Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 79.274145][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 79.274160][ T26] audit: type=1800 audit(1561781972.078:33): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 79.313461][ T26] audit: type=1800 audit(1561781972.078:34): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 82.961080][ T26] audit: type=1400 audit(1561781975.758:35): avc: denied { map } for pid=9593 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. [ 89.673493][ T26] audit: type=1400 audit(1561781982.468:36): avc: denied { map } for pid=9605 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/06/29 04:19:43 parsed 1 programs [ 90.752480][ T26] audit: type=1400 audit(1561781983.548:37): avc: denied { map } for pid=9605 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3008 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2019/06/29 04:19:45 executed programs: 0 [ 92.574815][ T9620] IPVS: ftp: loaded support on port[0] = 21 [ 92.641642][ T9620] chnl_net:caif_netlink_parms(): no params data found [ 92.672872][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.680718][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.688932][ T9620] device bridge_slave_0 entered promiscuous mode [ 92.697402][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.704620][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.712406][ T9620] device bridge_slave_1 entered promiscuous mode [ 92.730354][ T9620] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 92.740725][ T9620] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 92.759745][ T9620] team0: Port device team_slave_0 added [ 92.767185][ T9620] team0: Port device team_slave_1 added [ 92.835885][ T9620] device hsr_slave_0 entered promiscuous mode [ 92.903638][ T9620] device hsr_slave_1 entered promiscuous mode [ 92.983926][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.991248][ T9620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.999222][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.006344][ T9620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.042403][ T9620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.057376][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.078759][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.087666][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.097231][ T9622] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.108835][ T9620] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.119555][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.129645][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.136787][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.155283][ T9623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.163946][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.170998][ T9623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.190071][ T9620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.201860][ T9620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.214230][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.222959][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.231726][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.240766][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.249534][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.257359][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.275527][ T9620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.317268][ T26] audit: type=1400 audit(1561781986.118:38): avc: denied { associate } for pid=9620 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 93.405193][ T9633] ------------[ cut here ]------------ [ 93.410789][ T9633] hsr_addr_subst_dest: Unknown node [ 93.416892][ T9633] WARNING: CPU: 0 PID: 9633 at net/hsr/hsr_framereg.c:294 hsr_addr_subst_dest+0x382/0x460 [ 93.426826][ T9633] Kernel panic - not syncing: panic_on_warn set ... [ 93.433425][ T9633] CPU: 0 PID: 9633 Comm: syz-executor.0 Not tainted 5.2.0-rc6+ #36 [ 93.441325][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.451412][ T9633] Call Trace: [ 93.454734][ T9633] dump_stack+0x172/0x1f0 [ 93.459076][ T9633] ? hsr_addr_subst_dest+0x320/0x460 [ 93.464395][ T9633] panic+0x2cb/0x744 [ 93.468288][ T9633] ? __warn_printk+0xf3/0xf3 [ 93.472902][ T9633] ? hsr_addr_subst_dest+0x382/0x460 [ 93.478305][ T9633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.484746][ T9633] ? __warn.cold+0x5/0x4d [ 93.489085][ T9633] ? __warn+0xe8/0x1d0 [ 93.493150][ T9633] ? hsr_addr_subst_dest+0x382/0x460 [ 93.498439][ T9633] __warn.cold+0x20/0x4d [ 93.502725][ T9633] ? vprintk_emit+0x1ea/0x700 [ 93.507410][ T9633] ? hsr_addr_subst_dest+0x382/0x460 [ 93.512712][ T9633] report_bug+0x263/0x2b0 [ 93.517056][ T9633] do_error_trap+0x11b/0x200 [ 93.521646][ T9633] do_invalid_op+0x37/0x50 [ 93.526201][ T9633] ? hsr_addr_subst_dest+0x382/0x460 [ 93.531524][ T9633] invalid_op+0x14/0x20 [ 93.535701][ T9633] RIP: 0010:hsr_addr_subst_dest+0x382/0x460 [ 93.541584][ T9633] Code: 89 de e8 11 f2 5d fa 84 db 75 d3 e8 c8 f0 5d fa 48 c7 c6 60 9f 21 88 48 c7 c7 20 9f 21 88 c6 05 86 fb 69 02 01 e8 cc 29 30 fa <0f> 0b eb b0 e8 a5 f0 5d fa 0f b6 1d 72 fb 69 02 31 ff 89 de e8 d5 [ 93.561353][ T9633] RSP: 0018:ffff88808dd77470 EFLAGS: 00010286 [ 93.567431][ T9633] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 93.575404][ T9633] RDX: 0000000000000000 RSI: ffffffff815adb06 RDI: ffffed1011baee80 [ 93.583381][ T9633] RBP: ffff88808dd774b0 R08: ffff88808765a080 R09: 0000000000000000 [ 93.591366][ T9633] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a9241860 [ 93.599348][ T9633] R13: 0000000000000000 R14: 0000000047eef7b7 R15: 0000000000005e6f [ 93.607332][ T9633] ? vprintk_func+0x86/0x189 [ 93.611929][ T9633] hsr_forward_skb+0x138b/0x1d30 [ 93.616881][ T9633] hsr_dev_xmit+0x72/0xa0 [ 93.621239][ T9633] dev_hard_start_xmit+0x18a/0x950 [ 93.626360][ T9633] __dev_queue_xmit+0x2a8e/0x36b0 [ 93.631388][ T9633] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 93.636731][ T9633] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 93.642478][ T9633] ? _copy_from_iter+0x2e0/0xbf0 [ 93.647432][ T9633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 93.653723][ T9633] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 93.660002][ T9633] ? packet_parse_headers.isra.0+0x350/0x4a0 [ 93.666004][ T9633] ? packet_parse_headers.isra.0+0x12c/0x4a0 [ 93.671986][ T9633] ? packet_mm_open+0xc0/0xc0 [ 93.676729][ T9633] dev_queue_xmit+0x18/0x20 [ 93.681235][ T9633] ? dev_queue_xmit+0x18/0x20 [ 93.686025][ T9633] packet_sendmsg+0x22d4/0x5f90 [ 93.690894][ T9633] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 93.696637][ T9633] ? rw_copy_check_uvector+0x2a6/0x330 [ 93.702136][ T9633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 93.708407][ T9633] ? tomoyo_same_inet_acl+0x150/0x3a0 [ 93.713883][ T9633] ? packet_notifier+0x840/0x840 [ 93.718842][ T9633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.726415][ T9633] ? security_socket_sendmsg+0x8d/0xc0 [ 93.732000][ T9633] ? packet_notifier+0x840/0x840 [ 93.736944][ T9633] sock_sendmsg+0xd7/0x130 [ 93.741360][ T9633] ___sys_sendmsg+0x3e2/0x920 [ 93.746052][ T9633] ? copy_msghdr_from_user+0x430/0x430 [ 93.751518][ T9633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 93.757805][ T9633] ? kasan_check_read+0x11/0x20 [ 93.762766][ T9633] ? __fget+0x381/0x550 [ 93.766943][ T9633] ? ksys_dup3+0x3e0/0x3e0 [ 93.771389][ T9633] ? __fget_light+0x1a9/0x230 [ 93.776073][ T9633] ? __fdget+0x1b/0x20 [ 93.780131][ T9633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 93.786393][ T9633] ? sockfd_lookup_light+0xcb/0x180 [ 93.791594][ T9633] __sys_sendmmsg+0x1bf/0x4d0 [ 93.796293][ T9633] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 93.801321][ T9633] ? _copy_to_user+0xc9/0x120 [ 93.805991][ T9633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 93.812234][ T9633] ? put_timespec64+0xda/0x140 [ 93.816996][ T9633] ? nsecs_to_jiffies+0x30/0x30 [ 93.821869][ T9633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 93.827336][ T9633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 93.832795][ T9633] ? do_syscall_64+0x26/0x680 [ 93.837656][ T9633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.845701][ T9633] ? do_syscall_64+0x26/0x680 [ 93.850483][ T9633] __x64_sys_sendmmsg+0x9d/0x100 [ 93.855455][ T9633] do_syscall_64+0xfd/0x680 [ 93.860059][ T9633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 93.865960][ T9633] RIP: 0033:0x459519 [ 93.869850][ T9633] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 93.889629][ T9633] RSP: 002b:00007fcd524dfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 93.898036][ T9633] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459519 [ 93.906005][ T9633] RDX: 0000000000000001 RSI: 0000000020004e80 RDI: 0000000000000003 [ 93.913979][ T9633] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 93.921961][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcd524e06d4 [ 93.930127][ T9633] R13: 00000000004c6af9 R14: 00000000004dbd80 R15: 00000000ffffffff [ 93.939599][ T9633] Kernel Offset: disabled [ 93.944024][ T9633] Rebooting in 86400 seconds..