Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 29.985229] audit: type=1800 audit(1539365914.203:33): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 30.015254] audit: type=1800 audit(1539365914.203:34): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.628821] audit: type=1400 audit(1539365921.843:35): avc: denied { map } for pid=5504 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts. [ 77.173665] audit: type=1400 audit(1539365961.393:36): avc: denied { map } for pid=5517 comm="syz-execprog" path="/root/syz-execprog" dev="sda1" ino=16479 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/10/12 17:39:21 parsed 1 programs [ 77.747774] audit: type=1400 audit(1539365961.963:37): avc: denied { map } for pid=5517 comm="syz-execprog" path="/sys/kernel/debug/kcov" dev="debugfs" ino=3917 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 2018/10/12 17:39:23 executed programs: 0 [ 79.477166] IPVS: ftp: loaded support on port[0] = 21 [ 79.744120] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.750901] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.758484] device bridge_slave_0 entered promiscuous mode [ 79.777967] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.784623] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.791691] device bridge_slave_1 entered promiscuous mode [ 79.810325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 79.830782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 79.883291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 79.904888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 79.984701] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 79.992223] team0: Port device team_slave_0 added [ 80.009921] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 80.017182] team0: Port device team_slave_1 added [ 80.035205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.057283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.077069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.099311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.255569] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.262044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.269112] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.275492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.805765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.859749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 80.915853] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 80.922047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.930490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.982882] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.304959] ------------[ cut here ]------------ [ 81.309867] usb usb7: BOGUS urb flags, 1 --> 0 [ 81.315691] WARNING: CPU: 0 PID: 5786 at drivers/usb/core/urb.c:503 usb_submit_urb+0x717/0x14e0 [ 81.324541] Kernel panic - not syncing: panic_on_warn set ... [ 81.324541] [ 81.331905] CPU: 0 PID: 5786 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #59 [ 81.339083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.348426] Call Trace: [ 81.351027] dump_stack+0x1c4/0x2b4 [ 81.354654] ? dump_stack_print_info.cold.2+0x52/0x52 [ 81.359838] panic+0x238/0x4e7 [ 81.363033] ? add_taint.cold.5+0x16/0x16 [ 81.367191] ? __warn.cold.8+0x148/0x1ba [ 81.371238] ? __warn.cold.8+0x117/0x1ba [ 81.375426] ? usb_submit_urb+0x717/0x14e0 [ 81.379652] __warn.cold.8+0x163/0x1ba [ 81.383540] ? rcu_bh_qs+0xc0/0xc0 [ 81.387069] ? usb_submit_urb+0x717/0x14e0 [ 81.391294] report_bug+0x254/0x2d0 [ 81.394913] do_error_trap+0x1fc/0x4d0 [ 81.398790] ? math_error+0x3f0/0x3f0 [ 81.402580] ? vprintk_default+0x28/0x30 [ 81.406650] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.411488] ? trace_hardirqs_on_caller+0x310/0x310 [ 81.416505] ? printk+0xa7/0xcf [ 81.419781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.424625] do_invalid_op+0x1b/0x20 [ 81.428334] invalid_op+0x14/0x20 [ 81.431776] RIP: 0010:usb_submit_urb+0x717/0x14e0 [ 81.436621] Code: 83 fc 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 91 bf 44 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 a0 70 71 88 e8 89 b0 4d fc <0f> 0b e8 22 e1 83 fc 48 c7 c6 a0 71 71 88 4c 89 f7 e8 63 e2 83 fc [ 81.455533] RSP: 0018:ffff8801b3357268 EFLAGS: 00010286 [ 81.460895] RAX: 0000000000000000 RBX: ffff8801d3c25400 RCX: 0000000000000000 [ 81.468158] RDX: 0000000000000000 RSI: ffffffff81650405 RDI: 0000000000000005 [ 81.475423] RBP: ffff8801b33572d8 R08: ffff8801c29c8400 R09: ffffed003b5c4fe8 [ 81.482736] R10: ffffed003b5c4fe8 R11: ffff8801dae27f47 R12: 0000000000000000 [ 81.490012] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801cddabe00 [ 81.497288] ? vprintk_func+0x85/0x181 [ 81.501247] ? usb_submit_urb+0x717/0x14e0 [ 81.505478] ? kasan_check_write+0x14/0x20 [ 81.509827] proc_do_submiturb+0x1b7d/0x4020 [ 81.514227] ? find_held_lock+0x36/0x1c0 [ 81.518282] ? __might_fault+0xc1/0x1e0 [ 81.522250] ? free_async+0x540/0x540 [ 81.526052] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 81.531584] ? _copy_from_user+0xdf/0x150 [ 81.535732] proc_submiturb_compat+0x544/0x800 [ 81.540307] ? proc_do_submiturb+0x4020/0x4020 [ 81.544884] ? mark_held_locks+0x130/0x130 [ 81.549119] usbdev_do_ioctl+0x19a2/0x3b50 [ 81.553355] ? processcompl_compat+0x680/0x680 [ 81.557980] ? print_usage_bug+0xc0/0xc0 [ 81.562053] ? print_usage_bug+0xc0/0xc0 [ 81.566122] ? print_usage_bug+0xc0/0xc0 [ 81.570174] ? graph_lock+0x170/0x170 [ 81.573966] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 81.579190] ? graph_lock+0x170/0x170 [ 81.583024] ? find_held_lock+0x36/0x1c0 [ 81.587095] ? avc_has_extended_perms+0x8cb/0x15a0 [ 81.592022] ? lock_downgrade+0x900/0x900 [ 81.596174] ? check_preemption_disabled+0x48/0x200 [ 81.601193] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 81.606988] ? kasan_check_read+0x11/0x20 [ 81.611144] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 81.616415] ? rcu_bh_qs+0xc0/0xc0 [ 81.619951] ? do_raw_spin_unlock+0xa7/0x2f0 [ 81.624355] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 81.628934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.634468] ? avc_has_extended_perms+0xab2/0x15a0 [ 81.639410] ? avc_ss_reset+0x190/0x190 [ 81.643378] ? graph_lock+0x170/0x170 [ 81.647172] ? graph_lock+0x170/0x170 [ 81.650966] ? graph_lock+0x170/0x170 [ 81.654774] ? ___might_sleep+0x1ed/0x300 [ 81.658916] ? arch_local_save_flags+0x40/0x40 [ 81.663498] ? __might_fault+0x12b/0x1e0 [ 81.667566] ? lock_downgrade+0x900/0x900 [ 81.671707] usbdev_ioctl+0x25/0x30 [ 81.675326] ? usbdev_compat_ioctl+0x30/0x30 [ 81.679721] do_vfs_ioctl+0x1de/0x1720 [ 81.683603] ? ioctl_preallocate+0x300/0x300 [ 81.688008] ? selinux_file_mprotect+0x620/0x620 [ 81.692759] ? hex_dump_to_buffer+0x36a/0xc70 [ 81.697248] ? __sanitizer_cov_trace_const_cmp1+0x1b/0x20 [ 81.702774] ? put_timespec64+0x10f/0x1b0 [ 81.706914] ? nsecs_to_jiffies+0x30/0x30 [ 81.711054] ? do_syscall_64+0x9a/0x820 [ 81.715032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.720564] ? security_file_ioctl+0x94/0xc0 [ 81.724968] ksys_ioctl+0xa9/0xd0 [ 81.728466] __x64_sys_ioctl+0x73/0xb0 [ 81.732345] do_syscall_64+0x1b9/0x820 [ 81.736224] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 81.741579] ? syscall_return_slowpath+0x5e0/0x5e0 [ 81.746495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.751334] ? trace_hardirqs_on_caller+0x310/0x310 [ 81.756343] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 81.761362] ? prepare_exit_to_usermode+0x291/0x3b0 [ 81.766372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.771213] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.776391] RIP: 0033:0x457569 [ 81.779574] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 81.798469] RSP: 002b:00007ffd359af168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.806177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 81.813439] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000005 [ 81.820698] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 81.827958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000002197914 [ 81.835257] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 00000000ffffffff [ 81.843628] Kernel Offset: disabled [ 81.847314] Rebooting in 86400 seconds..