[ 41.690253] audit: type=1800 audit(1576992625.183:32): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 46.123514] kauditd_printk_skb: 2 callbacks suppressed [ 46.123530] audit: type=1400 audit(1576992629.683:35): avc: denied { map } for pid=7809 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. [ 52.690310] audit: type=1400 audit(1576992636.253:36): avc: denied { map } for pid=7821 comm="syz-executor218" path="/root/syz-executor218269179" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 52.704534] IPVS: ftp: loaded support on port[0] = 21 executing program [ 52.744656] audit: type=1400 audit(1576992636.303:37): avc: denied { create } for pid=7822 comm="syz-executor218" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 52.752284] rxrpc: Assertion failed [ 52.771493] audit: type=1400 audit(1576992636.303:38): avc: denied { write } for pid=7822 comm="syz-executor218" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 52.775727] ------------[ cut here ]------------ [ 52.797819] audit: type=1400 audit(1576992636.303:39): avc: denied { read } for pid=7822 comm="syz-executor218" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 52.801926] kernel BUG at net/rxrpc/local_object.c:437! [ 52.837083] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 52.842454] CPU: 0 PID: 2657 Comm: kworker/0:2 Not tainted 4.19.91-syzkaller #0 [ 52.849896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.860840] Workqueue: krxrpcd rxrpc_local_processor [ 52.866027] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 52.872435] Code: ff 5b a7 fa 0f 0b e8 94 f7 bc fa 48 c7 c7 c0 45 5c 88 e8 ec 5b a7 fa 0f 0b e8 81 f7 bc fa 48 c7 c7 c0 45 5c 88 e8 d9 5b a7 fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 52.891324] RSP: 0018:ffff88809fa37ce8 EFLAGS: 00010282 [ 52.896684] RAX: 0000000000000017 RBX: ffff888091b92078 RCX: 0000000000000000 [ 52.904147] RDX: 0000000000000000 RSI: ffffffff8155bb16 RDI: ffffed1013f46f8f [ 52.911766] RBP: ffff88809fa37d30 R08: 0000000000000017 R09: ffffed1015d05079 [ 52.919132] R10: ffffed1015d05078 R11: ffff8880ae8283c7 R12: ffff88809246d848 [ 52.927009] R13: ffff88809faa0648 R14: ffff888091b92040 R15: ffff888094a1d500 [ 52.934448] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 52.942663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.948558] CR2: 00000000006d9f70 CR3: 0000000008e6d000 CR4: 00000000001406f0 [ 52.956280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.963749] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.971006] Call Trace: [ 52.973600] process_one_work+0x989/0x1750 [ 52.978005] ? pwq_dec_nr_in_flight+0x320/0x320 [ 52.982660] ? lock_acquire+0x16f/0x3f0 [ 52.986624] ? kasan_check_write+0x14/0x20 [ 52.990856] ? do_raw_spin_lock+0xc8/0x240 [ 52.995377] worker_thread+0x98/0xe40 [ 52.999170] ? trace_hardirqs_on+0x67/0x220 [ 53.003499] kthread+0x354/0x420 [ 53.006963] ? process_one_work+0x1750/0x1750 [ 53.012148] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 53.018546] ret_from_fork+0x24/0x30 [ 53.022244] Modules linked in: [ 53.025810] ---[ end trace 1970fdf1ad17c53f ]--- [ 53.030870] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 53.036825] Code: ff 5b a7 fa 0f 0b e8 94 f7 bc fa 48 c7 c7 c0 45 5c 88 e8 ec 5b a7 fa 0f 0b e8 81 f7 bc