[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.960590][ T25] kauditd_printk_skb: 18 callbacks suppressed [ 26.960597][ T25] audit: type=1400 audit(1568547781.279:35): avc: denied { map } for pid=6855 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. [ 49.950239][ T25] audit: type=1400 audit(1568547804.269:36): avc: denied { map } for pid=6871 comm="syz-executor526" path="/root/syz-executor526475628" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 56.739529][ T6872] IPVS: ftp: loaded support on port[0] = 21 [ 56.757987][ T6872] chnl_net:caif_netlink_parms(): no params data found [ 56.769224][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.776241][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.783503][ T6872] device bridge_slave_0 entered promiscuous mode [ 56.790528][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.797546][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.804783][ T6872] device bridge_slave_1 entered promiscuous mode [ 56.813481][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.822845][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.833936][ T6872] team0: Port device team_slave_0 added [ 56.839780][ T6872] team0: Port device team_slave_1 added [ 56.858604][ T6872] device hsr_slave_0 entered promiscuous mode [ 56.897979][ T6872] device hsr_slave_1 entered promiscuous mode [ 56.959639][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.966670][ T6872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.974005][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.981018][ T6872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.993965][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.001728][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.009269][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.016478][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.023909][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.032603][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.040184][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.048288][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.055297][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.067115][ T6872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.077573][ T6872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.088747][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.096861][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.103876][ T6876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.111383][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.120110][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.128130][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.135962][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.143962][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.151340][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready executing program [ 57.161004][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.175495][ T25] audit: type=1400 audit(1568547811.489:37): avc: denied { create } for pid=6872 comm="syz-executor526" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 57.176096][ T6872] netlink: 'syz-executor526': attribute type 2 has an invalid length. [ 57.200638][ T25] audit: type=1400 audit(1568547811.489:38): avc: denied { write } for pid=6872 comm="syz-executor526" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 58.428127][ T23] device bridge_slave_1 left promiscuous mode [ 58.434230][ T23] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.488239][ T23] device bridge_slave_0 left promiscuous mode [ 58.494336][ T23] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.688230][ T23] device hsr_slave_0 left promiscuous mode [ 58.727982][ T23] device hsr_slave_1 left promiscuous mode [ 58.769126][ T23] team0 (unregistering): Port device team_slave_1 removed [ 58.776935][ T23] team0 (unregistering): Port device team_slave_0 removed [ 58.784687][ T23] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.828604][ T23] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.871474][ T23] bond0 (unregistering): Released all slaves [ 63.077420][ T6871] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88810c4ecd80 (size 128): comm "syz-executor526", pid 6872, jiffies 4294942990 (age 7.830s) hex dump (first 32 bytes): 00 30 ee 24 81 88 ff ff 80 7c 06 23 81 88 ff ff .0.$.....|.#.... 40 61 ff 0c 81 88 ff ff 00 00 00 00 00 00 00 00 @a.............. backtrace: [<0000000022176300>] kmem_cache_alloc_trace+0x145/0x2c0 [<00000000977a41d6>] ovs_vport_alloc+0x37/0xf0 [<00000000c0d9e520>] internal_dev_create+0x24/0x1d0 [<0000000082178c32>] ovs_vport_add+0x81/0x190 [<00000000bcc21da4>] new_vport+0x19/0x80 [<00000000c4b89f0c>] ovs_dp_cmd_new+0x22f/0x410 [<00000000749f0da0>] genl_family_rcv_msg+0x2ab/0x5b0 [<000000000df90c73>] genl_rcv_msg+0x54/0xa0 [<0000000066abd007>] netlink_rcv_skb+0x61/0x170 [<0000000023be812c>] genl_rcv+0x29/0x40 [<000000003976af26>] netlink_unicast+0x1ec/0x2d0 [<000000001f77ac45>] netlink_sendmsg+0x270/0x480 [<0000000014f08faa>] sock_sendmsg+0x54/0x70 [<0000000089595b62>] ___sys_sendmsg+0x393/0x3c0 [<00000000338e9630>] __sys_sendmsg+0x80/0xf0 [<00000000253bc97e>] __x64_sys_sendmsg+0x23/0x30 BUG: memory leak unreferenced object 0xffff88810cff6140 (size 64): comm "syz-executor526", pid 6872, jiffies 4294942990 (age 7.830s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 02 00 00 00 05 35 82 c1 .............5.. backtrace: [<000000001df4eea5>] __kmalloc+0x169/0x300 [<00000000b53e0257>] ovs_vport_set_upcall_portids+0x54/0xd0 [<000000002603952c>] ovs_vport_alloc+0x7f/0xf0 [<00000000c0d9e520>] internal_dev_create+0x24/0x1d0 [<0000000082178c32>] ovs_vport_add+0x81/0x190 [<00000000bcc21da4>] new_vport+0x19/0x80 [<00000000c4b89f0c>] ovs_dp_cmd_new+0x22f/0x410 [<00000000749f0da0>] genl_family_rcv_msg+0x2ab/0x5b0 [<000000000df90c73>] genl_rcv_msg+0x54/0xa0 [<0000000066abd007>] netlink_rcv_skb+0x61/0x170 [<0000000023be812c>] genl_rcv+0x29/0x40 [<000000003976af26>] netlink_unicast+0x1ec/0x2d0 [<000000001f77ac45>] netlink_sendmsg+0x270/0x480 [<0000000014f08faa>] sock_sendmsg+0x54/0x70 [<0000000089595b62>] ___sys_sendmsg+0x393/0x3c0 [<00000000338e9630>] __sys_sendmsg+0x80/0xf0