[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 24.838607][ T24] audit: type=1800 audit(1562117866.475:33): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 24.860571][ T24] audit: type=1800 audit(1562117866.475:34): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.216917][ T24] audit: type=1400 audit(1562117878.845:35): avc: denied { map } for pid=7029 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.44' (ECDSA) to the list of known hosts. [ 69.436511][ T24] audit: type=1400 audit(1562117911.065:36): avc: denied { map } for pid=7042 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/03 01:38:32 parsed 1 programs [ 70.730773][ T24] audit: type=1400 audit(1562117912.365:37): avc: denied { map } for pid=7042 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16134 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 71.311277][ T3772] kmemleak: Automatic memory scanning thread ended [ 73.837466][ T7055] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2019/07/03 01:38:41 executed programs: 0 [ 79.929809][ T7058] IPVS: ftp: loaded support on port[0] = 21 [ 79.949247][ T7058] chnl_net:caif_netlink_parms(): no params data found [ 79.961346][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.968477][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.975744][ T7058] device bridge_slave_0 entered promiscuous mode [ 79.982453][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.989493][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.996688][ T7058] device bridge_slave_1 entered promiscuous mode [ 80.005757][ T7058] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 80.014402][ T7058] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 80.025082][ T7058] team0: Port device team_slave_0 added [ 80.030937][ T7058] team0: Port device team_slave_1 added [ 80.078583][ T7058] device hsr_slave_0 entered promiscuous mode [ 80.118177][ T7058] device hsr_slave_1 entered promiscuous mode [ 80.160101][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.167129][ T7058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.174358][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.181386][ T7058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.196149][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.204249][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.221988][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.229955][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.237281][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.245826][ T7058] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.253442][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.261687][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.268714][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.281488][ T7058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.291884][ T7058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.302774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.311258][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.318307][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.325784][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.333828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.341827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.349758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.357699][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.365121][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.375102][ T7058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.390501][ T24] audit: type=1400 audit(1562117922.025:38): avc: denied { associate } for pid=7058 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/07/03 01:38:48 executed programs: 1 2019/07/03 01:38:54 executed programs: 3 2019/07/03 01:39:00 executed programs: 5 2019/07/03 01:39:07 executed programs: 7 2019/07/03 01:39:13 executed programs: 9 2019/07/03 01:39:19 executed programs: 11 2019/07/03 01:39:26 executed programs: 13 2019/07/03 01:39:32 executed programs: 15 2019/07/03 01:39:38 executed programs: 17 2019/07/03 01:39:45 executed programs: 19 2019/07/03 01:39:45 result: hanged=false err=executor 0: exit status 67 setns(netns) failedsetns(netns) failedsetns(netns) failed (errno 9) child failed (errno 0) loop exited with status 67 setns(netns) failedsetns(netns) failedsetns(netns) failed (errno 9) child failed (errno 0) loop exited with status 67 [ 143.745651][ T7177] IPVS: ftp: loaded support on port[0] = 21 [ 143.767096][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 143.779713][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.786797][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.794217][ T7177] device bridge_slave_0 entered promiscuous mode [ 143.800943][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.807998][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.815236][ T7177] device bridge_slave_1 entered promiscuous mode [ 143.832016][ T7177] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.840702][ T7177] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.851614][ T7177] team0: Port device team_slave_0 added [ 143.857593][ T7177] team0: Port device team_slave_1 added [ 143.908718][ T7177] device hsr_slave_0 entered promiscuous mode [ 143.938030][ T7177] device hsr_slave_1 entered promiscuous mode [ 143.994251][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.001336][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.008561][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.015659][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.030330][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.038564][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.046180][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.054116][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.066544][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.074261][ T3021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.082489][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.089519][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.102029][ T7177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.112497][ T7177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.123659][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.131956][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.138993][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.146789][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.154860][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.162891][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.170852][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.178801][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.186066][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.200130][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.489239][ T7] device bridge_slave_1 left promiscuous mode [ 144.495386][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.609626][ T7] device bridge_slave_0 left promiscuous mode [ 144.615919][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.859920][ T7] device hsr_slave_1 left promiscuous mode [ 144.919586][ T7] device hsr_slave_0 left promiscuous mode [ 144.949494][ T7] team0 (unregistering): Port device team_slave_1 removed [ 144.958267][ T7] team0 (unregistering): Port device team_slave_0 removed [ 144.966535][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 145.059160][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 145.086457][ T7] bond0 (unregistering): Released all slaves 2019/07/03 01:39:50 executed programs: 21 [ 150.552409][ T7199] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88812a2d56c0 (size 64): comm "softirq", pid 0, jiffies 4294945270 (age 77.510s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 e0 5c 09 1d 81 88 ff ff .........\...... 00 00 00 00 00 00 00 00 e0 c3 15 83 ff ff ff ff ................ backtrace: [<000000000b9f88e0>] kmem_cache_alloc_trace+0x13d/0x280 [<000000005f05952b>] batadv_tvlv_handler_register+0xae/0x140 [<000000005f0e0b80>] batadv_tt_init+0x78/0x180 [<00000000913d8d1e>] batadv_mesh_init+0x196/0x230 [<000000003919ec2a>] batadv_softif_init_late+0x1ca/0x220 [<00000000ec83f2db>] register_netdevice+0xbf/0x600 [<000000002208f273>] __rtnl_newlink+0xaca/0xb30 [<00000000c208f789>] rtnl_newlink+0x4e/0x80 [<00000000fe5b63dd>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000224e7d21>] netlink_rcv_skb+0x61/0x170 [<000000000b42fa0e>] rtnetlink_rcv+0x1d/0x30 [<00000000156f1f10>] netlink_unicast+0x1ec/0x2d0 [<000000005a92676d>] netlink_sendmsg+0x26a/0x480 [<00000000d5c0c003>] sock_sendmsg+0x54/0x70 [<0000000052c0981a>] __sys_sendto+0x148/0x1f0 [<0000000067ae9df2>] __x64_sys_sendto+0x2a/0x30 BUG: memory leak unreferenced object 0xffff888128839080 (size 128): comm "syz-executor.0", pid 7058, jiffies 4294945279 (age 77.420s) hex dump (first 32 bytes): f0 78 28 1d 81 88 ff ff f0 78 28 1d 81 88 ff ff .x(......x(..... 56 3e 41 90 13 bb b2 e4 c8 c6 00 b6 00 00 00 00 V>A............. backtrace: [<000000000b9f88e0>] kmem_cache_alloc_trace+0x13d/0x280 [<0000000046c99dff>] hsr_create_self_node+0x42/0x150 [<000000009cc0b3d5>] hsr_dev_finalize+0xa4/0x233 [<000000000ff964ee>] hsr_newlink+0xf3/0x140 [<00000000811849d6>] __rtnl_newlink+0x892/0xb30 [<00000000c208f789>] rtnl_newlink+0x4e/0x80 [<00000000fe5b63dd>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000224e7d21>] netlink_rcv_skb+0x61/0x170 [<000000000b42fa0e>] rtnetlink_rcv+0x1d/0x30 [<00000000156f1f10>] netlink_unicast+0x1ec/0x2d0 [<000000005a92676d>] netlink_sendmsg+0x26a/0x480 [<00000000d5c0c003>] sock_sendmsg+0x54/0x70 [<0000000052c0981a>] __sys_sendto+0x148/0x1f0 [<0000000067ae9df2>] __x64_sys_sendto+0x2a/0x30 [<0000000077832cd8>] do_syscall_64+0x76/0x1a0 [<0000000002db0f36>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff88811acd0d40 (size 64): comm "syz-executor.0", pid 7058, jiffies 4294945279 (age 77.420s) hex dump (first 32 bytes): 40 8a 20 1e 81 88 ff ff 00 02 00 00 00 00 ad de @. ............. 00 70 28 1d 81 88 ff ff c0 78 28 1d 81 88 ff ff .p(......x(..... backtrace: [<000000000b9f88e0>] kmem_cache_alloc_trace+0x13d/0x280 [<000000002460a0a1>] hsr_add_port+0xe7/0x220 [<0000000058a02ea3>] hsr_dev_finalize+0x14f/0x233 [<000000000ff964ee>] hsr_newlink+0xf3/0x140 [<00000000811849d6>] __rtnl_newlink+0x892/0xb30 [<00000000c208f789>] rtnl_newlink+0x4e/0x80 [<00000000fe5b63dd>] rtnetlink_rcv_msg+0x178/0x4b0 [<00000000224e7d21>] netlink_rcv_skb+0x61/0x170 [<000000000b42fa0e>] rtnetlink_rcv+0x1d/0x30 [<00000000156f1f10>] netlink_unicast+0x1ec/0x2d0 [<000000005a92676d>] netlink_sendmsg+0x26a/0x480 [<00000000d5c0c003>] sock_sendmsg+0x54/0x70 [<0000000052c0981a>] __sys_sendto+0x148/0x1f0 [<0000000067ae9df2>] __x64_sys_sendto+0x2a/0x30 [<0000000077832cd8>] do_syscall_64+0x76/0x1a0 [<0000000002db0f36>] entry_SYSCALL_64_after_hwframe+0x44/0xa9