[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.477814][ T24] audit: type=1800 audit(1562869957.453:33): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 43.149509][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 43.149514][ T24] audit: type=1400 audit(1562869974.133:35): avc: denied { map } for pid=7051 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.103' (ECDSA) to the list of known hosts. [ 49.122784][ T24] audit: type=1400 audit(1562869980.103:36): avc: denied { map } for pid=7063 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=15899 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/11 18:33:01 parsed 1 programs [ 50.065530][ T24] audit: type=1400 audit(1562869981.043:37): avc: denied { map } for pid=7063 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=7059 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 50.067957][ T3782] kmemleak: Automatic memory scanning thread ended 2019/07/11 18:33:09 executed programs: 0 [ 58.883801][ T7079] IPVS: ftp: loaded support on port[0] = 21 [ 58.903642][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 58.915244][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.922468][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.929783][ T7079] device bridge_slave_0 entered promiscuous mode [ 58.936643][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.943683][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.950924][ T7079] device bridge_slave_1 entered promiscuous mode [ 58.959937][ T7079] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 58.968507][ T7079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 58.979198][ T7079] team0: Port device team_slave_0 added [ 58.985139][ T7079] team0: Port device team_slave_1 added [ 59.019755][ T7079] device hsr_slave_0 entered promiscuous mode [ 59.079207][ T7079] device hsr_slave_1 entered promiscuous mode [ 59.151063][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.158114][ T7079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.165340][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.172358][ T7079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.186149][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.194095][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.201906][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.209883][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.217103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 59.228279][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.236130][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.244327][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.251339][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.263585][ T7079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.274112][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.284974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.293129][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.300146][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.307585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.315772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.323819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.331729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.339646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.346878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.356987][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.372721][ T24] audit: type=1400 audit(1562869990.353:38): avc: denied { associate } for pid=7079 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 60.599421][ T26] device bridge_slave_1 left promiscuous mode [ 60.605547][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.669346][ T26] device bridge_slave_0 left promiscuous mode [ 60.675454][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.879861][ T26] device hsr_slave_1 left promiscuous mode [ 60.919890][ T26] device hsr_slave_0 left promiscuous mode [ 60.959902][ T26] team0 (unregistering): Port device team_slave_1 removed [ 60.967662][ T26] team0 (unregistering): Port device team_slave_0 removed [ 60.975478][ T26] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 61.039826][ T26] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 61.063039][ T26] bond0 (unregistering): Released all slaves 2019/07/11 18:33:16 executed programs: 1 2019/07/11 18:33:16 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe umount(./0/file0) failed (errno 22) loop exited with status 0 [ 65.448233][ T7092] IPVS: ftp: loaded support on port[0] = 21 [ 65.467131][ T7092] chnl_net:caif_netlink_parms(): no params data found [ 65.478802][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.486025][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.493334][ T7092] device bridge_slave_0 entered promiscuous mode [ 65.500801][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.507818][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.515114][ T7092] device bridge_slave_1 entered promiscuous mode [ 65.524187][ T7092] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.532864][ T7092] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.543548][ T7092] team0: Port device team_slave_0 added [ 65.549561][ T7092] team0: Port device team_slave_1 added [ 65.589910][ T7092] device hsr_slave_0 entered promiscuous mode [ 65.629174][ T7092] device hsr_slave_1 entered promiscuous mode [ 65.701183][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.708225][ T7092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.715483][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.722494][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.736073][ T7092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.743904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.751331][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.768899][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.777274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.785847][ T7092] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.793545][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.801871][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.808873][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.821481][ T7092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.832082][ T7092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.842939][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.851286][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.858309][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.865890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.874213][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.882358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.890295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.898139][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.905394][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.915031][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.779315][ T256] device bridge_slave_1 left promiscuous mode [ 66.785593][ T256] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.849452][ T256] device bridge_slave_0 left promiscuous mode [ 66.855611][ T256] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.933810][ T7100] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 67.099856][ T256] device hsr_slave_1 left promiscuous mode [ 67.139913][ T256] device hsr_slave_0 left promiscuous mode [ 67.179959][ T256] team0 (unregistering): Port device team_slave_1 removed [ 67.187939][ T256] team0 (unregistering): Port device team_slave_0 removed [ 67.195809][ T256] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 67.250054][ T256] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 67.293118][ T256] bond0 (unregistering): Released all slaves [ 72.843078][ T7100] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88810c756d80 (size 64): comm "softirq", pid 0, jiffies 4294943161 (age 13.990s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 e0 7c 49 15 81 88 ff ff .........|I..... 00 00 00 00 00 00 00 00 50 b1 16 83 ff ff ff ff ........P....... backtrace: [<00000000323f6be4>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000718c76fb>] batadv_tvlv_handler_register+0xa3/0x170 [<00000000ffb7c54e>] batadv_tt_init+0x78/0x180 [<0000000008fe68f9>] batadv_mesh_init+0x196/0x230 [<00000000b719875b>] batadv_softif_init_late+0x1ca/0x220 [<0000000056f72dc0>] register_netdevice+0xbf/0x600 [<0000000084b49fe2>] __rtnl_newlink+0xaca/0xb30 [<0000000015b6a1bc>] rtnl_newlink+0x4e/0x80 [<0000000017471c63>] rtnetlink_rcv_msg+0x178/0x4b0 [<000000008c40fdd3>] netlink_rcv_skb+0x61/0x170 [<00000000da5b4845>] rtnetlink_rcv+0x1d/0x30 [<00000000bb103768>] netlink_unicast+0x1ec/0x2d0 [<0000000069b38f24>] netlink_sendmsg+0x26a/0x480 [<000000000a1a223a>] sock_sendmsg+0x54/0x70 [<00000000b38be5aa>] __sys_sendto+0x148/0x1f0 [<00000000c82aaf04>] __x64_sys_sendto+0x2a/0x30 BUG: memory leak unreferenced object 0xffff888117bf8f00 (size 128): comm "syz-executor.0", pid 7079, jiffies 4294943169 (age 13.910s) hex dump (first 32 bytes): f0 78 90 17 81 88 ff ff f0 78 90 17 81 88 ff ff .x.......x...... 7a 7a a5 83 c0 4d 3a 3a c3 19 6f 7d 00 00 00 00 zz...M::..o}.... backtrace: [<00000000323f6be4>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000865b59d3>] hsr_create_self_node+0x42/0x150 [<0000000050db1927>] hsr_dev_finalize+0xa4/0x233 [<00000000723f04c3>] hsr_newlink+0xf3/0x140 [<00000000161b8f5d>] __rtnl_newlink+0x892/0xb30 [<0000000015b6a1bc>] rtnl_newlink+0x4e/0x80 [<0000000017471c63>] rtnetlink_rcv_msg+0x178/0x4b0 [<000000008c40fdd3>] netlink_rcv_skb+0x61/0x170 [<00000000da5b4845>] rtnetlink_rcv+0x1d/0x30 [<00000000bb103768>] netlink_unicast+0x1ec/0x2d0 [<0000000069b38f24>] netlink_sendmsg+0x26a/0x480 [<000000000a1a223a>] sock_sendmsg+0x54/0x70 [<00000000b38be5aa>] __sys_sendto+0x148/0x1f0 [<00000000c82aaf04>] __x64_sys_sendto+0x2a/0x30 [<00000000f6316608>] do_syscall_64+0x76/0x1a0 [<00000000b9217573>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888117933d00 (size 64): comm "syz-executor.0", pid 7079, jiffies 4294943169 (age 13.910s) hex dump (first 32 bytes): 00 aa 74 15 81 88 ff ff 00 02 00 00 00 00 ad de ..t............. 00 70 90 17 81 88 ff ff c0 78 90 17 81 88 ff ff .p.......x...... backtrace: [<00000000323f6be4>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000368da679>] hsr_add_port+0xe7/0x220 [<00000000d6705c00>] hsr_dev_finalize+0x14f/0x233 [<00000000723f04c3>] hsr_newlink+0xf3/0x140 [<00000000161b8f5d>] __rtnl_newlink+0x892/0xb30 [<0000000015b6a1bc>] rtnl_newlink+0x4e/0x80 [<0000000017471c63>] rtnetlink_rcv_msg+0x178/0x4b0 [<000000008c40fdd3>] netlink_rcv_skb+0x61/0x170 [<00000000da5b4845>] rtnetlink_rcv+0x1d/0x30 [<00000000bb103768>] netlink_unicast+0x1ec/0x2d0 [<0000000069b38f24>] netlink_sendmsg+0x26a/0x480 [<000000000a1a223a>] sock_sendmsg+0x54/0x70 [<00000000b38be5aa>] __sys_sendto+0x148/0x1f0 [<00000000c82aaf04>] __x64_sys_sendto+0x2a/0x30 [<00000000f6316608>] do_syscall_64+0x76/0x1a0 [<00000000b9217573>] entry_SYSCALL_64_after_hwframe+0x44/0xa9