[....] Starting enhanced syslogd: rsyslogd[ 15.214779] audit: type=1400 audit(1519104723.123:5): avc: denied { syslog } for pid=4013 comm="rsyslogd" capability=34 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Starting mcstransd:
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
syzkaller login: [ 20.042992] audit: type=1400 audit(1519104727.951:6): avc: denied { map } for pid=4154 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.15.203' (ECDSA) to the list of known hosts.
[ 26.596603] audit: type=1400 audit(1519104734.505:7): avc: denied { map } for pid=4168 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
2018/02/20 05:32:14 parsed 1 programs
2018/02/20 05:32:14 executed programs: 0
[ 26.860391] audit: type=1400 audit(1519104734.768:8): avc: denied { map } for pid=4168 comm="syz-execprog" path="/root/syzkaller-shm790957395" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[ 26.875955] IPVS: ftp: loaded support on port[0] = 21
[ 27.097694] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 27.727380]
[ 27.729033] =====================================
[ 27.733856] WARNING: bad unlock balance detected!
[ 27.738664] 4.16.0-rc1+ #232 Not tainted
[ 27.742689] -------------------------------------
[ 27.747495] kworker/0:1/24 is trying to release lock (rcu_read_lock_bh) at:
[ 27.754578] [<ffffffff8478b78b>] hashlimit_mt_common.isra.10+0x1beb/0x2610
[ 27.761554] but there are no more locks to release!
[ 27.766533]
[ 27.766533] other info that might help us debug this:
[ 27.773166] 5 locks held by kworker/0:1/24:
[ 27.777451] #0: ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: [<0000000012d0619f>] process_one_work+0xaaf/0x1af0
[ 27.788259] #1: ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: [<0000000001aecab0>] process_one_work+0xb01/0x1af0
[ 27.799587] #2: (rtnl_mutex){+.+.}, at: [<000000001909a13c>] rtnl_lock+0x17/0x20
[ 27.807274] #3: (rcu_read_lock){....}, at: [<0000000020ae65a6>] ndisc_send_skb+0x826/0x1370
[ 27.815921] #4: (rcu_read_lock){....}, at: [<00000000dde7b4af>] nf_hook.constprop.27+0x0/0x830
[ 27.824815]
[ 27.824815] stack backtrace:
[ 27.829278] CPU: 0 PID: 24 Comm: kworker/0:1 Not tainted 4.16.0-rc1+ #232
[ 27.836167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 27.845495] Workqueue: ipv6_addrconf addrconf_dad_work
[ 27.850737] Call Trace:
[ 27.853293] dump_stack+0x194/0x257
[ 27.856896] ? arch_local_irq_restore+0x53/0x53
[ 27.861534] ? hashlimit_mt_common.isra.10+0x1beb/0x2610
[ 27.866953] print_unlock_imbalance_bug+0x12f/0x140
[ 27.871936] lock_release+0x6fe/0xa40
[ 27.875707] ? hashlimit_mt_common.isra.10+0x1beb/0x2610
[ 27.881123] ? lock_downgrade+0x980/0x980
[ 27.885239] ? lock_release+0xa40/0xa40
[ 27.889180] ? __raw_spin_lock_init+0x1c/0x100
[ 27.893731] ? do_raw_spin_trylock+0x190/0x190
[ 27.898283] hashlimit_mt_common.isra.10+0x1c08/0x2610
[ 27.903538] ? dsthash_find+0x5b0/0x5b0
[ 27.907481] ? __lock_acquire+0x664/0x3e00
[ 27.911684] ? ret_from_fork+0x3a/0x50
[ 27.915545] ? print_irqtrace_events+0x270/0x270
[ 27.920271] ? __unwind_start+0x169/0x330
[ 27.924391] hashlimit_mt+0x78/0x90
[ 27.927987] ? hashlimit_mt+0x78/0x90
[ 27.931758] ip6t_do_table+0x98d/0x1a30
[ 27.935702] ? debug_check_no_locks_freed+0x3c0/0x3c0
[ 27.940863] ? ip6t_error+0x60/0x60
[ 27.944459] ? check_noncircular+0x20/0x20
[ 27.948662] ? lock_acquire+0x1d5/0x580
[ 27.952606] ? lock_acquire+0x1d5/0x580
[ 27.956548] ? pndisc_destructor+0x340/0x340
[ 27.960925] ? lock_release+0xa40/0xa40
[ 27.964873] ip6table_raw_hook+0x65/0x80
[ 27.968908] nf_hook_slow+0xba/0x1a0
[ 27.972599] nf_hook.constprop.27+0x3f6/0x830
[ 27.977062] ? pndisc_destructor+0x340/0x340
[ 27.981438] ? find_held_lock+0x35/0x1d0
[ 27.985469] ? lock_acquire+0x1d5/0x580
[ 27.989409] ? lock_acquire+0x1d5/0x580
[ 27.993349] ? ndisc_send_skb+0x826/0x1370
[ 27.997550] ? lock_downgrade+0x980/0x980
[ 28.001668] ? lock_release+0xa40/0xa40
[ 28.005609] ? ndisc_error_report+0x180/0x180
[ 28.010072] ndisc_send_skb+0xa51/0x1370
[ 28.014101] ? nf_hook.constprop.27+0x830/0x830
[ 28.018736] ? check_noncircular+0x20/0x20
[ 28.022941] ? refcount_add_not_zero+0x133/0x200
[ 28.027662] ? refcount_dec_if_one+0x20/0x20
[ 28.032039] ? print_irqtrace_events+0x270/0x270
[ 28.036763] ndisc_send_ns+0x38a/0x870
[ 28.040621] ? ndisc_netdev_event+0x4a0/0x4a0
[ 28.045083] ? trace_hardirqs_on_caller+0x421/0x5c0
[ 28.050066] ? addrconf_dad_work+0xa5e/0x1320
[ 28.054528] addrconf_dad_work+0xb9e/0x1320
[ 28.058818] ? addrconf_dad_work+0xb9e/0x1320
[ 28.063281] ? addrconf_ifdown+0x14f0/0x14f0
[ 28.067656] ? __lock_is_held+0xb6/0x140
[ 28.071687] process_one_work+0xbbf/0x1af0
[ 28.075981] ? process_one_work+0xbbf/0x1af0
[ 28.080362] ? pwq_dec_nr_in_flight+0x450/0x450
[ 28.084999] ? __schedule+0x8ea/0x2040
[ 28.088860] ? __lock_acquire+0x664/0x3e00
[ 28.093064] ? check_noncircular+0x20/0x20
[ 28.097267] ? check_noncircular+0x20/0x20
[ 28.101474] ? lock_acquire+0x1d5/0x580
[ 28.105421] ? lock_acquire+0x1d5/0x580
[ 28.109364] ? worker_thread+0x4a3/0x1990
[ 28.113478] ? lock_downgrade+0x980/0x980
[ 28.117596] ? lock_release+0xa40/0xa40
[ 28.121537] ? retint_kernel+0x10/0x10
[ 28.125392] ? do_raw_spin_trylock+0x190/0x190
[ 28.129942] worker_thread+0x223/0x1990
[ 28.133883] ? finish_task_switch+0x1e2/0x890
[ 28.138350] ? process_one_work+0x1af0/0x1af0
[ 28.142814] ? trace_hardirqs_on_caller+0x421/0x5c0
[ 28.147799] ? trace_hardirqs_on+0xd/0x10
[ 28.151913] ? mmdrop+0x18/0x30
[ 28.155159] ? finish_task_switch+0x29b/0x890
[ 28.159622] ? copy_overflow+0x20/0x20
[ 28.163481] ? __schedule+0x8ea/0x2040
[ 28.167338] ? check_noncircular+0x20/0x20
[ 28.171540] ? find_held_lock+0x35/0x1d0
[ 28.175574] ? find_held_lock+0x35/0x1d0
[ 28.179606] ? find_held_lock+0x35/0x1d0
[ 28.183638] ? complete+0x62/0x80
[ 28.187060] ? __schedule+0x2040/0x2040
[ 28.191000] ? do_wait_intr_irq+0x3e0/0x3e0
[ 28.195293] ? __lockdep_init_map+0xe4/0x650
[ 28.199667] ? do_raw_spin_trylock+0x190/0x190
[ 28.204214] ? lockdep_init_map+0x9/0x10
[ 28.208245] ? _raw_spin_unlock_irqrestore+0x31/0xba
[ 28.213315] ? trace_hardirqs_on_caller+0x421/0x5c0
[ 28.218296] ? trace_hardirqs_on+0xd/0x10
[ 28.222412] ? __kthread_parkme+0x175/0x240
[ 28.226708] kthread+0x33c/0x400
[ 28.230042] ? process_one_work+0x1af0/0x1af0
[ 28.234504] ? kthread_stop+0x7a0/0x7a0
[ 28.238448] ret_from_fork+0x3a/0x50
2018/02/20 05:32:19 executed programs: 528
2018/02/20 05:32:24 executed programs: 1193