[ 72.860464][ T26] audit: type=1800 audit(1565608210.856:27): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 72.882710][ T26] audit: type=1800 audit(1565608210.866:28): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.003163][ T26] audit: type=1800 audit(1565608212.076:29): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 74.024882][ T26] audit: type=1800 audit(1565608212.076:30): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 99.881544][T10419] ================================================================== [ 99.889648][T10419] BUG: KASAN: null-ptr-deref in rxrpc_unuse_local+0x23/0x70 [ 99.897983][T10419] Write of size 4 at addr 0000000000000010 by task syz-executor447/10419 [ 99.906379][T10419] [ 99.909095][T10419] CPU: 0 PID: 10419 Comm: syz-executor447 Not tainted 5.3.0-rc3-next-20190809 #63 [ 99.918272][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.928427][T10419] Call Trace: [ 99.931806][T10419] dump_stack+0x172/0x1f0 [ 99.936118][T10419] ? rxrpc_unuse_local+0x23/0x70 [ 99.941029][T10419] ? rxrpc_unuse_local+0x23/0x70 [ 99.945950][T10419] __kasan_report.cold+0x5/0x36 [ 99.950789][T10419] ? _raw_read_unlock_irqrestore+0xd1/0xe0 [ 99.956614][T10419] ? rxrpc_unuse_local+0x23/0x70 [ 99.961532][T10419] kasan_report+0x12/0x17 [ 99.965835][T10419] check_memory_region+0x134/0x1a0 [ 99.970930][T10419] __kasan_check_write+0x14/0x20 [ 99.975851][T10419] rxrpc_unuse_local+0x23/0x70 [ 99.980638][T10419] rxrpc_release+0x47d/0x840 [ 99.985212][T10419] __sock_release+0xce/0x280 [ 99.990045][T10419] sock_close+0x1e/0x30 [ 99.994188][T10419] __fput+0x2ff/0x890 [ 99.998443][T10419] ? __sock_release+0x280/0x280 [ 100.003290][T10419] ____fput+0x16/0x20 [ 100.007365][T10419] task_work_run+0x145/0x1c0 [ 100.011938][T10419] do_exit+0x92f/0x2e50 [ 100.016228][T10419] ? __sanitizer_cov_trace_cmp1+0x11/0x20 [ 100.021992][T10419] ? mm_update_next_owner+0x640/0x640 [ 100.027369][T10419] ? fd_install+0x4d/0x60 [ 100.031685][T10419] ? __sys_socket+0x180/0x220 [ 100.036402][T10419] ? move_addr_to_kernel+0x80/0x80 [ 100.041510][T10419] ? __ia32_sys_fallocate+0xf0/0xf0 [ 100.046713][T10419] do_group_exit+0x135/0x360 [ 100.051324][T10419] __x64_sys_exit_group+0x44/0x50 [ 100.056585][T10419] do_syscall_64+0xfa/0x760 [ 100.061510][T10419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.067711][T10419] RIP: 0033:0x43ed68 [ 100.071720][T10419] Code: Bad RIP value. [ 100.075770][T10419] RSP: 002b:00007fffb8ad86d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 100.084795][T10419] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ed68 [ 100.092837][T10419] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 100.100902][T10419] RBP: 00000000004be568 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 100.109098][T10419] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 100.117858][T10419] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 100.125833][T10419] ================================================================== [ 100.134099][T10419] Kernel panic - not syncing: panic_on_warn set ... [ 100.140692][T10419] CPU: 0 PID: 10419 Comm: syz-executor447 Tainted: G B 5.3.0-rc3-next-20190809 #63 [ 100.151264][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.161487][T10419] Call Trace: [ 100.164823][T10419] dump_stack+0x172/0x1f0 [ 100.169374][T10419] panic+0x2dc/0x755 [ 100.173258][T10419] ? add_taint.cold+0x16/0x16 [ 100.178281][T10419] ? rxrpc_unuse_local+0x23/0x70 [ 100.183448][T10419] ? preempt_schedule+0x4b/0x60 [ 100.190000][T10419] ? ___preempt_schedule+0x16/0x20 [ 100.195260][T10419] ? trace_hardirqs_on+0x5e/0x240 [ 100.200384][T10419] ? rxrpc_unuse_local+0x23/0x70 [ 100.205692][T10419] end_report+0x47/0x4f [ 100.209838][T10419] ? rxrpc_unuse_local+0x23/0x70 [ 100.214804][T10419] __kasan_report.cold+0xe/0x36 [ 100.219661][T10419] ? _raw_read_unlock_irqrestore+0xd1/0xe0 [ 100.225453][T10419] ? rxrpc_unuse_local+0x23/0x70 [ 100.230431][T10419] kasan_report+0x12/0x17 [ 100.234754][T10419] check_memory_region+0x134/0x1a0 [ 100.239857][T10419] __kasan_check_write+0x14/0x20 [ 100.244796][T10419] rxrpc_unuse_local+0x23/0x70 [ 100.249560][T10419] rxrpc_release+0x47d/0x840 [ 100.254233][T10419] __sock_release+0xce/0x280 [ 100.258935][T10419] sock_close+0x1e/0x30 [ 100.263300][T10419] __fput+0x2ff/0x890 [ 100.267314][T10419] ? __sock_release+0x280/0x280 [ 100.273416][T10419] ____fput+0x16/0x20 [ 100.277403][T10419] task_work_run+0x145/0x1c0 [ 100.282130][T10419] do_exit+0x92f/0x2e50 [ 100.286573][T10419] ? __sanitizer_cov_trace_cmp1+0x11/0x20 [ 100.292651][T10419] ? mm_update_next_owner+0x640/0x640 [ 100.298033][T10419] ? fd_install+0x4d/0x60 [ 100.302842][T10419] ? __sys_socket+0x180/0x220 [ 100.307768][T10419] ? move_addr_to_kernel+0x80/0x80 [ 100.313023][T10419] ? __ia32_sys_fallocate+0xf0/0xf0 [ 100.318420][T10419] do_group_exit+0x135/0x360 [ 100.323001][T10419] __x64_sys_exit_group+0x44/0x50 [ 100.328166][T10419] do_syscall_64+0xfa/0x760 [ 100.332802][T10419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 100.338683][T10419] RIP: 0033:0x43ed68 [ 100.342899][T10419] Code: Bad RIP value. [ 100.346960][T10419] RSP: 002b:00007fffb8ad86d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 100.355518][T10419] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043ed68 [ 100.363491][T10419] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 100.371808][T10419] RBP: 00000000004be568 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 100.379870][T10419] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 100.388312][T10419] R13: 00000000006d0180 R14: 0000000000000000 R15: 0000000000000000 [ 100.398390][T10419] Kernel Offset: disabled [ 100.402957][T10419] Rebooting in 86400 seconds..