[ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 66.411589][ T8508] ------------[ cut here ]------------ [ 66.417169][ T8508] unsupported nla_type 0 [ 66.417502][ T8508] WARNING: CPU: 0 PID: 8508 at net/xfrm/xfrm_compat.c:279 xfrm_alloc_compat+0xf39/0x10d0 [ 66.432826][ T8508] Modules linked in: [ 66.437675][ T8508] CPU: 0 PID: 8508 Comm: syz-executor773 Not tainted 5.10.0-rc7-syzkaller #0 [ 66.447452][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.457652][ T8508] RIP: 0010:xfrm_alloc_compat+0xf39/0x10d0 [ 66.463792][ T8508] Code: de e8 db 8c d2 f9 84 db 0f 85 b0 f8 ff ff e8 be 94 d2 f9 8b 74 24 08 48 c7 c7 c0 f7 51 8a c6 05 de 32 3b 05 01 e8 63 03 0f 01 <0f> 0b e9 8d f8 ff ff e8 9b 94 d2 f9 8b 14 24 48 c7 c7 80 f7 51 8a [ 66.484070][ T8508] RSP: 0018:ffffc900015ef378 EFLAGS: 00010282 [ 66.491874][ T8508] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 66.500008][ T8508] RDX: ffff888017239a40 RSI: ffffffff8158c835 RDI: fffff520002bde61 [ 66.508039][ T8508] RBP: 000000000000000c R08: 0000000000000001 R09: ffff8880b9e2011b [ 66.516114][ T8508] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffa1 [ 66.524292][ T8508] R13: ffff88801c9a48f8 R14: ffff8880209f0000 R15: ffff888011913640 [ 66.532353][ T8508] FS: 0000000000933880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 66.541402][ T8508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.547993][ T8508] CR2: 00007f8f73ef6000 CR3: 0000000013417000 CR4: 00000000001506e0 [ 66.556074][ T8508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.564163][ T8508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.572230][ T8508] Call Trace: [ 66.575553][ T8508] ? xfrm_attr_cpy32+0x1d0/0x1d0 [ 66.580620][ T8508] xfrm_alloc_userspi+0x66a/0xa30 [ 66.585655][ T8508] ? __cgroup_bpf_query+0x700/0x7d0 [ 66.590924][ T8508] ? xfrm_send_report+0x510/0x510 [ 66.595991][ T8508] ? __nla_parse+0x3d/0x50 [ 66.600537][ T8508] ? xfrm_send_report+0x510/0x510 [ 66.605611][ T8508] xfrm_user_rcv_msg+0x42f/0x8b0 [ 66.610844][ T8508] ? xfrm_do_migrate+0x800/0x800 [ 66.616599][ T8508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.622795][ T8508] ? __mutex_lock+0x626/0x10e0 [ 66.627597][ T8508] netlink_rcv_skb+0x153/0x420 [ 66.632491][ T8508] ? xfrm_do_migrate+0x800/0x800 [ 66.637568][ T8508] ? netlink_ack+0xaa0/0xaa0 [ 66.642376][ T8508] xfrm_netlink_rcv+0x6b/0x90 [ 66.647066][ T8508] netlink_unicast+0x533/0x7d0 [ 66.652266][ T8508] ? netlink_attachskb+0x810/0x810 [ 66.657423][ T8508] ? __phys_addr_symbol+0x2c/0x70 [ 66.662705][ T8508] ? __check_object_size+0x171/0x3f0 [ 66.668007][ T8508] netlink_sendmsg+0x856/0xd90 [ 66.672852][ T8508] ? netlink_unicast+0x7d0/0x7d0 [ 66.677815][ T8508] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 66.683251][ T8508] ? netlink_unicast+0x7d0/0x7d0 [ 66.688210][ T8508] sock_sendmsg+0xcf/0x120 [ 66.693587][ T8508] ____sys_sendmsg+0x331/0x810 [ 66.698420][ T8508] ? kernel_sendmsg+0x50/0x50 [ 66.703212][ T8508] ? do_recvmmsg+0x6c0/0x6c0 [ 66.707846][ T8508] ? __lock_acquire+0xbd6/0x5500 [ 66.712933][ T8508] ___sys_sendmsg+0xf3/0x170 [ 66.717540][ T8508] ? sendmsg_copy_msghdr+0x160/0x160 [ 66.722990][ T8508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.728978][ T8508] ? release_pages+0x59b/0x1690 [ 66.733957][ T8508] ? lock_chain_count+0x20/0x20 [ 66.738829][ T8508] ? find_held_lock+0x2d/0x110 [ 66.743762][ T8508] ? do_huge_pmd_anonymous_page+0x12b3/0x2170 [ 66.749961][ T8508] ? lock_downgrade+0x6d0/0x6d0 [ 66.755795][ T8508] ? __fget_light+0x215/0x280 [ 66.760632][ T8508] __sys_sendmmsg+0x195/0x470 [ 66.765332][ T8508] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 66.770489][ T8508] ? sockfd_lookup_light+0xc6/0x180 [ 66.775713][ T8508] ? __sys_sendmsg+0x10c/0x1b0 [ 66.780584][ T8508] ? __sys_sendmsg_sock+0xb0/0xb0 [ 66.786309][ T8508] ? vmacache_update+0xce/0x140 [ 66.791276][ T8508] __x64_sys_sendmmsg+0x99/0x100 [ 66.796241][ T8508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 66.802304][ T8508] do_syscall_64+0x2d/0x70 [ 66.806743][ T8508] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.812814][ T8508] RIP: 0033:0x440339 [ 66.816720][ T8508] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.837145][ T8508] RSP: 002b:00007ffde0b393d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.845931][ T8508] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440339 [ 66.854423][ T8508] RDX: 00000000000000f1 RSI: 0000000020000180 RDI: 0000000000000003 [ 66.862736][ T8508] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 66.871012][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401b40 [ 66.879199][ T8508] R13: 0000000000401bd0 R14: 0000000000000000 R15: 0000000000000000 [ 66.887339][ T8508] Kernel panic - not syncing: panic_on_warn set ... [ 66.894190][ T8508] CPU: 1 PID: 8508 Comm: syz-executor773 Not tainted 5.10.0-rc7-syzkaller #0 [ 66.902955][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.913007][ T8508] Call Trace: [ 66.916299][ T8508] dump_stack+0x107/0x163 [ 66.920631][ T8508] panic+0x306/0x73d [ 66.924538][ T8508] ? __warn_printk+0xf3/0xf3 [ 66.929157][ T8508] ? __warn.cold+0x1a/0x44 [ 66.933866][ T8508] ? __warn+0xf1/0x210 [ 66.937984][ T8508] ? xfrm_alloc_compat+0xf39/0x10d0 [ 66.943186][ T8508] __warn.cold+0x35/0x44 [ 66.947429][ T8508] ? wake_up_klogd.part.0+0x8e/0xd0 [ 66.952746][ T8508] ? xfrm_alloc_compat+0xf39/0x10d0 [ 66.958202][ T8508] report_bug+0x1bd/0x210 [ 66.962535][ T8508] handle_bug+0x3c/0x60 [ 66.966697][ T8508] exc_invalid_op+0x14/0x40 [ 66.971439][ T8508] asm_exc_invalid_op+0x12/0x20 [ 66.976290][ T8508] RIP: 0010:xfrm_alloc_compat+0xf39/0x10d0 [ 66.982087][ T8508] Code: de e8 db 8c d2 f9 84 db 0f 85 b0 f8 ff ff e8 be 94 d2 f9 8b 74 24 08 48 c7 c7 c0 f7 51 8a c6 05 de 32 3b 05 01 e8 63 03 0f 01 <0f> 0b e9 8d f8 ff ff e8 9b 94 d2 f9 8b 14 24 48 c7 c7 80 f7 51 8a [ 67.001955][ T8508] RSP: 0018:ffffc900015ef378 EFLAGS: 00010282 [ 67.008036][ T8508] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 67.016117][ T8508] RDX: ffff888017239a40 RSI: ffffffff8158c835 RDI: fffff520002bde61 [ 67.024104][ T8508] RBP: 000000000000000c R08: 0000000000000001 R09: ffff8880b9e2011b [ 67.033042][ T8508] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffa1 [ 67.041012][ T8508] R13: ffff88801c9a48f8 R14: ffff8880209f0000 R15: ffff888011913640 [ 67.049027][ T8508] ? vprintk_func+0x95/0x1e0 [ 67.053622][ T8508] ? xfrm_alloc_compat+0xf39/0x10d0 [ 67.058931][ T8508] ? xfrm_attr_cpy32+0x1d0/0x1d0 [ 67.063974][ T8508] xfrm_alloc_userspi+0x66a/0xa30 [ 67.072704][ T8508] ? __cgroup_bpf_query+0x700/0x7d0 [ 67.077901][ T8508] ? xfrm_send_report+0x510/0x510 [ 67.082920][ T8508] ? __nla_parse+0x3d/0x50 [ 67.087340][ T8508] ? xfrm_send_report+0x510/0x510 [ 67.092358][ T8508] xfrm_user_rcv_msg+0x42f/0x8b0 [ 67.097305][ T8508] ? xfrm_do_migrate+0x800/0x800 [ 67.102471][ T8508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.108526][ T8508] ? __mutex_lock+0x626/0x10e0 [ 67.113291][ T8508] netlink_rcv_skb+0x153/0x420 [ 67.118056][ T8508] ? xfrm_do_migrate+0x800/0x800 [ 67.123017][ T8508] ? netlink_ack+0xaa0/0xaa0 [ 67.127607][ T8508] xfrm_netlink_rcv+0x6b/0x90 [ 67.132532][ T8508] netlink_unicast+0x533/0x7d0 [ 67.137285][ T8508] ? netlink_attachskb+0x810/0x810 [ 67.142385][ T8508] ? __phys_addr_symbol+0x2c/0x70 [ 67.149658][ T8508] ? __check_object_size+0x171/0x3f0 [ 67.154934][ T8508] netlink_sendmsg+0x856/0xd90 [ 67.159707][ T8508] ? netlink_unicast+0x7d0/0x7d0 [ 67.164657][ T8508] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 67.169938][ T8508] ? netlink_unicast+0x7d0/0x7d0 [ 67.174880][ T8508] sock_sendmsg+0xcf/0x120 [ 67.179285][ T8508] ____sys_sendmsg+0x331/0x810 [ 67.184056][ T8508] ? kernel_sendmsg+0x50/0x50 [ 67.188730][ T8508] ? do_recvmmsg+0x6c0/0x6c0 [ 67.193319][ T8508] ? __lock_acquire+0xbd6/0x5500 [ 67.198263][ T8508] ___sys_sendmsg+0xf3/0x170 [ 67.202851][ T8508] ? sendmsg_copy_msghdr+0x160/0x160 [ 67.208127][ T8508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 67.214123][ T8508] ? release_pages+0x59b/0x1690 [ 67.218962][ T8508] ? lock_chain_count+0x20/0x20 [ 67.223831][ T8508] ? find_held_lock+0x2d/0x110 [ 67.229551][ T8508] ? do_huge_pmd_anonymous_page+0x12b3/0x2170 [ 67.235657][ T8508] ? lock_downgrade+0x6d0/0x6d0 [ 67.240517][ T8508] ? __fget_light+0x215/0x280 [ 67.245188][ T8508] __sys_sendmmsg+0x195/0x470 [ 67.250387][ T8508] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 67.255561][ T8508] ? sockfd_lookup_light+0xc6/0x180 [ 67.261023][ T8508] ? __sys_sendmsg+0x10c/0x1b0 [ 67.265790][ T8508] ? __sys_sendmsg_sock+0xb0/0xb0 [ 67.270806][ T8508] ? vmacache_update+0xce/0x140 [ 67.275677][ T8508] __x64_sys_sendmmsg+0x99/0x100 [ 67.280877][ T8508] ? syscall_enter_from_user_mode+0x1d/0x50 [ 67.286782][ T8508] do_syscall_64+0x2d/0x70 [ 67.291195][ T8508] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 67.297071][ T8508] RIP: 0033:0x440339 [ 67.300965][ T8508] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 67.322306][ T8508] RSP: 002b:00007ffde0b393d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.330728][ T8508] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440339 [ 67.338705][ T8508] RDX: 00000000000000f1 RSI: 0000000020000180 RDI: 0000000000000003 [ 67.346674][ T8508] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 67.354635][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401b40 [ 67.362613][ T8508] R13: 0000000000401bd0 R14: 0000000000000000 R15: 0000000000000000 [ 67.371275][ T8508] Kernel Offset: disabled [ 67.375709][ T8508] Rebooting in 86400 seconds..