[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.113' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 70.409076][ T36] audit: type=1804 audit(1630263630.349:2): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor354" name="/root/cgroup.controllers" dev="sda1" ino=13861 res=1 errno=0 [ 70.435189][ T8447] netlink: 172 bytes leftover after parsing attributes in process `syz-executor354'. [ 70.444969][ T8447] ================================================================================ [ 70.454318][ T8447] UBSAN: shift-out-of-bounds in net/xfrm/xfrm_user.c:2010:49 [ 70.461777][ T8447] shift exponent 224 is too large for 32-bit type 'int' [ 70.468702][ T8447] CPU: 1 PID: 8447 Comm: syz-executor354 Not tainted 5.14.0-rc7-syzkaller #0 [ 70.477446][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.487547][ T8447] Call Trace: [ 70.490813][ T8447] dump_stack_lvl+0xcd/0x134 [ 70.495442][ T8447] ubsan_epilogue+0xb/0x5a [ 70.499877][ T8447] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 70.506631][ T8447] ? kmem_cache_free+0x521/0x5b0 [ 70.511558][ T8447] ? __nlmsg_put+0x155/0x1c0 [ 70.516155][ T8447] xfrm_get_default.cold+0x1f/0x75 [ 70.521252][ T8447] ? xfrm_dump_sa+0x4a0/0x4a0 [ 70.525917][ T8447] xfrm_user_rcv_msg+0x430/0xa20 [ 70.530838][ T8447] ? xfrm_do_migrate+0x7f0/0x7f0 [ 70.535766][ T8447] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.541767][ T8447] netlink_rcv_skb+0x153/0x420 [ 70.546542][ T8447] ? xfrm_do_migrate+0x7f0/0x7f0 [ 70.551484][ T8447] ? netlink_ack+0xa60/0xa60 [ 70.556082][ T8447] ? netlink_deliver_tap+0x1b1/0xc30 [ 70.561374][ T8447] ? _copy_from_iter+0x12b/0x1320 [ 70.566410][ T8447] xfrm_netlink_rcv+0x6b/0x90 [ 70.571087][ T8447] netlink_unicast+0x533/0x7d0 [ 70.575871][ T8447] ? netlink_attachskb+0x890/0x890 [ 70.580987][ T8447] ? __virt_addr_valid+0x5d/0x2d0 [ 70.586015][ T8447] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.592253][ T8447] ? __phys_addr_symbol+0x2c/0x70 [ 70.597274][ T8447] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 70.603004][ T8447] ? __check_object_size+0x16e/0x3f0 [ 70.608295][ T8447] netlink_sendmsg+0x86d/0xdb0 [ 70.613070][ T8447] ? netlink_unicast+0x7d0/0x7d0 [ 70.618009][ T8447] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.624080][ T8447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.630323][ T8447] ? netlink_unicast+0x7d0/0x7d0 [ 70.635265][ T8447] sock_sendmsg+0xcf/0x120 [ 70.639681][ T8447] sock_no_sendpage+0xf3/0x130 [ 70.644449][ T8447] ? sk_page_frag_refill+0x1d0/0x1d0 [ 70.649750][ T8447] ? kasan_quarantine_put+0xf5/0x210 [ 70.655036][ T8447] ? lockdep_hardirqs_on+0x79/0x100 [ 70.660241][ T8447] kernel_sendpage.part.0+0x1a0/0x340 [ 70.665618][ T8447] sock_sendpage+0xe5/0x140 [ 70.670124][ T8447] ? __sock_recv_ts_and_drops+0x430/0x430 [ 70.675842][ T8447] pipe_to_sendpage+0x2ad/0x380 [ 70.680700][ T8447] ? propagate_umount+0x19f0/0x19f0 [ 70.685903][ T8447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.692144][ T8447] ? splice_from_pipe_next.part.0+0x167/0x520 [ 70.698226][ T8447] __splice_from_pipe+0x43e/0x8a0 [ 70.703257][ T8447] ? propagate_umount+0x19f0/0x19f0 [ 70.708467][ T8447] generic_splice_sendpage+0xd4/0x140 [ 70.713857][ T8447] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 70.718983][ T8447] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 70.724101][ T8447] direct_splice_actor+0x110/0x180 [ 70.729221][ T8447] splice_direct_to_actor+0x34b/0x8c0 [ 70.734601][ T8447] ? generic_file_splice_read+0x6c0/0x6c0 [ 70.740325][ T8447] ? do_splice_to+0x250/0x250 [ 70.745019][ T8447] ? security_file_permission+0x248/0x560 [ 70.750748][ T8447] do_splice_direct+0x1b3/0x280 [ 70.755603][ T8447] ? splice_direct_to_actor+0x8c0/0x8c0 [ 70.761152][ T8447] ? security_file_permission+0x248/0x560 [ 70.766883][ T8447] do_sendfile+0x9f0/0x1120 [ 70.771400][ T8447] ? do_pwritev+0x270/0x270 [ 70.775908][ T8447] ? __context_tracking_exit+0xb8/0xe0 [ 70.781377][ T8447] ? lock_downgrade+0x6e0/0x6e0 [ 70.786239][ T8447] ? lock_downgrade+0x6e0/0x6e0 [ 70.791092][ T8447] __x64_sys_sendfile64+0x1cc/0x210 [ 70.796291][ T8447] ? __ia32_sys_sendfile+0x220/0x220 [ 70.801576][ T8447] ? syscall_enter_from_user_mode+0x21/0x70 [ 70.807478][ T8447] do_syscall_64+0x35/0xb0 [ 70.811894][ T8447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.817784][ T8447] RIP: 0033:0x43f019 [ 70.821676][ T8447] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.841279][ T8447] RSP: 002b:00007ffd24165888 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 70.849689][ T8447] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043f019 [ 70.857659][ T8447] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 70.865622][ T8447] RBP: 0000000000403000 R08: 0000000000400488 R09: 0000000000400488 [ 70.873589][ T8447] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000403090 [ 70.881559][ T8447] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 70.892041][ T8447] ================================================================================ [ 70.901598][ T8447] Kernel panic - not syncing: panic_on_warn set ... [ 70.908185][ T8447] CPU: 0 PID: 8447 Comm: syz-executor354 Not tainted 5.14.0-rc7-syzkaller #0 [ 70.916957][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.927017][ T8447] Call Trace: [ 70.930295][ T8447] dump_stack_lvl+0xcd/0x134 [ 70.934893][ T8447] panic+0x306/0x73d [ 70.938790][ T8447] ? __warn_printk+0xf3/0xf3 [ 70.943386][ T8447] ? dump_stack_lvl+0x120/0x134 [ 70.948240][ T8447] ? ubsan_epilogue+0x3e/0x5a [ 70.952927][ T8447] ubsan_epilogue+0x54/0x5a [ 70.957434][ T8447] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 70.964215][ T8447] ? kmem_cache_free+0x521/0x5b0 [ 70.969163][ T8447] ? __nlmsg_put+0x155/0x1c0 [ 70.973767][ T8447] xfrm_get_default.cold+0x1f/0x75 [ 70.978897][ T8447] ? xfrm_dump_sa+0x4a0/0x4a0 [ 70.983576][ T8447] xfrm_user_rcv_msg+0x430/0xa20 [ 70.988517][ T8447] ? xfrm_do_migrate+0x7f0/0x7f0 [ 70.993460][ T8447] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.999488][ T8447] netlink_rcv_skb+0x153/0x420 [ 71.004257][ T8447] ? xfrm_do_migrate+0x7f0/0x7f0 [ 71.009197][ T8447] ? netlink_ack+0xa60/0xa60 [ 71.013800][ T8447] ? netlink_deliver_tap+0x1b1/0xc30 [ 71.019090][ T8447] ? _copy_from_iter+0x12b/0x1320 [ 71.024116][ T8447] xfrm_netlink_rcv+0x6b/0x90 [ 71.028791][ T8447] netlink_unicast+0x533/0x7d0 [ 71.033561][ T8447] ? netlink_attachskb+0x890/0x890 [ 71.038676][ T8447] ? __virt_addr_valid+0x5d/0x2d0 [ 71.043789][ T8447] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.050028][ T8447] ? __phys_addr_symbol+0x2c/0x70 [ 71.055048][ T8447] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 71.060765][ T8447] ? __check_object_size+0x16e/0x3f0 [ 71.066055][ T8447] netlink_sendmsg+0x86d/0xdb0 [ 71.070827][ T8447] ? netlink_unicast+0x7d0/0x7d0 [ 71.075765][ T8447] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.081850][ T8447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.088231][ T8447] ? netlink_unicast+0x7d0/0x7d0 [ 71.093183][ T8447] sock_sendmsg+0xcf/0x120 [ 71.097606][ T8447] sock_no_sendpage+0xf3/0x130 [ 71.102374][ T8447] ? sk_page_frag_refill+0x1d0/0x1d0 [ 71.107687][ T8447] ? kasan_quarantine_put+0xf5/0x210 [ 71.112970][ T8447] ? lockdep_hardirqs_on+0x79/0x100 [ 71.118180][ T8447] kernel_sendpage.part.0+0x1a0/0x340 [ 71.123562][ T8447] sock_sendpage+0xe5/0x140 [ 71.128072][ T8447] ? __sock_recv_ts_and_drops+0x430/0x430 [ 71.133792][ T8447] pipe_to_sendpage+0x2ad/0x380 [ 71.138653][ T8447] ? propagate_umount+0x19f0/0x19f0 [ 71.143858][ T8447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.150102][ T8447] ? splice_from_pipe_next.part.0+0x167/0x520 [ 71.156186][ T8447] __splice_from_pipe+0x43e/0x8a0 [ 71.161228][ T8447] ? propagate_umount+0x19f0/0x19f0 [ 71.166441][ T8447] generic_splice_sendpage+0xd4/0x140 [ 71.171820][ T8447] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 71.176942][ T8447] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 71.182074][ T8447] direct_splice_actor+0x110/0x180 [ 71.187203][ T8447] splice_direct_to_actor+0x34b/0x8c0 [ 71.192585][ T8447] ? generic_file_splice_read+0x6c0/0x6c0 [ 71.198309][ T8447] ? do_splice_to+0x250/0x250 [ 71.203000][ T8447] ? security_file_permission+0x248/0x560 [ 71.208730][ T8447] do_splice_direct+0x1b3/0x280 [ 71.213584][ T8447] ? splice_direct_to_actor+0x8c0/0x8c0 [ 71.219136][ T8447] ? security_file_permission+0x248/0x560 [ 71.224871][ T8447] do_sendfile+0x9f0/0x1120 [ 71.229387][ T8447] ? do_pwritev+0x270/0x270 [ 71.233912][ T8447] ? __context_tracking_exit+0xb8/0xe0 [ 71.239379][ T8447] ? lock_downgrade+0x6e0/0x6e0 [ 71.244238][ T8447] ? lock_downgrade+0x6e0/0x6e0 [ 71.249091][ T8447] __x64_sys_sendfile64+0x1cc/0x210 [ 71.254287][ T8447] ? __ia32_sys_sendfile+0x220/0x220 [ 71.259571][ T8447] ? syscall_enter_from_user_mode+0x21/0x70 [ 71.265474][ T8447] do_syscall_64+0x35/0xb0 [ 71.269895][ T8447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.275790][ T8447] RIP: 0033:0x43f019 [ 71.279683][ T8447] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 71.299297][ T8447] RSP: 002b:00007ffd24165888 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 71.307720][ T8447] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043f019 [ 71.315682][ T8447] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 71.323644][ T8447] RBP: 0000000000403000 R08: 0000000000400488 R09: 0000000000400488 [ 71.331610][ T8447] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000403090 [ 71.339573][ T8447] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 71.349083][ T8447] Kernel Offset: disabled [ 71.353477][ T8447] Rebooting in 86400 seconds..