INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-2,10.128.0.16' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 33.265440] [ 33.265796] ============================= [ 33.266502] WARNING: suspicious RCU usage [ 33.267108] 4.14.0+ #192 Not tainted [ 33.267605] ----------------------------- [ 33.268197] ./include/trace/events/kmem.h:142 suspicious rcu_dereference_check() usage! [ 33.269285] [ 33.269285] other info that might help us debug this: [ 33.269285] [ 33.270399] [ 33.270399] rcu_scheduler_active = 2, debug_locks = 1 [ 33.271318] 1 lock held by syzkaller215525/3051: [ 33.271949] #0: (sk_lock-AF_ALG){+.+.}, at: [] af_alg_wait_for_data+0x2f2/0x650 [ 33.273229] [ 33.273229] stack backtrace: [ 33.273835] CPU: 0 PID: 3051 Comm: syzkaller215525 Not tainted 4.14.0+ #192 [ 33.274791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.276067] Call Trace: [ 33.276430] dump_stack+0x194/0x257 [ 33.276934] ? arch_local_irq_restore+0x53/0x53 [ 33.277570] lockdep_rcu_suspicious+0x123/0x170 [ 33.278195] ? blkcipher_walk_done+0x72b/0xde0 [ 33.278822] kfree+0x20a/0x250 [ 33.279284] blkcipher_walk_done+0x72b/0xde0 [ 33.279883] encrypt+0x20e/0x540 [ 33.280357] ? salsa20_ivsetup+0x40/0x40 [ 33.280921] ? salsa20_ivsetup+0x40/0x40 [ 33.281477] skcipher_decrypt_blkcipher+0x213/0x310 [ 33.282189] ? skcipher_decrypt_blkcipher+0x213/0x310 [ 33.282894] ? sock_kmalloc+0x11f/0x190 [ 33.283429] ? skcipher_encrypt_blkcipher+0x310/0x310 [ 33.284139] ? lock_sock_nested+0x91/0x110 [ 33.284707] ? memset+0x31/0x40 [ 33.285157] skcipher_recvmsg+0xb06/0xf30 [ 33.286757] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 33.291486] ? skcipher_check_key.isra.4+0x61/0x200 [ 33.296474] skcipher_recvmsg_nokey+0x60/0x80 [ 33.300943] ? skcipher_recvmsg+0xf30/0xf30 [ 33.305231] sock_recvmsg+0xc9/0x110 [ 33.308913] ? __sock_recv_wifi_status+0x210/0x210 [ 33.313817] ___sys_recvmsg+0x29b/0x630 [ 33.317768] ? ___sys_sendmsg+0x8a0/0x8a0 [ 33.321905] ? fget_raw+0x20/0x20 [ 33.325328] ? __handle_mm_fault+0x3ad0/0x3ad0 [ 33.329875] ? vmacache_find+0x5f/0x280 [ 33.333831] ? up_read+0x1a/0x40 [ 33.337167] ? __do_page_fault+0x3d6/0xc90 [ 33.341367] ? trace_hardirqs_on+0xd/0x10 [ 33.345491] ? __fdget+0x18/0x20 [ 33.348838] __sys_recvmsg+0xe2/0x210 [ 33.352606] ? __sys_recvmsg+0xe2/0x210 [ 33.356557] ? SyS_sendmmsg+0x60/0x60 [ 33.360328] ? __do_page_fault+0xc90/0xc90 [ 33.364533] ? SyS_setsockopt+0x215/0x360 [ 33.368660] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.373650] SyS_recvmsg+0x2d/0x50 [ 33.377162] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 33.381885] RIP: 0033:0x43fe59 [ 33.385054] RSP: 002b:00007fff42311cc8 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 33.392733] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe59 [ 33.399977] RDX: 0000000000002000 RSI: 0000000020222fc8 RDI: 0000000000000004 [ 33.407217] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 33.414457] R10: 0000000000000010 R11: 0000000000000217 R12: 00000000004017c0 [ 33.421709] R13: 0000000000401850 R14: 0000000000000000 R15: 0000000000000000 [ 33.429079] BUG: unable to handle kernel NULL pointer dereference at 0000000000000074 [ 33.437036] IP: kfree+0xb2/0x250 [ 33.440370] PGD 1ccc28067 P4D 1ccc28067 PUD 1ccd52067 PMD 0 [ 33.446147] Oops: 0000 [#1] SMP KASAN [ 33.449929] Dumping ftrace buffer: [ 33.453436] (ftrace buffer empty) [ 33.457113] Modules linked in: [ 33.460275] CPU: 0 PID: 3051 Comm: syzkaller215525 Not tainted 4.14.0+ #192 [ 33.467343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.476664] task: ffff8801cd642100 task.stack: ffff8801cd768000 [ 33.482689] RIP: 0010:kfree+0xb2/0x250 [ 33.486542] RSP: 0018:ffff8801cd76f750 EFLAGS: 00010046 [ 33.491871] RAX: 0000000000000000 RBX: ffff8801cd76f918 RCX: ffffffffffffffff [ 33.499113] RDX: ffffea000735dbc0 RSI: 0000000000000000 RDI: ffff8801cd76f918 [ 33.506355] RBP: ffff8801cd76f770 R08: 1ffff10039aede9c R09: 0000000000000000 [ 33.513594] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286 [ 33.520834] R13: 0000000000000000 R14: ffff8801cd76f918 R15: ffff8801cd76f880 [ 33.528074] FS: 00000000017ea880(0000) GS:ffff8801db400000(0000) knlGS:0000000000000000 [ 33.536267] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.542115] CR2: 0000000000000074 CR3: 00000001ccecc000 CR4: 00000000001406f0 [ 33.549353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.556610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.563855] Call Trace: [ 33.566418] blkcipher_walk_done+0x72b/0xde0 [ 33.570798] encrypt+0x20e/0x540 [ 33.574133] ? salsa20_ivsetup+0x40/0x40 [ 33.578169] ? salsa20_ivsetup+0x40/0x40 [ 33.582205] skcipher_decrypt_blkcipher+0x213/0x310 [ 33.587192] ? skcipher_decrypt_blkcipher+0x213/0x310 [ 33.592347] ? sock_kmalloc+0x11f/0x190 [ 33.596285] ? skcipher_encrypt_blkcipher+0x310/0x310 [ 33.601446] ? lock_sock_nested+0x91/0x110 [ 33.605664] ? memset+0x31/0x40 [ 33.608912] skcipher_recvmsg+0xb06/0xf30 [ 33.613038] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 33.617761] ? skcipher_check_key.isra.4+0x61/0x200 [ 33.622749] skcipher_recvmsg_nokey+0x60/0x80 [ 33.627218] ? skcipher_recvmsg+0xf30/0xf30 [ 33.631507] sock_recvmsg+0xc9/0x110 [ 33.635193] ? __sock_recv_wifi_status+0x210/0x210 [ 33.640086] ___sys_recvmsg+0x29b/0x630 [ 33.644027] ? ___sys_sendmsg+0x8a0/0x8a0 [ 33.648152] ? fget_raw+0x20/0x20 [ 33.651579] ? __handle_mm_fault+0x3ad0/0x3ad0 [ 33.656127] ? vmacache_find+0x5f/0x280 [ 33.660071] ? up_read+0x1a/0x40 [ 33.663406] ? __do_page_fault+0x3d6/0xc90 [ 33.667606] ? trace_hardirqs_on+0xd/0x10 [ 33.671721] ? __fdget+0x18/0x20 [ 33.675055] __sys_recvmsg+0xe2/0x210 [ 33.678818] ? __sys_recvmsg+0xe2/0x210 [ 33.682764] ? SyS_sendmmsg+0x60/0x60 [ 33.686536] ? __do_page_fault+0xc90/0xc90 [ 33.690736] ? SyS_setsockopt+0x215/0x360 [ 33.694860] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 33.699859] SyS_recvmsg+0x2d/0x50 [ 33.703376] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 33.708094] RIP: 0033:0x43fe59 [ 33.711249] RSP: 002b:00007fff42311cc8 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 33.718922] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe59 [ 33.726159] RDX: 0000000000002000 RSI: 0000000020222fc8 RDI: 0000000000000004 [ 33.733401] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 33.740638] R10: 0000000000000010 R11: 0000000000000217 R12: 00000000004017c0 [ 33.747875] R13: 0000000000401850 R14: 0000000000000000 R15: 0000000000000000 [ 33.755119] Code: c2 48 b8 00 00 00 00 00 ea ff ff 48 89 df 48 c1 ea 0c 48 c1 e2 06 48 01 c2 48 8b 42 20 48 8d 48 ff a8 01 48 0f 45 d1 4c 8b 6a 30 <49> 63 75 74 e8 e5 73 af ff 48 89 de 4c 89 ef 4c 8b 75 08 e8 06 [ 33.774184] RIP: kfree+0xb2/0x250 RSP: ffff8801cd76f750 [ 33.779511] CR2: 0000000000000074 [ 33.782936] ---[ end trace e64159c1a33afd49 ]--- [ 33.787663] Kernel panic - not syncing: Fatal exception in interrupt [ 33.794160] Dumping ftrace buffer: [ 33.797667] (ftrace buffer empty) [ 33.801343] Kernel Offset: disabled [ 33.804952] Rebooting in 86400 seconds..