Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 40.228531] audit: type=1400 audit(1600671490.433:8): avc: denied { execmem } for pid=6484 comm="syz-executor344" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.230866] ================================================================================ [ 40.257786] UBSAN: Undefined behaviour in net/netfilter/ipset/ip_set_hash_gen.h:125:6 [ 40.265850] shift exponent 32 is too large for 32-bit type 'unsigned int' [ 40.272765] CPU: 1 PID: 6484 Comm: syz-executor344 Not tainted 4.19.146-syzkaller #0 [ 40.280636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.289998] Call Trace: [ 40.292582] dump_stack+0x22c/0x33e [ 40.296198] ubsan_epilogue+0xe/0x3a [ 40.299910] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 40.306336] ? hash_ipmark_create+0x44a/0xb8f [ 40.310837] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 40.315849] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 40.320685] hash_ipmark_create.cold+0x19/0x27 [ 40.325252] ? hash_ipmark4_add+0x1e50/0x1e50 [ 40.329735] ip_set_create+0x70e/0x1380 [ 40.333739] ? __find_set_type_get+0x450/0x450 [ 40.338502] ? lock_downgrade+0x750/0x750 [ 40.342644] ? __find_set_type_get+0x450/0x450 [ 40.347224] nfnetlink_rcv_msg+0xeff/0x1210 [ 40.351556] ? nfnetlink_net_init+0x170/0x170 [ 40.356165] ? avc_has_extended_perms+0x1020/0x1020 [ 40.363066] ? avc_has_extended_perms+0x1020/0x1020 [ 40.368249] ? __lock_acquire+0x6ec/0x3ff0 [ 40.372499] ? mark_held_locks+0xf0/0xf0 [ 40.376567] ? cred_has_capability+0x162/0x2e0 [ 40.381129] ? cred_has_capability+0x1d9/0x2e0 [ 40.385694] ? selinux_inode_copy_up+0x180/0x180 [ 40.390451] ? selinux_inode_copy_up+0x180/0x180 [ 40.395208] netlink_rcv_skb+0x160/0x440 [ 40.399285] ? nfnetlink_net_init+0x170/0x170 [ 40.403764] ? netlink_ack+0xae0/0xae0 [ 40.407635] ? ns_capable_common+0x117/0x140 [ 40.412039] nfnetlink_rcv+0x1b2/0x41b [ 40.415908] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 40.421121] netlink_unicast+0x4d5/0x690 [ 40.425189] ? netlink_sendskb+0x110/0x110 [ 40.429413] netlink_sendmsg+0x717/0xcc0 [ 40.433467] ? nlmsg_notify+0x1a0/0x1a0 [ 40.437600] ? nlmsg_notify+0x1a0/0x1a0 [ 40.441570] sock_sendmsg+0xc7/0x130 [ 40.446310] sock_no_sendpage+0xf5/0x140 [ 40.450464] ? sk_page_frag_refill+0x1d0/0x1d0 [ 40.456335] ? pipe_lock+0x63/0x80 [ 40.459883] ? pipe_lock+0x63/0x80 [ 40.463862] ? sk_page_frag_refill+0x1d0/0x1d0 [ 40.468438] sock_sendpage+0xdf/0x140 [ 40.472246] pipe_to_sendpage+0x268/0x330 [ 40.476401] ? move_addr_to_kernel.part.0+0x110/0x110 [ 40.481638] ? direct_splice_actor+0x160/0x160 [ 40.486221] ? splice_from_pipe_next.part.0+0x2d5/0x390 [ 40.491596] __splice_from_pipe+0x3af/0x820 [ 40.495938] ? direct_splice_actor+0x160/0x160 [ 40.500529] generic_splice_sendpage+0xd4/0x140 [ 40.505218] ? __splice_from_pipe+0x820/0x820 [ 40.509803] ? security_file_permission+0x1c0/0x230 [ 40.515936] ? __splice_from_pipe+0x820/0x820 [ 40.520462] __se_sys_splice+0xf31/0x15f0 [ 40.524607] ? __sys_socket+0x16d/0x200 [ 40.528566] ? move_addr_to_kernel+0x70/0x70 [ 40.532959] ? __se_sys_tee+0xa10/0xa10 [ 40.536919] ? trace_hardirqs_off_caller+0x69/0x210 [ 40.541935] ? do_syscall_64+0x21/0x670 [ 40.545896] do_syscall_64+0xf9/0x670 [ 40.549685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.554857] RIP: 0033:0x4404d9 [ 40.558405] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 40.577305] RSP: 002b:00007ffcb6944b48 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 40.585072] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004404d9 [ 40.592324] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 40.599579] RBP: 00000000006ca018 R08: 0000000100000000 R09: 0000000000000000 [ 40.607020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ce0 [ 40.614557] R13: 0000000000401d70 R14: 0000000000000000 R15: 0000000000000000 [ 40.622889] =======================================================================