[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.960844][ T8433] ================================================================================ [ 55.971343][ T8433] UBSAN: shift-out-of-bounds in net/ieee802154/nl802154.c:919:44 [ 55.979279][ T8433] shift exponent -1627389953 is negative [ 55.985837][ T8433] CPU: 0 PID: 8433 Comm: syz-executor305 Not tainted 5.14.0-rc7-syzkaller #0 [ 55.995257][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.006569][ T8433] Call Trace: [ 56.009961][ T8433] dump_stack_lvl+0xcd/0x134 [ 56.014582][ T8433] ubsan_epilogue+0xb/0x5a [ 56.018982][ T8433] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 56.025820][ T8433] ? __nla_parse+0x3d/0x50 [ 56.030230][ T8433] ? nl802154_get_llsec_params+0x390/0x390 [ 56.036020][ T8433] nl802154_new_interface.cold+0x19/0x1e [ 56.041641][ T8433] genl_family_rcv_msg_doit+0x228/0x320 [ 56.047175][ T8433] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 56.054799][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.061590][ T8433] ? ns_capable+0xd9/0x100 [ 56.066213][ T8433] genl_rcv_msg+0x328/0x580 [ 56.071117][ T8433] ? genl_get_cmd+0x480/0x480 [ 56.075873][ T8433] ? nl802154_set_short_addr+0x5c0/0x5c0 [ 56.081895][ T8433] ? lock_release+0x720/0x720 [ 56.086561][ T8433] netlink_rcv_skb+0x153/0x420 [ 56.091783][ T8433] ? genl_get_cmd+0x480/0x480 [ 56.096447][ T8433] ? netlink_ack+0xa60/0xa60 [ 56.101125][ T8433] ? _copy_from_iter+0x12b/0x1320 [ 56.106138][ T8433] genl_rcv+0x24/0x40 [ 56.110102][ T8433] netlink_unicast+0x533/0x7d0 [ 56.114867][ T8433] ? netlink_attachskb+0x890/0x890 [ 56.119959][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.126181][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.132590][ T8433] ? __phys_addr_symbol+0x2c/0x70 [ 56.137613][ T8433] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 56.143325][ T8433] ? __check_object_size+0x16e/0x3f0 [ 56.148609][ T8433] netlink_sendmsg+0x86d/0xdb0 [ 56.153361][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 56.158371][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.164685][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 56.169623][ T8433] sock_sendmsg+0xcf/0x120 [ 56.174129][ T8433] ____sys_sendmsg+0x6e8/0x810 [ 56.178875][ T8433] ? kernel_sendmsg+0x50/0x50 [ 56.183553][ T8433] ? do_recvmmsg+0x6d0/0x6d0 [ 56.188216][ T8433] ? lock_chain_count+0x20/0x20 [ 56.193053][ T8433] ___sys_sendmsg+0xf3/0x170 [ 56.197623][ T8433] ? sendmsg_copy_msghdr+0x160/0x160 [ 56.202977][ T8433] ? __lock_acquire+0x162f/0x54a0 [ 56.208269][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.215140][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.221657][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.228314][ T8433] ? __fget_light+0x215/0x280 [ 56.232994][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.239325][ T8433] __sys_sendmsg+0xe5/0x1b0 [ 56.243983][ T8433] ? __sys_sendmsg_sock+0x30/0x30 [ 56.249091][ T8433] ? syscall_enter_from_user_mode+0x21/0x70 [ 56.254971][ T8433] do_syscall_64+0x35/0xb0 [ 56.259369][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.265501][ T8433] RIP: 0033:0x43fa19 [ 56.269374][ T8433] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.289413][ T8433] RSP: 002b:00007ffde4781948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.297810][ T8433] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043fa19 [ 56.305769][ T8433] RDX: 0000000000000000 RSI: 0000000020000ac0 RDI: 0000000000000003 [ 56.314068][ T8433] RBP: 0000000000403480 R08: 0000000000000001 R09: 00000000004004a0 [ 56.322023][ T8433] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000403510 [ 56.329981][ T8433] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 56.338214][ T8433] ================================================================================ [ 56.347548][ T8433] Kernel panic - not syncing: panic_on_warn set ... [ 56.354225][ T8433] CPU: 0 PID: 8433 Comm: syz-executor305 Not tainted 5.14.0-rc7-syzkaller #0 [ 56.365407][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.375723][ T8433] Call Trace: [ 56.379253][ T8433] dump_stack_lvl+0xcd/0x134 [ 56.383841][ T8433] panic+0x306/0x73d [ 56.387725][ T8433] ? __warn_printk+0xf3/0xf3 [ 56.392308][ T8433] ? dump_stack_lvl+0x120/0x134 [ 56.397151][ T8433] ? ubsan_epilogue+0x3e/0x5a [ 56.401998][ T8433] ubsan_epilogue+0x54/0x5a [ 56.406667][ T8433] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 56.414140][ T8433] ? __nla_parse+0x3d/0x50 [ 56.418553][ T8433] ? nl802154_get_llsec_params+0x390/0x390 [ 56.424354][ T8433] nl802154_new_interface.cold+0x19/0x1e [ 56.429979][ T8433] genl_family_rcv_msg_doit+0x228/0x320 [ 56.435607][ T8433] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 56.442982][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.449215][ T8433] ? ns_capable+0xd9/0x100 [ 56.453627][ T8433] genl_rcv_msg+0x328/0x580 [ 56.458471][ T8433] ? genl_get_cmd+0x480/0x480 [ 56.463318][ T8433] ? nl802154_set_short_addr+0x5c0/0x5c0 [ 56.468946][ T8433] ? lock_release+0x720/0x720 [ 56.473614][ T8433] netlink_rcv_skb+0x153/0x420 [ 56.478510][ T8433] ? genl_get_cmd+0x480/0x480 [ 56.483443][ T8433] ? netlink_ack+0xa60/0xa60 [ 56.488375][ T8433] ? _copy_from_iter+0x12b/0x1320 [ 56.493393][ T8433] genl_rcv+0x24/0x40 [ 56.497685][ T8433] netlink_unicast+0x533/0x7d0 [ 56.502444][ T8433] ? netlink_attachskb+0x890/0x890 [ 56.507549][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.513778][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.520008][ T8433] ? __phys_addr_symbol+0x2c/0x70 [ 56.525021][ T8433] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 56.530728][ T8433] ? __check_object_size+0x16e/0x3f0 [ 56.536005][ T8433] netlink_sendmsg+0x86d/0xdb0 [ 56.540767][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 56.546648][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.553053][ T8433] ? netlink_unicast+0x7d0/0x7d0 [ 56.558242][ T8433] sock_sendmsg+0xcf/0x120 [ 56.562824][ T8433] ____sys_sendmsg+0x6e8/0x810 [ 56.567662][ T8433] ? kernel_sendmsg+0x50/0x50 [ 56.572847][ T8433] ? do_recvmmsg+0x6d0/0x6d0 [ 56.577425][ T8433] ? lock_chain_count+0x20/0x20 [ 56.582361][ T8433] ___sys_sendmsg+0xf3/0x170 [ 56.586958][ T8433] ? sendmsg_copy_msghdr+0x160/0x160 [ 56.592238][ T8433] ? __lock_acquire+0x162f/0x54a0 [ 56.597262][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.603755][ T8433] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 56.609733][ T8433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 56.616483][ T8433] ? __fget_light+0x215/0x280 [ 56.621239][ T8433] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 56.627561][ T8433] __sys_sendmsg+0xe5/0x1b0 [ 56.632056][ T8433] ? __sys_sendmsg_sock+0x30/0x30 [ 56.637184][ T8433] ? syscall_enter_from_user_mode+0x21/0x70 [ 56.643163][ T8433] do_syscall_64+0x35/0xb0 [ 56.647571][ T8433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 56.653803][ T8433] RIP: 0033:0x43fa19 [ 56.657685][ T8433] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.677715][ T8433] RSP: 002b:00007ffde4781948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.686119][ T8433] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043fa19 [ 56.694163][ T8433] RDX: 0000000000000000 RSI: 0000000020000ac0 RDI: 0000000000000003 [ 56.702418][ T8433] RBP: 0000000000403480 R08: 0000000000000001 R09: 00000000004004a0 [ 56.710396][ T8433] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000403510 [ 56.718529][ T8433] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 56.734283][ T8433] Kernel Offset: disabled [ 56.738945][ T8433] Rebooting in 86400 seconds..