Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 24.685939][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 24.685945][ T24] audit: type=1800 audit(1564733884.431:33): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 24.723970][ T24] audit: type=1800 audit(1564733884.471:34): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 27.993791][ T24] audit: type=1400 audit(1564733887.741:35): avc: denied { map } for pid=6966 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. [ 77.531481][ T24] audit: type=1400 audit(1564733937.281:36): avc: denied { map } for pid=6982 comm="syz-executor245" path="/root/syz-executor245897076" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 84.292409][ T6983] FAULT_INJECTION: forcing a failure. [ 84.292409][ T6983] name failslab, interval 1, probability 0, space 0, times 1 [ 84.306889][ T6983] CPU: 0 PID: 6983 Comm: syz-executor245 Not tainted 5.3.0-rc2+ #95 [ 84.314858][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.324906][ T6983] Call Trace: [ 84.328184][ T6983] dump_stack+0xaa/0xd6 [ 84.332328][ T6983] should_fail.cold+0x3c/0x49 [ 84.337132][ T6983] __should_failslab+0x65/0xa0 [ 84.341881][ T6983] should_failslab+0x9/0x14 [ 84.346377][ T6983] kmem_cache_alloc+0x26/0x2c0 [ 84.351129][ T6983] audit_log_start+0x17f/0x400 [ 84.355877][ T6983] ? debug_smp_processor_id+0x2c/0xd4 [ 84.361232][ T6983] ? rcu_is_watching+0x11/0x50 [ 84.365982][ T6983] ? avc_audit_pre_callback+0x150/0x150 [ 84.371511][ T6983] ? lsm_read+0x50/0x50 [ 84.375650][ T6983] common_lsm_audit+0x60/0x9c0 [ 84.380399][ T6983] ? call_rcu+0xb/0x10 [ 84.384460][ T6983] ? avc_node_replace+0x6e/0x80 [ 84.389308][ T6983] ? _raw_spin_unlock_irqrestore+0x33/0x50 [ 84.395161][ T6983] slow_avc_audit+0xc8/0x110 [ 84.399726][ T6983] avc_has_perm+0x25d/0x2a0 [ 84.404200][ T6983] ? check_stack_object+0xb7/0xf0 [ 84.409198][ T6983] selinux_tun_dev_attach_queue+0x40/0x50 [ 84.414988][ T6983] security_tun_dev_attach_queue+0x39/0x60 [ 84.420919][ T6983] __tun_chr_ioctl+0xb0c/0x1780 [ 84.425760][ T6983] ? tun_chr_compat_ioctl+0x30/0x30 [ 84.431015][ T6983] tun_chr_ioctl+0x2b/0x40 [ 84.435405][ T6983] do_vfs_ioctl+0x62a/0x810 [ 84.439935][ T6983] ? tomoyo_file_ioctl+0x23/0x30 [ 84.444845][ T6983] ksys_ioctl+0x86/0xb0 [ 84.448973][ T6983] __x64_sys_ioctl+0x1e/0x30 [ 84.453544][ T6983] do_syscall_64+0x76/0x1a0 [ 84.458027][ T6983] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 84.463889][ T6983] RIP: 0033:0x441549 [ 84.467822][ T6983] Code: e8 0c e9 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 84.487627][ T6983] RSP: 002b:00007fff43440ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.496002][ T6983] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441549 [ 84.504069][ T6983] RDX: 0000000020000000 RSI: 00000000400454d9 RDI: 0000000000000003 [ 84.512056][ T6983] RBP: 00007fff43440cc0 R08: 0000000000000001 R09: 0000000000000000 [ 84.520012][ T6983] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 84.527993][ T6983] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 84.535990][ T6983] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 84.543622][ T6983] audit: out of memory in audit_log_start executing program [ 90.492574][ T6995] FAULT_INJECTION: forcing a failure. [ 90.492574][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 90.507033][ T6995] CPU: 0 PID: 6995 Comm: syz-executor245 Not tainted 5.3.0-rc2+ #95 [ 90.515027][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.525067][ T6995] Call Trace: [ 90.528342][ T6995] dump_stack+0xaa/0xd6 [ 90.532488][ T6995] should_fail.cold+0x3c/0x49 [ 90.537153][ T6995] __should_failslab+0x65/0xa0 [ 90.541903][ T6995] should_failslab+0x9/0x14 [ 90.546399][ T6995] __kmalloc_track_caller+0x50/0x300 [ 90.551691][ T6995] ? unwind_get_return_address+0x1a/0x30 [ 90.557315][ T6995] ? profile_setup.cold+0xbb/0xbb [ 90.562320][ T6995] ? kstrdup_const+0x48/0x60 [ 90.566894][ T6995] kstrdup+0x3a/0x70 [ 90.570777][ T6995] kstrdup_const+0x48/0x60 [ 90.575181][ T6995] __kernfs_new_node+0x53/0x270 [ 90.580015][ T6995] ? map_id_range_down+0xb4/0x140 [ 90.585021][ T6995] ? format_decode+0xcb/0x5e0 [ 90.589685][ T6995] kernfs_new_node+0x5e/0x90 [ 90.594258][ T6995] kernfs_create_dir_ns+0x52/0xb0 [ 90.599259][ T6995] sysfs_create_dir_ns+0x8a/0x110 [ 90.604269][ T6995] kobject_add_internal+0x103/0x350 [ 90.609437][ T6995] kobject_init_and_add+0x86/0xc0 [ 90.614434][ T6995] ? __delete_object+0x41/0x50 [ 90.619165][ T6995] netdev_queue_update_kobjects+0x76/0x190 [ 90.624937][ T6995] netif_set_real_num_tx_queues+0xa3/0x220 [ 90.630709][ T6995] tun_attach+0x196/0x660 [ 90.635019][ T6995] __tun_chr_ioctl+0xb40/0x1780 [ 90.639835][ T6995] ? tun_chr_compat_ioctl+0x30/0x30 [ 90.644999][ T6995] tun_chr_ioctl+0x2b/0x40 [ 90.649383][ T6995] do_vfs_ioctl+0x62a/0x810 [ 90.653941][ T6995] ? tomoyo_file_ioctl+0x23/0x30 [ 90.658864][ T6995] ksys_ioctl+0x86/0xb0 [ 90.662991][ T6995] __x64_sys_ioctl+0x1e/0x30 [ 90.667548][ T6995] do_syscall_64+0x76/0x1a0 [ 90.672020][ T6995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 90.677881][ T6995] RIP: 0033:0x441549 [ 90.681744][ T6995] Code: e8 0c e9 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 6b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 90.701314][ T6995] RSP: 002b:00007fff43440ca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.709689][ T6995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441549 [ 90.717634][ T6995] RDX: 0000000020000000 RSI: 00000000400454d9 RDI: 0000000000000003 [ 90.725591][ T6995] RBP: 00007fff43440cc0 R08: 0000000000000001 R09: 0000000000000000 [ 90.733530][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 90.741485][ T6995] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 90.749484][ T6995] kobject_add_internal failed for tx-1 (error: -12 parent: queues) [ 96.529455][ T6982] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88810ee6ff60 (size 32): comm "syz-executor245", pid 6995, jiffies 4294946324 (age 8.010s) hex dump (first 32 bytes): 74 78 2d 31 00 6e 65 74 2f 74 75 6e 00 00 00 00 tx-1.net/tun.... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<000000009649c1f9>] __kmalloc_track_caller+0x165/0x300 [<00000000888bdcdf>] kvasprintf+0x6d/0xe0 [<00000000d5aac3ed>] kvasprintf_const+0x96/0xe0 [<00000000ad628923>] kobject_set_name_vargs+0x40/0xe0 [<000000001063c919>] kobject_init_and_add+0x6d/0xc0 [<000000007462104d>] netdev_queue_update_kobjects+0x76/0x190 [<00000000b4d536b0>] netif_set_real_num_tx_queues+0xa3/0x220 [<00000000b403ddad>] tun_attach+0x196/0x660 [<00000000a907d05a>] __tun_chr_ioctl+0xb40/0x1780 [<000000001bd9a6ac>] tun_chr_ioctl+0x2b/0x40 [<00000000efffdc86>] do_vfs_ioctl+0x62a/0x810 [<00000000eea83b46>] ksys_ioctl+0x86/0xb0 [<0000000048c752c1>] __x64_sys_ioctl+0x1e/0x30 [<00000000ccb31b89>] do_syscall_64+0x76/0x1a0 [<000000008a94c3ef>] entry_SYSCALL_64_after_hwframe+0x44/0xa9