 [ 40.774726] ? trigger_dyntick_cpu.isra.29+0x150/0x150 [ 40.779973] ? timerqueue_add+0x1e9/0x280 [ 40.784095] ? check_noncircular+0x20/0x20 [ 40.788298] ? enqueue_hrtimer+0x177/0x4b0 [ 40.792499] ? lock_release+0xa40/0xa40 [ 40.796448] ? retrigger_next_event+0x1e0/0x1e0 [ 40.801086] ? find_held_lock+0x35/0x1d0 [ 40.805117] ? clockevents_program_event+0x163/0x2e0 [ 40.810189] ? lock_downgrade+0x980/0x980 [ 40.814306] ? rcu_pm_notify+0xc0/0xc0 [ 40.818160] run_timer_softirq+0x4c/0x70 [ 40.822188] __do_softirq+0x2d7/0xb85 [ 40.825955] ? ktime_get+0x26f/0x3a0 [ 40.829640] ? __irqentry_text_end+0x1f8ad4/0x1f8ad4 [ 40.834710] ? do_timer+0x50/0x50 [ 40.838131] ? native_apic_msr_write+0x5c/0x80 [ 40.842679] ? lapic_next_event+0x54/0x80 [ 40.846795] ? clockevents_program_event+0x108/0x2e0 [ 40.851865] ? tick_program_event+0x83/0x100 [ 40.856242] ? rcu_pm_notify+0xc0/0xc0 [ 40.860099] irq_exit+0x1cc/0x200 [ 40.863520] smp_apic_timer_interrupt+0x16b/0x700 [ 40.868328] ? smp_reschedule_interrupt+0xe6/0x650 [ 40.873222] ? smp_call_function_single_interrupt+0x640/0x640 [ 40.879074] ? _raw_spin_lock+0x32/0x40 [ 40.883018] ? _raw_spin_unlock+0x22/0x30 [ 40.887134] ? handle_edge_irq+0x2b4/0x7c0 [ 40.891337] ? task_prio+0x50/0x50 [ 40.894846] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.899658] apic_timer_interrupt+0x8e/0xa0 [ 40.903951] [ 40.906155] RIP: 0010:native_safe_halt+0x6/0x10 [ 40.910791] RSP: 0018:ffffffff86a07c38 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff12 [ 40.918467] RAX: dffffc0000000000 RBX: 1ffffffff0d40f8a RCX: 0000000000000000 [ 40.925706] RDX: 1ffffffff0d592d8 RSI: 0000000000000001 RDI: ffffffff86ac96c0 [ 40.932943] RBP: ffffffff86a07c38 R08: 0000000000000000 R09: 0000000000000000 [ 40.940179] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 40.947417] R13: ffffffff86a07cf0 R14: ffffffff8726ac60 R15: 0000000000000000 [ 40.954660] ? trace_hardirqs_on+0xd/0x10 [ 40.958773] default_idle+0xbf/0x430 [ 40.962467] ? __sched_text_end+0x4/0x4 [ 40.966412] ? rcu_eqs_special_set+0x1e0/0x1e0 [ 40.970960] ? tsc_verify_tsc_adjust+0xf6/0x3e0 [ 40.975595] ? set_cpu_sd_state_idle+0x1dc/0x2d0 [ 40.980426] ? mark_tsc_async_resets+0x30/0x30 [ 40.984976] arch_cpu_idle+0xa/0x10 [ 40.988572] default_idle_call+0x36/0x90 [ 40.992601] do_idle+0x24a/0x3b0 [ 40.998083] cpu_startup_entry+0x104/0x120 [ 41.002309] ? cpu_in_idle+0x20/0x20 [ 41.006001] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 41.010995] ? trace_hardirqs_on+0xd/0x10 [ 41.015120] rest_init+0xed/0xf0 [ 41.018461] start_kernel+0x7f1/0x819 [ 41.022235] ? mem_encrypt_init+0xb/0xb [ 41.026179] ? early_idt_handler_common+0x3b/0x60 [ 41.030997] ? x86_family+0x32/0x40 [ 41.034600] x86_64_start_reservations+0x2a/0x2c [ 41.039326] x86_64_start_kernel+0x77/0x7a [ 41.043532] secondary_startup_64+0xa5/0xb0 2018/02/19 23:59:59 executed programs: 493 2018/02/20 00:00:04 executed programs: 1179