[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.22' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 84.954532][ T37] audit: type=1400 audit(1628848836.208:8): avc: denied { execmem } for pid=8438 comm="syz-executor529" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 executing program [ 85.006867][ T8440] modprobe (8440) used greatest stack depth: 22376 bytes left [ 85.057675][ T58] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 85.069426][ T58] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 85.077835][ T58] CPU: 0 PID: 58 Comm: kworker/u4:3 Not tainted 5.14.0-rc5-syzkaller #0 [ 85.086148][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.096454][ T58] Workqueue: pencrypt_parallel padata_parallel_worker [ 85.103326][ T58] RIP: 0010:scatterwalk_copychunks+0x4db/0x6a0 [ 85.109481][ T58] Code: ff df 80 3c 02 00 0f 85 b4 01 00 00 49 8d 44 24 08 4d 89 26 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 77 01 00 00 48 b8 00 00 00 00 [ 85.129074][ T58] RSP: 0018:ffffc900011d7628 EFLAGS: 00010202 [ 85.135125][ T58] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.143078][ T58] RDX: 0000000000000001 RSI: ffffffff83d3dc23 RDI: 0000000000000003 [ 85.151031][ T58] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff88801903a69b [ 85.158986][ T58] R10: ffffffff83d3dbd3 R11: 0000000000086088 R12: 0000000000000000 [ 85.166940][ T58] R13: 0000000000000001 R14: ffffc900011d7888 R15: 0000000000000000 [ 85.174898][ T58] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 85.183814][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.190386][ T58] CR2: 0000000020000100 CR3: 000000001d355000 CR4: 00000000001506f0 [ 85.198349][ T58] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.206309][ T58] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.214267][ T58] Call Trace: [ 85.217533][ T58] skcipher_walk_next+0x7af/0x1680 [ 85.222641][ T58] skcipher_walk_first+0xf8/0x3c0 [ 85.227654][ T58] skcipher_walk_aead_common+0x7a5/0xbc0 [ 85.233276][ T58] gcmaes_crypt_by_sg+0x31d/0x890 [ 85.238292][ T58] ? aes_set_key+0x30/0x30 [ 85.242697][ T58] ? rcu_read_lock_sched_held+0x3a/0x70 [ 85.248234][ T58] ? trace_pelt_se_tp+0x11e/0x1b0 [ 85.253243][ T58] ? __update_load_avg_se+0x41e/0xf00 [ 85.258602][ T58] ? update_load_avg+0x1c5/0x1740 [ 85.263612][ T58] ? update_curr+0x3e0/0x840 [ 85.268191][ T58] ? ttwu_do_activate+0x261/0x640 [ 85.273213][ T58] ? is_dynamic_key+0x1a0/0x1a0 [ 85.278141][ T58] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 85.284111][ T58] ? __lock_acquire+0x162f/0x54a0 [ 85.289122][ T58] gcmaes_encrypt+0xe2/0x230 [ 85.293703][ T58] ? helper_rfc4106_decrypt+0x370/0x370 [ 85.299238][ T58] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 85.305226][ T58] generic_gcmaes_encrypt+0x12e/0x190 [ 85.310595][ T58] ? gcmaes_encrypt+0x230/0x230 [ 85.315449][ T58] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 85.321686][ T58] crypto_aead_encrypt+0xaa/0xf0 [ 85.326628][ T58] crypto_aead_encrypt+0xaa/0xf0 [ 85.331558][ T58] pcrypt_aead_enc+0x13/0x70 [ 85.336138][ T58] padata_parallel_worker+0x60/0xb0 [ 85.341330][ T58] process_one_work+0x98d/0x1630 [ 85.346263][ T58] ? pwq_dec_nr_in_flight+0x320/0x320 [ 85.352066][ T58] ? rwlock_bug.part.0+0x90/0x90 [ 85.357079][ T58] ? _raw_spin_lock_irq+0x41/0x50 [ 85.362638][ T58] worker_thread+0x85c/0x11f0 [ 85.367309][ T58] ? process_one_work+0x1630/0x1630 [ 85.372499][ T58] kthread+0x3e5/0x4d0 [ 85.376568][ T58] ? set_kthread_struct+0x130/0x130 [ 85.381756][ T58] ret_from_fork+0x1f/0x30 [ 85.386176][ T58] Modules linked in: [ 85.390123][ T58] ---[ end trace d7f7427ae496b704 ]--- [ 85.395571][ T58] RIP: 0010:scatterwalk_copychunks+0x4db/0x6a0 [ 85.401764][ T58] Code: ff df 80 3c 02 00 0f 85 b4 01 00 00 49 8d 44 24 08 4d 89 26 48 89 c2 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 77 01 00 00 48 b8 00 00 00 00 [ 85.421443][ T58] RSP: 0018:ffffc900011d7628 EFLAGS: 00010202 [ 85.427544][ T58] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.435658][ T58] RDX: 0000000000000001 RSI: ffffffff83d3dc23 RDI: 0000000000000003 [ 85.443670][ T58] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff88801903a69b [ 85.451870][ T58] R10: ffffffff83d3dbd3 R11: 0000000000086088 R12: 0000000000000000 [ 85.459884][ T58] R13: 0000000000000001 R14: ffffc900011d7888 R15: 0000000000000000 [ 85.467900][ T58] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 85.476834][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.483454][ T58] CR2: 0000000020000100 CR3: 000000000b68e000 CR4: 00000000001506f0 [ 85.491469][ T58] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.499476][ T58] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.507513][ T58] Kernel panic - not syncing: Fatal exception in interrupt [ 85.514753][ T58] Kernel Offset: disabled [ 85.519065][ T58] Rebooting in 86400 seconds..