[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 27.842787][ T24] audit: type=1800 audit(1562638670.972:33): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 27.864579][ T24] audit: type=1800 audit(1562638670.972:34): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.158554][ T24] audit: type=1400 audit(1562638677.282:35): avc: denied { map } for pid=7137 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. [ 40.120601][ T24] audit: type=1400 audit(1562638683.252:36): avc: denied { map } for pid=7151 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/07/09 02:18:04 parsed 1 programs [ 41.020859][ T24] audit: type=1400 audit(1562638684.152:37): avc: denied { map } for pid=7151 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16137 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 41.022443][ T3785] kmemleak: Automatic memory scanning thread ended 2019/07/09 02:18:12 executed programs: 0 [ 49.739001][ T7166] IPVS: ftp: loaded support on port[0] = 21 [ 49.758546][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 49.770732][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.777896][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.785124][ T7166] device bridge_slave_0 entered promiscuous mode [ 49.791704][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.798712][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.806125][ T7166] device bridge_slave_1 entered promiscuous mode [ 49.814941][ T7166] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.823430][ T7166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.833818][ T7166] team0: Port device team_slave_0 added [ 49.839661][ T7166] team0: Port device team_slave_1 added [ 49.879753][ T7166] device hsr_slave_0 entered promiscuous mode [ 49.909080][ T7166] device hsr_slave_1 entered promiscuous mode [ 49.961009][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.968039][ T7166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.975233][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.982236][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.996192][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.004113][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.021767][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.029024][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.036202][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 50.044369][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.052044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.060234][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.067236][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.075071][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.083274][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.090299][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.099971][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.108105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.116087][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.124949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.133656][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.142003][ T7166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.151577][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.167613][ T24] audit: type=1400 audit(1562638693.292:38): avc: denied { associate } for pid=7166 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 2019/07/09 02:18:19 executed programs: 1 [ 56.256045][ T7166] cgroup: fork rejected by pids controller in /syz0 2019/07/09 02:18:19 result: hanged=false err=executor 0: exit status 67 clone failed (errno 11) loop exited with status 67 clone failed (errno 11) loop exited with status 67 [ 56.335660][ T7181] IPVS: ftp: loaded support on port[0] = 21 [ 56.354963][ T7181] chnl_net:caif_netlink_parms(): no params data found [ 56.367074][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.374564][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.381953][ T7181] device bridge_slave_0 entered promiscuous mode [ 56.388524][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.395579][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.402934][ T7181] device bridge_slave_1 entered promiscuous mode [ 56.418918][ T7181] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.428064][ T7181] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.439583][ T7181] team0: Port device team_slave_0 added [ 56.445775][ T7181] team0: Port device team_slave_1 added [ 56.479747][ T7181] device hsr_slave_0 entered promiscuous mode [ 56.529069][ T7181] device hsr_slave_1 entered promiscuous mode [ 56.564644][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.571956][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.579629][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.586883][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.600501][ T7181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.608546][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.616438][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.624126][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.635921][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.643304][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.651859][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.658877][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.670797][ T7181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.681541][ T7181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.692489][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.700914][ T7170] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.707927][ T7170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.715379][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.723631][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.731602][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.739469][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.747311][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.754545][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.768574][ T7181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.060203][ T20] device bridge_slave_1 left promiscuous mode [ 57.066592][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.110130][ T20] device bridge_slave_0 left promiscuous mode [ 57.116265][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.350322][ T20] device hsr_slave_1 left promiscuous mode [ 57.510521][ T20] device hsr_slave_0 left promiscuous mode [ 57.590020][ T20] team0 (unregistering): Port device team_slave_1 removed [ 57.598208][ T20] team0 (unregistering): Port device team_slave_0 removed [ 57.606420][ T20] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 57.640251][ T20] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 57.773486][ T20] bond0 (unregistering): Released all slaves 2019/07/09 02:18:25 executed programs: 3 2019/07/09 02:18:25 result: hanged=false err=executor 0: exit status 67 clone failed (errno 11) loop exited with status 67 clone failed (errno 11) loop exited with status 67 [ 62.864760][ T7194] IPVS: ftp: loaded support on port[0] = 21 [ 62.883275][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 62.894618][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.902029][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.909385][ T7194] device bridge_slave_0 entered promiscuous mode [ 62.915942][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.923014][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.930267][ T7194] device bridge_slave_1 entered promiscuous mode [ 62.946098][ T7194] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.954684][ T7194] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.965310][ T7194] team0: Port device team_slave_0 added [ 62.971197][ T7194] team0: Port device team_slave_1 added [ 63.009448][ T7194] device hsr_slave_0 entered promiscuous mode [ 63.079133][ T7194] device hsr_slave_1 entered promiscuous mode [ 63.144479][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.151531][ T7194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.158730][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.165767][ T7194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.179959][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.188057][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.195570][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.203257][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.216490][ T7194] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.224009][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.232250][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.239285][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.254411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.262537][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.269550][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.277069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.285079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.298570][ T7170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.308435][ T7194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.318814][ T7194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.329778][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.337660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.345649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.360653][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.540181][ T2748] device bridge_slave_1 left promiscuous mode [ 63.546357][ T2748] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.650035][ T2748] device bridge_slave_0 left promiscuous mode [ 63.656182][ T2748] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.980622][ T2748] device hsr_slave_1 left promiscuous mode [ 64.140285][ T2748] device hsr_slave_0 left promiscuous mode [ 64.170211][ T2748] team0 (unregistering): Port device team_slave_1 removed [ 64.178292][ T2748] team0 (unregistering): Port device team_slave_0 removed [ 64.186326][ T2748] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 64.302424][ T7203] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 64.311000][ T2748] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 64.382789][ T2748] bond0 (unregistering): Released all slaves [ 70.949948][ T7203] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888105763340 (size 64): comm "softirq", pid 0, jiffies 4294942252 (age 21.240s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 e0 bc f2 06 81 88 ff ff ................ 00 00 00 00 00 00 00 00 30 20 16 83 ff ff ff ff ........0 ...... backtrace: [<000000001a855b53>] kmem_cache_alloc_trace+0x13d/0x280 [<0000000056d05036>] batadv_tvlv_handler_register+0xae/0x140 [<00000000069eb61c>] batadv_tt_init+0x78/0x180 [<0000000088b29c08>] batadv_mesh_init+0x196/0x230 [<0000000057637219>] batadv_softif_init_late+0x1ca/0x220 [<0000000096bf4db0>] register_netdevice+0xbf/0x600 [<000000009100a5e3>] __rtnl_newlink+0xaca/0xb30 [<0000000056b994bb>] rtnl_newlink+0x4e/0x80 [<000000002790797e>] rtnetlink_rcv_msg+0x178/0x4b0 [<0000000044abfb1d>] netlink_rcv_skb+0x61/0x170 [<00000000dd9355d8>] rtnetlink_rcv+0x1d/0x30 [<0000000049c20266>] netlink_unicast+0x1ec/0x2d0 [<00000000e32cfd7a>] netlink_sendmsg+0x26a/0x480 [<00000000d5a37797>] sock_sendmsg+0x54/0x70 [<00000000963041a1>] __sys_sendto+0x148/0x1f0 [<00000000eedb20e3>] __x64_sys_sendto+0x2a/0x30 BUG: memory leak unreferenced object 0xffff88811e16a700 (size 128): comm "syz-executor.0", pid 7166, jiffies 4294942260 (age 21.160s) hex dump (first 32 bytes): f0 98 f5 0d 81 88 ff ff f0 98 f5 0d 81 88 ff ff ................ f6 a3 15 69 a3 93 66 33 30 ee 27 1e 00 00 00 00 ...i..f30.'..... backtrace: [<000000001a855b53>] kmem_cache_alloc_trace+0x13d/0x280 [<0000000043d1b041>] hsr_create_self_node+0x42/0x150 [<00000000dd6504f4>] hsr_dev_finalize+0xa4/0x233 [<00000000716fa826>] hsr_newlink+0xf3/0x140 [<000000000dec7984>] __rtnl_newlink+0x892/0xb30 [<0000000056b994bb>] rtnl_newlink+0x4e/0x80 [<000000002790797e>] rtnetlink_rcv_msg+0x178/0x4b0 [<0000000044abfb1d>] netlink_rcv_skb+0x61/0x170 [<00000000dd9355d8>] rtnetlink_rcv+0x1d/0x30 [<0000000049c20266>] netlink_unicast+0x1ec/0x2d0 [<00000000e32cfd7a>] netlink_sendmsg+0x26a/0x480 [<00000000d5a37797>] sock_sendmsg+0x54/0x70 [<00000000963041a1>] __sys_sendto+0x148/0x1f0 [<00000000eedb20e3>] __x64_sys_sendto+0x2a/0x30 [<000000003f65ef24>] do_syscall_64+0x76/0x1a0 [<00000000c698284e>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff888120d21f00 (size 64): comm "syz-executor.0", pid 7166, jiffies 4294942260 (age 21.160s) hex dump (first 32 bytes): 80 cd c4 08 81 88 ff ff 00 02 00 00 00 00 ad de ................ 00 90 f5 0d 81 88 ff ff c0 98 f5 0d 81 88 ff ff ................ backtrace: [<000000001a855b53>] kmem_cache_alloc_trace+0x13d/0x280 [<00000000659ea261>] hsr_add_port+0xe7/0x220 [<0000000006c83eab>] hsr_dev_finalize+0x14f/0x233 [<00000000716fa826>] hsr_newlink+0xf3/0x140 [<000000000dec7984>] __rtnl_newlink+0x892/0xb30 [<0000000056b994bb>] rtnl_newlink+0x4e/0x80 [<000000002790797e>] rtnetlink_rcv_msg+0x178/0x4b0 [<0000000044abfb1d>] netlink_rcv_skb+0x61/0x170 [<00000000dd9355d8>] rtnetlink_rcv+0x1d/0x30 [<0000000049c20266>] netlink_unicast+0x1ec/0x2d0 [<00000000e32cfd7a>] netlink_sendmsg+0x26a/0x480 [<00000000d5a37797>] sock_sendmsg+0x54/0x70 [<00000000963041a1>] __sys_sendto+0x148/0x1f0 [<00000000eedb20e3>] __x64_sys_sendto+0x2a/0x30 [<000000003f65ef24>] do_syscall_64+0x76/0x1a0 [<00000000c698284e>] entry_SYSCALL_64_after_hwframe+0x44/0xa9