[ 24.760337][ T25] audit: type=1400 audit(1570793756.703:37): avc: denied { watch } for pid=6844 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 24.792478][ T25] audit: type=1400 audit(1570793756.703:38): avc: denied { watch } for pid=6844 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 24.932638][ T25] audit: type=1800 audit(1570793756.873:39): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 24.954711][ T25] audit: type=1800 audit(1570793756.873:40): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.060452][ T25] audit: type=1400 audit(1570793766.003:41): avc: denied { map } for pid=6909 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. [ 39.902201][ T25] audit: type=1400 audit(1570793771.843:42): avc: denied { map } for pid=6923 comm="syz-executor402" path="/root/syz-executor402046167" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.696608][ T6924] IPVS: ftp: loaded support on port[0] = 21 [ 46.715728][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 46.727523][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.735099][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.742604][ T6924] device bridge_slave_0 entered promiscuous mode [ 46.749968][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.757042][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.764397][ T6924] device bridge_slave_1 entered promiscuous mode [ 46.773595][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.783542][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.795259][ T6924] team0: Port device team_slave_0 added [ 46.801697][ T6924] team0: Port device team_slave_1 added [ 46.847540][ T6924] device hsr_slave_0 entered promiscuous mode [ 46.887010][ T6924] device hsr_slave_1 entered promiscuous mode [ 46.948892][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.956240][ T6924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.964585][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.972103][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.986369][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.994786][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.003283][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.011283][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.019439][ T3536] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.028169][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.047432][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.056145][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.063376][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.071153][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.080599][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.087835][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.100042][ T6924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.110472][ T6924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.121889][ T6926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.130388][ T6926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.138580][ T6926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready executing program [ 47.146955][ T6926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.155107][ T6926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.162811][ T6926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.172257][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.188890][ T25] audit: type=1400 audit(1570793779.133:43): avc: denied { create } for pid=6924 comm="syz-executor402" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 47.189551][ T6924] netlink: 'syz-executor402': attribute type 2 has an invalid length. [ 47.214297][ T25] audit: type=1400 audit(1570793779.133:44): avc: denied { write } for pid=6924 comm="syz-executor402" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 48.607288][ T22] device bridge_slave_1 left promiscuous mode [ 48.613818][ T22] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.657199][ T22] device bridge_slave_0 left promiscuous mode [ 48.663617][ T22] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.857732][ T22] device hsr_slave_0 left promiscuous mode [ 48.897007][ T22] device hsr_slave_1 left promiscuous mode [ 48.978376][ T22] team0 (unregistering): Port device team_slave_1 removed [ 48.986399][ T22] team0 (unregistering): Port device team_slave_0 removed [ 48.994423][ T22] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.047634][ T22] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.100591][ T22] bond0 (unregistering): Released all slaves [ 53.116059][ T6923] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88811559a180 (size 128): comm "syz-executor402", pid 6924, jiffies 4294941994 (age 7.880s) hex dump (first 32 bytes): 00 70 e2 0d 81 88 ff ff 00 a0 59 15 81 88 ff ff .p........Y..... c0 41 97 1e 81 88 ff ff 00 00 00 00 00 00 00 00 .A.............. backtrace: [<000000002a43c3e1>] kmem_cache_alloc_trace+0x145/0x2c0 [<0000000044ddd296>] ovs_vport_alloc+0x37/0xf0 [<000000005958364c>] internal_dev_create+0x24/0x1d0 [<0000000065abec7e>] ovs_vport_add+0x81/0x190 [<0000000034c8894b>] new_vport+0x19/0x80 [<00000000eca34070>] ovs_dp_cmd_new+0x290/0x410 [<00000000907b1b59>] genl_family_rcv_msg+0x2ab/0x5b0 [<00000000db687761>] genl_rcv_msg+0x54/0xa0 [<00000000fe1bc12a>] netlink_rcv_skb+0x61/0x170 [<00000000a6421134>] genl_rcv+0x29/0x40 [<00000000c0b20a19>] netlink_unicast+0x1ec/0x2d0 [<00000000efa10776>] netlink_sendmsg+0x270/0x480 [<000000005d682fb1>] sock_sendmsg+0x54/0x70 [<00000000b3e68b95>] ___sys_sendmsg+0x393/0x3c0 [<0000000056e229c6>] __sys_sendmsg+0x80/0xf0 [<000000002b6fc10d>] __x64_sys_sendmsg+0x23/0x30 BUG: memory leak unreferenced object 0xffff88811e9741c0 (size 64): comm "syz-executor402", pid 6924, jiffies 4294941994 (age 7.880s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 08 42 97 1e 81 88 ff ff .........B...... 00 00 00 00 00 00 00 00 02 00 00 00 05 35 82 c1 .............5.. backtrace: [<0000000097af1f1e>] __kmalloc+0x169/0x300 [<000000007082331a>] ovs_vport_set_upcall_portids+0x54/0xd0 [<00000000ea962120>] ovs_vport_alloc+0x7f/0xf0 [<000000005958364c>] internal_dev_create+0x24/0x1d0 [<0000000065abec7e>] ovs_vport_add+0x81/0x190 [<0000000034c8894b>] new_vport+0x19/0x80 [<00000000eca34070>] ovs_dp_cmd_new+0x290/0x410 [<00000000907b1b59>] genl_family_rcv_msg+0x2ab/0x5b0 [<00000000db687761>] genl_rcv_msg+0x54/0xa0 [<00000000fe1bc12a>] netlink_rcv_skb+0x61/0x170 [<00000000a6421134>] genl_rcv+0x29/0x40 [<00000000c0b20a19>] netlink_unicast+0x1ec/0x2d0 [<00000000efa10776>] netlink_sendmsg+0x270/0x480 [<000000005d682fb1>] sock_sendmsg+0x54/0x70 [<00000000b3e68b95>] ___sys_sendmsg+0x393/0x3c0 [<0000000056e229c6>] __sys_sendmsg+0x80/0xf0