[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.107' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 39.334340] kasan: CONFIG_KASAN_INLINE enabled [ 39.339117] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 39.347809] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 39.354077] CPU: 1 PID: 8072 Comm: syz-executor044 Not tainted 4.19.172-syzkaller #0 [ 39.361936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.371307] RIP: 0010:nl802154_del_llsec_devkey+0x163/0x380 [ 39.377018] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ce 01 00 00 48 8b 93 20 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 4f [ 39.395906] RSP: 0018:ffff8880b2a775e8 EFLAGS: 00010246 [ 39.401252] RAX: dffffc0000000000 RBX: ffff88823aabb800 RCX: 0000000000000000 [ 39.408510] RDX: 0000000000000000 RSI: ffffffff87c50ffd RDI: ffff88823aabb920 [ 39.415764] RBP: 1ffff1101654eebf R08: 0000000000000001 R09: ffff8880b2a77920 [ 39.423016] R10: 0000000000000005 R11: 0000000000000001 R12: ffff8880ab6a36c0 [ 39.430268] R13: ffff8880ab64d0d0 R14: ffff88823aabb800 R15: ffffffff89cf57c0 [ 39.437519] FS: 00000000017ad300(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 39.445731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.451597] CR2: 0000000020000408 CR3: 00000000aae1d000 CR4: 00000000001406e0 [ 39.458873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.466124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.473372] Call Trace: [ 39.475942] ? apparmor_sb_mount+0x970/0x970 [ 39.480332] ? nl802154_add_llsec_devkey+0x3e0/0x3e0 [ 39.485413] ? nl802154_pre_doit+0xf8/0xcd0 [ 39.489714] ? validate_nla+0x270/0x820 [ 39.493668] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 39.498754] ? nla_parse+0x1b2/0x290 [ 39.502448] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 39.507530] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 39.512615] genl_family_rcv_msg+0x642/0xc40 [ 39.517008] ? genl_rcv+0x40/0x40 [ 39.520468] ? genl_rcv_msg+0x12f/0x160 [ 39.524447] ? __mutex_add_waiter+0x160/0x160 [ 39.528928] ? __radix_tree_lookup+0x216/0x370 [ 39.533496] genl_rcv_msg+0xbf/0x160 [ 39.537190] netlink_rcv_skb+0x160/0x440 [ 39.541253] ? genl_family_rcv_msg+0xc40/0xc40 [ 39.545834] ? netlink_ack+0xae0/0xae0 [ 39.549700] ? genl_rcv+0x15/0x40 [ 39.553135] genl_rcv+0x24/0x40 [ 39.556394] netlink_unicast+0x4d5/0x690 [ 39.560434] ? netlink_sendskb+0x110/0x110 [ 39.564651] ? _copy_from_iter_full+0x229/0x7c0 [ 39.569299] ? __phys_addr_symbol+0x2c/0x70 [ 39.573689] ? __check_object_size+0x17b/0x3e0 [ 39.578256] netlink_sendmsg+0x6bb/0xc40 [ 39.582301] ? aa_af_perm+0x230/0x230 [ 39.586080] ? nlmsg_notify+0x1a0/0x1a0 [ 39.590034] ? kernel_recvmsg+0x220/0x220 [ 39.594166] ? nlmsg_notify+0x1a0/0x1a0 [ 39.598124] sock_sendmsg+0xc3/0x120 [ 39.601819] ___sys_sendmsg+0x7bb/0x8e0 [ 39.605794] ? copy_msghdr_from_user+0x440/0x440 [ 39.610537] ? apparmor_file_receive+0x160/0x160 [ 39.615316] ? __lockdep_init_map+0x100/0x5a0 [ 39.619793] ? check_preemption_disabled+0x41/0x280 [ 39.624818] ? mark_held_locks+0xf0/0xf0 [ 39.628859] ? percpu_counter_add_batch+0x126/0x180 [ 39.633856] ? alloc_empty_file+0xd7/0x170 [ 39.638085] ? errseq_sample+0x56/0x70 [ 39.641951] ? alloc_file+0x326/0x4d0 [ 39.645733] ? __fd_install+0x1b4/0x610 [ 39.649689] ? __fdget+0x1a0/0x230 [ 39.653214] __x64_sys_sendmsg+0x132/0x220 [ 39.657428] ? __sys_sendmsg+0x1b0/0x1b0 [ 39.661471] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 39.666933] ? trace_hardirqs_off_caller+0x6e/0x210 [ 39.671943] ? do_syscall_64+0x21/0x620 [ 39.675898] do_syscall_64+0xf9/0x620 [ 39.679822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 39.685000] RIP: 0033:0x43f8a9 [ 39.688175] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 39.707071] RSP: 002b:00007ffc0ca290c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.714760] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043f8a9 [ 39.722009] RDX: 0000000024000044 RSI: 00000000200007c0 RDI: 0000000000000004 [ 39.729259] RBP: 0000000000403310 R08: 00000000004004a0 R09: 00000000004004a0 [ 39.736511] R10: 0000000000000006 R11: 0000000000000246 R12: 00000000004033a0 [ 39.743760] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 39.751195] Modules linked in: [ 39.763015] ---[ end trace 4306c58d85867916 ]--- [ 39.763037] RIP: 0010:nl802154_del_llsec_devkey+0x163/0x380 [ 39.763049] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ce 01 00 00 48 8b 93 20 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 4f [ 39.763055] RSP: 0018:ffff8880b2a775e8 EFLAGS: 00010246 [ 39.763065] RAX: dffffc0000000000 RBX: ffff88823aabb800 RCX: 0000000000000000 [ 39.763072] RDX: 0000000000000000 RSI: ffffffff87c50ffd RDI: ffff88823aabb920 [ 39.763079] RBP: 1ffff1101654eebf R08: 0000000000000001 R09: ffff8880b2a77920 [ 39.763085] R10: 0000000000000005 R11: 0000000000000001 R12: ffff8880ab6a36c0 [ 39.763092] R13: ffff8880ab64d0d0 R14: ffff88823aabb800 R15: ffffffff89cf57c0 [ 39.763106] FS: 00000000017ad300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 39.842507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.848430] CR2: 00007ff37343a6c0 CR3: 00000000aae1d000 CR4: 00000000001406f0 [ 39.855744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.863075] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.870359] Kernel panic - not syncing: Fatal exception [ 39.876437] Kernel Offset: disabled [ 39.880050] Rebooting in 86400 seconds..