[ 35.862849] audit: type=1800 audit(1551833284.850:27): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 35.890683] audit: type=1800 audit(1551833284.850:28): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.695097] audit: type=1800 audit(1551833285.740:29): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.714503] audit: type=1800 audit(1551833285.740:30): pid=7544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.227' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 48.039003] kasan: CONFIG_KASAN_INLINE enabled [ 48.043688] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 48.051040] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 48.057270] CPU: 0 PID: 7695 Comm: syz-executor913 Not tainted 5.0.0+ #7 [ 48.064095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.073440] RIP: 0010:sctp_sched_rr_dequeue+0xd3/0x170 [ 48.078696] Code: ea 03 80 3c 02 00 0f 85 a2 00 00 00 48 8b 5b 08 e8 62 20 ee fa 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 53 4c 8b 6b 30 4c 89 e7 49 83 ed 18 4c 89 ee e8 b4 [ 48.097582] RSP: 0018:ffff88808ce1f030 EFLAGS: 00010206 [ 48.102932] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8679cd9f [ 48.110274] RDX: 0000000000000006 RSI: ffffffff8681c41e RDI: 0000000000000030 [ 48.117529] RBP: ffff88808ce1f048 R08: ffff8880955ba300 R09: 0000000000000002 [ 48.125734] R10: ffffed1015d05bcf R11: ffff8880ae82de7b R12: ffff88809201aee0 [ 48.132991] R13: ffff88809201a7c0 R14: dffffc0000000000 R15: ffff88808ce1f188 [ 48.140267] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000089d6840 [ 48.148470] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 48.154338] CR2: 0000000020000084 CR3: 000000009552c000 CR4: 00000000001406f0 [ 48.161668] Call Trace: [ 48.164258] sctp_outq_flush+0xba2/0x2790 [ 48.168393] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 48.173823] ? sctp_chunkify+0x4b/0x290 [ 48.177778] ? __sctp_outq_teardown+0xc60/0xc60 [ 48.182591] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 48.188111] ? sctp_outq_tail+0x681/0x930 [ 48.192265] sctp_outq_uncork+0x6c/0x80 [ 48.196249] sctp_do_sm+0x513/0x5390 [ 48.199943] ? __lock_acquire+0x53b/0x4700 [ 48.204163] ? __sys_sendmsg+0x105/0x1d0 [ 48.208211] ? sctp_do_8_2_transport_strike.isra.0+0x940/0x940 [ 48.214164] ? mark_held_locks+0x100/0x100 [ 48.218387] ? sctp_assoc_bh_rcv+0x2fc/0x660 [ 48.222776] ? find_held_lock+0x35/0x130 [ 48.226880] ? sctp_assoc_bh_rcv+0x2fc/0x660 [ 48.231298] ? kvm_clock_read+0x18/0x30 [ 48.235622] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 48.240624] ? ktime_get+0x208/0x300 [ 48.244319] sctp_assoc_bh_rcv+0x343/0x660 [ 48.248539] sctp_inq_push+0x1ea/0x290 [ 48.252408] sctp_backlog_rcv+0x189/0xbc0 [ 48.256538] ? __local_bh_enable_ip+0x15a/0x270 [ 48.261185] ? sctp_hash_obj+0x5e0/0x5e0 [ 48.265340] ? __release_sock+0xca/0x3a0 [ 48.269384] ? __local_bh_enable_ip+0x15a/0x270 [ 48.274036] __release_sock+0x12e/0x3a0 [ 48.277992] release_sock+0x59/0x1c0 [ 48.281686] sctp_wait_for_connect+0x316/0x540 [ 48.286256] ? sctp_get_port+0x180/0x180 [ 48.290299] ? finish_wait+0x260/0x260 [ 48.294234] ? sctp_datamsg_put+0x36/0x4d0 [ 48.298465] ? sctp_primitive_SEND+0xa0/0xd0 [ 48.302855] sctp_sendmsg_to_asoc+0x13e2/0x17d0 [ 48.307508] ? sctp_clear_owner_w+0x120/0x120 [ 48.312081] ? sctp_autobind+0x1f0/0x1f0 [ 48.316137] ? lock_downgrade+0x810/0x810 [ 48.320311] ? kasan_check_read+0x11/0x20 [ 48.324448] sctp_sendmsg+0x10a9/0x17e0 [ 48.328403] ? sctp_id2assoc+0x2c0/0x2c0 [ 48.332448] ? __might_sleep+0x95/0x190 [ 48.336412] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 48.341337] ? aa_sk_perm+0x1c6/0x7c0 [ 48.345123] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 48.349946] inet_sendmsg+0x147/0x5d0 [ 48.353730] ? ipip_gro_receive+0x100/0x100 [ 48.358034] sock_sendmsg+0xdd/0x130 [ 48.361729] ___sys_sendmsg+0x806/0x930 [ 48.365690] ? copy_msghdr_from_user+0x430/0x430 [ 48.370431] ? __local_bh_enable_ip+0x15a/0x270 [ 48.375081] ? _raw_spin_unlock_bh+0x31/0x40 [ 48.379468] ? release_sock+0x158/0x1c0 [ 48.383426] ? sctp_setsockopt+0x165/0x68a0 [ 48.387736] ? __fget+0x340/0x540 [ 48.391165] ? sctp_setsockopt_paddr_thresholds+0x540/0x540 [ 48.396938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.402463] ? __fget_light+0x1a9/0x230 [ 48.406418] ? __fdget+0x1b/0x20 [ 48.409775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 48.415346] __sys_sendmsg+0x105/0x1d0 [ 48.419223] ? __ia32_sys_shutdown+0x80/0x80 [ 48.423631] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 48.429158] ? fput+0x128/0x1a0 [ 48.432427] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.437165] ? do_fast_syscall_32+0xd1/0xc98 [ 48.441558] ? entry_SYSENTER_compat+0x70/0x7f [ 48.446119] ? do_fast_syscall_32+0xd1/0xc98 [ 48.450572] __ia32_compat_sys_sendmsg+0x7a/0xb0 [ 48.455805] do_fast_syscall_32+0x281/0xc98 [ 48.460153] entry_SYSENTER_compat+0x70/0x7f [ 48.464550] RIP: 0023:0xf7f09869 [ 48.467907] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 48.486791] RSP: 002b:00000000ffe8474c EFLAGS: 00000282 ORIG_RAX: 0000000000000172 [ 48.494478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000002001afc8 [ 48.501728] RDX: 0000000000000000 RSI: 00000000080ea078 RDI: 00000000ffe847a0 [ 48.508974] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 48.516223] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 48.523475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.530726] Modules linked in: [ 48.534400] ---[ end trace fd6e1316b98b11f6 ]--- [ 48.539166] RIP: 0010:sctp_sched_rr_dequeue+0xd3/0x170 [ 48.544495] Code: ea 03 80 3c 02 00 0f 85 a2 00 00 00 48 8b 5b 08 e8 62 20 ee fa 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 53 4c 8b 6b 30 4c 89 e7 49 83 ed 18 4c 89 ee e8 b4 [ 48.563415] RSP: 0018:ffff88808ce1f030 EFLAGS: 00010206 [ 48.568861] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8679cd9f [ 48.576152] RDX: 0000000000000006 RSI: ffffffff8681c41e RDI: 0000000000000030 [ 48.583440] RBP: ffff88808ce1f048 R08: ffff8880955ba300 R09: 0000000000000002 [ 48.590691] R10: ffffed1015d05bcf R11: ffff8880ae82de7b R12: ffff88809201aee0 [ 48.597971] R13: ffff88809201a7c0 R14: dffffc0000000000 R15: ffff88808ce1f188 [ 48.605270] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:00000000089d6840 [ 48.613522] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 48.619424] CR2: 0000000020000084 CR3: 000000009552c000 CR4: 00000000001406f0 [ 48.626715] Kernel panic - not syncing: Fatal exception [ 48.632839] Kernel Offset: disabled [ 48.636454] Rebooting in 86400 seconds..