[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.439760][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 32.439768][ T24] audit: type=1400 audit(1561614011.529:35): avc: denied { map } for pid=7118 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.251' (ECDSA) to the list of known hosts. [ 974.367844][ T24] audit: type=1400 audit(1561614953.449:36): avc: denied { map } for pid=7132 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=2339 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/27 05:55:54 parsed 1 programs [ 975.295499][ T24] audit: type=1400 audit(1561614954.379:37): avc: denied { map } for pid=7132 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=49 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 975.297302][ T3775] kmemleak: Automatic memory scanning thread ended 2019/06/27 05:56:03 executed programs: 0 [ 984.073372][ T7147] IPVS: ftp: loaded support on port[0] = 21 [ 984.095967][ T7147] chnl_net:caif_netlink_parms(): no params data found [ 984.109764][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.116953][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.124567][ T7147] device bridge_slave_0 entered promiscuous mode [ 984.131516][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.138596][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.145996][ T7147] device bridge_slave_1 entered promiscuous mode [ 984.156200][ T7147] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 984.165257][ T7147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 984.177008][ T7147] team0: Port device team_slave_0 added [ 984.183262][ T7147] team0: Port device team_slave_1 added [ 984.219521][ T7147] device hsr_slave_0 entered promiscuous mode [ 984.258593][ T7147] device hsr_slave_1 entered promiscuous mode [ 984.310971][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.318047][ T7147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.325359][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.332415][ T7147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.347957][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.356617][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 984.374866][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.383670][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.391348][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 984.399999][ T7147] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.419087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 984.427353][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.434425][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.441968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 984.450760][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.457856][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.470642][ T7147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 984.481368][ T7147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 984.492967][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 984.501735][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 984.510220][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 984.519061][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 984.527178][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 984.534636][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 984.545092][ T7147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.561967][ T24] audit: type=1400 audit(1561614963.649:38): avc: denied { associate } for pid=7147 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/06/27 05:56:09 executed programs: 1 2019/06/27 05:56:14 executed programs: 3 2019/06/27 05:56:19 executed programs: 5 2019/06/27 05:56:25 executed programs: 7 2019/06/27 05:56:30 executed programs: 9 2019/06/27 05:56:35 executed programs: 11 2019/06/27 05:56:41 executed programs: 13 2019/06/27 05:56:46 executed programs: 15 2019/06/27 05:56:51 executed programs: 17 2019/06/27 05:56:56 executed programs: 19 2019/06/27 05:57:02 executed programs: 21 2019/06/27 05:57:07 executed programs: 23 2019/06/27 05:57:12 executed programs: 25 2019/06/27 05:57:18 executed programs: 27 2019/06/27 05:57:23 executed programs: 29 2019/06/27 05:57:29 executed programs: 31 2019/06/27 05:57:29 result: hanged=false err=executor 0: exit status 67 setns(netns) failed (errno 9) child failed (errno 0) loop exited with status 67 setns(netns) failed (errno 9) child failed (errno 0) loop exited with status 67 [ 1070.256368][ T7298] IPVS: ftp: loaded support on port[0] = 21 [ 1070.277351][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 1070.297817][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.304946][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.312756][ T7298] device bridge_slave_0 entered promiscuous mode [ 1070.325468][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.332562][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.340014][ T7298] device bridge_slave_1 entered promiscuous mode [ 1070.349614][ T7298] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1070.358634][ T7298] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1070.373579][ T7298] team0: Port device team_slave_0 added [ 1070.379620][ T7298] team0: Port device team_slave_1 added [ 1070.439289][ T7298] device hsr_slave_0 entered promiscuous mode [ 1070.488550][ T7298] device hsr_slave_1 entered promiscuous mode [ 1070.554610][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.561735][ T7298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.568993][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.576029][ T7298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.590826][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.599496][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1070.607181][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.614728][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.629868][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.637731][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1070.646186][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.653237][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.666444][ T7298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.677404][ T7298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1070.688496][ T2886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1070.696821][ T2886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.704279][ T2886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.712344][ T2886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1070.720525][ T2886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1070.728648][ T2886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1070.736922][ T2886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1070.745030][ T2886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1070.752416][ T2886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1070.769981][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.089320][ T7150] device bridge_slave_1 left promiscuous mode [ 1071.095637][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.149325][ T7150] device bridge_slave_0 left promiscuous mode [ 1071.155588][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.469822][ T7150] device hsr_slave_1 left promiscuous mode [ 1071.549795][ T7150] device hsr_slave_0 left promiscuous mode [ 1071.610302][ T7150] team0 (unregistering): Port device team_slave_1 removed [ 1071.620282][ T7150] team0 (unregistering): Port device team_slave_0 removed [ 1071.628976][ T7150] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1071.680674][ T7150] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1071.796816][ T7150] bond0 (unregistering): Released all slaves 2019/06/27 05:57:35 executed programs: 33 2019/06/27 05:57:35 result: hanged=false err=executor 0: exit status 67 setns(netns) failed (errno 9) child failed (errno 0) loop exited with status 67 setns(netns) failed (errno 9) child failed (errno 0) loop exited with status 67 [ 1076.156438][ T7314] IPVS: ftp: loaded support on port[0] = 21 [ 1076.176103][ T7314] chnl_net:caif_netlink_parms(): no params data found [ 1076.188214][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.195328][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.202742][ T7314] device bridge_slave_0 entered promiscuous mode [ 1076.220927][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.227977][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.235342][ T7314] device bridge_slave_1 entered promiscuous mode [ 1076.244740][ T7314] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1076.253506][ T7314] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1076.268357][ T7314] team0: Port device team_slave_0 added [ 1076.274342][ T7314] team0: Port device team_slave_1 added [ 1076.309317][ T7314] device hsr_slave_0 entered promiscuous mode [ 1076.348504][ T7314] device hsr_slave_1 entered promiscuous mode [ 1076.424775][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.431850][ T7314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.439099][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.446130][ T7314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.461901][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.470408][ T7149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1076.478054][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.485548][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.500224][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.507857][ T7154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1076.516287][ T7154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.523317][ T7154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.536516][ T7314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1076.547250][ T7314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1076.558334][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1076.566506][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.573557][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.581800][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1076.590053][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1076.598063][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1076.606238][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1076.614299][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1076.621708][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1076.638195][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.119114][ T7306] device bridge_slave_1 left promiscuous mode [ 1077.126187][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.179950][ T7306] device bridge_slave_0 left promiscuous mode [ 1077.186122][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.630619][ T7306] device hsr_slave_1 left promiscuous mode [ 1077.736955][ T7306] device hsr_slave_0 left promiscuous mode [ 1077.772665][ T7324] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1077.809284][ T7306] team0 (unregistering): Port device team_slave_1 removed [ 1077.817180][ T7306] team0 (unregistering): Port device team_slave_0 removed [ 1077.825042][ T7306] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1077.879307][ T7306] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1077.942789][ T7306] bond0 (unregistering): Released all slaves [ 1083.809812][ T7324] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888118743200 (size 128): comm "syz-executor.0", pid 7147, jiffies 4295035682 (age 99.680s) hex dump (first 32 bytes): f0 48 e8 20 81 88 ff ff f0 48 e8 20 81 88 ff ff .H. .....H. .... 7a 5b aa 91 1a bd 1a 31 c8 81 e2 52 00 00 00 00 z[.....1...R.... backtrace: [<00000000a633f0b4>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000628ebbdd>] hsr_create_self_node+0x42/0x150 [<000000004fec91a3>] hsr_dev_finalize+0xa4/0x233 [<00000000dc8290a8>] hsr_newlink+0xf3/0x140 [<00000000e00fe83e>] __rtnl_newlink+0x892/0xb30 [<00000000903269b9>] rtnl_newlink+0x4e/0x80 [<000000002409410e>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000b4b97855>] netlink_rcv_skb+0x61/0x170 [<000000007c254f2e>] rtnetlink_rcv+0x1d/0x30 [<00000000f1c24382>] netlink_unicast+0x1ec/0x2d0 [<00000000a99685bb>] netlink_sendmsg+0x26a/0x480 [<0000000001bc615e>] sock_sendmsg+0x54/0x70 [<000000006717f307>] __sys_sendto+0x148/0x1f0 [<00000000fc4eea6e>] __x64_sys_sendto+0x2a/0x30 [<0000000087024bc9>] do_syscall_64+0x76/0x1a0 [<00000000e7fa1212>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888112480700 (size 64): comm "syz-executor.0", pid 7147, jiffies 4295035682 (age 99.680s) hex dump (first 32 bytes): 40 c2 0b 13 81 88 ff ff 00 02 00 00 00 00 ad de @............... 00 40 e8 20 81 88 ff ff c0 48 e8 20 81 88 ff ff .@. .....H. .... backtrace: [<00000000a633f0b4>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000c415656d>] hsr_add_port+0xe7/0x220 [<00000000f4394609>] hsr_dev_finalize+0x14f/0x233 [<00000000dc8290a8>] hsr_newlink+0xf3/0x140 [<00000000e00fe83e>] __rtnl_newlink+0x892/0xb30 [<00000000903269b9>] rtnl_newlink+0x4e/0x80 [<000000002409410e>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000b4b97855>] netlink_rcv_skb+0x61/0x170 [<000000007c254f2e>] rtnetlink_rcv+0x1d/0x30 [<00000000f1c24382>] netlink_unicast+0x1ec/0x2d0 [<00000000a99685bb>] netlink_sendmsg+0x26a/0x480 [<0000000001bc615e>] sock_sendmsg+0x54/0x70 [<000000006717f307>] __sys_sendto+0x148/0x1f0 [<00000000fc4eea6e>] __x64_sys_sendto+0x2a/0x30 [<0000000087024bc9>] do_syscall_64+0x76/0x1a0 [<00000000e7fa1212>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff8881130bc240 (size 64): comm "syz-executor.0", pid 7147, jiffies 4295035685 (age 99.650s) hex dump (first 32 bytes): d0 48 e8 20 81 88 ff ff 00 02 00 00 00 00 ad de .H. ............ 00 c0 41 15 81 88 ff ff c0 48 e8 20 81 88 ff ff ..A......H. .... backtrace: [<00000000a633f0b4>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000c415656d>] hsr_add_port+0xe7/0x220 [<0000000003339dc5>] hsr_dev_finalize+0x1d1/0x233 [<00000000dc8290a8>] hsr_newlink+0xf3/0x140 [<00000000e00fe83e>] __rtnl_newlink+0x892/0xb30 [<00000000903269b9>] rtnl_newlink+0x4e/0x80 [<000000002409410e>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000b4b97855>] netlink_rcv_skb+0x61/0x170 [<000000007c254f2e>] rtnetlink_rcv+0x1d/0x30 [<00000000f1c24382>] netlink_unicast+0x1ec/0x2d0 [<00000000a99685bb>] netlink_sendmsg+0x26a/0x480 [<0000000001bc615e>] sock_sendmsg+0x54/0x70 [<000000006717f307>] __sys_sendto+0x148/0x1f0 [<00000000fc4eea6e>] __x64_sys_sendto+0x2a/0x30 [<0000000087024bc9>] do_syscall_64+0x76/0x1a0 [<00000000e7fa1212>] entry_SYSCALL_64_after_hwframe+0x44/0xa9