serialport: Connected to syzkaller.us-central1-c.ci-upstream-kasan-gce-3 port 1 (session ID: 4205cb363386d61afa65dee406f40c43004cea3de158f749a46d470d540bccb6, active connections: 1). INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-3,10.128.0.20' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 57.771406] usercopy: kernel memory exposure attempt detected from ffff8801d1ea480e () (18446744073709551610 bytes) [ 57.773218] ------------[ cut here ]------------ [ 57.773886] kernel BUG at mm/usercopy.c:72! [ 57.774701] invalid opcode: 0000 [#1] SMP KASAN [ 57.775434] Dumping ftrace buffer: [ 57.775975] (ftrace buffer empty) [ 57.776467] Modules linked in: [ 57.776951] CPU: 0 PID: 2917 Comm: syzkaller842281 Not tainted 4.13.0-rc3+ #16 [ 57.777965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.779181] task: ffff8801d2fa40c0 task.stack: ffff8801d1fe8000 [ 57.779998] RIP: 0010:__check_object_size+0x3ad/0x500 [ 57.780741] RSP: 0018:ffff8801d1fef8a8 EFLAGS: 00010286 [ 57.781447] RAX: 0000000000000078 RBX: ffffffff847102c0 RCX: 0000000000000000 [ 57.782450] RDX: 0000000000000078 RSI: 1ffff1003a3fded5 RDI: ffffed003a3fdf09 [ 57.783427] RBP: ffff8801d1fef998 R08: 0000000000000001 R09: 0000000000000000 [ 57.784374] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801d1ea480e [ 57.785321] R13: fffffffffffffffa R14: ffffffff84710280 R15: dffffc0000000000 [ 57.786377] FS: 0000000001360880(0000) GS:ffff8801dc000000(0000) knlGS:0000000000000000 [ 57.787477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.788282] CR2: 00000000202ecfe4 CR3: 00000001d1ff8000 CR4: 00000000001406f0 [ 57.789276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.790225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.791174] Call Trace: [ 57.791546] ? finish_task_switch+0x1d3/0x740 [ 57.796041] ? check_stack_object+0x140/0x140 [ 57.800503] ? do_raw_spin_trylock+0x190/0x190 [ 57.805055] ? lock_release+0xa40/0xa40 [ 57.808994] ? compat_start_thread+0x80/0x80 [ 57.813370] udpv6_recvmsg+0x1040/0x1af0 [ 57.817526] ? udp_lib_close+0x20/0x20 [ 57.821387] ? preempt_notifier_dec+0x20/0x20 [ 57.825863] ? __schedule+0x8f0/0x2070 [ 57.829722] ? sock_has_perm+0x29c/0x400 [ 57.833749] ? __sched_text_start+0x8/0x8 [ 57.837870] inet_recvmsg+0x14c/0x5f0 [ 57.841637] ? inet_create+0xf50/0xf50 [ 57.845492] ? inet_sendmsg+0x11f/0x5e0 [ 57.849428] ? inet_sendmsg+0x126/0x5e0 [ 57.853373] ? selinux_socket_recvmsg+0x36/0x40 [ 57.858015] ? security_socket_recvmsg+0x91/0xc0 [ 57.862740] ? inet_create+0xf50/0xf50 [ 57.866594] sock_recvmsg+0xc9/0x110 [ 57.870271] ? sockfd_lookup_light+0x104/0x150 [ 57.874823] SYSC_recvfrom+0x2d6/0x570 [ 57.878679] ? SYSC_getpeername+0x460/0x460 [ 57.882972] ? find_held_lock+0x35/0x1d0 [ 57.887008] ? exit_to_usermode_loop+0x98/0x2d0 [ 57.891653] ? trace_hardirqs_off+0xd/0x10 [ 57.895862] ? exit_to_usermode_loop+0x1dc/0x2d0 [ 57.900597] ? down_read_trylock+0xdb/0x170 [ 57.904886] ? __do_page_fault+0x2b8/0xb60 [ 57.909096] ? syscall_return_slowpath+0x22f/0x450 [ 57.914005] ? prepare_exit_to_usermode+0x220/0x220 [ 57.919007] ? entry_SYSCALL_64_fastpath+0x5/0xbe [ 57.923882] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 57.928892] SyS_recvfrom+0x40/0x50 [ 57.932498] entry_SYSCALL_64_fastpath+0x1f/0xbe [ 57.937224] RIP: 0033:0x43fe59 [ 57.940380] RSP: 002b:00007ffe9d04e668 EFLAGS: 00000203 ORIG_RAX: 000000000000002d [ 57.948070] RAX: ffffffffffffffda RBX: 00000000006ccd60 RCX: 000000000043fe59 [ 57.955313] RDX: 0000000000000000 RSI: 00000000207df000 RDI: 0000000000000004 [ 57.962556] RBP: 0000000000000082 R08: 000000002034eff6 R09: 0000000000000008 [ 57.969808] R10: 0000000020000043 R11: 0000000000000203 R12: ffffffffffffffff [ 57.977052] R13: 9abcdb1737225b7b R14: 0000000000000000 R15: 0000000000000000 [ 57.984304] Code: 48 0f 44 da e8 c5 d5 ca ff 48 8b 85 28 ff ff ff 4d 89 e9 4c 89 e1 4c 89 f2 48 89 de 48 c7 c7 00 03 71 84 49 89 c0 e8 a8 49 b6 ff <0f> 0b 48 c7 c0 c0 00 71 84 eb 96 48 c7 c0 00 01 71 84 eb 8d 48 [ 58.003378] RIP: __check_object_size+0x3ad/0x500 RSP: ffff8801d1fef8a8 [ 58.010071] ---[ end trace 2141bb72cdf9cbf2 ]--- [ 58.014963] Kernel panic - not syncing: Fatal exception [ 58.020326] Dumping ftrace buffer: [ 58.023834] (ftrace buffer empty) [ 58.027510] Kernel Offset: disabled [ 58.031117] Rebooting in 86400 seconds..