netlink: 'syz-executor0': attribute type 4 has an invalid length. BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 IP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 PGD 1dfefd067 P4D 1dfefd067 PUD 1de741067 PMD 0 Oops: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 13052 Comm: syz-executor4 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: 0018:ffffc90002d33cb8 EFLAGS: 00010212 RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff816741f3 RDX: 000000000000015c RSI: ffffc90003ef2000 RDI: ffff8801dd180c81 RBP: ffffc90002d33d00 R08: 0000000000000001 R09: 0000000000000001 R10: ffffc90002d33c80 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000001 R14: 000000000000240c R15: 0000000000000405 FS: 00007fddc0ce5700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000001dd2e2000 CR4: 00000000001426f0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: crypto_alg_lookup+0x31/0x50 crypto/api.c:201 crypto_larval_lookup.part.8+0x34/0x1c0 crypto/api.c:218 crypto_larval_lookup crypto/api.c:212 [inline] crypto_alg_mod_lookup+0x77/0x120 crypto/api.c:271 crypto_find_alg crypto/api.c:501 [inline] crypto_alloc_tfm+0x67/0x180 crypto/api.c:534 crypto_alloc_skcipher+0x2c/0x40 crypto/skcipher.c:927 skcipher_bind+0x51/0x90 crypto/algif_skcipher.c:323 alg_bind+0x94/0x180 crypto/af_alg.c:179 SYSC_bind+0xa8/0x130 net/socket.c:1454 SyS_bind+0x24/0x30 net/socket.c:1440 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a39 RSP: 002b:00007fddc0ce4c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 00007fddc0ce5700 RCX: 0000000000452a39 RDX: 0000000000000058 RSI: 00000000204adfa8 RDI: 0000000000000013 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 R13: 0000000000a6f7ff R14: 00007fddc0ce59c0 R15: 0000000000000000 Code: 89 7d d0 e8 70 61 c4 ff 48 8b 1d 89 df a6 01 48 81 fb 60 21 0e 83 0f 84 4c 01 00 00 c7 45 c4 fe ff ff ff 45 31 e4 e8 4d 61 c4 ff <44> 8b 6b 20 41 f6 c5 60 0f 85 03 01 00 00 e8 3a 61 c4 ff 44 89 RIP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: ffffc90002d33cb8 CR2: 0000000000000020 ---[ end trace e4d1c0796f14b177 ]--- binder: 12994:13000 ioctl c0306201 2000f000 returned -14 binder_alloc: 12994: binder_alloc_buf, no vma binder: 12994:13018 transaction failed 29189/-3, size 0-40 line 2947 BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 IP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 PGD 1dfefd067 P4D 1dfefd067 PUD 1de741067 PMD 0 Oops: 0000 [#2] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 13056 Comm: syz-executor4 Tainted: G D 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: 0018:ffffc90001be7cb8 EFLAGS: 00010212 RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff816741f3 RDX: 0000000000000139 RSI: ffffc90003ff4000 RDI: ffff880215717489 RBP: ffffc90001be7d00 R08: 0000000000000001 R09: ffffffff81674363 R10: ffffc90001be7c80 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000c85 R14: 000000000000240e R15: 000000000000040f FS: 00007fddc0ca3700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000001dd2e2000 CR4: 00000000001426e0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: crypto_alg_lookup+0x31/0x50 crypto/api.c:201 crypto_larval_lookup.part.8+0x34/0x1c0 crypto/api.c:218 crypto_larval_lookup crypto/api.c:212 [inline] crypto_alg_mod_lookup+0x77/0x120 crypto/api.c:271 crypto_find_alg crypto/api.c:501 [inline] crypto_alloc_tfm+0x67/0x180 crypto/api.c:534 crypto_alloc_ahash+0x2c/0x40 crypto/ahash.c:540 hash_bind+0x51/0x90 crypto/algif_hash.c:422 alg_bind+0x94/0x180 crypto/af_alg.c:179 SYSC_bind+0xa8/0x130 net/socket.c:1454 SyS_bind+0x24/0x30 net/socket.c:1440 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a39 RSP: 002b:00007fddc0ca2c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000031 RAX: ffffffffffffffda RBX: 0000000000758190 RCX: 0000000000452a39 RDX: 0000000000000058 RSI: 0000000020b6f000 RDI: 0000000000000013 RBP: 000000000000039b R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f3728 R13: 00000000ffffffff R14: 00007fddc0ca36d4 R15: 0000000000000004 Code: 89 7d d0 e8 70 61 c4 ff 48 8b 1d 89 df a6 01 48 81 fb 60 21 0e 83 0f 84 4c 01 00 00 c7 45 c4 fe ff ff ff 45 31 e4 e8 4d 61 c4 ff <44> 8b 6b 20 41 f6 c5 60 0f 85 03 01 00 00 e8 3a 61 c4 ff 44 89 RIP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: ffffc90001be7cb8 CR2: 0000000000000020 ---[ end trace e4d1c0796f14b178 ]---