[ 43.229709] audit: type=1800 audit(1577419230.411:32): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.011535] kauditd_printk_skb: 2 callbacks suppressed [ 47.011551] audit: type=1400 audit(1577419234.291:35): avc: denied { map } for pid=7854 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. [ 53.690287] audit: type=1400 audit(1577419240.971:36): avc: denied { map } for pid=7866 comm="syz-executor632" path="/root/syz-executor632132470" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 53.703592] IPVS: ftp: loaded support on port[0] = 21 executing program [ 53.742883] audit: type=1400 audit(1577419241.021:37): avc: denied { create } for pid=7867 comm="syz-executor632" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.750775] rxrpc: Assertion failed [ 53.768768] audit: type=1400 audit(1577419241.021:38): avc: denied { write } for pid=7867 comm="syz-executor632" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.773310] ------------[ cut here ]------------ [ 53.800894] audit: type=1400 audit(1577419241.021:39): avc: denied { read } for pid=7867 comm="syz-executor632" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 53.805060] kernel BUG at net/rxrpc/local_object.c:437! [ 53.805652] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.839838] CPU: 1 PID: 19 Comm: kworker/1:0 Not tainted 4.19.91-syzkaller #0 [ 53.847106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.856479] Workqueue: krxrpcd rxrpc_local_processor [ 53.861584] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 53.867194] Code: ff 5b a7 fa 0f 0b e8 94 f7 bc fa 48 c7 c7 c0 45 5c 88 e8 ec 5b a7 fa 0f 0b e8 81 f7 bc fa 48 c7 c7 c0 45 5c 88 e8 d9 5b a7 fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 53.887216] RSP: 0018:ffff8880aa3efce8 EFLAGS: 00010282 [ 53.892568] RAX: 0000000000000017 RBX: ffff8880a877db38 RCX: 0000000000000000 [ 53.899842] RDX: 0000000000000000 RSI: ffffffff8155bb16 RDI: ffffed101547df8f [ 53.907108] RBP: ffff8880aa3efd30 R08: 0000000000000017 R09: ffffed1015d25079 [ 53.914370] R10: ffffed1015d25078 R11: ffff8880ae9283c7 R12: ffff8880a877d3c8 [ 53.921644] R13: ffff88808bd60688 R14: ffff8880a877db00 R15: ffff888088a32580 [ 53.929047] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 53.937279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.943159] CR2: 00000000006d9f70 CR3: 0000000008e6d000 CR4: 00000000001406e0 [ 53.950429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.957689] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.964962] Call Trace: [ 53.967540] process_one_work+0x989/0x1750 [ 53.971760] ? pwq_dec_nr_in_flight+0x320/0x320 [ 53.976415] ? lock_acquire+0x16f/0x3f0 [ 53.980374] ? kasan_check_write+0x14/0x20 [ 53.984593] ? do_raw_spin_lock+0xc8/0x240 [ 53.988815] worker_thread+0x98/0xe40 [ 53.992601] kthread+0x354/0x420 [ 53.996298] ? process_one_work+0x1750/0x1750 [ 54.000781] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 54.006405] ret_from_fork+0x24/0x30 [ 54.010101] Modules linked in: [ 54.013654] ---[ end trace b8731eed9918d8bf ]--- [ 54.018552] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 54.024172] Code: ff 5b a7 fa 0f 0b e8 94 f7 bc fa 48 c7 c7 c0 45 5c 88 e8 ec 5b a7 fa 0f 0b e8 81 f7 bc fa 48 c7 c7 c0 45 5c 88 e8 d9 5b a7 fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 54.043268