[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.544559] kauditd_printk_skb: 9 callbacks suppressed [ 28.544576] audit: type=1800 audit(1539742849.393:33): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.573897] audit: type=1800 audit(1539742849.393:34): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 29.739048] audit: type=1400 audit(1539742850.583:35): avc: denied { map } for pid=5443 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. syzkaller login: [ 36.381859] audit: type=1400 audit(1539742857.223:36): avc: denied { map } for pid=5457 comm="syz-executor232" path="/root/syz-executor232705170" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 36.395878] IPVS: ftp: loaded support on port[0] = 21 [ 36.567020] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.574139] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.581225] device bridge_slave_0 entered promiscuous mode [ 36.599942] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.606501] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.614087] device bridge_slave_1 entered promiscuous mode [ 36.633894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 36.651341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 36.699970] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 36.719917] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 36.794560] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 36.801953] team0: Port device team_slave_0 added [ 36.818530] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 36.825763] team0: Port device team_slave_1 added [ 36.842416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.861807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.880787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.899856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready RTNETLINK answers: Operation not supported RTNETLINK answers: No buffer space available RTNETLINK answers: Operation not supported [ 37.047891] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.054419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.061516] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.068011] bridge0: port 1(bridge_slave_0) entered forwarding state RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Operation not supported RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument RTNETLINK answers: Invalid argument [ 37.577987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.629545] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 37.682134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 37.688387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.696583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.743901] 8021q: adding VLAN 0 to HW filter on device team0 executing program [ 38.024674] audit: type=1400 audit(1539742858.873:37): avc: denied { name_bind } for pid=5458 comm="syz-executor232" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 38.048579] audit: type=1400 audit(1539742858.873:38): avc: denied { node_bind } for pid=5458 comm="syz-executor232" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 38.072716] audit: type=1400 audit(1539742858.873:39): avc: denied { name_connect } for pid=5458 comm="syz-executor232" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 38.078700] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:425/tfrc_rx_hist_sample_rtt() [ 38.109328] CPU: 0 PID: 5699 Comm: syz-executor232 Not tainted 4.19.0-rc8+ #65 [ 38.116673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.126142] Call Trace: [ 38.128759] [ 38.130910] dump_stack+0x1c4/0x2b4 [ 38.134524] ? dump_stack_print_info.cold.2+0x52/0x52 [ 38.139701] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 38.145269] ? tfrc_rx_handle_loss+0x67b/0x1eb0 [ 38.149935] tfrc_rx_hist_sample_rtt.cold.3+0x54/0x5c [ 38.155129] ccid3_hc_rx_packet_recv+0x5c4/0xeb0 [ 38.159872] ? dccp_parse_options+0x4a1/0x12f0 [ 38.164449] ? ccid3_hc_tx_send_packet+0x880/0x880 [ 38.169366] dccp_deliver_input_to_ccids+0xf0/0x280 [ 38.174371] dccp_rcv_established+0x87/0xb0 [ 38.178679] dccp_v4_do_rcv+0x153/0x180 [ 38.182642] __sk_receive_skb+0x3e5/0xec0 [ 38.186775] ? sk_free+0x50/0x50 [ 38.190136] ? inet_lhash2_lookup+0x6e0/0x6e0 [ 38.194613] ? reqsk_fastopen_remove+0x660/0x660 [ 38.199355] ? lock_downgrade+0x900/0x900 [ 38.203490] ? check_preemption_disabled+0x48/0x200 [ 38.208494] ? dccp_invalid_packet+0x64/0x880 [ 38.213013] dccp_v4_rcv+0x10f9/0x1f58 [ 38.216891] ? dccp_v4_err+0x18a0/0x18a0 [ 38.220940] ? __lock_is_held+0xb5/0x140 [ 38.225017] ip_local_deliver_finish+0x2e9/0xda0 [ 38.229761] ? ip_sublist_rcv_finish+0x3f0/0x3f0 [ 38.234502] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 38.239500] ? nf_hook_slow+0x11e/0x1c0 [ 38.243464] ip_local_deliver+0x1e9/0x750 [ 38.247599] ? ip_call_ra_chain+0x730/0x730 [ 38.251922] ? ip_sublist_rcv_finish+0x3f0/0x3f0 [ 38.256685] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 38.262483] ? kasan_check_read+0x11/0x20 [ 38.266619] ? rcu_bh_qs+0xc0/0xc0 [ 38.270148] ip_rcv_finish+0x1f9/0x300 [ 38.274018] ip_rcv+0xed/0x600 [ 38.277193] ? enqueue_entity+0x34b/0x1ff0 [ 38.281414] ? ip_local_deliver+0x750/0x750 [ 38.285728] ? ip_rcv_finish_core.isra.15+0x1f40/0x1f40 [ 38.291080] ? lock_acquire+0x1ed/0x520 [ 38.295046] ? process_backlog+0x1a7/0x6f0 [ 38.299271] __netif_receive_skb_one_core+0x14d/0x200 [ 38.304469] ? __netif_receive_skb_core+0x3b60/0x3b60 [ 38.309641] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 38.314904] ? rcu_bh_qs+0xc0/0xc0 [ 38.318431] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 38.323868] __netif_receive_skb+0x2c/0x1e0 [ 38.328175] process_backlog+0x218/0x6f0 [ 38.332223] net_rx_action+0x7c5/0x1950 [ 38.336192] ? napi_complete_done+0x6d0/0x6d0 [ 38.340676] ? try_to_wake_up+0x10a/0x12f0 [ 38.344904] ? trace_hardirqs_off+0xb8/0x310 [ 38.349297] ? kasan_check_read+0x11/0x20 [ 38.353432] ? do_raw_spin_unlock+0xa7/0x2f0 [ 38.357823] ? trace_hardirqs_on+0x310/0x310 [ 38.362238] ? rcu_read_lock+0x70/0x70 [ 38.366120] ? try_to_wake_up+0x10a/0x12f0 [ 38.370354] ? migrate_swap_stop+0x930/0x930 [ 38.374745] ? find_held_lock+0x36/0x1c0 [ 38.378798] ? pvclock_read_flags+0x160/0x160 [ 38.383284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.388829] ? check_preemption_disabled+0x48/0x200 [ 38.393851] ? print_usage_bug+0xc0/0xc0 [ 38.397897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.403422] ? check_preemption_disabled+0x48/0x200 [ 38.408427] ? __local_bh_enable+0xef/0x130 [ 38.412741] ? graph_lock+0x170/0x170 [ 38.416535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.422058] ? check_preemption_disabled+0x48/0x200 [ 38.427058] ? check_preemption_disabled+0x48/0x200 [ 38.432067] ? __lock_is_held+0xb5/0x140 [ 38.436127] __do_softirq+0x30b/0xad8 [ 38.439919] ? __irqentry_text_end+0x1f9618/0x1f9618 [ 38.445027] ? irq_exit+0xbd/0x1c0 [ 38.448569] ? smp_apic_timer_interrupt+0x1cb/0x760 [ 38.453569] ? smp_reschedule_interrupt+0x109/0x650 [ 38.458568] ? smp_call_function_single_interrupt+0x650/0x650 [ 38.464435] ? ret_from_intr+0xb/0x1e [ 38.468222] ? trace_hardirqs_off_caller+0xbb/0x310 [ 38.473227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.478053] ? trace_hardirqs_on_caller+0x310/0x310 [ 38.483057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.488580] ? check_preemption_disabled+0x48/0x200 [ 38.493579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.499118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.503954] ? ip_finish_output2+0xa83/0x1860 [ 38.508434] do_softirq_own_stack+0x2a/0x40 [ 38.512738] [ 38.514968] do_softirq.part.13+0x126/0x160 [ 38.519277] __local_bh_enable_ip+0x21d/0x260 [ 38.523761] ip_finish_output2+0xab6/0x1860 [ 38.528070] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 38.533879] ? ip_copy_metadata+0xe10/0xe10 [ 38.538191] ? graph_lock+0x170/0x170 [ 38.541980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.547508] ? check_preemption_disabled+0x48/0x200 [ 38.552514] ? check_preemption_disabled+0x48/0x200 [ 38.557520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.563054] ? ipv4_mtu+0x37d/0x590 [ 38.566778] ? __lock_is_held+0xb5/0x140 [ 38.570830] ip_finish_output+0x7fd/0xf60 [ 38.574963] ? ip_finish_output+0x7fd/0xf60 [ 38.579272] ? ip_fragment.constprop.49+0x240/0x240 [ 38.584294] ? kasan_check_read+0x11/0x20 [ 38.588432] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 38.593693] ? rcu_bh_qs+0xc0/0xc0 [ 38.597239] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 38.602250] ? nf_hook_slow+0x11e/0x1c0 [ 38.606222] ip_output+0x21d/0x8d0 [ 38.609763] ? ip_mc_output+0x15b0/0x15b0 [ 38.613900] ? ip_fragment.constprop.49+0x240/0x240 [ 38.618901] ? __lock_is_held+0xb5/0x140 [ 38.622974] ip_local_out+0xc5/0x1b0 [ 38.626672] __ip_queue_xmit+0x9af/0x1f30 [ 38.630828] ? ip_build_and_send_pkt+0xc80/0xc80 [ 38.635572] ? __skb_checksum+0x920/0x920 [ 38.639701] ? skb_send_sock+0x50/0x50 [ 38.643571] ? reqsk_fastopen_remove+0x660/0x660 [ 38.648312] ? dccp_insert_option_padding+0xbc/0xe0 [ 38.653318] ip_queue_xmit+0x56/0x70 [ 38.657020] dccp_transmit_skb+0x98c/0x12e0 [ 38.661328] dccp_xmit_packet+0x25e/0x7d0 [ 38.665463] ? kasan_check_write+0x14/0x20 [ 38.669687] ? do_raw_spin_lock+0xc1/0x200 [ 38.673925] ? dccp_send_sync+0x270/0x270 [ 38.678065] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 38.683082] ? ccid3_hc_tx_send_packet+0x358/0x880 [ 38.688019] dccp_write_xmit+0x190/0x1f0 [ 38.692078] dccp_sendmsg+0xdc8/0x1020 [ 38.695963] ? dccp_getsockopt+0xf0/0xf0 [ 38.700014] ? find_held_lock+0x36/0x1c0 [ 38.704067] ? sock_has_perm+0x2bc/0x3e0 [ 38.708125] ? selinux_secmark_relabel_packet+0xe0/0xe0 [ 38.713474] ? lock_release+0x970/0x970 [ 38.717435] ? arch_local_save_flags+0x40/0x40 [ 38.722006] inet_sendmsg+0x1a1/0x690 [ 38.725796] ? ipip_gro_receive+0x100/0x100 [ 38.730104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.735628] ? security_socket_sendmsg+0x94/0xc0 [ 38.740367] ? ipip_gro_receive+0x100/0x100 [ 38.744678] sock_sendmsg+0xd5/0x120 [ 38.748376] ___sys_sendmsg+0x51d/0x930 [ 38.752337] ? copy_msghdr_from_user+0x580/0x580 [ 38.757094] ? __fget_light+0x2e9/0x430 [ 38.761053] ? fget_raw+0x20/0x20 [ 38.764507] ? lockdep_hardirqs_on+0x421/0x5c0 [ 38.769081] ? trace_hardirqs_on+0xbd/0x310 [ 38.773388] ? _raw_spin_unlock_bh+0x30/0x40 [ 38.777784] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 38.783237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 38.788790] ? check_preemption_disabled+0x48/0x200 [ 38.793796] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 38.799318] ? sockfd_lookup_light+0xc5/0x160 [ 38.803798] __sys_sendmmsg+0x246/0x6d0 [ 38.807765] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 38.812075] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 38.817603] ? fput+0x130/0x1a0 [ 38.820866] ? __sys_connect+0x1d1/0x4c0 [ 38.824911] ? __ia32_sys_accept+0xb0/0xb0 [ 38.829141] ? __x64_sys_futex+0x47f/0x6a0 [ 38.833399] ? do_syscall_64+0x9a/0x820 [ 38.837356] ? do_syscall_64+0x9a/0x820 [ 38.841314] ? lockdep_hardirqs_on+0x421/0x5c0 [ 38.845881] ? trace_hardirqs_on+0xbd/0x310 [ 38.850190] ? find_held_lock+0x36/0x1c0 [ 38.854244] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 38.859594] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 38.865032] __x64_sys_sendmmsg+0x9d/0x100 [ 38.869262] do_syscall_64+0x1b9/0x820 [ 38.873137] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 38.878494] ? syscall_return_slowpath+0x5e0/0x5e0 [ 38.883407] ? trace_hardirqs_on_caller+0x310/0x310 [ 38.888406] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 38.893412] ? recalc_sigpending_tsk+0x180/0x180 [ 38.898153] ? kasan_check_write+0x14/0x20 [ 38.902373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 38.907206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 38.912381] RIP: 0033:0x446cb9 [ 38.915562] Code: e8 cc b8 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 0b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 38.934448] RSP: 002b:00007f74b9e07da8 EFLAGS: 00000297 ORIG_RAX: 0000000000000133 [ 38.942476] RAX: ffffffffffffffda RBX: 00000000006dcc58 RCX: 0000000000446cb9 [ 38.949733] RDX: 0000000000000003 RSI: 00000000200037c0 RDI: 0000000000000005 [ 38.956987] RBP: 00000000006dcc50 R08: 0000000000000000 R09: 0000000000000000 [ 38.964250] R10: 0000000000000080 R11: 0000000000000297 R12: 00000000006dcc5c [ 38.971518] R13: cdef9a1cfd2198c8 R14: d5f212e95c33dd08 R15: 0000000000000001