[ OK ] Started OpenBSD Secure Shell server. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 27.059944] kasan: CONFIG_KASAN_INLINE enabled [ 27.064606] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 27.073194] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 27.079430] Modules linked in: [ 27.082612] CPU: 0 PID: 7973 Comm: syz-executor215 Not tainted 4.14.292-syzkaller #0 [ 27.090637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 27.100062] task: ffff888096eb4040 task.stack: ffff88808de98000 [ 27.106121] RIP: 0010:ipt_init_target+0x97/0x250 [ 27.110851] RSP: 0018:ffff88808de9f160 EFLAGS: 00010202 [ 27.116210] RAX: 0000000000000005 RBX: dffffc0000000000 RCX: 0000000000000000 [ 27.124011] RDX: 0000000000000007 RSI: 0000000000000010 RDI: 000000000000002f [ 27.131390] RBP: 0000000000000010 R08: 0000000000000001 R09: ffffed1016522108 [ 27.138640] R10: ffff8880b2910846 R11: 0000000000000000 R12: 1ffff11011bd3e2f [ 27.145889] R13: ffff88808de9f1e8 R14: 0000000000000010 R15: ffffffff89cda500 [ 27.153239] FS: 0000555556e18300(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 27.161468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.167341] CR2: 0000000020000044 CR3: 000000009502a000 CR4: 00000000003406f0 [ 27.174607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.181853] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.189099] Call Trace: [ 27.191666] ? tcf_ipt_walker+0x200/0x200 [ 27.195806] ? __local_bh_enable_ip+0xc1/0x170 [ 27.200369] ? fs_reclaim_release+0xd0/0x110 [ 27.204754] ? memcpy+0x35/0x50 [ 27.208010] __tcf_ipt_init+0x48d/0xc00 [ 27.211963] ? ipt_init_target+0x250/0x250 [ 27.216172] ? tc_lookup_action_n+0xac/0xd0 [ 27.220470] ? lock_downgrade+0x740/0x740 [ 27.224593] tcf_xt_init+0x43/0x50 [ 27.228108] tcf_action_init_1+0x51a/0x9e0 [ 27.232319] ? tcf_action_dump_old+0x80/0x80 [ 27.236707] ? nla_parse+0x157/0x1f0 [ 27.240395] tcf_action_init+0x26d/0x400 [ 27.244435] ? tcf_action_init_1+0x9e0/0x9e0 [ 27.248824] ? memset+0x20/0x40 [ 27.252079] ? nla_parse+0x157/0x1f0 [ 27.255769] tc_ctl_action+0x2e3/0x510 [ 27.259634] ? tca_action_gd+0x790/0x790 [ 27.263674] ? rtnetlink_rcv_msg+0x2e8/0xb10 [ 27.268063] ? tca_action_gd+0x790/0x790 [ 27.272103] rtnetlink_rcv_msg+0x3be/0xb10 [ 27.276326] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 27.280801] ? __netlink_lookup+0x345/0x5d0 [ 27.285100] netlink_rcv_skb+0x125/0x390 [ 27.289139] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 27.293614] ? netlink_ack+0x9a0/0x9a0 [ 27.297482] netlink_unicast+0x437/0x610 [ 27.301523] ? netlink_sendskb+0xd0/0xd0 [ 27.305560] ? __check_object_size+0x179/0x230 [ 27.310118] netlink_sendmsg+0x648/0xbc0 [ 27.314162] ? nlmsg_notify+0x1b0/0x1b0 [ 27.318124] ? kernel_recvmsg+0x210/0x210 [ 27.322383] ? security_socket_sendmsg+0x83/0xb0 [ 27.327131] ? nlmsg_notify+0x1b0/0x1b0 [ 27.331101] sock_sendmsg+0xb5/0x100 [ 27.334797] ___sys_sendmsg+0x6c8/0x800 [ 27.338747] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 27.343478] ? lock_downgrade+0x740/0x740 [ 27.347601] ? __lru_cache_add+0x178/0x250 [ 27.351814] ? do_raw_spin_unlock+0x164/0x220 [ 27.356369] ? _raw_spin_unlock+0x29/0x40 [ 27.360501] ? do_huge_pmd_anonymous_page+0x72e/0x1700 [ 27.365776] ? prep_transhuge_page+0xa0/0xa0 [ 27.370176] ? _raw_spin_unlock+0x29/0x40 [ 27.374306] ? __pmd_alloc+0x27f/0x3f0 [ 27.378184] ? __handle_mm_fault+0x80f/0x4620 [ 27.382777] ? lock_downgrade+0x740/0x740 [ 27.386904] ? vm_insert_page+0x7c0/0x7c0 [ 27.391033] ? __fdget+0x167/0x1f0 [ 27.394573] ? sockfd_lookup_light+0xb2/0x160 [ 27.399048] __sys_sendmsg+0xa3/0x120 [ 27.402831] ? SyS_shutdown+0x160/0x160 [ 27.406783] ? up_read+0x17/0x30 [ 27.410126] ? __do_page_fault+0x159/0xad0 [ 27.414334] SyS_sendmsg+0x27/0x40 [ 27.417846] ? __sys_sendmsg+0x120/0x120 [ 27.421898] do_syscall_64+0x1d5/0x640 [ 27.425768] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 27.430935] RIP: 0033:0x7f2c2cd28229 [ 27.434637] RSP: 002b:00007ffd0356b238 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 27.442321] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c2cd28229 [ 27.449567] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 27.456810] RBP: 00007f2c2ccec210 R08: 0000000000000007 R09: 0000000000000000 [ 27.464055] R10: 000000000000000c R11: 0000000000000246 R12: 00007f2c2ccec2a0 [ 27.471298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 27.478542] Code: e8 df 26 81 fb 31 c0 b9 0e 00 00 00 4c 8d ac 24 88 00 00 00 4c 89 ef f3 48 ab 48 8d 7d 1f 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <0f> b6 04 18 38 d0 7f 08 84 c0 0f 85 67 01 00 00 0f b6 55 1f 48 [ 27.497605] RIP: ipt_init_target+0x97/0x250 RSP: ffff88808de9f160 [ 27.505371] ---[ end trace 6213ab41d1734215 ]--- [ 27.510131] Kernel panic - not syncing: Fatal exception [ 27.515638] Kernel Offset: disabled [ 27.519246] Rebooting in 86400 seconds..