[ 34.230479][ T26] audit: type=1800 audit(1554394899.901:27): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.258468][ T26] audit: type=1800 audit(1554394899.901:28): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 35.105496][ T26] audit: type=1800 audit(1554394900.821:29): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 35.130698][ T26] audit: type=1800 audit(1554394900.821:30): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 47.985190][ T7589] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor938/7589 [ 47.994706][ T7589] caller is ip6_finish_output+0x335/0xdc0 [ 48.000469][ T7589] CPU: 1 PID: 7589 Comm: syz-executor938 Not tainted 5.1.0-rc2+ #121 [ 48.008626][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.018662][ T7589] Call Trace: [ 48.021942][ T7589] dump_stack+0x172/0x1f0 [ 48.026379][ T7589] __this_cpu_preempt_check+0x246/0x270 [ 48.031922][ T7589] ip6_finish_output+0x335/0xdc0 [ 48.036852][ T7589] ip6_output+0x235/0x7f0 [ 48.041168][ T7589] ? ip6_finish_output+0xdc0/0xdc0 [ 48.046261][ T7589] ? ip6_fragment+0x38b0/0x38b0 [ 48.051097][ T7589] ? kasan_check_read+0x11/0x20 [ 48.055927][ T7589] ip6_xmit+0xe41/0x20c0 [ 48.060150][ T7589] ? ip6_finish_output2+0x2550/0x2550 [ 48.065500][ T7589] ? mark_held_locks+0xf0/0xf0 [ 48.070240][ T7589] ? ip6_setup_cork+0x1870/0x1870 [ 48.075250][ T7589] sctp_v6_xmit+0x313/0x660 [ 48.079731][ T7589] sctp_packet_transmit+0x1bc4/0x36f0 [ 48.085107][ T7589] ? sctp_packet_config+0xfe0/0xfe0 [ 48.090288][ T7589] ? sctp_packet_append_chunk+0x946/0xda0 [ 48.095982][ T7589] ? sctp_outq_select_transport+0x21a/0x790 [ 48.101856][ T7589] sctp_outq_flush_ctrl.constprop.0+0x6d4/0xd50 [ 48.108095][ T7589] ? sctp_prsctp_prune_sent.isra.0+0x820/0x820 [ 48.114248][ T7589] ? lock_downgrade+0x880/0x880 [ 48.119087][ T7589] ? add_timer+0x450/0xbe0 [ 48.123573][ T7589] ? find_held_lock+0x35/0x130 [ 48.128316][ T7589] ? add_timer+0x463/0xbe0 [ 48.132709][ T7589] sctp_outq_flush+0xe8/0x2780 [ 48.137566][ T7589] ? mark_held_locks+0xa4/0xf0 [ 48.142390][ T7589] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 48.148185][ T7589] ? add_timer+0x463/0xbe0 [ 48.152582][ T7589] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 48.158375][ T7589] ? lockdep_hardirqs_on+0x418/0x5d0 [ 48.163636][ T7589] ? trace_hardirqs_on+0x67/0x230 [ 48.168641][ T7589] ? __sctp_outq_teardown+0xc60/0xc60 [ 48.173992][ T7589] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 48.180211][ T7589] ? sctp_outq_tail+0x68c/0x930 [ 48.185109][ T7589] sctp_outq_uncork+0x6c/0x80 [ 48.189786][ T7589] sctp_do_sm+0x559/0x53e0 [ 48.194191][ T7589] ? sctp_do_8_2_transport_strike.isra.0+0x940/0x940 [ 48.200856][ T7589] ? __local_bh_enable_ip+0x15a/0x270 [ 48.206207][ T7589] ? lock_downgrade+0x880/0x880 [ 48.211032][ T7589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.217251][ T7589] ? kasan_check_read+0x11/0x20 [ 48.222077][ T7589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.228307][ T7589] ? sctp_hash_transport+0x10b/0x18d0 [ 48.233678][ T7589] ? memcpy+0x46/0x50 [ 48.237647][ T7589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 48.243876][ T7589] ? sctp_assoc_set_primary+0x274/0x310 [ 48.249407][ T7589] sctp_primitive_ASSOCIATE+0x9d/0xd0 [ 48.254758][ T7589] __sctp_connect+0x8cd/0xce0 [ 48.259531][ T7589] ? sctp_sendmsg_to_asoc+0x17b0/0x17b0 [ 48.265201][ T7589] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 48.271431][ T7589] ? _copy_from_user+0xdd/0x150 [ 48.276265][ T7589] ? security_sctp_bind_connect+0x99/0xd0 [ 48.281969][ T7589] __sctp_setsockopt_connectx+0x133/0x1a0 [ 48.287847][ T7589] sctp_setsockopt+0x22cc/0x6d20 [ 48.292791][ T7589] ? sctp_setsockopt_paddr_thresholds+0x540/0x540 [ 48.299191][ T7589] ? ___might_sleep+0x163/0x280 [ 48.304030][ T7589] ? __might_sleep+0x95/0x190 [ 48.308688][ T7589] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 48.314301][ T7589] ? aa_sk_perm+0x288/0x880 [ 48.318873][ T7589] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 48.324429][ T7589] ? aa_sock_opt_perm.isra.0+0xa1/0x130 [ 48.329965][ T7589] sock_common_setsockopt+0x9a/0xe0 [ 48.335148][ T7589] __sys_setsockopt+0x180/0x280 [ 48.339975][ T7589] ? kernel_accept+0x310/0x310 [ 48.344726][ T7589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 48.350160][ T7589] ? do_syscall_64+0x26/0x610 [ 48.354814][ T7589] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.360853][ T7589] ? do_syscall_64+0x26/0x610 [ 48.365507][ T7589] __x64_sys_setsockopt+0xbe/0x150 [ 48.370595][ T7589] do_syscall_64+0x103/0x610 [ 48.375158][ T7589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 48.381467][ T7589] RIP: 0033:0x440189 [ 48.385338][ T7589] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 48.404928][ T7589] RSP: 002b:00007ffc5a6b7e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 48.413476][ T7589] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440189 [ 48.421431][ T7589] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 48.429382][ T7589] RBP: 00000000006ca018 R08: 000000000000001c R09: 00000000004002c8