[ 27.068748][ T24] audit: type=1800 audit(1562172916.973:32): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 27.650661][ T24] audit: type=1800 audit(1562172917.623:33): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.113' (ECDSA) to the list of known hosts. syzkaller login: [ 51.772542][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 51.772549][ T24] audit: type=1400 audit(1562172941.743:36): avc: denied { map } for pid=7050 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/03 16:55:42 parsed 1 programs [ 52.784353][ T24] audit: type=1400 audit(1562172942.753:37): avc: denied { map } for pid=7050 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16018 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 52.786458][ T3775] kmemleak: Automatic memory scanning thread ended 2019/07/03 16:55:51 executed programs: 0 [ 61.698385][ T7065] IPVS: ftp: loaded support on port[0] = 21 [ 61.718192][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 61.729959][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.737288][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.744722][ T7065] device bridge_slave_0 entered promiscuous mode [ 61.751952][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.759621][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.768423][ T7065] device bridge_slave_1 entered promiscuous mode [ 61.777547][ T7065] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.786589][ T7065] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.797812][ T7065] team0: Port device team_slave_0 added [ 61.804074][ T7065] team0: Port device team_slave_1 added [ 61.868207][ T7065] device hsr_slave_0 entered promiscuous mode [ 61.907405][ T7065] device hsr_slave_1 entered promiscuous mode [ 61.959124][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.966495][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.973871][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.981452][ T7065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.995097][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.004396][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.012347][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.020516][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.028761][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 62.037988][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.047520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.056590][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.064097][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.071761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.080511][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.087579][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.097376][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.105822][ T7067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.116474][ T7065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.129009][ T7065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.140426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.149431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.157918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.167772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.179889][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.200318][ T24] audit: type=1400 audit(1562172952.173:38): avc: denied { associate } for pid=7065 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 63.227610][ T7] device bridge_slave_1 left promiscuous mode [ 63.233756][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.317497][ T7] device bridge_slave_0 left promiscuous mode [ 63.323728][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.468563][ T7] device hsr_slave_1 left promiscuous mode [ 63.498097][ T7] device hsr_slave_0 left promiscuous mode [ 63.528252][ T7] team0 (unregistering): Port device team_slave_1 removed [ 63.537311][ T7] team0 (unregistering): Port device team_slave_0 removed [ 63.546930][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 63.578026][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 63.641757][ T7] bond0 (unregistering): Released all slaves 2019/07/03 16:55:57 executed programs: 1 2019/07/03 16:55:57 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe umount(./0/file0) failed (errno 22) loop exited with status 0 [ 67.343146][ T7080] IPVS: ftp: loaded support on port[0] = 21 [ 67.360971][ T7080] chnl_net:caif_netlink_parms(): no params data found [ 67.372684][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.379927][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.387205][ T7080] device bridge_slave_0 entered promiscuous mode [ 67.393876][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.401982][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.410122][ T7080] device bridge_slave_1 entered promiscuous mode [ 67.419165][ T7080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 67.432486][ T7080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 67.443152][ T7080] team0: Port device team_slave_0 added [ 67.449135][ T7080] team0: Port device team_slave_1 added [ 67.497982][ T7080] device hsr_slave_0 entered promiscuous mode [ 67.557307][ T7080] device hsr_slave_1 entered promiscuous mode [ 67.589080][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.596513][ T7080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.603753][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.611115][ T7080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.624402][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.632530][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.640147][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.648162][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.663392][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 67.673138][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.681359][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.689665][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.696756][ T7068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.707665][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.716172][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.723783][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.731469][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.739682][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.747794][ T7069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.755846][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.764477][ T3041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.772903][ T7080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.783114][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.792235][ T7088] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 68.867535][ T7] device bridge_slave_1 left promiscuous mode [ 68.873649][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.897489][ T7] device bridge_slave_0 left promiscuous mode [ 68.905664][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.158051][ T7] device hsr_slave_1 left promiscuous mode [ 69.197896][ T7] device hsr_slave_0 left promiscuous mode [ 69.238005][ T7] team0 (unregistering): Port device team_slave_1 removed [ 69.245815][ T7] team0 (unregistering): Port device team_slave_0 removed [ 69.254122][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 69.308062][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 69.351207][ T7] bond0 (unregistering): Released all slaves [ 75.716168][ T7088] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88810c87dc00 (size 64): comm "softirq", pid 0, jiffies 4294943442 (age 14.060s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 e0 5c df 0b 81 88 ff ff .........\...... 00 00 00 00 00 00 00 00 e0 c3 15 83 ff ff ff ff ................ backtrace: [<00000000bc5c04ec>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000f6db545d>] batadv_tvlv_handler_register+0xae/0x140 [<0000000065012bb9>] batadv_tt_init+0x78/0x180 [<00000000d7c0e283>] batadv_mesh_init+0x196/0x230 [<000000000e1d8445>] batadv_softif_init_late+0x1ca/0x220 [<000000008944ac99>] register_netdevice+0xbf/0x600 [<000000007b950cf1>] __rtnl_newlink+0xaca/0xb30 [<000000007c522e82>] rtnl_newlink+0x4e/0x80 [<00000000276d4d2c>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000efb800c3>] netlink_rcv_skb+0x61/0x170 [<000000001ea89666>] rtnetlink_rcv+0x1d/0x30 [<00000000783690e1>] netlink_unicast+0x1ec/0x2d0 [<0000000032f98edb>] netlink_sendmsg+0x26a/0x480 [<000000002b545882>] sock_sendmsg+0x54/0x70 [<000000000923a037>] __sys_sendto+0x148/0x1f0 [<00000000273a617e>] __x64_sys_sendto+0x2a/0x30 BUG: memory leak unreferenced object 0xffff8881211b5300 (size 128): comm "syz-executor.0", pid 7065, jiffies 4294943451 (age 13.970s) hex dump (first 32 bytes): f0 d8 71 21 81 88 ff ff f0 d8 71 21 81 88 ff ff ..q!......q!.... 26 91 26 fa 45 84 aa c0 42 18 d5 04 00 01 5a 5b &.&.E...B.....Z[ backtrace: [<00000000bc5c04ec>] kmem_cache_alloc_trace+0x13d/0x280 [<0000000072abd5b0>] hsr_create_self_node+0x42/0x150 [<00000000a55dd328>] hsr_dev_finalize+0xa4/0x233 [<000000007af9707d>] hsr_newlink+0xf3/0x140 [<000000008d7f4ecf>] __rtnl_newlink+0x892/0xb30 [<000000007c522e82>] rtnl_newlink+0x4e/0x80 [<00000000276d4d2c>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000efb800c3>] netlink_rcv_skb+0x61/0x170 [<000000001ea89666>] rtnetlink_rcv+0x1d/0x30 [<00000000783690e1>] netlink_unicast+0x1ec/0x2d0 [<0000000032f98edb>] netlink_sendmsg+0x26a/0x480 [<000000002b545882>] sock_sendmsg+0x54/0x70 [<000000000923a037>] __sys_sendto+0x148/0x1f0 [<00000000273a617e>] __x64_sys_sendto+0x2a/0x30 [<000000003255a1fe>] do_syscall_64+0x76/0x1a0 [<00000000982b8ded>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888121ffea80 (size 64): comm "syz-executor.0", pid 7065, jiffies 4294943451 (age 13.970s) hex dump (first 32 bytes): 80 e7 15 21 81 88 ff ff 00 02 00 00 00 00 ad de ...!............ 00 d0 71 21 81 88 ff ff c0 d8 71 21 81 88 ff ff ..q!......q!.... backtrace: [<00000000bc5c04ec>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000a7fa0fae>] hsr_add_port+0xe7/0x220 [<00000000583d7dfe>] hsr_dev_finalize+0x14f/0x233 [<000000007af9707d>] hsr_newlink+0xf3/0x140 [<000000008d7f4ecf>] __rtnl_newlink+0x892/0xb30 [<000000007c522e82>] rtnl_newlink+0x4e/0x80 [<00000000276d4d2c>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000efb800c3>] netlink_rcv_skb+0x61/0x170 [<000000001ea89666>] rtnetlink_rcv+0x1d/0x30 [<00000000783690e1>] netlink_unicast+0x1ec/0x2d0 [<0000000032f98edb>] netlink_sendmsg+0x26a/0x480 [<000000002b545882>] sock_sendmsg+0x54/0x70 [<000000000923a037>] __sys_sendto+0x148/0x1f0 [<00000000273a617e>] __x64_sys_sendto+0x2a/0x30 [<000000003255a1fe>] do_syscall_64+0x76/0x1a0 [<00000000982b8ded>] entry_SYSCALL_64_after_hwframe+0x44/0xa9