INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-net-kasan-gce-9,10.128.0.43' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.302367] [ 29.302728] ============================= [ 29.303445] WARNING: suspicious RCU usage [ 29.304035] 4.14.0+ #128 Not tainted [ 29.304532] ----------------------------- [ 29.305125] ./include/trace/events/kmem.h:142 suspicious rcu_dereference_check() usage! [ 29.306202] [ 29.306202] other info that might help us debug this: [ 29.306202] [ 29.307290] [ 29.307290] rcu_scheduler_active = 2, debug_locks = 1 [ 29.308186] 1 lock held by syzkaller311165/3048: [ 29.308818] #0: (sk_lock-AF_ALG){+.+.}, at: [] af_alg_wait_for_data+0x2f2/0x650 [ 29.310106] [ 29.310106] stack backtrace: [ 29.310712] CPU: 1 PID: 3048 Comm: syzkaller311165 Not tainted 4.14.0+ #128 [ 29.311643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.312864] Call Trace: [ 29.313225] dump_stack+0x194/0x257 [ 29.313719] ? arch_local_irq_restore+0x53/0x53 [ 29.314367] lockdep_rcu_suspicious+0x123/0x170 [ 29.315017] ? blkcipher_walk_done+0x72b/0xde0 [ 29.315632] kfree+0x20a/0x250 [ 29.316068] blkcipher_walk_done+0x72b/0xde0 [ 29.316668] encrypt+0x20e/0x540 [ 29.317143] ? salsa20_ivsetup+0x40/0x40 [ 29.317735] ? salsa20_ivsetup+0x40/0x40 [ 29.318279] skcipher_decrypt_blkcipher+0x213/0x310 [ 29.318965] ? skcipher_decrypt_blkcipher+0x213/0x310 [ 29.319656] ? sock_kmalloc+0x11f/0x190 [ 29.320193] ? skcipher_encrypt_blkcipher+0x310/0x310 [ 29.320905] ? lock_sock_nested+0x91/0x110 [ 29.321482] ? memset+0x31/0x40 [ 29.321932] skcipher_recvmsg+0xb06/0xf30 [ 29.322501] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 29.327636] ? skcipher_check_key.isra.4+0x61/0x200 [ 29.332626] skcipher_recvmsg_nokey+0x60/0x80 [ 29.337094] ? skcipher_recvmsg+0xf30/0xf30 [ 29.341384] sock_recvmsg+0xc9/0x110 [ 29.345067] ? __sock_recv_wifi_status+0x210/0x210 [ 29.349966] ___sys_recvmsg+0x29b/0x630 [ 29.353916] ? ___sys_sendmsg+0x8a0/0x8a0 [ 29.358051] ? fget_raw+0x20/0x20 [ 29.361475] ? __handle_mm_fault+0x3ad0/0x3ad0 [ 29.366029] ? vmacache_find+0x5f/0x280 [ 29.369986] ? up_read+0x1a/0x40 [ 29.373334] ? __do_page_fault+0x3d6/0xc90 [ 29.377545] ? trace_hardirqs_on+0xd/0x10 [ 29.381671] ? __fdget+0x18/0x20 [ 29.385021] __sys_recvmsg+0xe2/0x210 [ 29.388789] ? __sys_recvmsg+0xe2/0x210 [ 29.392734] ? SyS_sendmmsg+0x60/0x60 [ 29.396504] ? __do_page_fault+0xc90/0xc90 [ 29.400719] ? SyS_setsockopt+0x215/0x360 [ 29.404845] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.409840] SyS_recvmsg+0x2d/0x50 [ 29.413352] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 29.418074] RIP: 0033:0x43fe59 [ 29.421234] RSP: 002b:00007ffda0ed3778 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 29.428909] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe59 [ 29.436156] RDX: 0000000000002000 RSI: 0000000020222fc8 RDI: 0000000000000004 [ 29.443398] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 29.450642] R10: 0000000000000010 R11: 0000000000000217 R12: 00000000004017c0 [ 29.457882] R13: 0000000000401850 R14: 0000000000000000 R15: 0000000000000000 [ 29.465245] BUG: unable to handle kernel NULL pointer dereference at 0000000000000074 [ 29.473207] IP: kfree+0xb2/0x250 [ 29.476537] PGD 1cdedc067 P4D 1cdedc067 PUD 1cdea7067 PMD 0 [ 29.482309] Oops: 0000 [#1] SMP KASAN [ 29.486079] Dumping ftrace buffer: [ 29.489585] (ftrace buffer empty) [ 29.493263] Modules linked in: [ 29.496434] CPU: 1 PID: 3048 Comm: syzkaller311165 Not tainted 4.14.0+ #128 [ 29.503499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.512825] task: ffff8801cdbf2500 task.stack: ffff8801cca40000 [ 29.518868] RIP: 0010:kfree+0xb2/0x250 [ 29.522719] RSP: 0018:ffff8801cca47750 EFLAGS: 00010046 [ 29.528050] RAX: 0000000000000000 RBX: ffff8801cca47918 RCX: ffffffffffffffff [ 29.535286] RDX: ffffea00073291c0 RSI: 0000000000000000 RDI: ffff8801cca47918 [ 29.542519] RBP: ffff8801cca47770 R08: 1ffff10039948e9c R09: 0000000000000000 [ 29.549755] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000286 [ 29.556992] R13: 0000000000000000 R14: ffff8801cca47918 R15: ffff8801cca47880 [ 29.564235] FS: 0000000000901880(0000) GS:ffff8801db500000(0000) knlGS:0000000000000000 [ 29.572426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.578273] CR2: 0000000000000074 CR3: 00000001cdda4000 CR4: 00000000001406e0 [ 29.585517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.592761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.600018] Call Trace: [ 29.602588] blkcipher_walk_done+0x72b/0xde0 [ 29.606969] encrypt+0x20e/0x540 [ 29.610303] ? salsa20_ivsetup+0x40/0x40 [ 29.614339] ? salsa20_ivsetup+0x40/0x40 [ 29.618365] skcipher_decrypt_blkcipher+0x213/0x310 [ 29.623346] ? skcipher_decrypt_blkcipher+0x213/0x310 [ 29.628512] ? sock_kmalloc+0x11f/0x190 [ 29.632452] ? skcipher_encrypt_blkcipher+0x310/0x310 [ 29.637606] ? lock_sock_nested+0x91/0x110 [ 29.641807] ? memset+0x31/0x40 [ 29.645055] skcipher_recvmsg+0xb06/0xf30 [ 29.649174] ? skcipher_sendpage_nokey+0xa0/0xa0 [ 29.653896] ? skcipher_check_key.isra.4+0x61/0x200 [ 29.658879] skcipher_recvmsg_nokey+0x60/0x80 [ 29.663339] ? skcipher_recvmsg+0xf30/0xf30 [ 29.667626] sock_recvmsg+0xc9/0x110 [ 29.671305] ? __sock_recv_wifi_status+0x210/0x210 [ 29.676199] ___sys_recvmsg+0x29b/0x630 [ 29.680143] ? ___sys_sendmsg+0x8a0/0x8a0 [ 29.684268] ? fget_raw+0x20/0x20 [ 29.687690] ? __handle_mm_fault+0x3ad0/0x3ad0 [ 29.692249] ? vmacache_find+0x5f/0x280 [ 29.696193] ? up_read+0x1a/0x40 [ 29.699525] ? __do_page_fault+0x3d6/0xc90 [ 29.703734] ? trace_hardirqs_on+0xd/0x10 [ 29.707863] ? __fdget+0x18/0x20 [ 29.711469] __sys_recvmsg+0xe2/0x210 [ 29.715244] ? __sys_recvmsg+0xe2/0x210 [ 29.719187] ? SyS_sendmmsg+0x60/0x60 [ 29.722954] ? __do_page_fault+0xc90/0xc90 [ 29.727158] ? SyS_setsockopt+0x215/0x360 [ 29.731280] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.736266] SyS_recvmsg+0x2d/0x50 [ 29.739788] entry_SYSCALL_64_fastpath+0x1f/0x96 [ 29.744511] RIP: 0033:0x43fe59 [ 29.747667] RSP: 002b:00007ffda0ed3778 EFLAGS: 00000217 ORIG_RAX: 000000000000002f [ 29.755343] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fe59 [ 29.762581] RDX: 0000000000002000 RSI: 0000000020222fc8 RDI: 0000000000000004 [ 29.769824] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000 [ 29.777062] R10: 0000000000000010 R11: 0000000000000217 R12: 00000000004017c0 [ 29.784305] R13: 0000000000401850 R14: 0000000000000000 R15: 0000000000000000 [ 29.791548] Code: c2 48 b8 00 00 00 00 00 ea ff ff 48 89 df 48 c1 ea 0c 48 c1 e2 06 48 01 c2 48 8b 42 20 48 8d 48 ff a8 01 48 0f 45 d1 4c 8b 6a 30 <49> 63 75 74 e8 55 81 af ff 48 89 de 4c 89 ef 4c 8b 75 08 e8 06 [ 29.810611] RIP: kfree+0xb2/0x250 RSP: ffff8801cca47750 [ 29.815936] CR2: 0000000000000074 [ 29.819370] ---[ end trace 0820af837d6d7362 ]--- [ 29.824092] Kernel panic - not syncing: Fatal exception in interrupt [ 29.830581] Dumping ftrace buffer: [ 29.834088] (ftrace buffer empty) [ 29.837777] Kernel Offset: disabled [ 29.841371] Rebooting in 86400 seconds..