[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 25.207214][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 25.207220][ T24] audit: type=1800 audit(1560619130.122:33): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 25.245195][ T24] audit: type=1800 audit(1560619130.132:34): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog restorecond ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 33.453900][ T24] audit: type=1400 audit(1560619138.372:35): avc: denied { map } for pid=6912 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. [ 39.413414][ T24] audit: type=1400 audit(1560619144.332:36): avc: denied { map } for pid=6926 comm="syz-executor855" path="/root/syz-executor855338977" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.320300][ T6927] IPVS: ftp: loaded support on port[0] = 21 [ 46.340304][ T6927] chnl_net:caif_netlink_parms(): no params data found [ 46.352194][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.359466][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.366696][ T6927] device bridge_slave_0 entered promiscuous mode [ 46.374359][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.381609][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.388930][ T6927] device bridge_slave_1 entered promiscuous mode [ 46.397987][ T6927] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 46.406838][ T6927] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 46.417907][ T6927] team0: Port device team_slave_0 added [ 46.423865][ T6927] team0: Port device team_slave_1 added [ 46.468965][ T6927] device hsr_slave_0 entered promiscuous mode [ 46.508253][ T6927] device hsr_slave_1 entered promiscuous mode [ 46.560132][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.567445][ T6927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.574891][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.581910][ T6927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.595509][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.603266][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.610946][ T3040] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.619167][ T3040] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.626401][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 46.635086][ T6927] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.653088][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.661330][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.668360][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.680438][ T6927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.691015][ T6927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.702217][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.710743][ T6929] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.717737][ T6929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.725294][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.733750][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.742071][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.749985][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.757838][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.765428][ T6929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.775181][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0 executing program [ 46.791612][ T24] audit: type=1400 audit(1560619151.712:37): avc: denied { associate } for pid=6927 comm="syz-executor855" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 46.821938][ T6936] sg_write: data in/out 327769/1 bytes for SCSI command 0x0-- guessing data in; [ 46.821938][ T6936] program syz-executor855 not setting count and/or reply_len properly executing program [ 52.076832][ T6937] sg_write: data in/out 327769/1 bytes for SCSI command 0x0-- guessing data in; [ 52.076832][ T6937] program syz-executor855 not setting count and/or reply_len properly executing program [ 58.181159][ T6938] sg_write: data in/out 327769/1 bytes for SCSI command 0x0-- guessing data in; [ 58.181159][ T6938] program syz-executor855 not setting count and/or reply_len properly executing program [ 64.266104][ T6939] sg_write: data in/out 327769/1 bytes for SCSI command 0x0-- guessing data in; [ 64.266104][ T6939] program syz-executor855 not setting count and/or reply_len properly [ 71.495074][ T3774] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff8881204d7800 (size 2048): comm "syz-executor855", pid 6936, jiffies 4294941958 (age 26.780s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 20 00 00 00 02 01 00 00 00 00 00 00 08 00 00 00 ............... backtrace: [<00000000c5e27070>] __kmalloc+0x161/0x2c0 [<000000004415e750>] bio_alloc_bioset+0x1b8/0x2c0 [<000000002da58d1d>] bio_copy_user_iov+0x113/0x4a0 [<00000000b4b23d95>] blk_rq_map_user_iov+0xc6/0x2b0 [<00000000edad5f7e>] blk_rq_map_user+0x71/0xb0 [<00000000c94723b5>] sg_common_write.isra.0+0x619/0xa10 [<00000000b11f3605>] sg_write.part.0+0x325/0x570 [<00000000aba41953>] sg_write+0x44/0x64 [<00000000afecd177>] __vfs_write+0x43/0xa0 [<00000000de690898>] vfs_write+0xee/0x210 [<00000000705a35b0>] ksys_write+0x7c/0x130 [<000000009efb9e6c>] __x64_sys_write+0x1e/0x30 [<00000000f9e48771>] do_syscall_64+0x76/0x1a0 [<00000000d5cff9fc>] entry_SYSCALL_64_after_hwframe+0x44/0xa9