[ 35.058291] audit: type=1800 audit(1539313685.843:30): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 39.549709] kauditd_printk_skb: 4 callbacks suppressed [ 39.549722] audit: type=1400 audit(1539313690.353:35): avc: denied { map } for pid=5834 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.91' (ECDSA) to the list of known hosts. [ 45.812178] audit: type=1400 audit(1539313696.613:36): avc: denied { map } for pid=5847 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/10/12 03:08:17 parsed 1 programs [ 46.293112] audit: type=1400 audit(1539313697.103:37): avc: denied { map } for pid=5847 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=99 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/10/12 03:08:18 executed programs: 0 [ 47.842305] IPVS: ftp: loaded support on port[0] = 21 [ 48.024511] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.031084] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.038199] device bridge_slave_0 entered promiscuous mode [ 48.053635] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.060179] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.068632] device bridge_slave_1 entered promiscuous mode [ 48.083216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 48.098570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 48.137729] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.154817] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.212709] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.219879] team0: Port device team_slave_0 added [ 48.235060] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.242049] team0: Port device team_slave_1 added [ 48.256065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.275814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.292377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.309390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.418328] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.424742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.431299] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.437690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.821600] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 48.827813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.869006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 48.908033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.915005] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.949423] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 48.955985] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.972550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.177858] ------------[ cut here ]------------ [ 49.183241] usb usb7: BOGUS urb flags, 1 --> 0 [ 49.188064] WARNING: CPU: 0 PID: 6116 at drivers/usb/core/urb.c:503 usb_submit_urb+0x717/0x14e0 [ 49.196932] Kernel panic - not syncing: panic_on_warn set ... [ 49.196932] [ 49.204302] CPU: 0 PID: 6116 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #58 [ 49.211472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.220919] Call Trace: [ 49.223509] dump_stack+0x1c4/0x2b4 [ 49.227125] ? dump_stack_print_info.cold.2+0x52/0x52 [ 49.232316] panic+0x238/0x4e7 [ 49.235504] ? add_taint.cold.5+0x16/0x16 [ 49.239639] ? __warn.cold.8+0x148/0x1ba [ 49.243683] ? __warn.cold.8+0x117/0x1ba [ 49.247726] ? usb_submit_urb+0x717/0x14e0 [ 49.251966] __warn.cold.8+0x163/0x1ba [ 49.255850] ? usb_submit_urb+0x717/0x14e0 [ 49.260181] report_bug+0x254/0x2d0 [ 49.263793] do_error_trap+0x1fc/0x4d0 [ 49.267676] ? math_error+0x3f0/0x3f0 [ 49.271466] ? vprintk_default+0x28/0x30 [ 49.275520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.280356] ? trace_hardirqs_on_caller+0x310/0x310 [ 49.285375] ? printk+0xa7/0xcf [ 49.288649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.293493] do_invalid_op+0x1b/0x20 [ 49.297199] invalid_op+0x14/0x20 [ 49.300697] RIP: 0010:usb_submit_urb+0x717/0x14e0 [ 49.305536] Code: 83 fc 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 d1 be 44 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 00 71 71 88 e8 c9 af 4d fc <0f> 0b e8 62 e0 83 fc 48 c7 c6 00 72 71 88 4c 89 f7 e8 a3 e1 83 fc [ 49.324433] RSP: 0018:ffff8801bc757268 EFLAGS: 00010286 [ 49.329787] RAX: 0000000000000000 RBX: ffff8801d23f3800 RCX: 0000000000000000 [ 49.337045] RDX: 0000000000000000 RSI: ffffffff81650405 RDI: 0000000000000005 [ 49.344298] RBP: ffff8801bc7572d8 R08: ffff8801c4a300c0 R09: ffffed003b5c3ee2 [ 49.351605] R10: ffffed003b5c3ee2 R11: ffff8801dae1f717 R12: 0000000000000000 [ 49.358872] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801cdc720c0 [ 49.366146] ? vprintk_func+0x85/0x181 [ 49.370020] ? usb_submit_urb+0x717/0x14e0 [ 49.374241] ? kasan_check_write+0x14/0x20 [ 49.378467] proc_do_submiturb+0x1b7d/0x4020 [ 49.382879] ? __might_fault+0xc1/0x1e0 [ 49.386851] ? free_async+0x540/0x540 [ 49.390657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 49.396186] ? _copy_from_user+0xdf/0x150 [ 49.400334] proc_submiturb_compat+0x544/0x800 [ 49.405030] ? proc_do_submiturb+0x4020/0x4020 [ 49.409615] ? mark_held_locks+0x130/0x130 [ 49.413855] usbdev_do_ioctl+0x19a2/0x3b50 [ 49.418081] ? processcompl_compat+0x680/0x680 [ 49.422654] ? follow_pfn+0x2e0/0x2e0 [ 49.426460] ? mnt_get_count+0x150/0x150 [ 49.430667] ? do_wp_page+0x76c/0x1390 [ 49.434543] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 49.439801] ? futex_wake+0x304/0x760 [ 49.443596] ? kasan_check_read+0x11/0x20 [ 49.447743] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 49.452323] ? __pte_alloc_kernel+0x220/0x220 [ 49.456812] ? avc_has_extended_perms+0x8cb/0x15a0 [ 49.461734] ? lock_downgrade+0x900/0x900 [ 49.465930] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 49.471791] ? do_futex+0x249/0x26d0 [ 49.475505] ? do_raw_spin_unlock+0xa7/0x2f0 [ 49.479910] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 49.484486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.490064] ? avc_has_extended_perms+0xab2/0x15a0 [ 49.495037] ? avc_ss_reset+0x190/0x190 [ 49.499019] ? save_stack+0xa9/0xd0 [ 49.502684] ? lock_acquire+0x1ed/0x520 [ 49.506659] ? ___might_sleep+0x1ed/0x300 [ 49.510804] ? arch_local_save_flags+0x40/0x40 [ 49.515373] ? __might_fault+0x12b/0x1e0 [ 49.519427] ? lock_downgrade+0x900/0x900 [ 49.523565] usbdev_ioctl+0x25/0x30 [ 49.527232] ? usbdev_compat_ioctl+0x30/0x30 [ 49.531655] do_vfs_ioctl+0x1de/0x1720 [ 49.535544] ? ioctl_preallocate+0x300/0x300 [ 49.539946] ? selinux_file_mprotect+0x620/0x620 [ 49.544693] ? hex_dump_to_buffer+0x36a/0xc70 [ 49.549236] ? __sanitizer_cov_trace_const_cmp1+0x1b/0x20 [ 49.554796] ? put_timespec64+0x10f/0x1b0 [ 49.558933] ? nsecs_to_jiffies+0x30/0x30 [ 49.563079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 49.568618] ? security_file_ioctl+0x94/0xc0 [ 49.573029] ksys_ioctl+0xa9/0xd0 [ 49.576485] __x64_sys_ioctl+0x73/0xb0 [ 49.580368] do_syscall_64+0x1b9/0x820 [ 49.584268] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 49.589735] ? syscall_return_slowpath+0x5e0/0x5e0 [ 49.594665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.599544] ? trace_hardirqs_on_caller+0x310/0x310 [ 49.604635] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 49.609649] ? prepare_exit_to_usermode+0x291/0x3b0 [ 49.614662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 49.619499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 49.624677] RIP: 0033:0x457519 [ 49.627875] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 49.646829] RSP: 002b:00007fff5a334158 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.654544] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457519 [ 49.661819] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 49.669190] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 49.676454] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000021e6914 [ 49.683720] R13: 00000000004bf65f R14: 00000000004cf538 R15: 00000000ffffffff [ 49.691658] Kernel Offset: disabled [ 49.695341] Rebooting in 86400 seconds..