INIT: Entering runlevel: 2

[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added 'ci-upstream-net-kasan-gce-1,10.128.0.59' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   52.360292] ==================================================================
[   52.361424] BUG: KASAN: slab-out-of-bounds in sha3_final+0xeb/0x2e0
[   52.362267] Write of size 4294967223 at addr ffff8801ccb13899 by task syzkaller843825/3050
[   52.363364] 
[   52.363595] CPU: 0 PID: 3050 Comm: syzkaller843825 Not tainted 4.14.0+ #128
[   52.364525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   52.365745] Call Trace:
[   52.366106]  dump_stack+0x194/0x257
[   52.366598]  ? arch_local_irq_restore+0x53/0x53
[   52.367221]  ? show_regs_print_info+0x65/0x65
[   52.367822]  ? sock_sendmsg+0xca/0x110
[   52.368345]  ? entry_SYSCALL_64_fastpath+0x1f/0x96
[   52.369001]  ? sha3_final+0xeb/0x2e0
[   52.369509]  print_address_description+0x73/0x250
[   52.370156]  ? sha3_final+0xeb/0x2e0
[   52.370655]  kasan_report+0x25b/0x340
[   52.371171]  check_memory_region+0x137/0x190
[   52.371774]  memset+0x23/0x40
[   52.372197]  sha3_final+0xeb/0x2e0
[   52.372688]  ? sha3_512_init+0x20/0x20
[   52.373214]  crypto_shash_final+0xd3/0x1f0
[   52.373779]  ? __lock_is_held+0xbc/0x140
[   52.374328]  hmac_final+0x16c/0x2b0
[   52.374937]  ? hmac_finup+0x330/0x330
[   52.375465]  crypto_shash_final+0xd3/0x1f0
[   52.376048]  ? hash_sendmsg+0xcb/0x9c0
[   52.376576]  hmac_final+0x16c/0x2b0
[   52.377068]  ? hmac_finup+0x330/0x330
[   52.377582]  crypto_shash_final+0xd3/0x1f0
[   52.378148]  ? copy_overflow+0x30/0x30
[   52.378670]  ? crypto_shash_digest+0x120/0x120
[   52.379283]  shash_async_final+0x35/0x40
[   52.379829]  crypto_ahash_op+0xbc/0x140
[   52.380396]  crypto_ahash_final+0x57/0x70
[   52.380965]  hash_sendmsg+0x686/0x9c0
[   52.384739]  ? hash_recvmsg+0x9b0/0x9b0
[   52.389002]  sock_sendmsg+0xca/0x110
[   52.392694]  ___sys_sendmsg+0x322/0x8a0
[   52.396643]  ? copy_msghdr_from_user+0x590/0x590
[   52.401541]  ? find_held_lock+0x39/0x1d0
[   52.405594]  ? fget_raw+0x20/0x20
[   52.409024]  ? lock_downgrade+0x980/0x980
[   52.413154]  ? __fdget+0x18/0x20
[   52.416491]  __sys_sendmmsg+0x1e6/0x5f0
[   52.420437]  ? __sys_sendmmsg+0x1e6/0x5f0
[   52.424560]  ? SyS_sendmsg+0x50/0x50
[   52.428246]  ? mm_fault_error+0x2c0/0x2c0
[   52.432363]  ? kernel_accept+0x2f0/0x2f0
[   52.436404]  ? __do_page_fault+0xc90/0xc90
[   52.440608]  ? SyS_setsockopt+0x215/0x360
[   52.444728]  ? lockdep_sys_exit+0x47/0xf0
[   52.448846]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   52.453832]  SyS_sendmmsg+0x35/0x60
[   52.457433]  entry_SYSCALL_64_fastpath+0x1f/0x96
[   52.462157] RIP: 0033:0x4403f9
[   52.465316] RSP: 002b:00007fff9a1fd298 EFLAGS: 00000207 ORIG_RAX: 0000000000000133
[   52.472992] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004403f9
[   52.480228] RDX: 0000000000000005 RSI: 00000000209fe000 RDI: 0000000000000004
[   52.487465] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000
[   52.494701] R10: 0000000000000000 R11: 0000000000000207 R12: 0000000000401d60
[   52.501935] R13: 0000000000401df0 R14: 0000000000000000 R15: 0000000000000000
[   52.509186] 
[   52.510780] Allocated by task 3050:
[   52.514373]  save_stack+0x43/0xd0
[   52.517790]  kasan_kmalloc+0xad/0xe0
[   52.521470]  __kmalloc+0x162/0x760
[   52.524978]  sock_kmalloc+0x112/0x190
[   52.528746]  hash_accept_parent_nokey+0x76/0x320
[   52.533474]  hash_accept_parent+0x9a/0xd0
[   52.537590]  af_alg_accept+0x125/0x670
[   52.541440]  alg_accept+0x46/0x60
[   52.544856]  SYSC_accept4+0x384/0x850
[   52.548621]  SyS_accept+0x26/0x30
[   52.552039]  entry_SYSCALL_64_fastpath+0x1f/0x96
[   52.556756] 
[   52.558350] Freed by task 0:
[   52.561337] (stack is not available)
[   52.565014] 
[   52.566609] The buggy address belongs to the object at ffff8801ccb13380
[   52.566609]  which belongs to the cache kmalloc-2048 of size 2048
[   52.579406] The buggy address is located 1305 bytes inside of
[   52.579406]  2048-byte region [ffff8801ccb13380, ffff8801ccb13b80)
[   52.591416] The buggy address belongs to the page:
[   52.596309] page:ffffea000732c480 count:1 mapcount:0 mapping:ffff8801ccb12280 index:0x0 compound_mapcount: 0
[   52.606242] flags: 0x2fffc0000008100(slab|head)
[   52.610876] raw: 02fffc0000008100 ffff8801ccb12280 0000000000000000 0000000100000003
[   52.618721] raw: ffffea0007321220 ffff8801db001950 ffff8801db000c40 0000000000000000
[   52.626563] page dumped because: kasan: bad access detected
[   52.632234] 
[   52.633824] Memory state around the buggy address:
[   52.638719]  ffff8801ccb13780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   52.646043]  ffff8801ccb13800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   52.653367] >ffff8801ccb13880: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[   52.660688]                                                        ^
[   52.667148]  ffff8801ccb13900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.674471]  ffff8801ccb13980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   52.681798] ==================================================================
[   52.689123] Disabling lock debugging due to kernel taint
[   52.694594] Kernel panic - not syncing: panic_on_warn set ...
[   52.694594] 
[   52.701923] CPU: 0 PID: 3050 Comm: syzkaller843825 Tainted: G    B            4.14.0+ #128
[   52.710291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   52.719614] Call Trace:
[   52.722168]  dump_stack+0x194/0x257
[   52.725762]  ? arch_local_irq_restore+0x53/0x53
[   52.730398]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[   52.735119]  ? vsnprintf+0x1ed/0x1900
[   52.738886]  ? sha3_final+0xd0/0x2e0
[   52.742572]  panic+0x1e4/0x41c
[   52.745728]  ? refcount_error_report+0x214/0x214
[   52.750452]  ? add_taint+0x1c/0x50
[   52.753957]  ? add_taint+0x1c/0x50
[   52.757464]  ? sha3_final+0xeb/0x2e0
[   52.761145]  kasan_end_report+0x50/0x50
[   52.765083]  kasan_report+0x144/0x340
[   52.768851]  check_memory_region+0x137/0x190
[   52.773223]  memset+0x23/0x40
[   52.776297]  sha3_final+0xeb/0x2e0
[   52.779802]  ? sha3_512_init+0x20/0x20
[   52.783654]  crypto_shash_final+0xd3/0x1f0
[   52.787854]  ? __lock_is_held+0xbc/0x140
[   52.791879]  hmac_final+0x16c/0x2b0
[   52.795472]  ? hmac_finup+0x330/0x330
[   52.799240]  crypto_shash_final+0xd3/0x1f0
[   52.803444]  ? hash_sendmsg+0xcb/0x9c0
[   52.807302]  hmac_final+0x16c/0x2b0
[   52.810892]  ? hmac_finup+0x330/0x330
[   52.814658]  crypto_shash_final+0xd3/0x1f0
[   52.818947]  ? copy_overflow+0x30/0x30
[   52.822799]  ? crypto_shash_digest+0x120/0x120
[   52.827356]  shash_async_final+0x35/0x40
[   52.831383]  crypto_ahash_op+0xbc/0x140
[   52.835330]  crypto_ahash_final+0x57/0x70
[   52.839444]  hash_sendmsg+0x686/0x9c0
[   52.843210]  ? hash_recvmsg+0x9b0/0x9b0
[   52.847148]  sock_sendmsg+0xca/0x110
[   52.850838]  ___sys_sendmsg+0x322/0x8a0
[   52.854776]  ? copy_msghdr_from_user+0x590/0x590
[   52.859497]  ? find_held_lock+0x39/0x1d0
[   52.863529]  ? fget_raw+0x20/0x20
[   52.866950]  ? lock_downgrade+0x980/0x980
[   52.871067]  ? __fdget+0x18/0x20
[   52.874397]  __sys_sendmmsg+0x1e6/0x5f0
[   52.878347]  ? __sys_sendmmsg+0x1e6/0x5f0
[   52.882464]  ? SyS_sendmsg+0x50/0x50
[   52.886143]  ? mm_fault_error+0x2c0/0x2c0
[   52.890253]  ? kernel_accept+0x2f0/0x2f0
[   52.894282]  ? __do_page_fault+0xc90/0xc90
[   52.898481]  ? SyS_setsockopt+0x215/0x360
[   52.902601]  ? lockdep_sys_exit+0x47/0xf0
[   52.906712]  ? trace_hardirqs_on_caller+0x421/0x5c0
[   52.911692]  SyS_sendmmsg+0x35/0x60
[   52.915285]  entry_SYSCALL_64_fastpath+0x1f/0x96
[   52.920010] RIP: 0033:0x4403f9
[   52.923162] RSP: 002b:00007fff9a1fd298 EFLAGS: 00000207 ORIG_RAX: 0000000000000133
[   52.930830] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004403f9
[   52.938063] RDX: 0000000000000005 RSI: 00000000209fe000 RDI: 0000000000000004
[   52.945301] RBP: 0000000000000086 R08: 0000000000000000 R09: 0000000000000000
[   52.952536] R10: 0000000000000000 R11: 0000000000000207 R12: 0000000000401d60
[   52.959771] R13: 0000000000401df0 R14: 0000000000000000 R15: 0000000000000000
[   52.967377] Dumping ftrace buffer:
[   52.970883]    (ftrace buffer empty)
[   52.974555] Kernel Offset: disabled
[   52.978149] Rebooting in 86400 seconds..