[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.377120][ T25] kauditd_printk_skb: 45 callbacks suppressed [ 30.377127][ T25] audit: type=1400 audit(1570183999.686:66): avc: denied { map } for pid=6743 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.41' (ECDSA) to the list of known hosts. [ 45.312350][ T25] audit: type=1400 audit(1570184014.616:67): avc: denied { map } for pid=6758 comm="syz-executor956" path="/root/syz-executor956590212" dev="sda1" ino=16498 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 52.124328][ T25] audit: type=1400 audit(1570184021.436:68): avc: denied { create } for pid=6759 comm="syz-executor956" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 52.125017][ T6759] netlink: 'syz-executor956': attribute type 2 has an invalid length. [ 52.149065][ T25] audit: type=1400 audit(1570184021.436:69): avc: denied { write } for pid=6759 comm="syz-executor956" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 executing program [ 58.028942][ T6760] netlink: 'syz-executor956': attribute type 2 has an invalid length. executing program [ 63.920233][ T6761] netlink: 'syz-executor956': attribute type 2 has an invalid length. [ 69.726156][ T6758] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff8881288daf00 (size 128): comm "syz-executor956", pid 6760, jiffies 4294943066 (age 14.040s) hex dump (first 32 bytes): 00 f0 aa 24 81 88 ff ff 00 00 b0 20 81 88 ff ff ...$....... .... 40 fb 87 24 81 88 ff ff 00 00 00 00 00 00 00 00 @..$............ backtrace: [<0000000013ba6077>] kmem_cache_alloc_trace+0x145/0x2c0 [<000000001642ddfc>] ovs_vport_alloc+0x37/0xf0 [<000000001c30ea36>] internal_dev_create+0x24/0x1d0 [<0000000058ceca7a>] ovs_vport_add+0x81/0x190 [<0000000088e13aa4>] new_vport+0x19/0x80 [<00000000de857d8d>] ovs_dp_cmd_new+0x290/0x410 [<00000000b14421cf>] genl_family_rcv_msg+0x2ab/0x5b0 [<00000000a315f59b>] genl_rcv_msg+0x54/0xa0 [<00000000629e6bb5>] netlink_rcv_skb+0x61/0x170 [<000000000d2924d2>] genl_rcv+0x29/0x40 [<00000000427526a8>] netlink_unicast+0x1ec/0x2d0 [<00000000f1ee0d23>] netlink_sendmsg+0x270/0x480 [<00000000a8c282a6>] sock_sendmsg+0x54/0x70 [<00000000a8fcb550>] ___sys_sendmsg+0x393/0x3c0 [<00000000f6facaa3>] __sys_sendmsg+0x80/0xf0 [<000000007a2054a9>] __x64_sys_sendmsg+0x23/0x30 BUG: memory leak unreferenced object 0xffff88812487fb40 (size 64): comm "syz-executor956", pid 6760, jiffies 4294943066 (age 14.040s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 02 00 00 00 05 35 82 c1 .............5.. backtrace: [<00000000bc4031c3>] __kmalloc+0x169/0x300 [<000000000af04c5d>] ovs_vport_set_upcall_portids+0x54/0xd0 [<000000006207970f>] ovs_vport_alloc+0x7f/0xf0 [<000000001c30ea36>] internal_dev_create+0x24/0x1d0 [<0000000058ceca7a>] ovs_vport_add+0x81/0x190 [<0000000088e13aa4>] new_vport+0x19/0x80 [<00000000de857d8d>] ovs_dp_cmd_new+0x290/0x410 [<00000000b14421cf>] genl_family_rcv_msg+0x2ab/0x5b0 [<00000000a315f59b>] genl_rcv_msg+0x54/0xa0 [<00000000629e6bb5>] netlink_rcv_skb+0x61/0x170 [<000000000d2924d2>] genl_rcv+0x29/0x40 [<00000000427526a8>] netlink_unicast+0x1ec/0x2d0 [<00000000f1ee0d23>] netlink_sendmsg+0x270/0x480 [<00000000a8c282a6>] sock_sendmsg+0x54/0x70 [<00000000a8fcb550>] ___sys_sendmsg+0x393/0x3c0 [<00000000f6facaa3>] __sys_sendmsg+0x80/0xf0