[ 27.416710][ T24] audit: type=1800 audit(1562174885.094:32): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.026010][ T24] audit: type=1800 audit(1562174885.754:33): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. syzkaller login: [ 62.336985][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 62.336994][ T24] audit: type=1400 audit(1562174920.064:36): avc: denied { map } for pid=7148 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16480 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/03 17:28:41 parsed 1 programs [ 63.553877][ T24] audit: type=1400 audit(1562174921.284:37): avc: denied { map } for pid=7148 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=78 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 63.556387][ T3774] kmemleak: Automatic memory scanning thread ended 2019/07/03 17:28:50 executed programs: 0 [ 72.414591][ T7164] IPVS: ftp: loaded support on port[0] = 21 [ 72.435521][ T7164] chnl_net:caif_netlink_parms(): no params data found [ 72.449381][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.456608][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.464086][ T7164] device bridge_slave_0 entered promiscuous mode [ 72.470831][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.477984][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.485410][ T7164] device bridge_slave_1 entered promiscuous mode [ 72.494708][ T7164] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.503694][ T7164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.514513][ T7164] team0: Port device team_slave_0 added [ 72.520499][ T7164] team0: Port device team_slave_1 added [ 72.573237][ T7164] device hsr_slave_0 entered promiscuous mode [ 72.612627][ T7164] device hsr_slave_1 entered promiscuous mode [ 72.674537][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.681586][ T7164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.688929][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.695957][ T7164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.711504][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.719557][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.727184][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.734866][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.743165][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 72.753091][ T7164] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.763063][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.771888][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.779127][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.786544][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.795092][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.802253][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.814433][ T7164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.824965][ T7164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.836383][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.844601][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.852834][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.861592][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.870432][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.880179][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.889967][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.908050][ T24] audit: type=1400 audit(1562174930.634:38): avc: denied { associate } for pid=7164 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 73.973178][ T25] device bridge_slave_1 left promiscuous mode [ 73.979364][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.102856][ T25] device bridge_slave_0 left promiscuous mode [ 74.109383][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.293738][ T25] device hsr_slave_1 left promiscuous mode [ 74.343241][ T25] device hsr_slave_0 left promiscuous mode [ 74.403363][ T25] team0 (unregistering): Port device team_slave_1 removed [ 74.411668][ T25] team0 (unregistering): Port device team_slave_0 removed [ 74.419840][ T25] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 74.493349][ T25] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 74.526810][ T25] bond0 (unregistering): Released all slaves 2019/07/03 17:28:55 executed programs: 1 2019/07/03 17:28:55 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe umount(./0/file0) failed (errno 22) loop exited with status 0 [ 78.055268][ T7177] IPVS: ftp: loaded support on port[0] = 21 [ 78.075150][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 78.087057][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.094350][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.101684][ T7177] device bridge_slave_0 entered promiscuous mode [ 78.109042][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.116805][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.126256][ T7177] device bridge_slave_1 entered promiscuous mode [ 78.135692][ T7177] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 78.146629][ T7177] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 78.157917][ T7177] team0: Port device team_slave_0 added [ 78.164564][ T7177] team0: Port device team_slave_1 added [ 78.233183][ T7177] device hsr_slave_0 entered promiscuous mode [ 78.302544][ T7177] device hsr_slave_1 entered promiscuous mode [ 78.344681][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.351738][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.359101][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.366142][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.380292][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.388348][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.396377][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.404138][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.411424][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 78.420339][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.427978][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.439091][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.448008][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.456629][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.464993][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.472034][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.482061][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.490576][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.499034][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.508257][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.517417][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.526105][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.536162][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.512800][ T25] device bridge_slave_1 left promiscuous mode [ 79.518987][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.534425][ T7186] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 79.572757][ T25] device bridge_slave_0 left promiscuous mode [ 79.578896][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.753486][ T25] device hsr_slave_1 left promiscuous mode [ 79.823280][ T25] device hsr_slave_0 left promiscuous mode [ 79.873275][ T25] team0 (unregistering): Port device team_slave_1 removed [ 79.881140][ T25] team0 (unregistering): Port device team_slave_0 removed [ 79.888923][ T25] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 79.953196][ T25] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 80.006401][ T25] bond0 (unregistering): Released all slaves [ 86.320740][ T7186] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88810d0fef00 (size 64): comm "softirq", pid 0, jiffies 4294944519 (age 13.930s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 e0 ac 6e 11 81 88 ff ff ..........n..... 00 00 00 00 00 00 00 00 e0 c3 15 83 ff ff ff ff ................ backtrace: [<000000006376917d>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000fc2a5ba5>] batadv_tvlv_handler_register+0xae/0x140 [<00000000d8961677>] batadv_tt_init+0x78/0x180 [<00000000bbfb40f4>] batadv_mesh_init+0x196/0x230 [<00000000afe97983>] batadv_softif_init_late+0x1ca/0x220 [<00000000ebce9206>] register_netdevice+0xbf/0x600 [<00000000e12b76ca>] __rtnl_newlink+0xaca/0xb30 [<000000007b12b131>] rtnl_newlink+0x4e/0x80 [<00000000334aef79>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000c395ac00>] netlink_rcv_skb+0x61/0x170 [<000000008aba2453>] rtnetlink_rcv+0x1d/0x30 [<00000000a1423db0>] netlink_unicast+0x1ec/0x2d0 [<00000000d77917df>] netlink_sendmsg+0x26a/0x480 [<0000000094e19055>] sock_sendmsg+0x54/0x70 [<00000000d8774715>] __sys_sendto+0x148/0x1f0 [<00000000dddd649f>] __x64_sys_sendto+0x2a/0x30 BUG: memory leak unreferenced object 0xffff8881296c0f80 (size 128): comm "syz-executor.0", pid 7164, jiffies 4294944527 (age 13.850s) hex dump (first 32 bytes): f0 98 7b 2a 81 88 ff ff f0 98 7b 2a 81 88 ff ff ..{*......{*.... 96 65 95 4b be 1b 7a d0 2d cf 07 e0 1c 1d 1e 1f .e.K..z.-....... backtrace: [<000000006376917d>] kmem_cache_alloc_trace+0x13d/0x280 [<000000007098ad72>] hsr_create_self_node+0x42/0x150 [<00000000c6456142>] hsr_dev_finalize+0xa4/0x233 [<0000000098eba31d>] hsr_newlink+0xf3/0x140 [<0000000087308f71>] __rtnl_newlink+0x892/0xb30 [<000000007b12b131>] rtnl_newlink+0x4e/0x80 [<00000000334aef79>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000c395ac00>] netlink_rcv_skb+0x61/0x170 [<000000008aba2453>] rtnetlink_rcv+0x1d/0x30 [<00000000a1423db0>] netlink_unicast+0x1ec/0x2d0 [<00000000d77917df>] netlink_sendmsg+0x26a/0x480 [<0000000094e19055>] sock_sendmsg+0x54/0x70 [<00000000d8774715>] __sys_sendto+0x148/0x1f0 [<00000000dddd649f>] __x64_sys_sendto+0x2a/0x30 [<0000000032ce9d48>] do_syscall_64+0x76/0x1a0 [<00000000ddb34325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888124277480 (size 64): comm "syz-executor.0", pid 7164, jiffies 4294944527 (age 13.850s) hex dump (first 32 bytes): 80 ea 0f 0d 81 88 ff ff 00 02 00 00 00 00 ad de ................ 00 90 7b 2a 81 88 ff ff c0 98 7b 2a 81 88 ff ff ..{*......{*.... backtrace: [<000000006376917d>] kmem_cache_alloc_trace+0x13d/0x280 [<000000004ae0bf50>] hsr_add_port+0xe7/0x220 [<0000000023d0b895>] hsr_dev_finalize+0x14f/0x233 [<0000000098eba31d>] hsr_newlink+0xf3/0x140 [<0000000087308f71>] __rtnl_newlink+0x892/0xb30 [<000000007b12b131>] rtnl_newlink+0x4e/0x80 [<00000000334aef79>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000c395ac00>] netlink_rcv_skb+0x61/0x170 [<000000008aba2453>] rtnetlink_rcv+0x1d/0x30 [<00000000a1423db0>] netlink_unicast+0x1ec/0x2d0 [<00000000d77917df>] netlink_sendmsg+0x26a/0x480 [<0000000094e19055>] sock_sendmsg+0x54/0x70 [<00000000d8774715>] __sys_sendto+0x148/0x1f0 [<00000000dddd649f>] __x64_sys_sendto+0x2a/0x30 [<0000000032ce9d48>] do_syscall_64+0x76/0x1a0 [<00000000ddb34325>] entry_SYSCALL_64_after_hwframe+0x44/0xa9