[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   76.870434][   T26] kauditd_printk_skb: 6 callbacks suppressed
[   76.870446][   T26] audit: type=1800 audit(1559589759.499:33): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   76.899185][   T26] audit: type=1800 audit(1559589759.499:34): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   78.958060][   T26] audit: type=1400 audit(1559589761.589:35): avc:  denied  { map } for  pid=9754 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.0.145' (ECDSA) to the list of known hosts.
executing program
[   92.199294][   T26] audit: type=1400 audit(1559589774.829:36): avc:  denied  { map } for  pid=9766 comm="syz-executor300" path="/root/syz-executor300660384" dev="sda1" ino=15968 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   92.236408][ T1503] WARNING: CPU: 0 PID: 1503 at drivers/tty/tty_ioctl.c:319 tty_set_termios+0x7a5/0x8d0
[   92.238232][ T9767] kobject: 'hci1' (00000000f4ed09ae): kobject_add_internal: parent: 'bluetooth', set: 'devices'
[   92.246195][ T1503] Kernel panic - not syncing: panic_on_warn set ...
[   92.246217][ T1503] CPU: 0 PID: 1503 Comm: kworker/u5:0 Not tainted 5.2.0-rc3 #11
[   92.246224][ T1503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   92.246280][ T1503] Workqueue: hci0 hci_power_on
[   92.246308][ T1503] Call Trace:
[   92.246342][ T1503]  dump_stack+0x172/0x1f0
[   92.257350][ T9767] kobject: 'hci1' (00000000f4ed09ae): kobject_uevent_env
[   92.263613][ T1503]  ? tty_set_termios+0x6e0/0x8d0
[   92.263674][ T1503]  panic+0x2cb/0x744
[   92.263695][ T1503]  ? __warn_printk+0xf3/0xf3
[   92.271529][ T9767] kobject: 'hci1' (00000000f4ed09ae): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1'
[   92.281622][ T1503]  ? tty_set_termios+0x7a5/0x8d0
[   92.281661][ T1503]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   92.281685][ T1503]  ? __warn.cold+0x5/0x4d
[   92.290351][ T9767] kobject: 'rfkill6' (000000000b3779d7): kobject_add_internal: parent: 'hci1', set: 'devices'
[   92.294082][ T1503]  ? __warn+0xe8/0x1d0
[   92.294102][ T1503]  ? tty_set_termios+0x7a5/0x8d0
[   92.294116][ T1503]  __warn.cold+0x20/0x4d
[   92.294138][ T1503]  ? tty_set_termios+0x7a5/0x8d0
[   92.294156][ T1503]  report_bug+0x263/0x2b0
[   92.301696][ T9767] kobject: 'rfkill6' (000000000b3779d7): kobject_uevent_env
[   92.306308][ T1503]  do_error_trap+0x11b/0x200
[   92.306327][ T1503]  do_invalid_op+0x37/0x50
[   92.306348][ T1503]  ? tty_set_termios+0x7a5/0x8d0
[   92.310437][ T9767] kobject: 'rfkill6' (000000000b3779d7): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill6'
[   92.314928][ T1503]  invalid_op+0x14/0x20
[   92.314946][ T1503] RIP: 0010:tty_set_termios+0x7a5/0x8d0
[   92.314962][ T1503] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a3 00 00 00 45 89 a7 d0 03 00 00 e9 49 fe ff ff e8 eb a4 f9 fd <0f> 0b e9 3e f9 ff ff e8 ef 42 32 fe e9 d6 fa ff ff e8 e5 42 32 fe
[   92.314977][ T1503] RSP: 0018:ffff8880a6067968 EFLAGS: 00010293
[   92.343135][ T9768] WARNING: CPU: 1 PID: 9768 at drivers/tty/tty_ioctl.c:319 tty_set_termios+0x7a5/0x8d0
[   92.343241][ T1503] RAX: ffff8880a6bfc640 RBX: ffff8880a6067a28 RCX: ffffffff8376fafd
[   92.343265][ T1503] RDX: 0000000000000000 RSI: ffffffff837701c5 RDI: 0000000000000005
[   92.353964][ T9768] Modules linked in:
[   92.358065][ T1503] RBP: ffff8880a6067a50 R08: ffff8880a6bfc640 R09: fffffbfff163c5f5
[   92.363007][ T9768] CPU: 1 PID: 9768 Comm: kworker/u5:1 Not tainted 5.2.0-rc3 #11
[   92.367596][ T1503] R10: fffffbfff163c5f4 R11: 0000000000000003 R12: ffff8880a6067a90
[   92.372525][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   92.376867][ T1503] R13: 0000000000010004 R14: 1ffff11014c0cf4c R15: ffff8880851fb3c0
[   92.384263][ T9768] Workqueue: hci1 hci_power_on
[   92.388856][ T1503]  ? tty_set_termios+0xdd/0x8d0
[   92.393275][ T9768] RIP: 0010:tty_set_termios+0x7a5/0x8d0
[   92.398474][ T1503]  ? tty_set_termios+0x7a5/0x8d0
[   92.409925][ T9768] Code: 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 a3 00 00 00 45 89 a7 d0 03 00 00 e9 49 fe ff ff e8 eb a4 f9 fd <0f> 0b e9 3e f9 ff ff e8 ef 42 32 fe e9 d6 fa ff ff e8 e5 42 32 fe
[   92.414193][ T1503]  ? tty_set_termios+0x7a5/0x8d0
[   92.419724][ T9768] RSP: 0018:ffff888090ba7968 EFLAGS: 00010293
[   92.441063][ T1503]  ? hci_dev_do_open+0xa3/0x1760
[   92.447118][ T9768] RAX: ffff888086f76640 RBX: ffff888090ba7a28 RCX: ffffffff8376fafd
[   92.456930][ T1503]  ? tty_wait_until_sent+0x580/0x580
[   92.464988][ T9768] RDX: 0000000000000000 RSI: ffffffff837701c5 RDI: 0000000000000005
[   92.465005][ T9768] RBP: ffff888090ba7a50 R08: ffff888086f76640 R09: fffffbfff163c5f5
[   92.473008][ T1503]  ? __mutex_lock+0x3cd/0x1310
[   92.476939][ T9768] R10: fffffbfff163c5f4 R11: 0000000000000003 R12: ffff888090ba7a90
[   92.476956][ T9768] R13: 0000000000010004 R14: 1ffff11012174f4c R15: ffff8880853cf400
[   92.485224][ T1503]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   92.485264][ T1503]  ? tty_termios_encode_baud_rate+0x3ca/0x4e0
[   92.493082][ T9768] FS:  0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[   92.502140][ T1503]  hci_uart_set_baudrate+0x157/0x1c0
[   92.512322][ T9768] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.512340][ T9768] CR2: 00007f83eef74000 CR3: 0000000091ec2000 CR4: 00000000001406e0
[   92.520331][ T1503]  ? hci_uart_set_speeds+0x90/0x90
[   92.525171][ T9768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.530138][ T1503]  ? find_first_zero_bit+0x9a/0xc0
[   92.535643][ T9768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   92.540706][ T1503]  ? kasan_check_read+0x11/0x20
[   92.560280][ T9768] Call Trace:
[   92.565229][ T1503]  hci_uart_setup+0xa2/0x490
[   92.571289][ T9768]  ? hci_dev_do_open+0xa3/0x1760
[   92.576326][ T1503]  ? hci_uart_set_baudrate+0x1c0/0x1c0
[   92.584300][ T9768]  ? tty_wait_until_sent+0x580/0x580
[   92.589669][ T1503]  hci_dev_do_open+0x784/0x1760
[   92.597734][ T9768]  ? __mutex_lock+0x3cd/0x1310
[   92.605804][ T1503]  ? hci_rx_work+0xaa0/0xaa0
[   92.610578][ T9768]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   92.618572][ T1503]  ? trace_hardirqs_off+0x62/0x220
[   92.626538][ T9768]  ? tty_termios_encode_baud_rate+0x3ca/0x4e0
[   92.632794][ T1503]  ? process_one_work+0x890/0x1790
[   92.638846][ T9768]  hci_uart_set_baudrate+0x157/0x1c0
[   92.647819][ T1503]  ? find_held_lock+0x35/0x130
[   92.653099][ T9768]  ? hci_uart_set_speeds+0x90/0x90
[   92.659693][ T1503]  ? process_one_work+0x890/0x1790
[   92.668012][ T9768]  ? find_first_zero_bit+0x9a/0xc0
[   92.668036][ T9768]  ? kasan_check_read+0x11/0x20
[   92.673175][ T1503]  hci_power_on+0x10d/0x580
[   92.681160][ T9768]  hci_uart_setup+0xa2/0x490
[   92.686557][ T1503]  ? hci_error_reset+0xf0/0xf0
[   92.695010][ T9768]  ? hci_uart_set_baudrate+0x1c0/0x1c0
[   92.700058][ T1503]  process_one_work+0x989/0x1790
[   92.703337][ T9768]  hci_dev_do_open+0x784/0x1760
[   92.707923][ T1503]  ? pwq_dec_nr_in_flight+0x320/0x320
[   92.712862][ T9768]  ? hci_rx_work+0xaa0/0xaa0
[   92.718329][ T1503]  worker_thread+0x98/0xe40
[   92.723722][ T9768]  ? trace_hardirqs_off+0x62/0x220
[   92.728592][ T1503]  kthread+0x354/0x420
[   92.733355][ T9768]  ? process_one_work+0x890/0x1790
[   92.737963][ T1503]  ? process_one_work+0x1790/0x1790
[   92.746822][ T9768]  ? find_held_lock+0x35/0x130
[   92.752398][ T1503]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[   92.758932][ T9768]  ? process_one_work+0x890/0x1790
[   92.776430][ T1503]  ret_from_fork+0x24/0x30
[   92.782351][ T9768]  hci_power_on+0x10d/0x580
[   92.898576][ T9768]  ? hci_error_reset+0xf0/0xf0
[   92.903374][ T9768]  process_one_work+0x989/0x1790
[   92.908340][ T9768]  ? pwq_dec_nr_in_flight+0x320/0x320
[   92.913926][ T9768]  worker_thread+0x98/0xe40
[   92.918449][ T9768]  kthread+0x354/0x420
[   92.922528][ T9768]  ? process_one_work+0x1790/0x1790
[   92.928078][ T9768]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[   92.935035][ T9768]  ret_from_fork+0x24/0x30
[   92.939476][ T9768] irq event stamp: 76
[   92.943476][ T9768] hardirqs last  enabled at (75): [<ffffffff871c9e78>] _raw_spin_unlock_irq+0x28/0x90
[   92.953102][ T9768] hardirqs last disabled at (76): [<ffffffff8100660f>] trace_hardirqs_off_thunk+0x1a/0x1c
[   92.963407][ T9768] softirqs last  enabled at (0): [<ffffffff81426576>] copy_process.part.0+0x1736/0x6790
[   92.973138][ T9768] softirqs last disabled at (0): [<0000000000000000>] 0x0
[   92.980461][ T9768] ---[ end trace 7309b47cb98c4556 ]---
[   92.988424][ T1503] Kernel Offset: disabled
[   92.993371][ T1503] Rebooting in 86400 seconds..