[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 27.962154][ T24] audit: type=1800 audit(1562133950.757:33): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 27.984415][ T24] audit: type=1800 audit(1562133950.757:34): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.923143][ T24] audit: type=1400 audit(1562133959.717:35): avc: denied { map } for pid=7124 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.89' (ECDSA) to the list of known hosts. [ 342.223267][ T24] audit: type=1400 audit(1562134265.017:36): avc: denied { map } for pid=7137 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/03 06:11:06 parsed 1 programs [ 343.211258][ T24] audit: type=1400 audit(1562134266.007:37): avc: denied { map } for pid=7137 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16201 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 343.213011][ T3774] kmemleak: Automatic memory scanning thread ended [ 345.651712][ T7150] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2019/07/03 06:11:14 executed programs: 0 [ 351.707053][ T7152] IPVS: ftp: loaded support on port[0] = 21 [ 351.728698][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 351.741606][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.748916][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.757388][ T7152] device bridge_slave_0 entered promiscuous mode [ 351.764168][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.771263][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.778795][ T7152] device bridge_slave_1 entered promiscuous mode [ 351.787880][ T7152] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 351.796529][ T7152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 351.807134][ T7152] team0: Port device team_slave_0 added [ 351.813143][ T7152] team0: Port device team_slave_1 added [ 351.855810][ T7152] device hsr_slave_0 entered promiscuous mode [ 351.905061][ T7152] device hsr_slave_1 entered promiscuous mode [ 351.977029][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.984175][ T7152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.991428][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.998450][ T7152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.012418][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.020322][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.038054][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.046298][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.058595][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 352.069836][ T7152] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.077912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.086613][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.093896][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.106613][ T7152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.117060][ T7152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.128254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.136848][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.143991][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.151621][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.159697][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 352.167830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 352.175837][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.183798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 352.191161][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.201404][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.216999][ T24] audit: type=1400 audit(1562134275.017:38): avc: denied { associate } for pid=7152 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/07/03 06:11:20 executed programs: 1 2019/07/03 06:12:20 executed programs: 2 2019/07/03 06:12:20 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe [ 419.235187][ T186] device bridge_slave_1 left promiscuous mode [ 419.241329][ T186] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.295233][ T186] device bridge_slave_0 left promiscuous mode [ 419.301344][ T186] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.495471][ T186] device hsr_slave_1 left promiscuous mode [ 419.535619][ T186] device hsr_slave_0 left promiscuous mode [ 419.575715][ T186] team0 (unregistering): Port device team_slave_1 removed [ 419.583599][ T186] team0 (unregistering): Port device team_slave_0 removed [ 419.591386][ T186] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 419.635781][ T186] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 419.698809][ T186] bond0 (unregistering): Released all slaves 2019/07/03 06:12:26 executed programs: 3 [ 423.846036][ T7171] IPVS: ftp: loaded support on port[0] = 21 [ 423.864690][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 423.876572][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.883618][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.891287][ T7171] device bridge_slave_0 entered promiscuous mode [ 423.898133][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.905179][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.912450][ T7171] device bridge_slave_1 entered promiscuous mode [ 423.921595][ T7171] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 423.930261][ T7171] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 423.941009][ T7171] team0: Port device team_slave_0 added [ 423.946885][ T7171] team0: Port device team_slave_1 added [ 424.035608][ T7171] device hsr_slave_0 entered promiscuous mode [ 424.065001][ T7171] device hsr_slave_1 entered promiscuous mode [ 424.107035][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.114106][ T7171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.121326][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.128359][ T7171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.142232][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.150161][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.157637][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.164740][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.172893][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 424.181221][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.188857][ T7159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.197083][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.204148][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.217361][ T7171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.227861][ T7171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.238757][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.246961][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.253983][ T7155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.261537][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.269773][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.277865][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.285766][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.293766][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 424.301061][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.310953][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.330700][ T7179] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 485.605136][ T186] device bridge_slave_1 left promiscuous mode [ 485.611244][ T186] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.665138][ T186] device bridge_slave_0 left promiscuous mode [ 485.671261][ T186] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.845912][ T186] device hsr_slave_1 left promiscuous mode [ 485.885785][ T186] device hsr_slave_0 left promiscuous mode [ 485.925668][ T186] team0 (unregistering): Port device team_slave_1 removed [ 485.933436][ T186] team0 (unregistering): Port device team_slave_0 removed [ 485.941141][ T186] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 486.015638][ T186] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 486.058752][ T186] bond0 (unregistering): Released all slaves [ 492.046689][ T7179] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88812a79af40 (size 64): comm "softirq", pid 0, jiffies 4294972446 (age 140.360s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 e0 dc 43 21 81 88 ff ff ..........C!.... 00 00 00 00 00 00 00 00 e0 c3 15 83 ff ff ff ff ................ backtrace: [<000000001a602e38>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000ea3eafee>] batadv_tvlv_handler_register+0xae/0x140 [<00000000a5f83b6b>] batadv_tt_init+0x78/0x180 [<000000004b5daafd>] batadv_mesh_init+0x196/0x230 [<00000000dbcf40d7>] batadv_softif_init_late+0x1ca/0x220 [<00000000ad5fdaf7>] register_netdevice+0xbf/0x600 [<00000000a604e9a0>] __rtnl_newlink+0xaca/0xb30 [<000000005080bfad>] rtnl_newlink+0x4e/0x80 [<000000009357e428>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000d273f0d4>] netlink_rcv_skb+0x61/0x170 [<0000000005a0418b>] rtnetlink_rcv+0x1d/0x30 [<00000000be1e5cd0>] netlink_unicast+0x1ec/0x2d0 [<000000003475cd93>] netlink_sendmsg+0x26a/0x480 [<0000000032f520e4>] sock_sendmsg+0x54/0x70 [<0000000015efb867>] __sys_sendto+0x148/0x1f0 [<000000003ca3951d>] __x64_sys_sendto+0x2a/0x30 BUG: memory leak unreferenced object 0xffff888123d0ac80 (size 128): comm "syz-executor.0", pid 7152, jiffies 4294972454 (age 140.280s) hex dump (first 32 bytes): f0 48 36 0e 81 88 ff ff f0 48 36 0e 81 88 ff ff .H6......H6..... 02 bd 1c 1d d2 f2 66 32 e9 5b e0 c9 00 31 c0 e8 ......f2.[...1.. backtrace: [<000000001a602e38>] kmem_cache_alloc_trace+0x13d/0x280 [<000000002d148a21>] hsr_create_self_node+0x42/0x150 [<0000000059bf05ee>] hsr_dev_finalize+0xa4/0x233 [<000000003e0f2552>] hsr_newlink+0xf3/0x140 [<000000009070461a>] __rtnl_newlink+0x892/0xb30 [<000000005080bfad>] rtnl_newlink+0x4e/0x80 [<000000009357e428>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000d273f0d4>] netlink_rcv_skb+0x61/0x170 [<0000000005a0418b>] rtnetlink_rcv+0x1d/0x30 [<00000000be1e5cd0>] netlink_unicast+0x1ec/0x2d0 [<000000003475cd93>] netlink_sendmsg+0x26a/0x480 [<0000000032f520e4>] sock_sendmsg+0x54/0x70 [<0000000015efb867>] __sys_sendto+0x148/0x1f0 [<000000003ca3951d>] __x64_sys_sendto+0x2a/0x30 [<00000000c90762a1>] do_syscall_64+0x76/0x1a0 [<0000000019c9f2d9>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff88810e0ece40 (size 64): comm "syz-executor.0", pid 7152, jiffies 4294972454 (age 140.280s) hex dump (first 32 bytes): 80 80 85 09 81 88 ff ff 00 02 00 00 00 00 ad de ................ 00 40 36 0e 81 88 ff ff c0 48 36 0e 81 88 ff ff .@6......H6..... backtrace: [<000000001a602e38>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000266768f0>] hsr_add_port+0xe7/0x220 [<0000000047c733c4>] hsr_dev_finalize+0x14f/0x233 [<000000003e0f2552>] hsr_newlink+0xf3/0x140 [<000000009070461a>] __rtnl_newlink+0x892/0xb30 [<000000005080bfad>] rtnl_newlink+0x4e/0x80 [<000000009357e428>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000d273f0d4>] netlink_rcv_skb+0x61/0x170 [<0000000005a0418b>] rtnetlink_rcv+0x1d/0x30 [<00000000be1e5cd0>] netlink_unicast+0x1ec/0x2d0 [<000000003475cd93>] netlink_sendmsg+0x26a/0x480 [<0000000032f520e4>] sock_sendmsg+0x54/0x70 [<0000000015efb867>] __sys_sendto+0x148/0x1f0 [<000000003ca3951d>] __x64_sys_sendto+0x2a/0x30 [<00000000c90762a1>] do_syscall_64+0x76/0x1a0 [<0000000019c9f2d9>] entry_SYSCALL_64_after_hwframe+0x44/0xa9