[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 25.231674][ T24] audit: type=1800 audit(1561515351.776:33): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 25.253740][ T24] audit: type=1800 audit(1561515351.776:34): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.315700][ T24] audit: type=1400 audit(1561515363.866:35): avc: denied { map } for pid=7113 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 94.835616][ T24] audit: type=1400 audit(1561515421.386:36): avc: denied { map } for pid=7122 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.157' (ECDSA) to the list of known hosts. [ 121.462824][ T24] audit: type=1400 audit(1561515448.006:37): avc: denied { map } for pid=7129 comm="syz-executor155" path="/root/syz-executor155684979" dev="sda1" ino=16461 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program [ 128.353322][ T24] audit: type=1400 audit(1561515454.906:38): avc: denied { map } for pid=7138 comm="syz-executor155" path="/dev/binder0" dev="devtmpfs" ino=17000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 128.356921][ T7150] binder: BINDER_SET_CONTEXT_MGR already set [ 128.384520][ T24] audit: type=1400 audit(1561515454.906:39): avc: denied { set_context_mgr } for pid=7140 comm="syz-executor155" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 128.385562][ T7150] binder: 7139:7150 ioctl 40046207 0 returned -16 [ 128.409155][ T7141] binder: BINDER_SET_CONTEXT_MGR already set [ 128.422658][ T7146] binder: BINDER_SET_CONTEXT_MGR already set [ 128.423779][ T7141] binder: 7138:7141 ioctl 40046207 0 returned -16 [ 128.429063][ T7152] binder: BINDER_SET_CONTEXT_MGR already set [ 128.437323][ T7146] binder: 7143:7146 ioctl 40046207 0 returned -16 [ 128.441253][ T7153] binder: BINDER_SET_CONTEXT_MGR already set [ 128.448595][ T7152] binder: 7144:7152 ioctl 40046207 0 returned -16 [ 128.453524][ T7149] binder: 7140:7149 ioctl c0306201 20000140 returned -14 [ 128.459953][ T7153] binder: 7148:7153 ioctl 40046207 0 returned -16 [ 128.466924][ T7151] binder: BINDER_SET_CONTEXT_MGR already set [ 128.479387][ T7151] binder: 7147:7151 ioctl 40046207 0 returned -16 [ 128.479630][ T7154] binder: 7139:7154 ioctl c0306201 20000140 returned -14 [ 128.485870][ T7161] binder: BINDER_SET_CONTEXT_MGR already set [ 128.498990][ T24] audit: type=1400 audit(1561515455.026:40): avc: denied { call } for pid=7139 comm="syz-executor155" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 128.499005][ T7161] binder: 7140:7161 ioctl 40046207 0 returned -16 [ 128.529116][ T7145] binder: BINDER_SET_CONTEXT_MGR already set [ 128.529160][ T7149] binder_alloc: binder_alloc_mmap_handler: 7140 20001000-20004000 already mapped failed -16 [ 128.542975][ T7158] binder_alloc: 7140: binder_alloc_buf, no vma [ 128.545767][ T7162] binder: 7140:7162 ioctl c0306201 20000140 returned -14 [ 128.551550][ T7155] binder_alloc: 7140: binder_alloc_buf, no vma [ 128.551568][ T7155] binder: 7138:7155 ioctl c0306201 20000140 returned -14 [ 128.558604][ T7156] binder_alloc: 7140: binder_alloc_buf, no vma [ 128.565028][ T7154] binder_alloc: binder_alloc_mmap_handler: 7139 20001000-20004000 already mapped failed -16 [ 128.572128][ T7157] binder_alloc: 7140: binder_alloc_buf, no vma [ 128.577965][ T7158] binder: 7147:7158 ioctl c0306201 20000140 returned -14 [ 128.588126][ T7156] binder: 7143:7156 ioctl c0306201 20000140 returned -14 [ 128.594176][ T7145] binder: 7142:7145 ioctl 40046207 0 returned -16 [ 128.601218][ T7159] binder_alloc: 7140: binder_alloc_buf, no vma [ 128.608294][ T7163] binder: BINDER_SET_CONTEXT_MGR already set [ 128.615325][ T7146] binder_alloc: binder_alloc_mmap_handler: 7143 20001000-20004000 already mapped failed -16 [ 128.620852][ T7163] binder: 7139:7163 ioctl 40046207 0 returned -16 [ 128.627124][ T7141] binder_alloc: binder_alloc_mmap_handler: 7138 20001000-20004000 already mapped failed -16 [ 128.636947][ T7157] binder: 7144:7157 ioctl c0306201 20000140 returned -14 [ 128.643641][ T7155] binder: BINDER_SET_CONTEXT_MGR already set [ 128.653720][ T7151] binder_alloc: binder_alloc_mmap_handler: 7147 20001000-20004000 already mapped failed -16 [ 128.661529][ T7160] binder_alloc: 7140: binder_alloc_buf, no vma [ 128.683043][ T7159] binder: 7148:7159 ioctl c0306201 20000140 returned -14 [ 128.690426][ T7157] binder_alloc: binder_alloc_mmap_handler: 7144 20001000-20004000 already mapped failed -16 [ 128.690456][ T7156] binder: BINDER_SET_CONTEXT_MGR already set [ 128.706741][ T7155] binder: 7138:7155 ioctl 40046207 0 returned -16 [ 128.713278][ T7150] binder_alloc: 7140: binder_alloc_buf, no vma [ 128.719900][ T7160] binder: 7142:7160 ioctl c0306201 20000140 returned -14 [ 128.719917][ T7153] binder_alloc: binder_alloc_mmap_handler: 7148 20001000-20004000 already mapped failed -16 [ 128.727479][ T7150] binder: 7139:7150 ioctl c0306201 20000140 returned -14 [ 128.744927][ T7164] binder_alloc: 7147: binder_alloc_buf, no vma [ 128.744941][ T7151] binder: 7147:7151 ioctl c0306201 20000140 returned -14 [ 128.751399][ T7156] binder: 7143:7156 ioctl 40046207 0 returned -16 [ 128.758419][ T7165] binder: BINDER_SET_CONTEXT_MGR already set [ 128.765058][ T7164] binder: 7143:7164 ioctl c0306201 20000140 returned -14 [ 128.778382][ T7166] binder_alloc: 7147: binder_alloc_buf, no vma [ 128.778409][ T7159] binder: BINDER_SET_CONTEXT_MGR already set [ 128.784682][ T7165] binder: 7144:7165 ioctl 40046207 0 returned -16 [ 128.791026][ T7159] binder: 7148:7159 ioctl 40046207 0 returned -16 [ 128.797234][ T7152] binder_alloc: 7147: binder_alloc_buf, no vma [ 128.803846][ T7160] binder: BINDER_SET_CONTEXT_MGR already set [ 128.809734][ T7166] binder: 7138:7166 ioctl c0306201 20000140 returned -14 [ 128.815835][ T7145] binder_alloc: binder_alloc_mmap_handler: 7142 20001000-20004000 already mapped failed -16 [ 128.822772][ T7167] binder: 7148:7167 ioctl c0306201 20000140 returned -14 [ 128.833256][ T7160] binder: 7142:7160 ioctl 40046207 0 returned -16 [ 128.840140][ T7152] binder: 7144:7152 ioctl c0306201 20000140 returned -14 [ 128.846836][ T7145] binder: 7142:7145 ioctl c0306201 20000140 returned -14 [ 135.353277][ T7135] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff8881170c8c20 (size 32): comm "syz-executor155", pid 7154, jiffies 4294950122 (age 17.710s) hex dump (first 32 bytes): 20 8c 0c 17 81 88 ff ff 20 8c 0c 17 81 88 ff ff ....... ....... 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000000017a916>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000abca9f82>] binder_transaction+0x28b/0x2eb0 [<000000008c18670a>] binder_thread_write+0x4bf/0x1430 [<0000000070acbbf7>] binder_ioctl+0x8bc/0xbb4 [<00000000ef006089>] do_vfs_ioctl+0x62a/0x810 [<00000000c4add464>] ksys_ioctl+0x86/0xb0 [<000000001de91d45>] __x64_sys_ioctl+0x1e/0x30 [<00000000ae804b0e>] do_syscall_64+0x76/0x1a0 [<0000000035178a81>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 executing program executing program [ 154.295942][ T7169] binder: 7168:7169 ioctl c0306201 20000140 returned -14 [ 154.303419][ T7169] binder_alloc: binder_alloc_mmap_handler: 7168 20001000-20004000 already mapped failed -16 [ 154.313727][ T7170] binder: BINDER_SET_CONTEXT_MGR already set [ 154.319757][ T7170] binder: 7168:7170 ioctl 40046207 0 returned -16 [ 154.330072][ T7172] binder: BINDER_SET_CONTEXT_MGR already set [ 154.336235][ T7172] binder: 7171:7172 ioctl 40046207 0 returned -16 executing program [ 154.342766][ T7172] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 154.342769][ T7172] binder_alloc: 7168: binder_alloc_buf, no vma [ 154.356221][ T7172] binder: 7171:7172 ioctl c0306201 20000140 returned -14 [ 154.361715][ T7174] binder: BINDER_SET_CONTEXT_MGR already set [ 154.369244][ T7174] binder: 7173:7174 ioctl 40046207 0 returned -16 [ 154.375868][ T7174] binder_alloc: 7168: binder_alloc_buf, no vma [ 154.382089][ T7174] binder: 7173:7174 ioctl c0306201 20000140 returned -14 [ 154.382113][ T7175] binder: BINDER_SET_CONTEXT_MGR already set [ 154.382132][ T7172] binder_alloc: binder_alloc_mmap_handler: 7171 20001000-20004000 already mapped failed -16 [ 154.405436][ T7175] binder: 7171:7175 ioctl 40046207 0 returned -16 [ 154.412177][ T7174] binder_alloc: binder_alloc_mmap_handler: 7173 20001000-20004000 already mapped failed -16 [ 154.422294][ T7176] binder: BINDER_SET_CONTEXT_MGR already set [ 154.428397][ T7176] binder: 7173:7176 ioctl 40046207 0 returned -16 executing program executing program [ 154.487511][ T7178] binder: BINDER_SET_CONTEXT_MGR already set [ 154.493661][ T7178] binder: 7177:7178 ioctl 40046207 0 returned -16 [ 154.500278][ T7178] binder_alloc: 7168: binder_alloc_buf, no vma [ 154.506778][ T7178] binder: 7177:7178 ioctl c0306201 20000140 returned -14 [ 154.514499][ T7178] binder_alloc: binder_alloc_mmap_handler: 7177 20001000-20004000 already mapped failed -16 [ 154.524766][ T7179] binder: BINDER_SET_CONTEXT_MGR already set [ 154.531092][ T7179] binder: 7177:7179 ioctl 40046207 0 returned -16 executing program [ 154.534176][ T7181] binder: BINDER_SET_CONTEXT_MGR already set [ 154.543627][ T7181] binder: 7180:7181 ioctl 40046207 0 returned -16 [ 154.550111][ T7181] binder: 7180:7181 ioctl c0306201 20000140 returned -14 [ 154.561523][ T7181] binder_alloc: binder_alloc_mmap_handler: 7180 20001000-20004000 already mapped failed -16 [ 154.571700][ T7182] binder: 7180:7182 ioctl c0306201 20000140 returned -14 [ 154.576635][ T7184] binder: BINDER_SET_CONTEXT_MGR already set executing program [ 154.585403][ T7184] binder: 7183:7184 ioctl 40046207 0 returned -16 [ 154.594332][ T7184] binder: 7183:7184 ioctl c0306201 20000140 returned -14 [ 154.601618][ T7184] binder_alloc: binder_alloc_mmap_handler: 7183 20001000-20004000 already mapped failed -16 [ 154.611902][ T7185] binder: 7183:7185 ioctl c0306201 20000140 returned -14 [ 154.626844][ T7187] binder: 7186:7187 ioctl c0306201 20000140 returned -14 [ 154.634218][ T7187] binder_alloc: binder_alloc_mmap_handler: 7186 20001000-20004000 already mapped failed -16 [ 154.644547][ T7188] binder: BINDER_SET_CONTEXT_MGR already set [ 154.650607][ T7188] binder: 7186:7188 ioctl 40046207 0 returned -16