[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.576211] audit: type=1800 audit(1575301762.979:33): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 46.354274] kauditd_printk_skb: 1 callbacks suppressed [ 46.354288] audit: type=1400 audit(1575301767.749:35): avc: denied { map } for pid=7717 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. [ 52.992221] audit: type=1400 audit(1575301774.389:36): avc: denied { map } for pid=7729 comm="syz-executor548" path="/root/syz-executor548192084" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 53.014413] IPVS: ftp: loaded support on port[0] = 21 executing program [ 53.047326] audit: type=1400 audit(1575301774.449:37): avc: denied { create } for pid=7730 comm="syz-executor548" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.056408] rxrpc: Assertion failed [ 53.079234] ------------[ cut here ]------------ [ 53.080515] audit: type=1400 audit(1575301774.449:38): avc: denied { write } for pid=7730 comm="syz-executor548" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.084595] kernel BUG at net/rxrpc/local_object.c:437! [ 53.084765] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.111112] audit: type=1400 audit(1575301774.449:39): avc: denied { read } for pid=7730 comm="syz-executor548" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.115985] CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted 4.19.87-syzkaller #0 [ 53.115997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.116021] Workqueue: krxrpcd rxrpc_local_processor [ 53.168490] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 53.174124] Code: af 2d b1 fa 0f 0b e8 84 c8 c6 fa 48 c7 c7 80 b7 5a 88 e8 9c 2d b1 fa 0f 0b e8 71 c8 c6 fa 48 c7 c7 80 b7 5a 88 e8 89 2d b1 fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 53.193029] RSP: 0018:ffff8880a9977ce8 EFLAGS: 00010282 [ 53.198384] RAX: 0000000000000017 RBX: ffff8880952ba4b8 RCX: 0000000000000000 [ 53.205751] RDX: 0000000000000000 RSI: ffffffff81558bd6 RDI: ffffed101532ef8f [ 53.213291] RBP: ffff8880a9977d30 R08: 0000000000000017 R09: ffffed1015d25079 [ 53.220565] R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: ffff888095533d08 [ 53.227840] R13: ffff8880a6970708 R14: ffff8880952ba480 R15: ffff8880995d2040 [ 53.235105] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 53.243340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.249230] CR2: 0000000020000040 CR3: 0000000008e6d000 CR4: 00000000001406e0 [ 53.256615] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.263896] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.271174] Call Trace: [ 53.273857] process_one_work+0x989/0x1750 [ 53.278092] ? pwq_dec_nr_in_flight+0x320/0x320 [ 53.282750] ? lock_acquire+0x16f/0x3f0 [ 53.286710] ? kasan_check_write+0x14/0x20 [ 53.290937] ? do_raw_spin_lock+0xc8/0x240 [ 53.295181] worker_thread+0x98/0xe40 [ 53.298977] ? trace_hardirqs_on+0x67/0x220 [ 53.303301] kthread+0x354/0x420 [ 53.306672] ? process_one_work+0x1750/0x1750 [ 53.311189] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 53.316728] ret_from_fork+0x24/0x30 [ 53.320438] Modules linked in: [ 53.324453] ---[ end trace 2d90eecc621f78b4 ]--- [ 53.329505] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 53.335208] Code: af 2d b1 fa 0f 0b e8 84 c8 c6 fa 48 c7 c7 80 b7 5a 88 e8 9c 2d b1 fa 0f 0b e8 71 c8 c6 fa 48 c7 c7 80 b7 5a 88 e8 89 2d b1 fa <0f> 0b 90