INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-6,10.128.0.50' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.288565] usercopy: kernel memory exposure attempt detected from ffff8801d4310630 (SCTPv6) (11 bytes) [ 55.290089] ------------[ cut here ]------------ [ 55.290728] kernel BUG at mm/usercopy.c:84! [ 55.291539] invalid opcode: 0000 [#1] SMP KASAN [ 55.292183] Dumping ftrace buffer: [ 55.292677] (ftrace buffer empty) [ 55.293174] Modules linked in: [ 55.293614] CPU: 1 PID: 2993 Comm: syzkaller447333 Not tainted 4.14.0-rc5-mm1+ #20 [ 55.294640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.295862] task: ffff8801d1cb8740 task.stack: ffff8801d2210000 [ 55.296668] RIP: 0010:__check_object_size+0x3a2/0x4f0 [ 55.297366] RSP: 0018:ffff8801d22170f0 EFLAGS: 00010286 [ 55.298076] RAX: 000000000000005b RBX: ffffffff8511a180 RCX: 0000000000000000 [ 55.299057] RDX: 000000000000005b RSI: 1ffff1003a442dde RDI: ffffed003a442e12 [ 55.300010] RBP: ffff8801d22171e0 R08: 0000000000000001 R09: 0000000000000000 [ 55.300975] R10: ffff8801d2217098 R11: 0000000000000000 R12: ffffffff8511a140 [ 55.301926] R13: ffff8801d4310630 R14: 000000000000000b R15: ffffea000750c400 [ 55.302941] FS: 0000000002000880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 55.304015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.304830] CR2: 0000000020673000 CR3: 00000001d223e000 CR4: 00000000001406e0 [ 55.305805] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.306773] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.307725] Call Trace: [ 55.308085] ? lock_release+0xa40/0xa40 [ 55.308636] ? check_stack_object+0x140/0x140 [ 55.309236] ? __local_bh_enable_ip+0x9d/0x160 [ 55.313787] ? __might_sleep+0x95/0x190 [ 55.317730] sctp_getsockopt+0x2b90/0x70b0 [ 55.321930] ? do_raw_spin_trylock+0x190/0x190 [ 55.326478] ? mark_held_locks+0xaf/0x100 [ 55.330593] ? sctp_getsockopt_peeloff_common+0x2f0/0x2f0 [ 55.336093] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 55.341080] ? pagevec_lru_move_fn+0x1a4/0x230 [ 55.345627] ? get_kernel_page+0x110/0x110 [ 55.349828] ? __lru_cache_add+0x2a4/0x410 [ 55.354030] ? __pagevec_lru_add+0x30/0x30 [ 55.358235] ? save_stack+0xa3/0xd0 [ 55.361828] ? save_stack+0x43/0xd0 [ 55.365418] ? kasan_kmalloc+0xad/0xe0 [ 55.369272] ? print_irqtrace_events+0x270/0x270 [ 55.373994] ? __handle_mm_fault+0x1827/0x39c0 [ 55.378544] ? check_noncircular+0x20/0x20 [ 55.382742] ? lru_cache_add+0x1c7/0x3a0 [ 55.386767] ? get_mem_cgroup_from_mm+0x710/0x710 [ 55.391574] ? lru_cache_add_file+0x20/0x20 [ 55.395860] ? __bfs+0x6b0/0x750 [ 55.399192] ? __mem_cgroup_threshold+0x8f0/0x8f0 [ 55.403999] ? mark_held_locks+0xaf/0x100 [ 55.408116] ? find_held_lock+0x35/0x1d0 [ 55.412146] ? do_huge_pmd_anonymous_page+0xab4/0x1b00 [ 55.417385] ? lock_downgrade+0x990/0x990 [ 55.421497] ? pudp_huge_clear_flush+0x1f0/0x1f0 [ 55.426219] ? do_raw_spin_trylock+0x190/0x190 [ 55.430767] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 55.436619] ? _cond_resched+0x14/0x30 [ 55.440473] ? _raw_spin_unlock+0x22/0x30 [ 55.444585] ? do_huge_pmd_anonymous_page+0xb21/0x1b00 [ 55.449829] ? __thp_get_unmapped_area+0x130/0x130 [ 55.454723] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 55.459879] ? is_bpf_text_address+0xa4/0x120 [ 55.464342] ? kernel_text_address+0x102/0x140 [ 55.468889] ? __kernel_text_address+0xd/0x40 [ 55.473350] ? unwind_get_return_address+0x61/0xa0 [ 55.478247] ? __save_stack_trace+0x7e/0xd0 [ 55.482538] ? depot_save_stack+0x12c/0x490 [ 55.486833] ? save_stack+0xa3/0xd0 [ 55.490424] ? save_stack+0x43/0xd0 [ 55.494015] ? kasan_kmalloc+0xad/0xe0 [ 55.497867] ? kasan_slab_alloc+0x12/0x20 [ 55.501978] ? kmem_cache_alloc+0x12e/0x760 [ 55.506266] ? selinux_file_alloc_security+0xae/0x190 [ 55.511422] ? security_file_alloc+0x6d/0xa0 [ 55.515794] ? get_empty_filp+0x189/0x4f0 [ 55.519905] ? alloc_file+0x26/0x390 [ 55.523587] ? sock_alloc_file+0x1fd/0x550 [ 55.527785] ? sock_map_fd+0x34/0x70 [ 55.531461] ? SyS_socket+0x125/0x200 [ 55.535226] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 55.540119] ? kasan_slab_alloc+0x12/0x20 [ 55.544230] ? kmem_cache_alloc+0x12e/0x760 [ 55.548514] ? get_empty_filp+0xfb/0x4f0 [ 55.552537] ? alloc_file+0x26/0x390 [ 55.556216] ? sock_alloc_file+0x1fd/0x550 [ 55.560417] ? find_held_lock+0x35/0x1d0 [ 55.564443] ? check_noncircular+0x20/0x20 [ 55.568645] ? __handle_mm_fault+0x587/0x39c0 [ 55.573110] ? check_noncircular+0x20/0x20 [ 55.577309] ? __pmd_alloc+0x4e0/0x4e0 [ 55.581162] ? __lockdep_init_map+0xe4/0x650 [ 55.585537] ? find_held_lock+0x35/0x1d0 [ 55.589565] ? handle_mm_fault+0x248/0x8d0 [ 55.593764] ? find_held_lock+0x35/0x1d0 [ 55.597793] ? __do_page_fault+0x64c/0xd60 [ 55.601993] ? lock_downgrade+0x990/0x990 [ 55.606109] ? handle_mm_fault+0x410/0x8d0 [ 55.610393] ? down_read_trylock+0xdb/0x170 [ 55.614678] ? __do_page_fault+0x31e/0xd60 [ 55.618878] ? __handle_mm_fault+0x39c0/0x39c0 [ 55.623423] ? vmacache_find+0x5f/0x280 [ 55.627360] ? vmacache_update+0xfe/0x130 [ 55.631653] ? __fget_light+0x297/0x380 [ 55.635596] ? sock_has_perm+0x29c/0x400 [ 55.639622] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 55.644961] sock_common_getsockopt+0x95/0xd0 [ 55.649423] ? sock_common_getsockopt+0x95/0xd0 [ 55.654064] SyS_getsockopt+0x178/0x340 [ 55.658011] ? SyS_setsockopt+0x360/0x360 [ 55.662129] ? entry_SYSCALL_64_fastpath+0x5/0xbe [ 55.667343] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 55.672331] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.677058] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 55.681780] RIP: 0033:0x43fc99 [ 55.684936] RSP: 002b:00007ffd542b5808 EFLAGS: 00000203 ORIG_RAX: 0000000000000037 [ 55.692609] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fc99 [ 55.699845] RDX: 000000000000000b RSI: 0000000000000084 RDI: 0000000000000003 [ 55.707079] RBP: 0000000000000082 R08: 0000000020673000 R09: 0000000000000000 [ 55.714313] R10: 0000000020cd1000 R11: 0000000000000203 R12: 0000000000401600 [ 55.721547] R13: 0000000000401690 R14: 0000000000000000 R15: 0000000000000000 [ 55.728790] Code: 48 0f 44 da e8 e0 d7 c3 ff 48 8b 85 28 ff ff ff 4d 89 f1 4c 89 e9 4c 89 e2 48 89 de 48 c7 c7 c0 a1 11 85 49 89 c0 e8 33 e3 ad ff <0f> 0b 48 c7 c0 80 9f 11 85 eb 96 48 c7 c0 c0 9f 11 85 eb 8d 48 [ 55.747858] RIP: __check_object_size+0x3a2/0x4f0 RSP: ffff8801d22170f0 [ 55.754590] ---[ end trace 569becb7b442ce27 ]--- [ 55.759474] Kernel panic - not syncing: Fatal exception [ 55.764842] Dumping ftrace buffer: [ 55.768350] (ftrace buffer empty) [ 55.772032] Kernel Offset: disabled [ 55.775627] Rebooting in 86400 seconds..