[ 39.501746] audit: type=1800 audit(1574484872.050:32): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 43.724452] kauditd_printk_skb: 2 callbacks suppressed [ 43.724467] audit: type=1400 audit(1574484876.360:35): avc: denied { map } for pid=7672 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. [ 50.601519] audit: type=1400 audit(1574484883.240:36): avc: denied { map } for pid=7684 comm="syz-executor819" path="/root/syz-executor819710307" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 50.614980] IPVS: ftp: loaded support on port[0] = 21 executing program [ 50.654942] audit: type=1400 audit(1574484883.290:37): avc: denied { create } for pid=7685 comm="syz-executor819" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 50.662610] rxrpc: Assertion failed [ 50.680690] audit: type=1400 audit(1574484883.290:38): avc: denied { write } for pid=7685 comm="syz-executor819" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 50.686847] ------------[ cut here ]------------ [ 50.707901] audit: type=1400 audit(1574484883.290:39): avc: denied { read } for pid=7685 comm="syz-executor819" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 50.712440] kernel BUG at net/rxrpc/local_object.c:437! [ 50.712838] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.747278] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 4.19.85-syzkaller #0 [ 50.754960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.764494] Workqueue: krxrpcd rxrpc_local_processor [ 50.769690] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 50.775303] Code: ff 9d fe fa 0f 0b e8 54 39 14 fb 48 c7 c7 80 3e f1 87 e8 ec 9d fe fa 0f 0b e8 41 39 14 fb 48 c7 c7 80 3e f1 87 e8 d9 9d fe fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [ 50.794683] RSP: 0018:ffff8880aa26fce8 EFLAGS: 00010282 [ 50.800039] RAX: 0000000000000017 RBX: ffff88808e1e6938 RCX: 0000000000000000 [ 50.807307] RDX: 0000000000000000 RSI: ffffffff815595d6 RDI: ffffed101544df8f [ 50.814579] RBP: ffff8880aa26fd30 R08: 0000000000000017 R09: ffffed1015d05079 [ 50.821846] R10: ffffed1015d05078 R11: ffff8880ae8283c7 R12: ffff88808e1e61c8 [ 50.829105] R13: ffff88809f0d87c8 R14: ffff88808e1e6900 R15: ffff888094ab6940 [ 50.836360] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 50.844568] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.850695] CR2: 00000000006d9f70 CR3: 000000009e742000 CR4: 00000000001406f0 [ 50.857965] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.865318] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.872586] Call Trace: [ 50.875177] process_one_work+0x989/0x1750 [ 50.879406] ? pwq_dec_nr_in_flight+0x320/0x320 [ 50.884167] ? lock_acquire+0x16f/0x3f0 [ 50.888398] ? kasan_check_write+0x14/0x20 [ 50.892641] ? do_raw_spin_lock+0xc8/0x240 [ 50.896875] worker_thread+0x98/0xe40 [ 50.900673] ? trace_hardirqs_on+0x67/0x220 [ 50.905136] kthread+0x354/0x420 [ 50.908804] ? process_one_work+0x1750/0x1750 [ 50.913290] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 50.918821] ret_from_fork+0x24/0x30 [ 50.922517] Modules linked in: [ 50.926011] ---[ end trace 389608ef5e7f176f ]--- [ 50.931028] RIP: 0010:rxrpc_local_processor.cold+0x24/0x29 [ 50.936814] Code: ff 9d fe fa 0f 0b e8 54 39 14 fb 48 c7 c7 80 3e f1 87 e8 ec 9d fe fa 0f 0b e8 41 39 14 fb 48 c7 c7 80 3e f1 87 e8 d9 9d fe fa <0f> 0b 90 90 90 55 48 89 e5 41 57 49 89 ff 41 56 41 55 41 54 53 48 [