[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. syzkaller login: [ 165.698226][T31952] ================================================================== [ 165.706762][T31952] BUG: KASAN: out-of-bounds in kfence_guarded_free+0x7f1/0x8f0 [ 165.714397][T31952] Read of size 1 at addr ffff88823bceeffb by task syz-executor751/31952 [ 165.722731][T31952] [ 165.725042][T31952] CPU: 1 PID: 31952 Comm: syz-executor751 Not tainted 5.10.0-next-20201223-syzkaller #0 [ 165.734743][T31952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.744888][T31952] Call Trace: [ 165.748152][T31952] dump_stack+0x107/0x163 [ 165.752494][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 165.757774][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 165.763047][T31952] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 165.770063][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 165.775349][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 165.780625][T31952] kasan_report.cold+0x79/0xd5 [ 165.785380][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 165.790659][T31952] kfence_guarded_free+0x7f1/0x8f0 [ 165.795768][T31952] ? key_create_or_update+0x83f/0xee0 [ 165.801145][T31952] __kfence_free+0x70/0x150 [ 165.805644][T31952] kfree+0x368/0x3c0 [ 165.809539][T31952] key_create_or_update+0x83f/0xee0 [ 165.814734][T31952] ? key_alloc+0x1240/0x1240 [ 165.819322][T31952] ? join_session_keyring+0x390/0x390 [ 165.824976][T31952] __do_sys_add_key+0x215/0x430 [ 165.829823][T31952] ? __do_sys_request_key+0x3b0/0x3b0 [ 165.835206][T31952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 165.841096][T31952] do_syscall_64+0x2d/0x70 [ 165.845499][T31952] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 165.851381][T31952] RIP: 0033:0x441209 [ 165.855265][T31952] Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.874859][T31952] RSP: 002b:00007ffd0650dae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 165.883276][T31952] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441209 [ 165.891238][T31952] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 00000000200000c0 [ 165.899209][T31952] RBP: 000000000002874d R08: 00000000fffffffe R09: 00000000004002c8 [ 165.907167][T31952] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000401fb0 [ 165.915123][T31952] R13: 0000000000402040 R14: 0000000000000000 R15: 0000000000000000 [ 165.923182][T31952] [ 165.925502][T31952] Allocated by task 2846403498: [ 165.930439][T31952] ------------[ cut here ]------------ [ 165.935873][T31952] slab index 831406 out of bounds (390) for stack id adacafae [ 165.943687][T31952] WARNING: CPU: 1 PID: 31952 at lib/stackdepot.c:211 stack_depot_fetch+0x6d/0xa0 [ 165.952795][T31952] Modules linked in: [ 165.956675][T31952] CPU: 1 PID: 31952 Comm: syz-executor751 Not tainted 5.10.0-next-20201223-syzkaller #0 [ 165.966372][T31952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.976412][T31952] RIP: 0010:stack_depot_fetch+0x6d/0xa0 [ 165.981958][T31952] Code: 48 c1 e0 04 25 f0 3f 00 00 48 01 d0 48 8d 50 18 48 89 13 8b 40 0c 48 83 c4 10 5b c3 89 f9 48 c7 c7 70 cf fc 8a e8 a1 67 f1 04 <0f> 0b 48 83 c4 10 31 c0 5b c3 48 83 c4 10 31 c0 5b c3 48 c7 c7 00 [ 166.001553][T31952] RSP: 0018:ffffc9000d387b48 EFLAGS: 00010086 [ 166.007608][T31952] RAX: 0000000000000000 RBX: ffffc9000d387b68 RCX: 0000000000000000 [ 166.015565][T31952] RDX: ffff888018e61b00 RSI: ffffffff815b95f5 RDI: fffff52001a70f5b [ 166.023525][T31952] RBP: ffffea0008ef3b80 R08: 0000000000000000 R09: 0000000000000000 [ 166.031496][T31952] R10: ffffffff815b7a4b R11: 0000000000000000 R12: ffff88823bceeffb [ 166.039463][T31952] R13: ffff88823bcee000 R14: ffff88823bcee0c0 R15: 00000000ffffffad [ 166.047426][T31952] FS: 0000000001359880(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 166.056355][T31952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 166.062937][T31952] CR2: 00000000200000c0 CR3: 0000000024300000 CR4: 00000000001506e0 [ 166.070912][T31952] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 166.078985][T31952] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 166.086954][T31952] Call Trace: [ 166.090228][T31952] print_stack+0x9/0x18 [ 166.094396][T31952] print_address_description.constprop.0.cold+0x21a/0x2f8 [ 166.101511][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 166.106805][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 166.112101][T31952] kasan_report.cold+0x79/0xd5 [ 166.116861][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 166.122142][T31952] kfence_guarded_free+0x7f1/0x8f0 [ 166.127259][T31952] ? key_create_or_update+0x83f/0xee0 [ 166.132630][T31952] __kfence_free+0x70/0x150 [ 166.137128][T31952] kfree+0x368/0x3c0 [ 166.141025][T31952] key_create_or_update+0x83f/0xee0 [ 166.146221][T31952] ? key_alloc+0x1240/0x1240 [ 166.150804][T31952] ? join_session_keyring+0x390/0x390 [ 166.156188][T31952] __do_sys_add_key+0x215/0x430 [ 166.161031][T31952] ? __do_sys_request_key+0x3b0/0x3b0 [ 166.166401][T31952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 166.172305][T31952] do_syscall_64+0x2d/0x70 [ 166.176712][T31952] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 166.182611][T31952] RIP: 0033:0x441209 [ 166.186500][T31952] Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.206094][T31952] RSP: 002b:00007ffd0650dae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 166.214498][T31952] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441209 [ 166.222459][T31952] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 00000000200000c0 [ 166.230417][T31952] RBP: 000000000002874d R08: 00000000fffffffe R09: 00000000004002c8 [ 166.238376][T31952] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000401fb0 [ 166.246334][T31952] R13: 0000000000402040 R14: 0000000000000000 R15: 0000000000000000 [ 166.254315][T31952] Kernel panic - not syncing: panic_on_warn set ... [ 166.260906][T31952] CPU: 1 PID: 31952 Comm: syz-executor751 Not tainted 5.10.0-next-20201223-syzkaller #0 [ 166.270609][T31952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.280648][T31952] Call Trace: [ 166.283912][T31952] dump_stack+0x107/0x163 [ 166.288248][T31952] panic+0x343/0x77f [ 166.292139][T31952] ? __warn_printk+0xf3/0xf3 [ 166.296723][T31952] ? __warn.cold+0x1a/0x44 [ 166.301130][T31952] ? stack_depot_fetch+0x6d/0xa0 [ 166.306076][T31952] __warn.cold+0x35/0x44 [ 166.310308][T31952] ? wake_up_klogd+0xcb/0x100 [ 166.314977][T31952] ? stack_depot_fetch+0x6d/0xa0 [ 166.319907][T31952] report_bug+0x1bd/0x210 [ 166.324232][T31952] handle_bug+0x3c/0x60 [ 166.328381][T31952] exc_invalid_op+0x14/0x40 [ 166.332886][T31952] asm_exc_invalid_op+0x12/0x20 [ 166.337728][T31952] RIP: 0010:stack_depot_fetch+0x6d/0xa0 [ 166.343271][T31952] Code: 48 c1 e0 04 25 f0 3f 00 00 48 01 d0 48 8d 50 18 48 89 13 8b 40 0c 48 83 c4 10 5b c3 89 f9 48 c7 c7 70 cf fc 8a e8 a1 67 f1 04 <0f> 0b 48 83 c4 10 31 c0 5b c3 48 83 c4 10 31 c0 5b c3 48 c7 c7 00 [ 166.362869][T31952] RSP: 0018:ffffc9000d387b48 EFLAGS: 00010086 [ 166.368933][T31952] RAX: 0000000000000000 RBX: ffffc9000d387b68 RCX: 0000000000000000 [ 166.376888][T31952] RDX: ffff888018e61b00 RSI: ffffffff815b95f5 RDI: fffff52001a70f5b [ 166.384847][T31952] RBP: ffffea0008ef3b80 R08: 0000000000000000 R09: 0000000000000000 [ 166.392804][T31952] R10: ffffffff815b7a4b R11: 0000000000000000 R12: ffff88823bceeffb [ 166.400763][T31952] R13: ffff88823bcee000 R14: ffff88823bcee0c0 R15: 00000000ffffffad [ 166.408729][T31952] ? wake_up_klogd+0xcb/0x100 [ 166.413416][T31952] ? vprintk_func+0x95/0x1e0 [ 166.418002][T31952] ? stack_depot_fetch+0x6d/0xa0 [ 166.422934][T31952] print_stack+0x9/0x18 [ 166.427080][T31952] print_address_description.constprop.0.cold+0x21a/0x2f8 [ 166.434182][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 166.439476][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 166.444750][T31952] kasan_report.cold+0x79/0xd5 [ 166.449508][T31952] ? kfence_guarded_free+0x7f1/0x8f0 [ 166.454785][T31952] kfence_guarded_free+0x7f1/0x8f0 [ 166.459889][T31952] ? key_create_or_update+0x83f/0xee0 [ 166.465251][T31952] __kfence_free+0x70/0x150 [ 166.469752][T31952] kfree+0x368/0x3c0 [ 166.473660][T31952] key_create_or_update+0x83f/0xee0 [ 166.478960][T31952] ? key_alloc+0x1240/0x1240 [ 166.483561][T31952] ? join_session_keyring+0x390/0x390 [ 166.488948][T31952] __do_sys_add_key+0x215/0x430 [ 166.493806][T31952] ? __do_sys_request_key+0x3b0/0x3b0 [ 166.499195][T31952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 166.505559][T31952] do_syscall_64+0x2d/0x70 [ 166.509970][T31952] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 166.515868][T31952] RIP: 0033:0x441209 [ 166.519844][T31952] Code: e8 fc ab 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.539452][T31952] RSP: 002b:00007ffd0650dae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 166.547858][T31952] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441209 [ 166.555828][T31952] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 00000000200000c0 [ 166.563787][T31952] RBP: 000000000002874d R08: 00000000fffffffe R09: 00000000004002c8 [ 166.571747][T31952] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000401fb0 [ 166.579704][T31952] R13: 0000000000402040 R14: 0000000000000000 R15: 0000000000000000 [ 166.588784][T31952] Kernel Offset: disabled [ 166.593337][T31952] Rebooting in 86400 seconds..