INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added 'ci-upstream-kasan-gce-386-4,10.128.0.20' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.463473] ================================================================== [ 55.464623] BUG: KASAN: stack-out-of-bounds in sha3_update+0xdf/0x2e0 [ 55.465490] Write of size 4096 at addr ffff8801cc8d7ae8 by task syzkaller208172/3048 [ 55.466520] [ 55.466752] CPU: 1 PID: 3048 Comm: syzkaller208172 Not tainted 4.14.0+ #102 [ 55.467682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.468902] Call Trace: [ 55.469261] dump_stack+0x194/0x257 [ 55.469753] ? arch_local_irq_restore+0x53/0x53 [ 55.470401] ? show_regs_print_info+0x65/0x65 [ 55.471008] ? check_usage+0xb60/0xb60 [ 55.471532] ? sha3_update+0xdf/0x2e0 [ 55.472065] print_address_description+0x73/0x250 [ 55.472710] ? sha3_update+0xdf/0x2e0 [ 55.473222] kasan_report+0x25b/0x340 [ 55.473737] check_memory_region+0x137/0x190 [ 55.474327] memcpy+0x37/0x50 [ 55.474750] sha3_update+0xdf/0x2e0 [ 55.475252] crypto_shash_update+0xcb/0x220 [ 55.475837] shash_finup_unaligned+0x2a/0x60 [ 55.476429] crypto_shash_finup+0xc4/0x120 [ 55.477000] hmac_finup+0x182/0x330 [ 55.477487] ? shash_default_import+0x5b/0x80 [ 55.478094] crypto_shash_finup+0xc4/0x120 [ 55.478666] shash_digest_unaligned+0x9e/0xd0 [ 55.479271] crypto_shash_digest+0xc4/0x120 [ 55.479853] hmac_setkey+0x36a/0x690 [ 55.480417] ? hmac_setkey+0x20/0x690 [ 55.480935] crypto_shash_setkey+0xad/0x190 [ 55.481546] shash_async_setkey+0x47/0x60 [ 55.482123] crypto_ahash_setkey+0xaf/0x180 [ 55.482707] hash_setkey+0x40/0x90 [ 55.483185] ? hash_accept_parent+0xd0/0xd0 [ 55.483763] alg_setsockopt+0x2a1/0x350 [ 55.487710] compat_SyS_setsockopt+0x2e7/0x410 [ 55.492265] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 55.496991] ? do_fast_syscall_32+0x156/0xf9d [ 55.501457] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 55.506194] do_fast_syscall_32+0x3ee/0xf9d [ 55.510489] ? do_int80_syscall_32+0x9d0/0x9d0 [ 55.515040] ? kasan_check_read+0x11/0x20 [ 55.519155] ? syscall_return_slowpath+0x550/0x550 [ 55.524054] ? SyS_rt_sigaction+0x94/0x1b0 [ 55.528262] ? lockdep_sys_exit+0x47/0xf0 [ 55.532375] ? retint_user+0x18/0x18 [ 55.536062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 55.540884] entry_SYSENTER_compat+0x51/0x60 [ 55.545258] RIP: 0023:0xf7fd8c79 [ 55.548587] RSP: 002b:00000000fffd3d2c EFLAGS: 00000282 ORIG_RAX: 000000000000016e [ 55.556262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000117 [ 55.563498] RDX: 0000000000000001 RSI: 0000000020ea5000 RDI: 0000000000001000 [ 55.570734] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 55.577969] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 55.585205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.592466] [ 55.594062] The buggy address belongs to the page: [ 55.598958] page:ffffea00073235c0 count:0 mapcount:0 mapping: (null) index:0x0 [ 55.607064] flags: 0x2fffc0000000000() [ 55.610918] raw: 02fffc0000000000 0000000000000000 0000000000000000 00000000ffffffff [ 55.618764] raw: 0000000000000000 0000000100000001 0000000000000000 0000000000000000 [ 55.626607] page dumped because: kasan: bad access detected [ 55.632279] [ 55.633873] Memory state around the buggy address: [ 55.638767] ffff8801cc8d7c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.646092] ffff8801cc8d7c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.653416] >ffff8801cc8d7d00: 00 00 00 00 00 f1 f1 f1 f1 04 f2 f2 f2 f3 f3 f3 [ 55.660756] ^ [ 55.665389] ffff8801cc8d7d80: f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.672712] ffff8801cc8d7e00: f1 f1 f1 f1 f8 f2 f2 f2 f2 f2 f2 f2 00 f2 f2 f2 [ 55.680034] ================================================================== [ 55.687356] Disabling lock debugging due to kernel taint [ 55.692848] Kernel panic - not syncing: panic_on_warn set ... [ 55.692848] [ 55.700187] CPU: 1 PID: 3048 Comm: syzkaller208172 Tainted: G B 4.14.0+ #102 [ 55.708550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.717873] Call Trace: [ 55.720429] dump_stack+0x194/0x257 [ 55.724026] ? arch_local_irq_restore+0x53/0x53 [ 55.728660] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 55.733382] ? vsnprintf+0x1ed/0x1900 [ 55.737149] ? sha3_update+0x90/0x2e0 [ 55.740918] panic+0x1e4/0x41c [ 55.744087] ? refcount_error_report+0x214/0x214 [ 55.748808] ? add_taint+0x1c/0x50 [ 55.752313] ? add_taint+0x1c/0x50 [ 55.755819] ? sha3_update+0xdf/0x2e0 [ 55.759583] kasan_end_report+0x50/0x50 [ 55.763520] kasan_report+0x144/0x340 [ 55.767287] check_memory_region+0x137/0x190 [ 55.771658] memcpy+0x37/0x50 [ 55.774727] sha3_update+0xdf/0x2e0 [ 55.778327] crypto_shash_update+0xcb/0x220 [ 55.782617] shash_finup_unaligned+0x2a/0x60 [ 55.786994] crypto_shash_finup+0xc4/0x120 [ 55.791195] hmac_finup+0x182/0x330 [ 55.794786] ? shash_default_import+0x5b/0x80 [ 55.799249] crypto_shash_finup+0xc4/0x120 [ 55.803449] shash_digest_unaligned+0x9e/0xd0 [ 55.807913] crypto_shash_digest+0xc4/0x120 [ 55.812201] hmac_setkey+0x36a/0x690 [ 55.815898] ? hmac_setkey+0x20/0x690 [ 55.819666] crypto_shash_setkey+0xad/0x190 [ 55.823955] shash_async_setkey+0x47/0x60 [ 55.828071] crypto_ahash_setkey+0xaf/0x180 [ 55.832358] hash_setkey+0x40/0x90 [ 55.835862] ? hash_accept_parent+0xd0/0xd0 [ 55.840147] alg_setsockopt+0x2a1/0x350 [ 55.844089] compat_SyS_setsockopt+0x2e7/0x410 [ 55.848637] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 55.853358] ? do_fast_syscall_32+0x156/0xf9d [ 55.857821] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 55.862541] do_fast_syscall_32+0x3ee/0xf9d [ 55.866829] ? do_int80_syscall_32+0x9d0/0x9d0 [ 55.871378] ? kasan_check_read+0x11/0x20 [ 55.875493] ? syscall_return_slowpath+0x550/0x550 [ 55.880387] ? SyS_rt_sigaction+0x94/0x1b0 [ 55.884599] ? lockdep_sys_exit+0x47/0xf0 [ 55.888711] ? retint_user+0x18/0x18 [ 55.892393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 55.897204] entry_SYSENTER_compat+0x51/0x60 [ 55.901576] RIP: 0023:0xf7fd8c79 [ 55.904906] RSP: 002b:00000000fffd3d2c EFLAGS: 00000282 ORIG_RAX: 000000000000016e [ 55.912587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000117 [ 55.919823] RDX: 0000000000000001 RSI: 0000000020ea5000 RDI: 0000000000001000 [ 55.927069] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 55.934303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 55.941538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 55.948816] Dumping ftrace buffer: [ 55.952325] (ftrace buffer empty) [ 55.956004] Kernel Offset: disabled [ 55.959597] Rebooting in 86400 seconds..