[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 25.611283][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 25.611288][ T24] audit: type=1800 audit(1559752057.004:33): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 25.638862][ T24] audit: type=1800 audit(1559752057.004:34): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 35.512921][ T24] audit: type=1400 audit(1559752066.904:35): avc: denied { map } for pid=6978 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.12' (ECDSA) to the list of known hosts. [ 129.546466][ T24] audit: type=1400 audit(1559752160.944:36): avc: denied { map } for pid=6991 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/05 16:29:21 parsed 1 programs [ 130.501587][ T24] audit: type=1400 audit(1559752161.894:37): avc: denied { map } for pid=6991 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=29 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 130.504019][ T3773] kmemleak: Automatic memory scanning thread ended 2019/06/05 16:29:30 executed programs: 0 [ 139.135085][ T7006] IPVS: ftp: loaded support on port[0] = 21 [ 139.154186][ T7006] chnl_net:caif_netlink_parms(): no params data found [ 139.165810][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.172915][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.180311][ T7006] device bridge_slave_0 entered promiscuous mode [ 139.187632][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.194670][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.201990][ T7006] device bridge_slave_1 entered promiscuous mode [ 139.211080][ T7006] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 139.219849][ T7006] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 139.230517][ T7006] team0: Port device team_slave_0 added [ 139.236523][ T7006] team0: Port device team_slave_1 added [ 139.286646][ T7006] device hsr_slave_0 entered promiscuous mode [ 139.315990][ T7006] device hsr_slave_1 entered promiscuous mode [ 139.368568][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.375623][ T7006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.382889][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.390051][ T7006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.404633][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.412744][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.420506][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.428081][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.443537][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 139.452035][ T7006] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.460030][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.468235][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.475270][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.486111][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.494245][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.501288][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.508895][ T7008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.517600][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.525049][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.534164][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.543150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.552023][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.562250][ T7006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.577215][ T24] audit: type=1400 audit(1559752170.974:38): avc: denied { associate } for pid=7006 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/06/05 16:29:37 executed programs: 1 [ 146.639876][ T7025] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888120f18d00 (size 224): comm "syz-executor.0", pid 7016, jiffies 4294951235 (age 14.080s) hex dump (first 32 bytes): 00 8c f1 20 81 88 ff ff d0 48 5f 0e 81 88 ff ff ... .....H_..... 00 00 00 00 00 00 00 00 00 48 5f 0e 81 88 ff ff .........H_..... backtrace: [<000000003609d5ac>] kmem_cache_alloc_node+0x153/0x2a0 [<000000000a75e89a>] __alloc_skb+0x6e/0x210 [<00000000c3f14625>] sock_wmalloc+0x4f/0x80 [<00000000d80c3e97>] pppoe_sendmsg+0xd0/0x250 [<000000006ce90837>] sock_sendmsg+0x54/0x70 [<000000000cc5d5a6>] ___sys_sendmsg+0x194/0x3c0 [<00000000af5335ac>] __sys_sendmmsg+0xf4/0x270 [<000000007325381d>] __x64_sys_sendmmsg+0x28/0x30 [<00000000ed6c0584>] do_syscall_64+0x76/0x1a0 [<00000000c9444eb3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888120f18c00 (size 224): comm "syz-executor.0", pid 7016, jiffies 4294951235 (age 14.080s) hex dump (first 32 bytes): 00 8b f1 20 81 88 ff ff 00 8d f1 20 81 88 ff ff ... ....... .... 00 00 00 00 00 00 00 00 00 48 5f 0e 81 88 ff ff .........H_..... backtrace: [<000000003609d5ac>] kmem_cache_alloc_node+0x153/0x2a0 [<000000000a75e89a>] __alloc_skb+0x6e/0x210 [<00000000c3f14625>] sock_wmalloc+0x4f/0x80 [<00000000d80c3e97>] pppoe_sendmsg+0xd0/0x250 [<000000006ce90837>] sock_sendmsg+0x54/0x70 [<000000000cc5d5a6>] ___sys_sendmsg+0x194/0x3c0 [<00000000af5335ac>] __sys_sendmmsg+0xf4/0x270 [<000000007325381d>] __x64_sys_sendmmsg+0x28/0x30 [<00000000ed6c0584>] do_syscall_64+0x76/0x1a0 [<00000000c9444eb3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888115641e00 (size 512): comm "syz-executor.0", pid 7016, jiffies 4294951235 (age 14.080s) hex dump (first 32 bytes): 00 01 aa aa aa aa aa 0a aa aa aa aa aa 0a 88 64 ...............d 11 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000b92a1d5f>] kmem_cache_alloc_node_trace+0x15b/0x2a0 [<000000008c9f53b4>] __kmalloc_node_track_caller+0x38/0x50 [<00000000af0e4e45>] __kmalloc_reserve.isra.0+0x40/0xb0 [<00000000c1699b7f>] __alloc_skb+0xa0/0x210 [<00000000c3f14625>] sock_wmalloc+0x4f/0x80 [<00000000d80c3e97>] pppoe_sendmsg+0xd0/0x250 [<000000006ce90837>] sock_sendmsg+0x54/0x70 [<000000000cc5d5a6>] ___sys_sendmsg+0x194/0x3c0 [<00000000af5335ac>] __sys_sendmmsg+0xf4/0x270 [<000000007325381d>] __x64_sys_sendmmsg+0x28/0x30 [<00000000ed6c0584>] do_syscall_64+0x76/0x1a0 [<00000000c9444eb3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888120f18b00 (size 224): comm "syz-executor.0", pid 7016, jiffies 4294951235 (age 14.080s) hex dump (first 32 bytes): d0 48 5f 0e 81 88 ff ff 00 8c f1 20 81 88 ff ff .H_........ .... 00 00 00 00 00 00 00 00 00 48 5f 0e 81 88 ff ff .........H_..... backtrace: [<000000003609d5ac>] kmem_cache_alloc_node+0x153/0x2a0 [<000000000a75e89a>] __alloc_skb+0x6e/0x210 [<00000000c3f14625>] sock_wmalloc+0x4f/0x80 [<00000000d80c3e97>] pppoe_sendmsg+0xd0/0x250 [<000000006ce90837>] sock_sendmsg+0x54/0x70 [<000000000cc5d5a6>] ___sys_sendmsg+0x194/0x3c0 [<00000000af5335ac>] __sys_sendmmsg+0xf4/0x270 [<000000007325381d>] __x64_sys_sendmmsg+0x28/0x30 [<00000000ed6c0584>] do_syscall_64+0x76/0x1a0 [<00000000c9444eb3>] entry_SYSCALL_64_after_hwframe+0x44/0xa9