[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.18' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 72.135953][ T8461] netlink: 'syz-executor561': attribute type 2 has an invalid length. [ 72.151197][ T8461] device Z0 entered promiscuous mode [ 72.158590][ T8460] ================================================================================ [ 72.170979][ T8460] UBSAN: shift-out-of-bounds in net/netlink/af_netlink.c:160:19 [ 72.179537][ T8460] shift exponent 32 is too large for 32-bit type 'int' [ 72.199694][ T8460] CPU: 0 PID: 8460 Comm: syz-executor561 Not tainted 5.11.0-rc7-syzkaller #0 [ 72.208506][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.218588][ T8460] Call Trace: [ 72.221899][ T8460] dump_stack+0x107/0x163 [ 72.226387][ T8460] ubsan_epilogue+0xb/0x5a [ 72.230843][ T8460] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 72.237648][ T8460] ? vimc_cap_s_fmt_vid_cap+0x553/0x710 [ 72.243258][ T8460] netlink_recvmsg.cold+0x1a/0x1f [ 72.248346][ T8460] ? netlink_dump+0xb70/0xb70 [ 72.253066][ T8460] ? aa_af_perm+0x230/0x230 [ 72.257616][ T8460] ? __might_fault+0xd3/0x180 [ 72.262344][ T8460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.268631][ T8460] ? security_socket_recvmsg+0x8f/0xc0 [ 72.274141][ T8460] ? netlink_dump+0xb70/0xb70 [ 72.278864][ T8460] ____sys_recvmsg+0x2c4/0x600 [ 72.283679][ T8460] ? move_addr_to_kernel.part.0+0x110/0x110 [ 72.289613][ T8460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.296038][ T8460] ? __import_iovec+0x293/0x500 [ 72.300943][ T8460] ? import_iovec+0x10c/0x150 [ 72.305668][ T8460] ___sys_recvmsg+0x127/0x200 [ 72.310388][ T8460] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 72.316080][ T8460] ? __fget_files+0x266/0x3d0 [ 72.320801][ T8460] ? lock_downgrade+0x6d0/0x6d0 [ 72.325699][ T8460] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 72.331736][ T8460] ? __fget_files+0x288/0x3d0 [ 72.336466][ T8460] ? __fget_light+0xea/0x280 [ 72.341094][ T8460] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.347355][ T8460] __sys_recvmsg+0xe2/0x1a0 [ 72.351855][ T8460] ? __sys_recvmsg_sock+0x150/0x150 [ 72.357042][ T8460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.363287][ T8460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 72.369174][ T8460] do_syscall_64+0x2d/0x70 [ 72.373587][ T8460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.379474][ T8460] RIP: 0033:0x444bf9 [ 72.383362][ T8460] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.402984][ T8460] RSP: 002b:00007f9d6b980318 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 72.411391][ T8460] RAX: ffffffffffffffda RBX: 00000000004ca408 RCX: 0000000000444bf9 [ 72.419366][ T8460] RDX: 0000000000000002 RSI: 0000000020000440 RDI: 0000000000000003 [ 72.427357][ T8460] RBP: 00000000004ca400 R08: 0000000000000000 R09: 0000000000000000 [ 72.435324][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 8001000a373e1537 [ 72.443283][ T8460] R13: 00007ffed154d09f R14: 00007f9d6b980400 R15: 0000000000022000 [ 72.452792][ T8460] ================================================================================ [ 72.462319][ T8460] Kernel panic - not syncing: panic_on_warn set ... [ 72.468931][ T8460] CPU: 1 PID: 8460 Comm: syz-executor561 Not tainted 5.11.0-rc7-syzkaller #0 [ 72.477689][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.487764][ T8460] Call Trace: [ 72.491041][ T8460] dump_stack+0x107/0x163 [ 72.495386][ T8460] panic+0x306/0x73d [ 72.499279][ T8460] ? __warn_printk+0xf3/0xf3 [ 72.503863][ T8460] ? ubsan_epilogue+0x3e/0x5a [ 72.508530][ T8460] ubsan_epilogue+0x54/0x5a [ 72.513019][ T8460] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 72.519769][ T8460] ? vimc_cap_s_fmt_vid_cap+0x553/0x710 [ 72.525311][ T8460] netlink_recvmsg.cold+0x1a/0x1f [ 72.530328][ T8460] ? netlink_dump+0xb70/0xb70 [ 72.535019][ T8460] ? aa_af_perm+0x230/0x230 [ 72.539544][ T8460] ? __might_fault+0xd3/0x180 [ 72.544211][ T8460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.550440][ T8460] ? security_socket_recvmsg+0x8f/0xc0 [ 72.555888][ T8460] ? netlink_dump+0xb70/0xb70 [ 72.560555][ T8460] ____sys_recvmsg+0x2c4/0x600 [ 72.565312][ T8460] ? move_addr_to_kernel.part.0+0x110/0x110 [ 72.571193][ T8460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.577608][ T8460] ? __import_iovec+0x293/0x500 [ 72.582479][ T8460] ? import_iovec+0x10c/0x150 [ 72.587146][ T8460] ___sys_recvmsg+0x127/0x200 [ 72.591848][ T8460] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 72.597514][ T8460] ? __fget_files+0x266/0x3d0 [ 72.602179][ T8460] ? lock_downgrade+0x6d0/0x6d0 [ 72.607028][ T8460] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 72.613002][ T8460] ? __fget_files+0x288/0x3d0 [ 72.617668][ T8460] ? __fget_light+0xea/0x280 [ 72.622245][ T8460] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.628478][ T8460] __sys_recvmsg+0xe2/0x1a0 [ 72.632970][ T8460] ? __sys_recvmsg_sock+0x150/0x150 [ 72.638154][ T8460] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.644391][ T8460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 72.650296][ T8460] do_syscall_64+0x2d/0x70 [ 72.654698][ T8460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 72.660601][ T8460] RIP: 0033:0x444bf9 [ 72.664483][ T8460] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.684093][ T8460] RSP: 002b:00007f9d6b980318 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 72.692508][ T8460] RAX: ffffffffffffffda RBX: 00000000004ca408 RCX: 0000000000444bf9 [ 72.700631][ T8460] RDX: 0000000000000002 RSI: 0000000020000440 RDI: 0000000000000003 [ 72.708681][ T8460] RBP: 00000000004ca400 R08: 0000000000000000 R09: 0000000000000000 [ 72.716649][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 8001000a373e1537 [ 72.724713][ T8460] R13: 00007ffed154d09f R14: 00007f9d6b980400 R15: 0000000000022000 [ 72.733561][ T8460] Kernel Offset: disabled [ 72.738011][ T8460] Rebooting in 86400 seconds..