[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 62.120339][ T6853] ------------[ cut here ]------------ [ 62.130004][ T6853] WARNING: CPU: 1 PID: 6853 at lib/nlattr.c:117 nla_get_range_unsigned+0x157/0x530 [ 62.145538][ T6853] Kernel panic - not syncing: panic_on_warn set ... [ 62.152704][ T6853] CPU: 1 PID: 6853 Comm: syz-executor566 Not tainted 5.9.0-rc1-syzkaller #0 [ 62.168580][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.183423][ T6853] Call Trace: [ 62.187099][ T6853] dump_stack+0x18f/0x20d [ 62.191453][ T6853] panic+0x2e3/0x75c [ 62.195643][ T6853] ? __warn_printk+0xf3/0xf3 [ 62.204057][ T6853] ? printk+0xba/0xed [ 62.210425][ T6853] ? log_store.cold+0x16/0x16 [ 62.216678][ T6853] ? genl_rcv+0x24/0x40 [ 62.222777][ T6853] ? __warn.cold+0x5/0x4a [ 62.227198][ T6853] ? __warn+0xd6/0x1f2 [ 62.232201][ T6853] ? nla_get_range_unsigned+0x157/0x530 [ 62.239857][ T6853] __warn.cold+0x20/0x4a [ 62.245175][ T6853] ? nla_get_range_unsigned+0x157/0x530 [ 62.251444][ T6853] report_bug+0x1bd/0x210 [ 62.261403][ T6853] handle_bug+0x38/0x90 [ 62.268515][ T6853] ? mark_lock+0xbc/0x1710 [ 62.272923][ T6853] exc_invalid_op+0x14/0x40 [ 62.277592][ T6853] asm_exc_invalid_op+0x12/0x20 [ 62.283393][ T6853] RIP: 0010:nla_get_range_unsigned+0x157/0x530 [ 62.289634][ T6853] Code: 2a 03 00 00 44 0f b6 3b 48 c7 c6 40 9f 96 88 4c 89 ff e8 3c 34 c4 fd 41 80 ff 0b 77 11 42 ff 24 fd 60 99 96 88 e8 69 37 c4 fd <0f> 0b eb 8f e8 60 37 c4 fd 0f 0b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 [ 62.309422][ T6853] RSP: 0018:ffffc90000f07190 EFLAGS: 00010293 [ 62.315482][ T6853] RAX: 0000000000000000 RBX: ffffffff89180640 RCX: ffffffff83b006e8 [ 62.323445][ T6853] RDX: ffff8880951d4040 RSI: ffffffff83b007a7 RDI: 0000000000000003 [ 62.331406][ T6853] RBP: ffffc90000f071b8 R08: 0000000000000000 R09: ffff88809477a370 [ 62.339497][ T6853] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90000f07278 [ 62.347455][ T6853] R13: ffffffff89180641 R14: 0000000000008c60 R15: ffffffff89180640 [ 62.355616][ T6853] ? nla_get_range_unsigned+0x98/0x530 [ 62.361066][ T6853] ? nla_get_range_unsigned+0x157/0x530 [ 62.366609][ T6853] netlink_policy_dump_write+0x2ae/0xea0 [ 62.372371][ T6853] ? netlink_policy_dump_loop+0x170/0x170 [ 62.378607][ T6853] ? skb_put+0x134/0x180 [ 62.382987][ T6853] ? memset+0x20/0x40 [ 62.386971][ T6853] ? __nla_reserve+0x9a/0xc0 [ 62.393119][ T6853] ? __nla_put+0x23/0x40 [ 62.398367][ T6853] ? memcpy+0x39/0x60 [ 62.402348][ T6853] ctrl_dumppolicy+0x4a8/0x900 [ 62.407108][ T6853] ? genl_start+0x5d0/0x5d0 [ 62.412308][ T6853] ? __kmalloc_node_track_caller+0x38/0x60 [ 62.418104][ T6853] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 62.423765][ T6853] ? __phys_addr+0x9a/0x110 [ 62.428271][ T6853] ? memset+0x20/0x40 [ 62.432257][ T6853] genl_lock_dumpit+0x7f/0xb0 [ 62.437014][ T6853] netlink_dump+0x4cd/0xf60 [ 62.441520][ T6853] ? netlink_insert+0x1670/0x1670 [ 62.446591][ T6853] ? __mutex_unlock_slowpath+0xe2/0x610 [ 62.452159][ T6853] ? kmem_cache_alloc_trace+0x188/0x2c0 [ 62.457713][ T6853] ? genl_start+0x3bb/0x5d0 [ 62.462416][ T6853] __netlink_dump_start+0x643/0x900 [ 62.468340][ T6853] ? genl_rcv_msg+0x980/0x980 [ 62.473733][ T6853] ? genl_start+0x5d0/0x5d0 [ 62.478231][ T6853] genl_family_rcv_msg_dumpit+0x2ac/0x310 [ 62.484194][ T6853] ? genl_rcv+0x40/0x40 [ 62.488476][ T6853] ? mutex_lock_io_nested+0xf60/0xf60 [ 62.493847][ T6853] ? mark_lock+0xbc/0x1710 [ 62.498337][ T6853] ? genl_rcv_msg+0x980/0x980 [ 62.503027][ T6853] ? genl_unlock+0x20/0x20 [ 62.507455][ T6853] ? genl_parallel_done+0xf0/0xf0 [ 62.512497][ T6853] ? __radix_tree_lookup+0x1f3/0x290 [ 62.517804][ T6853] genl_rcv_msg+0x75f/0x980 [ 62.522296][ T6853] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 62.529243][ T6853] ? lock_acquire+0x1f1/0xad0 [ 62.533941][ T6853] ? genl_rcv+0x15/0x40 [ 62.538133][ T6853] ? lock_release+0x8e0/0x8e0 [ 62.542841][ T6853] netlink_rcv_skb+0x15a/0x430 [ 62.547995][ T6853] ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250 [ 62.556489][ T6853] ? netlink_ack+0xa10/0xa10 [ 62.562028][ T6853] ? lock_is_held_type+0xbb/0xf0 [ 62.566980][ T6853] genl_rcv+0x24/0x40 [ 62.570976][ T6853] netlink_unicast+0x533/0x7d0 [ 62.576365][ T6853] ? netlink_attachskb+0x810/0x810 [ 62.581551][ T6853] ? _copy_from_iter_full+0x247/0x890 [ 62.586924][ T6853] ? __phys_addr+0x9a/0x110 [ 62.591679][ T6853] ? __phys_addr_symbol+0x2c/0x70 [ 62.597186][ T6853] ? __check_object_size+0x171/0x3e4 [ 62.602620][ T6853] netlink_sendmsg+0x856/0xd90 [ 62.607718][ T6853] ? netlink_unicast+0x7d0/0x7d0 [ 62.613615][ T6853] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 62.618908][ T6853] ? netlink_unicast+0x7d0/0x7d0 [ 62.623869][ T6853] sock_sendmsg+0xcf/0x120 [ 62.628287][ T6853] ____sys_sendmsg+0x6e8/0x810 [ 62.633205][ T6853] ? kernel_sendmsg+0x50/0x50 [ 62.638153][ T6853] ? do_recvmmsg+0x6d0/0x6d0 [ 62.642808][ T6853] ? lock_acquire+0x1f1/0xad0 [ 62.648831][ T6853] ? do_huge_pmd_anonymous_page+0x120d/0x2230 [ 62.654927][ T6853] ? find_held_lock+0x2d/0x110 [ 62.660664][ T6853] ___sys_sendmsg+0xf3/0x170 [ 62.665407][ T6853] ? sendmsg_copy_msghdr+0x160/0x160 [ 62.671416][ T6853] ? do_huge_pmd_anonymous_page+0x1b94/0x2230 [ 62.678048][ T6853] ? do_huge_pmd_anonymous_page+0x8ef/0x2230 [ 62.684105][ T6853] ? handle_mm_fault+0xb78/0x4590 [ 62.689415][ T6853] ? find_held_lock+0x2d/0x110 [ 62.694213][ T6853] ? __fget_light+0x215/0x280 [ 62.699512][ T6853] __sys_sendmsg+0xe5/0x1b0 [ 62.704340][ T6853] ? __sys_sendmsg_sock+0xb0/0xb0 [ 62.709570][ T6853] ? trace_hardirqs_on+0x5f/0x220 [ 62.714587][ T6853] ? lockdep_hardirqs_on+0x76/0xf0 [ 62.719874][ T6853] do_syscall_64+0x2d/0x70 [ 62.724989][ T6853] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.730911][ T6853] RIP: 0033:0x4402a9 [ 62.734842][ T6853] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.756419][ T6853] RSP: 002b:00007ffee17061b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.764819][ T6853] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004402a9 [ 62.772814][ T6853] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 62.780775][ T6853] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 62.789008][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000401ab0 [ 62.798295][ T6853] R13: 0000000000401b40 R14: 0000000000000000 R15: 0000000000000000 [ 62.808090][ T6853] Kernel Offset: disabled [ 62.812505][ T6853] Rebooting in 86400 seconds..