[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.241' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 63.377630][ T6862] ------------[ cut here ]------------ [ 63.383263][ T6862] WARNING: CPU: 1 PID: 6862 at lib/nlattr.c:117 nla_get_range_unsigned+0x157/0x530 [ 63.393621][ T6862] Modules linked in: [ 63.397520][ T6862] CPU: 1 PID: 6862 Comm: syz-executor473 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 63.408310][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 63.419238][ T6862] RIP: 0010:nla_get_range_unsigned+0x157/0x530 [ 63.425978][ T6862] Code: 2a 03 00 00 44 0f b6 3b 48 c7 c6 40 e9 96 88 4c 89 ff e8 6c 93 c2 fd 41 80 ff 0b 77 11 42 ff 24 fd 60 e3 96 88 e8 99 96 c2 fd <0f> 0b eb 8f e8 90 96 c2 fd 0f 0b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 [ 63.446745][ T6862] RSP: 0018:ffffc900016e7190 EFLAGS: 00010293 [ 63.453398][ T6862] RAX: 0000000000000000 RBX: ffffffff8918a7a0 RCX: ffffffff83b1e584 [ 63.461373][ T6862] RDX: ffff888094e44480 RSI: ffffffff83b1e5f7 RDI: 0000000000000003 [ 63.470306][ T6862] RBP: ffffc900016e71b8 R08: 0000000000000000 R09: ffff8880941b8370 [ 63.478882][ T6862] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900016e7278 [ 63.487604][ T6862] R13: ffffffff8918a7a1 R14: 000000000000877c R15: ffffffff8918a7a0 [ 63.495996][ T6862] FS: 000000000228e880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 63.505410][ T6862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.512197][ T6862] CR2: 00007f01fc28d000 CR3: 00000000a6eaf000 CR4: 00000000001506e0 [ 63.520197][ T6862] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.528387][ T6862] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.536549][ T6862] Call Trace: [ 63.539892][ T6862] netlink_policy_dump_write+0x2ae/0xea0 [ 63.546715][ T6862] ? netlink_policy_dump_loop+0x170/0x170 [ 63.553001][ T6862] ? skb_put+0x134/0x180 [ 63.557263][ T6862] ? memset+0x20/0x40 [ 63.561253][ T6862] ? __nla_reserve+0x9a/0xc0 [ 63.567261][ T6862] ? __nla_put+0x23/0x40 [ 63.572086][ T6862] ? memcpy+0x39/0x60 [ 63.576100][ T6862] ctrl_dumppolicy+0x4a8/0x900 [ 63.580908][ T6862] ? genl_start+0x5d0/0x5d0 [ 63.587176][ T6862] ? __kmalloc_node_track_caller+0x38/0x60 [ 63.593581][ T6862] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 63.599129][ T6862] ? __phys_addr+0x9a/0x110 [ 63.604433][ T6862] ? memset+0x20/0x40 [ 63.608428][ T6862] genl_lock_dumpit+0x7f/0xb0 [ 63.613960][ T6862] netlink_dump+0x4cd/0xf60 [ 63.618478][ T6862] ? netlink_insert+0x1670/0x1670 [ 63.624723][ T6862] ? __mutex_unlock_slowpath+0xe2/0x610 [ 63.630276][ T6862] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 63.636674][ T6862] ? genl_start+0x3bb/0x5d0 [ 63.641201][ T6862] __netlink_dump_start+0x643/0x900 [ 63.647363][ T6862] ? genl_rcv_msg+0x980/0x980 [ 63.652574][ T6862] ? genl_start+0x5d0/0x5d0 [ 63.657102][ T6862] genl_family_rcv_msg_dumpit+0x2ac/0x310 [ 63.663747][ T6862] ? genl_rcv+0x40/0x40 [ 63.667916][ T6862] ? mutex_lock_io_nested+0xf60/0xf60 [ 63.674178][ T6862] ? mark_lock+0xbc/0x1710 [ 63.678622][ T6862] ? genl_rcv_msg+0x980/0x980 [ 63.684205][ T6862] ? genl_unlock+0x20/0x20 [ 63.688627][ T6862] ? genl_parallel_done+0xf0/0xf0 [ 63.694494][ T6862] ? __radix_tree_lookup+0x1f3/0x290 [ 63.699787][ T6862] genl_rcv_msg+0x75f/0x980 [ 63.705240][ T6862] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.712793][ T6862] ? lock_acquire+0x1f1/0xad0 [ 63.717477][ T6862] ? genl_rcv+0x15/0x40 [ 63.722823][ T6862] ? lock_release+0x8e0/0x8e0 [ 63.727530][ T6862] netlink_rcv_skb+0x15a/0x430 [ 63.733128][ T6862] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 63.740071][ T6862] ? netlink_ack+0xa10/0xa10 [ 63.745632][ T6862] ? lock_is_held_type+0xbb/0xf0 [ 63.750596][ T6862] genl_rcv+0x24/0x40 [ 63.755470][ T6862] netlink_unicast+0x533/0x7d0 [ 63.760260][ T6862] ? netlink_attachskb+0x810/0x810 [ 63.766369][ T6862] ? _copy_from_iter_full+0x247/0x890 [ 63.772342][ T6862] ? __phys_addr+0x9a/0x110 [ 63.776845][ T6862] ? __phys_addr_symbol+0x2c/0x70 [ 63.782754][ T6862] ? __check_object_size+0x171/0x3e4 [ 63.788039][ T6862] netlink_sendmsg+0x856/0xd90 [ 63.794154][ T6862] ? netlink_unicast+0x7d0/0x7d0 [ 63.799097][ T6862] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 63.805234][ T6862] ? netlink_unicast+0x7d0/0x7d0 [ 63.810183][ T6862] sock_sendmsg+0xcf/0x120 [ 63.815510][ T6862] ____sys_sendmsg+0x6e8/0x810 [ 63.820282][ T6862] ? kernel_sendmsg+0x50/0x50 [ 63.825831][ T6862] ? do_recvmmsg+0x6d0/0x6d0 [ 63.830424][ T6862] ? lock_acquire+0x1f1/0xad0 [ 63.835889][ T6862] ? do_huge_pmd_anonymous_page+0x120d/0x2230 [ 63.842554][ T6862] ? find_held_lock+0x2d/0x110 [ 63.847329][ T6862] ___sys_sendmsg+0xf3/0x170 [ 63.852704][ T6862] ? sendmsg_copy_msghdr+0x160/0x160 [ 63.857989][ T6862] ? do_huge_pmd_anonymous_page+0x1b94/0x2230 [ 63.865087][ T6862] ? do_huge_pmd_anonymous_page+0x8ef/0x2230 [ 63.871081][ T6862] ? handle_mm_fault+0xb78/0x4530 [ 63.876968][ T6862] ? find_held_lock+0x2d/0x110 [ 63.882349][ T6862] ? __fget_light+0x215/0x280 [ 63.887037][ T6862] __sys_sendmsg+0xe5/0x1b0 [ 63.892442][ T6862] ? __sys_sendmsg_sock+0xb0/0xb0 [ 63.897490][ T6862] ? trace_hardirqs_on+0x5f/0x220 [ 63.903517][ T6862] ? lockdep_hardirqs_on+0x76/0xf0 [ 63.908658][ T6862] do_syscall_64+0x2d/0x70 [ 63.914043][ T6862] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 63.919944][ T6862] RIP: 0033:0x4402a9 [ 63.924753][ T6862] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 63.945073][ T6862] RSP: 002b:00007ffdd63b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.954180][ T6862] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402a9 [ 63.962839][ T6862] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 63.970819][ T6862] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 63.979770][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ab0 [ 63.988395][ T6862] R13: 0000000000401b40 R14: 0000000000000000 R15: 0000000000000000 [ 63.997043][ T6862] Kernel panic - not syncing: panic_on_warn set ... [ 64.003637][ T6862] CPU: 1 PID: 6862 Comm: syz-executor473 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 64.013509][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.023570][ T6862] Call Trace: [ 64.026867][ T6862] dump_stack+0x18f/0x20d [ 64.031187][ T6862] panic+0x2e3/0x75c [ 64.035102][ T6862] ? __warn_printk+0xf3/0xf3 [ 64.039695][ T6862] ? __warn.cold+0x1d/0xc1 [ 64.044123][ T6862] ? __warn.cold+0x14/0xc1 [ 64.048547][ T6862] ? nla_get_range_unsigned+0x157/0x530 [ 64.054106][ T6862] __warn.cold+0x38/0xc1 [ 64.058353][ T6862] ? nla_get_range_unsigned+0x157/0x530 [ 64.063894][ T6862] report_bug+0x1bd/0x210 [ 64.068219][ T6862] handle_bug+0x38/0x90 [ 64.072368][ T6862] ? mark_lock+0xbc/0x1710 [ 64.076780][ T6862] exc_invalid_op+0x14/0x40 [ 64.081277][ T6862] asm_exc_invalid_op+0x12/0x20 [ 64.086124][ T6862] RIP: 0010:nla_get_range_unsigned+0x157/0x530 [ 64.092267][ T6862] Code: 2a 03 00 00 44 0f b6 3b 48 c7 c6 40 e9 96 88 4c 89 ff e8 6c 93 c2 fd 41 80 ff 0b 77 11 42 ff 24 fd 60 e3 96 88 e8 99 96 c2 fd <0f> 0b eb 8f e8 90 96 c2 fd 0f 0b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 [ 64.111879][ T6862] RSP: 0018:ffffc900016e7190 EFLAGS: 00010293 [ 64.117941][ T6862] RAX: 0000000000000000 RBX: ffffffff8918a7a0 RCX: ffffffff83b1e584 [ 64.125910][ T6862] RDX: ffff888094e44480 RSI: ffffffff83b1e5f7 RDI: 0000000000000003 [ 64.133876][ T6862] RBP: ffffc900016e71b8 R08: 0000000000000000 R09: ffff8880941b8370 [ 64.141841][ T6862] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900016e7278 [ 64.149808][ T6862] R13: ffffffff8918a7a1 R14: 000000000000877c R15: ffffffff8918a7a0 [ 64.157806][ T6862] ? nla_get_range_unsigned+0xe4/0x530 [ 64.163255][ T6862] ? nla_get_range_unsigned+0x157/0x530 [ 64.168800][ T6862] netlink_policy_dump_write+0x2ae/0xea0 [ 64.174446][ T6862] ? netlink_policy_dump_loop+0x170/0x170 [ 64.180170][ T6862] ? skb_put+0x134/0x180 [ 64.184408][ T6862] ? memset+0x20/0x40 [ 64.188376][ T6862] ? __nla_reserve+0x9a/0xc0 [ 64.192954][ T6862] ? __nla_put+0x23/0x40 [ 64.197186][ T6862] ? memcpy+0x39/0x60 [ 64.201182][ T6862] ctrl_dumppolicy+0x4a8/0x900 [ 64.205954][ T6862] ? genl_start+0x5d0/0x5d0 [ 64.210454][ T6862] ? __kmalloc_node_track_caller+0x38/0x60 [ 64.216279][ T6862] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 64.221831][ T6862] ? __phys_addr+0x9a/0x110 [ 64.226328][ T6862] ? memset+0x20/0x40 [ 64.230317][ T6862] genl_lock_dumpit+0x7f/0xb0 [ 64.234995][ T6862] netlink_dump+0x4cd/0xf60 [ 64.239493][ T6862] ? netlink_insert+0x1670/0x1670 [ 64.244511][ T6862] ? __mutex_unlock_slowpath+0xe2/0x610 [ 64.250048][ T6862] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 64.255598][ T6862] ? genl_start+0x3bb/0x5d0 [ 64.260087][ T6862] __netlink_dump_start+0x643/0x900 [ 64.265269][ T6862] ? genl_rcv_msg+0x980/0x980 [ 64.269943][ T6862] ? genl_start+0x5d0/0x5d0 [ 64.274435][ T6862] genl_family_rcv_msg_dumpit+0x2ac/0x310 [ 64.280139][ T6862] ? genl_rcv+0x40/0x40 [ 64.284277][ T6862] ? mutex_lock_io_nested+0xf60/0xf60 [ 64.289635][ T6862] ? mark_lock+0xbc/0x1710 [ 64.294056][ T6862] ? genl_rcv_msg+0x980/0x980 [ 64.298718][ T6862] ? genl_unlock+0x20/0x20 [ 64.303151][ T6862] ? genl_parallel_done+0xf0/0xf0 [ 64.308175][ T6862] ? __radix_tree_lookup+0x1f3/0x290 [ 64.313470][ T6862] genl_rcv_msg+0x75f/0x980 [ 64.318012][ T6862] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.324945][ T6862] ? lock_acquire+0x1f1/0xad0 [ 64.329788][ T6862] ? genl_rcv+0x15/0x40 [ 64.333949][ T6862] ? lock_release+0x8e0/0x8e0 [ 64.338642][ T6862] netlink_rcv_skb+0x15a/0x430 [ 64.343433][ T6862] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 64.350373][ T6862] ? netlink_ack+0xa10/0xa10 [ 64.354972][ T6862] ? lock_is_held_type+0xbb/0xf0 [ 64.359908][ T6862] genl_rcv+0x24/0x40 [ 64.363895][ T6862] netlink_unicast+0x533/0x7d0 [ 64.368651][ T6862] ? netlink_attachskb+0x810/0x810 [ 64.373820][ T6862] ? _copy_from_iter_full+0x247/0x890 [ 64.379193][ T6862] ? __phys_addr+0x9a/0x110 [ 64.383691][ T6862] ? __phys_addr_symbol+0x2c/0x70 [ 64.388707][ T6862] ? __check_object_size+0x171/0x3e4 [ 64.393982][ T6862] netlink_sendmsg+0x856/0xd90 [ 64.398737][ T6862] ? netlink_unicast+0x7d0/0x7d0 [ 64.403665][ T6862] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 64.408953][ T6862] ? netlink_unicast+0x7d0/0x7d0 [ 64.413893][ T6862] sock_sendmsg+0xcf/0x120 [ 64.418298][ T6862] ____sys_sendmsg+0x6e8/0x810 [ 64.423052][ T6862] ? kernel_sendmsg+0x50/0x50 [ 64.427722][ T6862] ? do_recvmmsg+0x6d0/0x6d0 [ 64.432299][ T6862] ? lock_acquire+0x1f1/0xad0 [ 64.436955][ T6862] ? do_huge_pmd_anonymous_page+0x120d/0x2230 [ 64.443007][ T6862] ? find_held_lock+0x2d/0x110 [ 64.447761][ T6862] ___sys_sendmsg+0xf3/0x170 [ 64.452338][ T6862] ? sendmsg_copy_msghdr+0x160/0x160 [ 64.457612][ T6862] ? do_huge_pmd_anonymous_page+0x1b94/0x2230 [ 64.463679][ T6862] ? do_huge_pmd_anonymous_page+0x8ef/0x2230 [ 64.469656][ T6862] ? handle_mm_fault+0xb78/0x4530 [ 64.474670][ T6862] ? find_held_lock+0x2d/0x110 [ 64.479421][ T6862] ? __fget_light+0x215/0x280 [ 64.484202][ T6862] __sys_sendmsg+0xe5/0x1b0 [ 64.488714][ T6862] ? __sys_sendmsg_sock+0xb0/0xb0 [ 64.493746][ T6862] ? trace_hardirqs_on+0x5f/0x220 [ 64.498762][ T6862] ? lockdep_hardirqs_on+0x76/0xf0 [ 64.503866][ T6862] do_syscall_64+0x2d/0x70 [ 64.508313][ T6862] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 64.514212][ T6862] RIP: 0033:0x4402a9 [ 64.518112][ T6862] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 64.537712][ T6862] RSP: 002b:00007ffdd63b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.546123][ T6862] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402a9 [ 64.554086][ T6862] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 64.562047][ T6862] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 64.570012][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ab0 [ 64.578000][ T6862] R13: 0000000000401b40 R14: 0000000000000000 R15: 0000000000000000 [ 64.586825][ T6862] Kernel Offset: disabled [ 64.591207][ T6862] Rebooting in 86400 seconds..