[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context mai[ 27.059913][ T24] audit: type=1800 audit(1562714454.792:33): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 ntaining daemon:[ 27.082152][ T24] audit: type=1800 audit(1562714454.792:34): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 49.950812][ T24] audit: type=1400 audit(1562714477.682:35): avc: denied { map } for pid=7019 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.106' (ECDSA) to the list of known hosts. [ 55.973710][ T24] audit: type=1400 audit(1562714483.702:36): avc: denied { map } for pid=7031 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/09 23:21:24 parsed 1 programs [ 56.992020][ T24] audit: type=1400 audit(1562714484.722:37): avc: denied { map } for pid=7031 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=79 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 56.994116][ T3783] kmemleak: Automatic memory scanning thread ended 2019/07/09 23:21:33 executed programs: 0 [ 65.514387][ T7047] IPVS: ftp: loaded support on port[0] = 21 [ 65.532781][ T7047] chnl_net:caif_netlink_parms(): no params data found [ 65.544142][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.551243][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.559025][ T7047] device bridge_slave_0 entered promiscuous mode [ 65.565727][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.572860][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.580082][ T7047] device bridge_slave_1 entered promiscuous mode [ 65.588898][ T7047] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 65.597882][ T7047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 65.608444][ T7047] team0: Port device team_slave_0 added [ 65.614312][ T7047] team0: Port device team_slave_1 added [ 65.657905][ T7047] device hsr_slave_0 entered promiscuous mode [ 65.707234][ T7047] device hsr_slave_1 entered promiscuous mode [ 65.769058][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.776096][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.783353][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.790368][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.803929][ T7047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.811889][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.819386][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.836791][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.844912][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.853380][ T7047] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.861201][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.869325][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.876324][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.887516][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.895780][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.902840][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.910867][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.919065][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.927094][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.935014][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.944034][ T7047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.954689][ T7047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.962287][ T3065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.972453][ T7047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.987822][ T24] audit: type=1400 audit(1562714493.722:38): avc: denied { associate } for pid=7047 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 67.227501][ T27] device bridge_slave_1 left promiscuous mode [ 67.234269][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.287387][ T27] device bridge_slave_0 left promiscuous mode [ 67.293497][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.507786][ T27] device hsr_slave_1 left promiscuous mode [ 67.547929][ T27] device hsr_slave_0 left promiscuous mode [ 67.607948][ T27] team0 (unregistering): Port device team_slave_1 removed [ 67.615888][ T27] team0 (unregistering): Port device team_slave_0 removed [ 67.623743][ T27] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 67.687991][ T27] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 67.730809][ T27] bond0 (unregistering): Released all slaves 2019/07/09 23:21:39 executed programs: 1 2019/07/09 23:21:39 result: hanged=false err=executor 0: failed to write control pipe: write |1: broken pipe umount(./0/file0) failed (errno 22) loop exited with status 0 [ 71.990118][ T7059] IPVS: ftp: loaded support on port[0] = 21 [ 72.008262][ T7059] chnl_net:caif_netlink_parms(): no params data found [ 72.019814][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.026848][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.034834][ T7059] device bridge_slave_0 entered promiscuous mode [ 72.041602][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.048648][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.055860][ T7059] device bridge_slave_1 entered promiscuous mode [ 72.064754][ T7059] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 72.073371][ T7059] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 72.083826][ T7059] team0: Port device team_slave_0 added [ 72.089714][ T7059] team0: Port device team_slave_1 added [ 72.117838][ T7059] device hsr_slave_0 entered promiscuous mode [ 72.157263][ T7059] device hsr_slave_1 entered promiscuous mode [ 72.229021][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.236150][ T7059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.243403][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.250440][ T7059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.263646][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.271539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.279110][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.286403][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.293978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 72.302893][ T7059] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.310555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.318801][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.325802][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.337868][ T7059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.348265][ T7059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.359184][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.367758][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.374770][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.382332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.390601][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.398651][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.406642][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.414553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.422014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.433642][ T7059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.415444][ T7068] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 73.557455][ T2762] device bridge_slave_1 left promiscuous mode [ 73.563576][ T2762] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.617374][ T2762] device bridge_slave_0 left promiscuous mode [ 73.623477][ T2762] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.787792][ T2762] device hsr_slave_1 left promiscuous mode [ 73.837907][ T2762] device hsr_slave_0 left promiscuous mode [ 73.877881][ T2762] team0 (unregistering): Port device team_slave_1 removed [ 73.885731][ T2762] team0 (unregistering): Port device team_slave_0 removed [ 73.893465][ T2762] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 73.927834][ T2762] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 73.990969][ T2762] bond0 (unregistering): Released all slaves [ 80.615040][ T7068] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88810acb6d80 (size 64): comm "softirq", pid 0, jiffies 4294943827 (age 15.150s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 e0 0c 45 0f 81 88 ff ff ..........E..... 00 00 00 00 00 00 00 00 00 41 16 83 ff ff ff ff .........A...... backtrace: [<0000000057c9261c>] kmem_cache_alloc_trace+0x13d/0x280 [<0000000037021dbd>] batadv_tvlv_handler_register+0xa3/0x170 [<0000000051752d93>] batadv_tt_init+0x78/0x180 [<0000000094854548>] batadv_mesh_init+0x196/0x230 [<00000000eda83bef>] batadv_softif_init_late+0x1ca/0x220 [<00000000607c6da3>] register_netdevice+0xbf/0x600 [<00000000c7d8b882>] __rtnl_newlink+0xaca/0xb30 [<00000000e8d034b6>] rtnl_newlink+0x4e/0x80 [<000000000dab6085>] rtnetlink_rcv_msg+0x178/0x4b0 [<000000006cfba0e2>] netlink_rcv_skb+0x61/0x170 [<00000000d55a962d>] rtnetlink_rcv+0x1d/0x30 [<00000000ecf2a2c5>] netlink_unicast+0x1ec/0x2d0 [<00000000b6ac9d0c>] netlink_sendmsg+0x26a/0x480 [<00000000835db684>] sock_sendmsg+0x54/0x70 [<00000000048606d7>] __sys_sendto+0x148/0x1f0 [<00000000d84f7b78>] __x64_sys_sendto+0x2a/0x30 BUG: memory leak unreferenced object 0xffff888120f9be00 (size 128): comm "syz-executor.0", pid 7047, jiffies 4294943835 (age 15.070s) hex dump (first 32 bytes): f0 48 c7 11 81 88 ff ff f0 48 c7 11 81 88 ff ff .H.......H...... e2 bc 3f c9 e8 93 1e b5 0d 50 c7 ea 00 00 00 00 ..?......P...... backtrace: [<0000000057c9261c>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000708efa5f>] hsr_create_self_node+0x42/0x150 [<00000000df86dd50>] hsr_dev_finalize+0xa4/0x233 [<0000000008b7b439>] hsr_newlink+0xf3/0x140 [<000000003f14855c>] __rtnl_newlink+0x892/0xb30 [<00000000e8d034b6>] rtnl_newlink+0x4e/0x80 [<000000000dab6085>] rtnetlink_rcv_msg+0x178/0x4b0 [<000000006cfba0e2>] netlink_rcv_skb+0x61/0x170 [<00000000d55a962d>] rtnetlink_rcv+0x1d/0x30 [<00000000ecf2a2c5>] netlink_unicast+0x1ec/0x2d0 [<00000000b6ac9d0c>] netlink_sendmsg+0x26a/0x480 [<00000000835db684>] sock_sendmsg+0x54/0x70 [<00000000048606d7>] __sys_sendto+0x148/0x1f0 [<00000000d84f7b78>] __x64_sys_sendto+0x2a/0x30 [<00000000b7a07afc>] do_syscall_64+0x76/0x1a0 [<00000000454b2759>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888115d93900 (size 64): comm "syz-executor.0", pid 7047, jiffies 4294943835 (age 15.070s) hex dump (first 32 bytes): 40 e3 17 20 81 88 ff ff 00 02 00 00 00 00 ad de @.. ............ 00 40 c7 11 81 88 ff ff c0 48 c7 11 81 88 ff ff .@.......H...... backtrace: [<0000000057c9261c>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000c40b1e82>] hsr_add_port+0xe7/0x220 [<00000000a9599646>] hsr_dev_finalize+0x14f/0x233 [<0000000008b7b439>] hsr_newlink+0xf3/0x140 [<000000003f14855c>] __rtnl_newlink+0x892/0xb30 [<00000000e8d034b6>] rtnl_newlink+0x4e/0x80 [<000000000dab6085>] rtnetlink_rcv_msg+0x178/0x4b0 [<000000006cfba0e2>] netlink_rcv_skb+0x61/0x170 [<00000000d55a962d>] rtnetlink_rcv+0x1d/0x30 [<00000000ecf2a2c5>] netlink_unicast+0x1ec/0x2d0 [<00000000b6ac9d0c>] netlink_sendmsg+0x26a/0x480 [<00000000835db684>] sock_sendmsg+0x54/0x70 [<00000000048606d7>] __sys_sendto+0x148/0x1f0 [<00000000d84f7b78>] __x64_sys_sendto+0x2a/0x30 [<00000000b7a07afc>] do_syscall_64+0x76/0x1a0 [<00000000454b2759>] entry_SYSCALL_64_after_hwframe+0x44/0xa9