[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 18.233434] audit: type=1400 audit(1519106709.527:6): avc: denied { map } for pid=4159 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. syzkaller login: [ 24.770402] audit: type=1400 audit(1519106716.064:7): avc: denied { map } for pid=4173 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/02/20 06:05:16 parsed 1 programs 2018/02/20 06:05:16 executed programs: 0 [ 25.037844] audit: type=1400 audit(1519106716.331:8): avc: denied { map } for pid=4173 comm="syz-execprog" path="/root/syzkaller-shm213891333" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 25.051442] IPVS: ftp: loaded support on port[0] = 21 [ 25.280302] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 25.680320] [ 25.681980] ===================================== [ 25.686789] WARNING: bad unlock balance detected! [ 25.691614] 4.16.0-rc2+ #320 Not tainted [ 25.695639] ------------------------------------- [ 25.700447] swapper/0/0 is trying to release lock (rcu_read_lock_bh) at: [ 25.707262] [] hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.714240] but there are no more locks to release! [ 25.719249] [ 25.719249] other info that might help us debug this: [ 25.725915] 3 locks held by swapper/0/0: [ 25.729943] #0: ((&idev->mc_ifc_timer)){+.-.}, at: [<000000006c831549>] call_timer_fn+0x1c6/0x820 [ 25.739102] #1: (rcu_read_lock){....}, at: [<0000000010015c91>] mld_sendpack+0x180/0xe70 [ 25.747479] #2: (rcu_read_lock){....}, at: [<0000000009296e3d>] nf_hook.constprop.37+0x0/0x830 [ 25.756376] [ 25.756376] stack backtrace: [ 25.760863] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.16.0-rc2+ #320 [ 25.767494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.776816] Call Trace: [ 25.779369] [ 25.781493] dump_stack+0x194/0x257 [ 25.785087] ? arch_local_irq_restore+0x53/0x53 [ 25.789724] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.795155] print_unlock_imbalance_bug+0x12f/0x140 [ 25.800138] lock_release+0x6fe/0xa40 [ 25.803920] ? hashlimit_mt_common.isra.10+0x1beb/0x2610 [ 25.809337] ? lock_downgrade+0x980/0x980 [ 25.813456] ? lock_release+0xa40/0xa40 [ 25.817397] ? __raw_spin_lock_init+0x1c/0x100 [ 25.821945] ? do_raw_spin_trylock+0x190/0x190 [ 25.826496] hashlimit_mt_common.isra.10+0x1c08/0x2610 [ 25.831748] ? lock_downgrade+0x980/0x980 [ 25.835864] ? dsthash_find+0x5b0/0x5b0 [ 25.839807] ? __lock_acquire+0x664/0x3e00 [ 25.844008] ? is_bpf_text_address+0x7b/0x120 [ 25.848474] ? lock_downgrade+0x95a/0x980 [ 25.852594] ? unwind_dump+0x4d0/0x4d0 [ 25.856448] ? rcutorture_record_progress+0x10/0x10 [ 25.861449] ? x86_64_start_kernel+0x77/0x7a [ 25.865832] hashlimit_mt+0x78/0x90 [ 25.869427] ? hashlimit_mt+0x78/0x90 [ 25.873196] ip6t_do_table+0x98d/0x1a30 [ 25.877140] ? kmem_cache_alloc_trace+0x136/0x740 [ 25.881950] ? mld_sendpack+0x617/0xe70 [ 25.885894] ? ip6t_error+0x60/0x60 [ 25.889490] ? check_noncircular+0x20/0x20 [ 25.893692] ? lock_acquire+0x1d5/0x580 [ 25.897632] ? lock_acquire+0x1d5/0x580 [ 25.901574] ? igmp6_mcf_seq_next+0x660/0x660 [ 25.906057] ? lock_release+0xa40/0xa40 [ 25.910001] ip6table_raw_hook+0x65/0x80 [ 25.914032] nf_hook_slow+0xba/0x1a0 [ 25.917714] nf_hook.constprop.37+0x3f6/0x830 [ 25.922189] ? igmp6_mcf_seq_next+0x660/0x660 [ 25.926653] ? trace_hardirqs_on+0xd/0x10 [ 25.930784] ? __local_bh_enable_ip+0x121/0x230 [ 25.935426] ? _raw_spin_unlock_bh+0x30/0x40 [ 25.939804] ? rt6_uncached_list_add+0x1b7/0x240 [ 25.944529] ? rt6_fill_node+0x18b0/0x18b0 [ 25.948734] ? icmp6_dst_alloc+0x475/0x660 [ 25.952940] ? ip6_mc_leave_src+0x1d0/0x1d0 [ 25.957230] ? icmpv6_flow_init+0x1f6/0x270 [ 25.961523] mld_sendpack+0x6c2/0xe70 [ 25.965296] ? nf_hook.constprop.37+0x830/0x830 [ 25.969933] ? mark_held_locks+0xaf/0x100 [ 25.974049] ? trace_hardirqs_on+0xd/0x10 [ 25.978165] ? __local_bh_enable_ip+0x121/0x230 [ 25.982805] mld_ifc_timer_expire+0x3d9/0x770 [ 25.987270] call_timer_fn+0x228/0x820 [ 25.991128] ? mld_dad_timer_expire+0x100/0x100 [ 25.995776] ? process_timeout+0x40/0x40 [ 25.999808] ? __run_timers+0x7e3/0xb70 [ 26.003751] ? lock_downgrade+0x980/0x980 [ 26.007868] ? debug_object_deactivate+0x364/0x560 [ 26.012766] ? lock_release+0xa40/0xa40 [ 26.016708] ? do_raw_spin_trylock+0x190/0x190 [ 26.021260] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 26.026245] ? mld_dad_timer_expire+0x100/0x100 [ 26.030891] ? mld_dad_timer_expire+0x100/0x100 [ 26.035529] __run_timers+0x7ee/0xb70 [ 26.039301] ? trigger_dyntick_cpu.isra.29+0x150/0x150 [ 26.044545] ? timerqueue_add+0x1e9/0x280 [ 26.048663] ? check_noncircular+0x20/0x20 [ 26.052877] ? enqueue_hrtimer+0x177/0x4b0 [ 26.057089] ? lock_release+0xa40/0xa40 [ 26.061032] ? retrigger_next_event+0x1e0/0x1e0 [ 26.065671] ? find_held_lock+0x35/0x1d0 [ 26.069710] ? clockevents_program_event+0x163/0x2e0 [ 26.074791] ? lock_downgrade+0x980/0x980 [ 26.078909] ? rcu_pm_notify+0xc0/0xc0 [ 26.082765] run_timer_softirq+0x4c/0x70 [ 26.086804] __do_softirq+0x2d7/0xb85 [ 26.090574] ? ktime_get+0x26f/0x3a0 [ 26.094258] ? __irqentry_text_end+0x1f8ad4/0x1f8ad4 [ 26.099335] ? do_timer+0x50/0x50 [ 26.102755] ? native_apic_msr_write+0x5c/0x80 [ 26.107306] ? lapic_next_event+0x54/0x80 [ 26.111429] ? clockevents_program_event+0x108/0x2e0 [ 26.116500] ? tick_program_event+0x83/0x100 [ 26.120878] ? rcu_pm_notify+0xc0/0xc0 [ 26.124738] irq_exit+0x1cc/0x200 [ 26.128160] smp_apic_timer_interrupt+0x16b/0x700 [ 26.132969] ? smp_reschedule_interrupt+0xe6/0x650 [ 26.137879] ? smp_call_function_single_interrupt+0x640/0x640 [ 26.143745] ? _raw_spin_lock+0x32/0x40 [ 26.147689] ? _raw_spin_unlock+0x22/0x30 [ 26.151811] ? handle_edge_irq+0x2b4/0x7c0 [ 26.156015] ? task_prio+0x50/0x50 [ 26.159539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 26.164353] apic_timer_interrupt+0x8e/0xa0 [ 26.168641] [ 26.170847] RIP: 0010:native_safe_halt+0x6/0x10 [ 26.175483] RSP: 0018:ffffffff86a07c38 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff12 [ 26.183160] RAX: dffffc0000000000 RBX: 1ffffffff0d40f8a RCX: 0000000000000000 [ 26.190400] RDX: 1ffffffff0d592d8 RSI: 0000000000000001 RDI: ffffffff86ac96c0 [ 26.197639] RBP: ffffffff86a07c38 R08: 0000000000000000 R09: 0000000000000000 [ 26.204887] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 26.212130] R13: ffffffff86a07cf0 R14: ffffffff8726ac60 R15: 0000000000000000 [ 26.219385] ? trace_hardirqs_on+0xd/0x10 [ 26.223502] default_idle+0xbf/0x430 [ 26.227186] ? __sched_text_end+0x4/0x4 [ 26.231129] ? rcu_eqs_special_set+0x1e0/0x1e0 [ 26.235679] ? tsc_verify_tsc_adjust+0xf6/0x3e0 [ 26.240344] ? set_cpu_sd_state_idle+0x1dc/0x2d0 [ 26.245068] ? mark_tsc_async_resets+0x30/0x30 [ 26.249624] arch_cpu_idle+0xa/0x10 [ 26.253639] default_idle_call+0x36/0x90 [ 26.257673] do_idle+0x24a/0x3b0 [ 26.261371] cpu_startup_entry+0x104/0x120 [ 26.265583] ? cpu_in_idle+0x20/0x20 [ 26.269265] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 26.274248] ? trace_hardirqs_on+0xd/0x10 [ 26.278366] rest_init+0xed/0xf0 [ 26.281708] start_kernel+0x7f1/0x819 [ 26.285477] ? mem_encrypt_init+0xb/0xb [ 26.289420] ? early_idt_handler_common+0x3b/0x60 [ 26.294245] ? x86_family+0x32/0x40 [ 26.297844] x86_64_start_reservations+0x2a/0x2c [ 26.302581] x86_64_start_kernel+0x77/0x7a [ 26.306786] secondary_startup_64+0xa5/0xb0 2018/02/20 06:05:21 executed programs: 533 2018/02/20 06:05:26 executed programs: 1270