[ 68.461552][ T24] audit: type=1800 audit(1565509589.859:27): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 68.501094][ T24] audit: type=1800 audit(1565509589.969:28): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 69.256922][ T24] audit: type=1800 audit(1565509590.719:29): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 69.280795][ T24] audit: type=1800 audit(1565509590.729:30): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 78.750633][T10202] ================================================================== [ 78.758715][T10202] BUG: KASAN: null-ptr-deref in rxrpc_unuse_local+0x23/0x70 [ 78.765987][T10202] Write of size 4 at addr 0000000000000010 by task syz-executor321/10202 [ 78.774412][T10202] [ 78.776732][T10202] CPU: 1 PID: 10202 Comm: syz-executor321 Not tainted 5.3.0-rc3+ #157 [ 78.784853][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.794924][T10202] Call Trace: [ 78.798241][T10202] dump_stack+0x172/0x1f0 [ 78.802598][T10202] ? rxrpc_unuse_local+0x23/0x70 [ 78.807519][T10202] ? rxrpc_unuse_local+0x23/0x70 [ 78.812439][T10202] __kasan_report.cold+0x5/0x36 [ 78.817266][T10202] ? _raw_read_unlock_irqrestore+0xc1/0xe0 [ 78.823062][T10202] ? rxrpc_unuse_local+0x23/0x70 [ 78.827978][T10202] kasan_report+0x12/0x17 [ 78.832284][T10202] check_memory_region+0x134/0x1a0 [ 78.837477][T10202] __kasan_check_write+0x14/0x20 [ 78.842391][T10202] rxrpc_unuse_local+0x23/0x70 [ 78.847150][T10202] rxrpc_release+0x47d/0x840 [ 78.851719][T10202] __sock_release+0xce/0x280 [ 78.856306][T10202] sock_close+0x1e/0x30 [ 78.860444][T10202] __fput+0x2ff/0x890 [ 78.864429][T10202] ? __sock_release+0x280/0x280 [ 78.869263][T10202] ____fput+0x16/0x20 [ 78.873222][T10202] task_work_run+0x145/0x1c0 [ 78.877793][T10202] do_exit+0x92f/0x2e50 [ 78.881930][T10202] ? __sanitizer_cov_trace_const_cmp4+0x1/0x20 [ 78.888083][T10202] ? mm_update_next_owner+0x640/0x640 [ 78.893437][T10202] ? fd_install+0x4d/0x60 [ 78.897744][T10202] ? __sys_socket+0x180/0x220 [ 78.902404][T10202] ? move_addr_to_kernel+0x80/0x80 [ 78.907516][T10202] ? __ia32_sys_fallocate+0xf0/0xf0 [ 78.912691][T10202] do_group_exit+0x135/0x360 [ 78.917257][T10202] __x64_sys_exit_group+0x44/0x50 [ 78.922275][T10202] do_syscall_64+0xfd/0x6a0 [ 78.926764][T10202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 78.932635][T10202] RIP: 0033:0x43ed68 [ 78.936529][T10202] Code: Bad RIP value. [ 78.940657][T10202] RSP: 002b:00007ffd935ecbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 78.949041][T10202] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ed68 [ 78.957017][T10202] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 78.964981][T10202] RBP: 00000000004be568 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 78.972945][T10202] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 78.980895][T10202] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 78.988846][T10202] ================================================================== [ 78.997428][T10202] Kernel panic - not syncing: panic_on_warn set ... [ 79.004026][T10202] CPU: 1 PID: 10202 Comm: syz-executor321 Tainted: G B 5.3.0-rc3+ #157 [ 79.013627][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.023838][T10202] Call Trace: [ 79.027108][T10202] dump_stack+0x172/0x1f0 [ 79.031421][T10202] panic+0x2dc/0x755 [ 79.035294][T10202] ? add_taint.cold+0x16/0x16 [ 79.039950][T10202] ? rxrpc_unuse_local+0x23/0x70 [ 79.044860][T10202] ? preempt_schedule+0x4b/0x60 [ 79.049688][T10202] ? ___preempt_schedule+0x16/0x20 [ 79.054778][T10202] ? trace_hardirqs_on+0x5e/0x240 [ 79.059781][T10202] ? rxrpc_unuse_local+0x23/0x70 [ 79.064722][T10202] end_report+0x47/0x4f [ 79.068856][T10202] ? rxrpc_unuse_local+0x23/0x70 [ 79.073788][T10202] __kasan_report.cold+0xe/0x36 [ 79.078619][T10202] ? _raw_read_unlock_irqrestore+0xc1/0xe0 [ 79.084398][T10202] ? rxrpc_unuse_local+0x23/0x70 [ 79.089323][T10202] kasan_report+0x12/0x17 [ 79.093647][T10202] check_memory_region+0x134/0x1a0 [ 79.098736][T10202] __kasan_check_write+0x14/0x20 [ 79.103736][T10202] rxrpc_unuse_local+0x23/0x70 [ 79.108473][T10202] rxrpc_release+0x47d/0x840 [ 79.113042][T10202] __sock_release+0xce/0x280 [ 79.117610][T10202] sock_close+0x1e/0x30 [ 79.121742][T10202] __fput+0x2ff/0x890 [ 79.125720][T10202] ? __sock_release+0x280/0x280 [ 79.130549][T10202] ____fput+0x16/0x20 [ 79.134506][T10202] task_work_run+0x145/0x1c0 [ 79.139075][T10202] do_exit+0x92f/0x2e50 [ 79.143209][T10202] ? __sanitizer_cov_trace_const_cmp4+0x1/0x20 [ 79.149338][T10202] ? mm_update_next_owner+0x640/0x640 [ 79.154685][T10202] ? fd_install+0x4d/0x60 [ 79.158993][T10202] ? __sys_socket+0x180/0x220 [ 79.163646][T10202] ? move_addr_to_kernel+0x80/0x80 [ 79.168731][T10202] ? __ia32_sys_fallocate+0xf0/0xf0 [ 79.173902][T10202] do_group_exit+0x135/0x360 [ 79.178469][T10202] __x64_sys_exit_group+0x44/0x50 [ 79.183468][T10202] do_syscall_64+0xfd/0x6a0 [ 79.187950][T10202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 79.193817][T10202] RIP: 0033:0x43ed68 [ 79.197694][T10202] Code: Bad RIP value. [ 79.201732][T10202] RSP: 002b:00007ffd935ecbb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 79.210116][T10202] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ed68 [ 79.218165][T10202] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 79.226135][T10202] RBP: 00000000004be568 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 79.234086][T10202] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 79.242241][T10202] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 79.251703][T10202] Kernel Offset: disabled [ 79.256026][T10202] Rebooting in 86400 seconds..