INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-mmots-kasan-gce-6,10.128.15.216' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 47.145950] usercopy: kernel memory exposure attempt detected from ffff8801d42f5630 (SCTPv6) (11 bytes) [ 47.147392] ------------[ cut here ]------------ [ 47.148122] kernel BUG at mm/usercopy.c:84! [ 47.148732] invalid opcode: 0000 [#1] SMP KASAN [ 47.149369] Dumping ftrace buffer: [ 47.149842] (ftrace buffer empty) [ 47.150335] Modules linked in: [ 47.150768] CPU: 0 PID: 2985 Comm: syzkaller458008 Not tainted 4.14.0-rc5-mm1+ #20 [ 47.151787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.153005] task: ffff8801d1de40c0 task.stack: ffff8801d1ea8000 [ 47.153810] RIP: 0010:__check_object_size+0x3a2/0x4f0 [ 47.154514] RSP: 0018:ffff8801d1eaf0f0 EFLAGS: 00010286 [ 47.155221] RAX: 000000000000005b RBX: ffffffff8511a180 RCX: 0000000000000000 [ 47.156172] RDX: 000000000000005b RSI: 1ffff1003a3d5dde RDI: ffffed003a3d5e12 [ 47.157123] RBP: ffff8801d1eaf1e0 R08: 0000000000000001 R09: 0000000000000000 [ 47.158105] R10: ffff8801d1eaf098 R11: 0000000000000000 R12: ffffffff8511a140 [ 47.159055] R13: ffff8801d42f5630 R14: 000000000000000b R15: ffffea000750bd40 [ 47.160007] FS: 00000000016dd880(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 47.161091] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.161866] CR2: 0000000020290000 CR3: 00000001d1f48000 CR4: 00000000001406f0 [ 47.162835] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.163883] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.164834] Call Trace: [ 47.165193] ? lock_release+0xa40/0xa40 [ 47.165754] ? check_stack_object+0x140/0x140 [ 47.168185] ? __local_bh_enable_ip+0x9d/0x160 [ 47.172735] ? __might_sleep+0x95/0x190 [ 47.176682] sctp_getsockopt+0x2b90/0x70b0 [ 47.180885] ? do_raw_spin_trylock+0x190/0x190 [ 47.185438] ? mark_held_locks+0xaf/0x100 [ 47.189553] ? sctp_getsockopt_peeloff_common+0x2f0/0x2f0 [ 47.195055] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 47.200040] ? pagevec_lru_move_fn+0x1a4/0x230 [ 47.204588] ? get_kernel_page+0x110/0x110 [ 47.208793] ? __lru_cache_add+0x2a4/0x410 [ 47.212999] ? __pagevec_lru_add+0x30/0x30 [ 47.217203] ? save_stack+0xa3/0xd0 [ 47.220793] ? save_stack+0x43/0xd0 [ 47.224384] ? kasan_kmalloc+0xad/0xe0 [ 47.228236] ? print_irqtrace_events+0x270/0x270 [ 47.232957] ? __handle_mm_fault+0x1827/0x39c0 [ 47.237507] ? check_noncircular+0x20/0x20 [ 47.241704] ? lru_cache_add+0x1c7/0x3a0 [ 47.245733] ? get_mem_cgroup_from_mm+0x710/0x710 [ 47.250540] ? lru_cache_add_file+0x20/0x20 [ 47.254827] ? __mem_cgroup_threshold+0x8f0/0x8f0 [ 47.259635] ? mark_held_locks+0xaf/0x100 [ 47.263749] ? find_held_lock+0x35/0x1d0 [ 47.267781] ? do_huge_pmd_anonymous_page+0xab4/0x1b00 [ 47.273136] ? lock_downgrade+0x990/0x990 [ 47.277251] ? pudp_huge_clear_flush+0x1f0/0x1f0 [ 47.281972] ? do_raw_spin_trylock+0x190/0x190 [ 47.286519] ? trace_event_raw_event_sched_switch+0x8a0/0x8a0 [ 47.292375] ? _cond_resched+0x14/0x30 [ 47.296229] ? _raw_spin_unlock+0x22/0x30 [ 47.300347] ? do_huge_pmd_anonymous_page+0xb21/0x1b00 [ 47.305591] ? __thp_get_unmapped_area+0x130/0x130 [ 47.310487] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 47.315642] ? is_bpf_text_address+0xa4/0x120 [ 47.320102] ? kernel_text_address+0x102/0x140 [ 47.324656] ? __kernel_text_address+0xd/0x40 [ 47.329124] ? unwind_get_return_address+0x61/0xa0 [ 47.334026] ? __save_stack_trace+0x7e/0xd0 [ 47.338318] ? depot_save_stack+0x12c/0x490 [ 47.342608] ? save_stack+0xa3/0xd0 [ 47.346199] ? save_stack+0x43/0xd0 [ 47.349789] ? kasan_kmalloc+0xad/0xe0 [ 47.353639] ? kasan_slab_alloc+0x12/0x20 [ 47.357750] ? kmem_cache_alloc+0x12e/0x760 [ 47.362038] ? selinux_file_alloc_security+0xae/0x190 [ 47.367196] ? security_file_alloc+0x6d/0xa0 [ 47.371571] ? get_empty_filp+0x189/0x4f0 [ 47.375685] ? alloc_file+0x26/0x390 [ 47.379363] ? sock_alloc_file+0x1fd/0x550 [ 47.383559] ? sock_map_fd+0x34/0x70 [ 47.387238] ? SyS_socket+0x125/0x200 [ 47.391004] ? entry_SYSCALL_64_fastpath+0x1f/0xbe [ 47.395895] ? kasan_slab_alloc+0x12/0x20 [ 47.400014] ? kmem_cache_alloc+0x12e/0x760 [ 47.404387] ? get_empty_filp+0xfb/0x4f0 [ 47.408412] ? alloc_file+0x26/0x390 [ 47.412090] ? sock_alloc_file+0x1fd/0x550 [ 47.416292] ? find_held_lock+0x35/0x1d0 [ 47.420319] ? check_noncircular+0x20/0x20 [ 47.424526] ? __handle_mm_fault+0x587/0x39c0 [ 47.428988] ? check_noncircular+0x20/0x20 [ 47.433187] ? __pmd_alloc+0x4e0/0x4e0 [ 47.437043] ? __lockdep_init_map+0xe4/0x650 [ 47.441420] ? find_held_lock+0x35/0x1d0 [ 47.445451] ? handle_mm_fault+0x248/0x8d0 [ 47.449653] ? find_held_lock+0x35/0x1d0 [ 47.453683] ? __do_page_fault+0x64c/0xd60 [ 47.457881] ? lock_downgrade+0x990/0x990 [ 47.461998] ? handle_mm_fault+0x410/0x8d0 [ 47.466199] ? down_read_trylock+0xdb/0x170 [ 47.471375] ? __do_page_fault+0x31e/0xd60 [ 47.475577] ? __handle_mm_fault+0x39c0/0x39c0 [ 47.480122] ? vmacache_find+0x5f/0x280 [ 47.484265] ? vmacache_update+0xfe/0x130 [ 47.488380] ? __fget_light+0x297/0x380 [ 47.492322] ? sock_has_perm+0x29c/0x400 [ 47.496349] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 47.501688] sock_common_getsockopt+0x95/0xd0 [ 47.506160] ? sock_common_getsockopt+0x95/0xd0 [ 47.510805] SyS_getsockopt+0x178/0x340 [ 47.514758] ? SyS_setsockopt+0x360/0x360 [ 47.518879] ? entry_SYSCALL_64_fastpath+0x5/0xbe [ 47.523697] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 47.528681] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 47.533411] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 47.538131] RIP: 0033:0x43fca9 [ 47.541287] RSP: 002b:00007ffe686be5b8 EFLAGS: 00000203 ORIG_RAX: 0000000000000037 [ 47.548961] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fca9 [ 47.556195] RDX: 000000000000000b RSI: 0000000000000084 RDI: 0000000000000003 [ 47.563430] RBP: 0000000000000082 R08: 0000000020290000 R09: 0000000000000000 [ 47.570665] R10: 000000002099aff5 R11: 0000000000000203 R12: 0000000000401610 [ 47.577900] R13: 00000000004016a0 R14: 0000000000000000 R15: 0000000000000000 [ 47.585145] Code: 48 0f 44 da e8 e0 d7 c3 ff 48 8b 85 28 ff ff ff 4d 89 f1 4c 89 e9 4c 89 e2 48 89 de 48 c7 c7 c0 a1 11 85 49 89 c0 e8 33 e3 ad ff <0f> 0b 48 c7 c0 80 9f 11 85 eb 96 48 c7 c0 c0 9f 11 85 eb 8d 48 [ 47.604217] RIP: __check_object_size+0x3a2/0x4f0 RSP: ffff8801d1eaf0f0 [ 47.610995] ---[ end trace 683d54df1b2403bc ]--- [ 47.615755] Kernel panic - not syncing: Fatal exception [ 47.621468] Dumping ftrace buffer: [ 47.624977] (ftrace buffer empty) [ 47.628670] Kernel Offset: disabled [ 47.632272] Rebooting in 86400 seconds..