[ 34.144962][ T26] audit: type=1800 audit(1554436456.109:27): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 34.171319][ T26] audit: type=1800 audit(1554436456.119:28): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.813287][ T26] audit: type=1800 audit(1554436456.829:29): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.833532][ T26] audit: type=1800 audit(1554436456.829:30): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.194' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 70.392584][ T7479] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor881/7479 [ 70.402153][ T7479] caller is ip6_finish_output+0x335/0xdc0 [ 70.407908][ T7479] CPU: 0 PID: 7479 Comm: syz-executor881 Not tainted 5.1.0-rc2+ #122 [ 70.415965][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.425996][ T7479] Call Trace: [ 70.429267][ T7479] dump_stack+0x172/0x1f0 [ 70.433577][ T7479] __this_cpu_preempt_check+0x246/0x270 [ 70.439103][ T7479] ip6_finish_output+0x335/0xdc0 [ 70.444018][ T7479] ip6_output+0x235/0x7f0 [ 70.448327][ T7479] ? ip6_finish_output+0xdc0/0xdc0 [ 70.453431][ T7479] ? ip6_fragment+0x38b0/0x38b0 [ 70.458260][ T7479] ? kasan_check_read+0x11/0x20 [ 70.463089][ T7479] ip6_xmit+0xe41/0x20c0 [ 70.467308][ T7479] ? ip6_finish_output2+0x2550/0x2550 [ 70.472671][ T7479] ? mark_held_locks+0xf0/0xf0 [ 70.477413][ T7479] ? ip6_setup_cork+0x1870/0x1870 [ 70.482421][ T7479] sctp_v6_xmit+0x313/0x660 [ 70.486903][ T7479] sctp_packet_transmit+0x1bc4/0x36f0 [ 70.492274][ T7479] ? sctp_packet_config+0xfe0/0xfe0 [ 70.497446][ T7479] ? sctp_packet_append_chunk+0x946/0xda0 [ 70.503164][ T7479] ? sctp_outq_select_transport+0x21a/0x790 [ 70.509035][ T7479] sctp_outq_flush_ctrl.constprop.0+0x6d4/0xd50 [ 70.515254][ T7479] ? sctp_prsctp_prune_sent.isra.0+0x820/0x820 [ 70.521391][ T7479] ? lock_downgrade+0x880/0x880 [ 70.526220][ T7479] ? add_timer+0x450/0xbe0 [ 70.530622][ T7479] ? find_held_lock+0x35/0x130 [ 70.535465][ T7479] ? add_timer+0x463/0xbe0 [ 70.539869][ T7479] sctp_outq_flush+0xe8/0x2780 [ 70.544614][ T7479] ? mark_held_locks+0xa4/0xf0 [ 70.549363][ T7479] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 70.555139][ T7479] ? add_timer+0x463/0xbe0 [ 70.559613][ T7479] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 70.565390][ T7479] ? lockdep_hardirqs_on+0x418/0x5d0 [ 70.570649][ T7479] ? trace_hardirqs_on+0x67/0x230 [ 70.575661][ T7479] ? __sctp_outq_teardown+0xc60/0xc60 [ 70.581059][ T7479] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 70.587272][ T7479] ? sctp_outq_tail+0x68c/0x930 [ 70.592098][ T7479] sctp_outq_uncork+0x6c/0x80 [ 70.596769][ T7479] sctp_do_sm+0x559/0x53e0 [ 70.601172][ T7479] ? sctp_do_8_2_transport_strike.isra.0+0x940/0x940 [ 70.607830][ T7479] ? __local_bh_enable_ip+0x15a/0x270 [ 70.613177][ T7479] ? lock_downgrade+0x880/0x880 [ 70.618020][ T7479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.624262][ T7479] ? kasan_check_read+0x11/0x20 [ 70.629090][ T7479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.635318][ T7479] ? sctp_hash_transport+0x10b/0x18d0 [ 70.640679][ T7479] ? memcpy+0x46/0x50 [ 70.644636][ T7479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 70.650854][ T7479] ? sctp_assoc_set_primary+0x274/0x310 [ 70.656463][ T7479] sctp_primitive_ASSOCIATE+0x9d/0xd0 [ 70.661813][ T7479] __sctp_connect+0x8cd/0xce0 [ 70.666472][ T7479] ? sctp_sendmsg_to_asoc+0x17b0/0x17b0 [ 70.671999][ T7479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 70.678226][ T7479] ? _copy_from_user+0xdd/0x150 [ 70.683054][ T7479] ? security_sctp_bind_connect+0x99/0xd0 [ 70.688763][ T7479] __sctp_setsockopt_connectx+0x133/0x1a0 [ 70.694465][ T7479] sctp_setsockopt+0x22cc/0x6d20 [ 70.699379][ T7479] ? sctp_setsockopt_paddr_thresholds+0x540/0x540 [ 70.705772][ T7479] ? ___might_sleep+0x163/0x280 [ 70.710617][ T7479] ? __might_sleep+0x95/0x190 [ 70.715272][ T7479] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 70.720880][ T7479] ? aa_sk_perm+0x288/0x880 [ 70.725360][ T7479] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 70.730885][ T7479] ? aa_sock_opt_perm.isra.0+0xa1/0x130 [ 70.736419][ T7479] sock_common_setsockopt+0x9a/0xe0 [ 70.741596][ T7479] __sys_setsockopt+0x180/0x280 [ 70.746421][ T7479] ? kernel_accept+0x310/0x310 [ 70.751172][ T7479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 70.756610][ T7479] ? do_syscall_64+0x26/0x610 [ 70.761274][ T7479] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.767316][ T7479] ? do_syscall_64+0x26/0x610 [ 70.771973][ T7479] __x64_sys_setsockopt+0xbe/0x150 [ 70.777061][ T7479] do_syscall_64+0x103/0x610 [ 70.781640][ T7479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 70.787513][ T7479] RIP: 0033:0x440189 [ 70.791385][ T7479] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 70.810963][ T7479] RSP: 002b:00007ffe68aade98 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.819361][ T7479] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440189 [ 70.827318][ T7479] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 70.835262][ T7479] RBP: 00000000006ca018 R08: 000000000000001c R09: 00000000004002c8 [ 70.843219][ T7