Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 36.092659] ================================================================== [ 36.100221] BUG: KASAN: null-ptr-deref in ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 36.108184] Read of size 8 at addr 0000000000000004 by task syz-executor252/8141 [ 36.115883] [ 36.117501] CPU: 0 PID: 8141 Comm: syz-executor252 Not tainted 4.19.184-syzkaller #0 [ 36.125369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.134753] Call Trace: [ 36.137334] dump_stack+0x1fc/0x2ef [ 36.140947] kasan_report_error.cold+0x15b/0x1b9 [ 36.145774] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 36.151219] kasan_report+0x8f/0xa0 [ 36.154829] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 36.160266] memcpy+0x20/0x50 [ 36.163357] ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 36.169487] ? ieee802154_nl_start_confirm.isra.0+0x250/0x250 [ 36.175388] ? apparmor_sb_mount+0x970/0x970 [ 36.180020] ? apparmor_sb_mount+0x970/0x970 [ 36.184415] ieee802154_llsec_del_key+0x109/0x240 [ 36.189400] ? ieee802154_llsec_add_key+0x680/0x680 [ 36.194505] ? nla_parse+0x1b2/0x290 [ 36.198232] genl_family_rcv_msg+0x642/0xc40 [ 36.202625] ? genl_rcv+0x40/0x40 [ 36.206075] ? genl_rcv_msg+0x12f/0x160 [ 36.210029] ? __mutex_add_waiter+0x160/0x160 [ 36.214510] ? __radix_tree_lookup+0x216/0x370 [ 36.219077] genl_rcv_msg+0xbf/0x160 [ 36.222774] netlink_rcv_skb+0x160/0x440 [ 36.226816] ? genl_family_rcv_msg+0xc40/0xc40 [ 36.231395] ? netlink_ack+0xae0/0xae0 [ 36.235423] ? genl_rcv+0x15/0x40 [ 36.238866] genl_rcv+0x24/0x40 [ 36.242236] netlink_unicast+0x4d5/0x690 [ 36.246286] ? netlink_sendskb+0x110/0x110 [ 36.250945] ? _copy_from_iter_full+0x229/0x7c0 [ 36.255601] ? __phys_addr_symbol+0x2c/0x70 [ 36.259909] ? __check_object_size+0x17b/0x3e0 [ 36.264480] netlink_sendmsg+0x6bb/0xc40 [ 36.268527] ? aa_af_perm+0x230/0x230 [ 36.272328] ? nlmsg_notify+0x1a0/0x1a0 [ 36.276386] ? kernel_recvmsg+0x220/0x220 [ 36.280570] ? nlmsg_notify+0x1a0/0x1a0 [ 36.284629] sock_sendmsg+0xc3/0x120 [ 36.288421] ___sys_sendmsg+0x7bb/0x8e0 [ 36.292409] ? copy_msghdr_from_user+0x440/0x440 [ 36.297771] ? apparmor_file_receive+0x160/0x160 [ 36.302537] ? __lockdep_init_map+0x100/0x5a0 [ 36.307032] ? check_preemption_disabled+0x41/0x280 [ 36.312298] ? mark_held_locks+0xf0/0xf0 [ 36.316364] ? percpu_counter_add_batch+0x126/0x180 [ 36.321370] ? alloc_empty_file+0xd7/0x170 [ 36.325788] ? errseq_sample+0x56/0x70 [ 36.329670] ? alloc_file+0x326/0x4d0 [ 36.333465] ? __fd_install+0x1b4/0x610 [ 36.337716] ? __fdget+0x1a0/0x230 [ 36.341245] __x64_sys_sendmsg+0x132/0x220 [ 36.345480] ? __sys_sendmsg+0x1b0/0x1b0 [ 36.349552] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 36.354988] ? trace_hardirqs_off_caller+0x6e/0x210 [ 36.359996] ? do_syscall_64+0x21/0x620 [ 36.363971] do_syscall_64+0xf9/0x620 [ 36.367759] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 36.373106] RIP: 0033:0x43fab9 [ 36.376280] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 36.395347] RSP: 002b:00007fffab6e3818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.403055] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043fab9 [ 36.410653] RDX: 0000000024008144 RSI: 0000000020000200 RDI: 0000000000000004 [ 36.418001] RBP: 0000000000403520 R08: 0000000000000030 R09: 00000000004004a0 [ 36.425447] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000004035b0 [ 36.432705] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 36.440007] ================================================================== [ 36.447344] Disabling lock debugging due to kernel taint [ 36.453832] Kernel panic - not syncing: panic_on_warn set ... [ 36.453832] [ 36.461226] CPU: 0 PID: 8141 Comm: syz-executor252 Tainted: G B 4.19.184-syzkaller #0 [ 36.470495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.479838] Call Trace: [ 36.482426] dump_stack+0x1fc/0x2ef [ 36.486038] panic+0x26a/0x50e [ 36.489211] ? __warn_printk+0xf3/0xf3 [ 36.493080] ? preempt_schedule_common+0x45/0xc0 [ 36.497816] ? ___preempt_schedule+0x16/0x18 [ 36.502209] ? trace_hardirqs_on+0x55/0x210 [ 36.506514] kasan_end_report+0x43/0x49 [ 36.510492] kasan_report_error.cold+0xa7/0x1b9 [ 36.515157] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 36.520589] kasan_report+0x8f/0xa0 [ 36.524224] ? ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 36.529655] memcpy+0x20/0x50 [ 36.532752] ieee802154_llsec_parse_key_id+0x4ec/0x8a0 [ 36.538012] ? ieee802154_nl_start_confirm.isra.0+0x250/0x250 [ 36.543884] ? apparmor_sb_mount+0x970/0x970 [ 36.548307] ? apparmor_sb_mount+0x970/0x970 [ 36.552800] ieee802154_llsec_del_key+0x109/0x240 [ 36.557714] ? ieee802154_llsec_add_key+0x680/0x680 [ 36.562715] ? nla_parse+0x1b2/0x290 [ 36.566524] genl_family_rcv_msg+0x642/0xc40 [ 36.571028] ? genl_rcv+0x40/0x40 [ 36.574463] ? genl_rcv_msg+0x12f/0x160 [ 36.578420] ? __mutex_add_waiter+0x160/0x160 [ 36.582915] ? __radix_tree_lookup+0x216/0x370 [ 36.587485] genl_rcv_msg+0xbf/0x160 [ 36.591233] netlink_rcv_skb+0x160/0x440 [ 36.595279] ? genl_family_rcv_msg+0xc40/0xc40 [ 36.599849] ? netlink_ack+0xae0/0xae0 [ 36.603719] ? genl_rcv+0x15/0x40 [ 36.607157] genl_rcv+0x24/0x40 [ 36.610446] netlink_unicast+0x4d5/0x690 [ 36.614491] ? netlink_sendskb+0x110/0x110 [ 36.618819] ? _copy_from_iter_full+0x229/0x7c0 [ 36.623663] ? __phys_addr_symbol+0x2c/0x70 [ 36.627985] ? __check_object_size+0x17b/0x3e0 [ 36.632638] netlink_sendmsg+0x6bb/0xc40 [ 36.636701] ? aa_af_perm+0x230/0x230 [ 36.640610] ? nlmsg_notify+0x1a0/0x1a0 [ 36.644673] ? kernel_recvmsg+0x220/0x220 [ 36.648807] ? nlmsg_notify+0x1a0/0x1a0 [ 36.652763] sock_sendmsg+0xc3/0x120 [ 36.656476] ___sys_sendmsg+0x7bb/0x8e0 [ 36.660434] ? copy_msghdr_from_user+0x440/0x440 [ 36.665182] ? apparmor_file_receive+0x160/0x160 [ 36.669934] ? __lockdep_init_map+0x100/0x5a0 [ 36.674412] ? check_preemption_disabled+0x41/0x280 [ 36.679406] ? mark_held_locks+0xf0/0xf0 [ 36.683451] ? percpu_counter_add_batch+0x126/0x180 [ 36.688462] ? alloc_empty_file+0xd7/0x170 [ 36.692677] ? errseq_sample+0x56/0x70 [ 36.696560] ? alloc_file+0x326/0x4d0 [ 36.700352] ? __fd_install+0x1b4/0x610 [ 36.704306] ? __fdget+0x1a0/0x230 [ 36.707826] __x64_sys_sendmsg+0x132/0x220 [ 36.712068] ? __sys_sendmsg+0x1b0/0x1b0 [ 36.716118] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 36.721575] ? trace_hardirqs_off_caller+0x6e/0x210 [ 36.726573] ? do_syscall_64+0x21/0x620 [ 36.730527] do_syscall_64+0xf9/0x620 [ 36.734336] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 36.739506] RIP: 0033:0x43fab9 [ 36.742692] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 36.761674] RSP: 002b:00007fffab6e3818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.769405] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043fab9 [ 36.776775] RDX: 0000000024008144 RSI: 0000000020000200 RDI: 0000000000000004 [ 36.784156] RBP: 0000000000403520 R08: 0000000000000030 R09: 00000000004004a0 [ 36.791419] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000004035b0 [ 36.798671] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 36.806690] Kernel Offset: disabled [ 36.810392] Rebooting in 86400 seconds..