Warning: Permanently added '10.128.1.65' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 69.451102][ T8406] ================================================================== [ 69.459788][ T8406] BUG: KASAN: null-ptr-deref in ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.468324][ T8406] Read of size 8 at addr 0000000000000004 by task syz-executor641/8406 [ 69.476705][ T8406] [ 69.479032][ T8406] CPU: 0 PID: 8406 Comm: syz-executor641 Not tainted 5.12.0-rc4-syzkaller #0 [ 69.487978][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.498041][ T8406] Call Trace: [ 69.501448][ T8406] dump_stack+0x141/0x1d7 [ 69.505833][ T8406] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.512040][ T8406] kasan_report.cold+0x5f/0xd8 [ 69.516814][ T8406] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.522978][ T8406] kasan_check_range+0x13d/0x180 [ 69.528148][ T8406] memcpy+0x20/0x60 [ 69.531965][ T8406] ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.537958][ T8406] ? llsec_parse_seclevel+0x3e0/0x3e0 [ 69.543356][ T8406] ieee802154_llsec_setparams+0x2a9/0x750 [ 69.549091][ T8406] ? ieee802154_llsec_getparams+0x5d0/0x5d0 [ 69.554997][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.561330][ T8406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 69.568708][ T8406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 69.576175][ T8406] genl_family_rcv_msg_doit+0x228/0x320 [ 69.581730][ T8406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 69.589827][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.596180][ T8406] ? ns_capable+0xde/0x100 [ 69.601028][ T8406] genl_rcv_msg+0x328/0x580 [ 69.608996][ T8406] ? genl_get_cmd+0x480/0x480 [ 69.614006][ T8406] ? ieee802154_llsec_getparams+0x5d0/0x5d0 [ 69.622164][ T8406] ? lock_release+0x720/0x720 [ 69.628405][ T8406] netlink_rcv_skb+0x153/0x420 [ 69.633370][ T8406] ? genl_get_cmd+0x480/0x480 [ 69.638473][ T8406] ? netlink_ack+0xaa0/0xaa0 [ 69.644254][ T8406] genl_rcv+0x24/0x40 [ 69.648302][ T8406] netlink_unicast+0x533/0x7d0 [ 69.653332][ T8406] ? netlink_attachskb+0x870/0x870 [ 69.658449][ T8406] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.664747][ T8406] ? __phys_addr_symbol+0x2c/0x70 [ 69.669967][ T8406] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 69.675694][ T8406] ? __check_object_size+0x171/0x3f0 [ 69.681176][ T8406] netlink_sendmsg+0x856/0xd90 [ 69.686101][ T8406] ? netlink_unicast+0x7d0/0x7d0 [ 69.691175][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.697434][ T8406] ? netlink_unicast+0x7d0/0x7d0 [ 69.702928][ T8406] sock_sendmsg+0xcf/0x120 [ 69.707397][ T8406] ____sys_sendmsg+0x6e8/0x810 [ 69.712192][ T8406] ? kernel_sendmsg+0x50/0x50 [ 69.717588][ T8406] ? do_recvmmsg+0x6d0/0x6d0 [ 69.722319][ T8406] ? lock_chain_count+0x20/0x20 [ 69.727187][ T8406] ? find_held_lock+0x2d/0x110 [ 69.731968][ T8406] ___sys_sendmsg+0xf3/0x170 [ 69.736569][ T8406] ? sendmsg_copy_msghdr+0x160/0x160 [ 69.742008][ T8406] ? __lock_acquire+0x16b3/0x54c0 [ 69.747104][ T8406] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 69.753111][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.759432][ T8406] ? __fget_light+0x215/0x280 [ 69.764301][ T8406] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 69.770673][ T8406] __sys_sendmsg+0xe5/0x1b0 [ 69.775187][ T8406] ? __sys_sendmsg_sock+0x30/0x30 [ 69.780267][ T8406] ? syscall_enter_from_user_mode+0x27/0x70 [ 69.786168][ T8406] do_syscall_64+0x2d/0x70 [ 69.790585][ T8406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 69.796490][ T8406] RIP: 0033:0x43fad9 [ 69.800455][ T8406] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 69.820829][ T8406] RSP: 002b:00007ffe25edd518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.829399][ T8406] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043fad9 [ 69.837533][ T8406] RDX: 0000000000000010 RSI: 00000000200002c0 RDI: 0000000000000004 [ 69.845571][ T8406] RBP: 0000000000403540 R08: 000000000000002b R09: 00000000004004a0 [ 69.853642][ T8406] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000004035d0 [ 69.861711][ T8406] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 69.869748][ T8406] ================================================================== [ 69.877807][ T8406] Disabling lock debugging due to kernel taint [ 69.884441][ T8406] Kernel panic - not syncing: panic_on_warn set ... [ 69.891042][ T8406] CPU: 0 PID: 8406 Comm: syz-executor641 Tainted: G B 5.12.0-rc4-syzkaller #0 [ 69.901252][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.911935][ T8406] Call Trace: [ 69.915217][ T8406] dump_stack+0x141/0x1d7 [ 69.919561][ T8406] panic+0x306/0x73d [ 69.923526][ T8406] ? __warn_printk+0xf3/0xf3 [ 69.928201][ T8406] ? preempt_schedule_common+0x59/0xc0 [ 69.933996][ T8406] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.940310][ T8406] ? preempt_schedule_thunk+0x16/0x18 [ 69.945688][ T8406] ? trace_hardirqs_on+0x38/0x1c0 [ 69.950716][ T8406] ? trace_hardirqs_on+0x51/0x1c0 [ 69.955788][ T8406] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.961951][ T8406] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.968240][ T8406] end_report.cold+0x5a/0x5a [ 69.972886][ T8406] kasan_report.cold+0x6a/0xd8 [ 69.977648][ T8406] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.984036][ T8406] kasan_check_range+0x13d/0x180 [ 69.989260][ T8406] memcpy+0x20/0x60 [ 69.993209][ T8406] ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 69.999664][ T8406] ? llsec_parse_seclevel+0x3e0/0x3e0 [ 70.005209][ T8406] ieee802154_llsec_setparams+0x2a9/0x750 [ 70.011093][ T8406] ? ieee802154_llsec_getparams+0x5d0/0x5d0 [ 70.017199][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.024081][ T8406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 70.031603][ T8406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 70.038897][ T8406] genl_family_rcv_msg_doit+0x228/0x320 [ 70.044446][ T8406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 70.051870][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.058113][ T8406] ? ns_capable+0xde/0x100 [ 70.062533][ T8406] genl_rcv_msg+0x328/0x580 [ 70.067292][ T8406] ? genl_get_cmd+0x480/0x480 [ 70.072162][ T8406] ? ieee802154_llsec_getparams+0x5d0/0x5d0 [ 70.078056][ T8406] ? lock_release+0x720/0x720 [ 70.082734][ T8406] netlink_rcv_skb+0x153/0x420 [ 70.087664][ T8406] ? genl_get_cmd+0x480/0x480 [ 70.092344][ T8406] ? netlink_ack+0xaa0/0xaa0 [ 70.097175][ T8406] genl_rcv+0x24/0x40 [ 70.101298][ T8406] netlink_unicast+0x533/0x7d0 [ 70.106067][ T8406] ? netlink_attachskb+0x870/0x870 [ 70.111618][ T8406] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.118214][ T8406] ? __phys_addr_symbol+0x2c/0x70 [ 70.123370][ T8406] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 70.129098][ T8406] ? __check_object_size+0x171/0x3f0 [ 70.134600][ T8406] netlink_sendmsg+0x856/0xd90 [ 70.139777][ T8406] ? netlink_unicast+0x7d0/0x7d0 [ 70.144775][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.151071][ T8406] ? netlink_unicast+0x7d0/0x7d0 [ 70.156009][ T8406] sock_sendmsg+0xcf/0x120 [ 70.160562][ T8406] ____sys_sendmsg+0x6e8/0x810 [ 70.165485][ T8406] ? kernel_sendmsg+0x50/0x50 [ 70.170355][ T8406] ? do_recvmmsg+0x6d0/0x6d0 [ 70.174939][ T8406] ? lock_chain_count+0x20/0x20 [ 70.179906][ T8406] ? find_held_lock+0x2d/0x110 [ 70.184676][ T8406] ___sys_sendmsg+0xf3/0x170 [ 70.189274][ T8406] ? sendmsg_copy_msghdr+0x160/0x160 [ 70.194607][ T8406] ? __lock_acquire+0x16b3/0x54c0 [ 70.199633][ T8406] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.205614][ T8406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.211974][ T8406] ? __fget_light+0x215/0x280 [ 70.216744][ T8406] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 70.223118][ T8406] __sys_sendmsg+0xe5/0x1b0 [ 70.227636][ T8406] ? __sys_sendmsg_sock+0x30/0x30 [ 70.232745][ T8406] ? syscall_enter_from_user_mode+0x27/0x70 [ 70.238851][ T8406] do_syscall_64+0x2d/0x70 [ 70.243268][ T8406] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.249209][ T8406] RIP: 0033:0x43fad9 [ 70.253223][ T8406] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 70.273450][ T8406] RSP: 002b:00007ffe25edd518 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.282104][ T8406] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043fad9 [ 70.290254][ T8406] RDX: 0000000000000010 RSI: 00000000200002c0 RDI: 0000000000000004 [ 70.298546][ T8406] RBP: 0000000000403540 R08: 000000000000002b R09: 00000000004004a0 [ 70.306707][ T8406] R10: 0000000000000005 R11: 0000000000000246 R12: 00000000004035d0 [ 70.315030][ T8406] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 70.324032][ T8406] Kernel Offset: disabled [ 70.328514][ T8406] Rebooting in 86400 seconds..