netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 IP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 PGD 1fa62e067 P4D 1fa62e067 PUD 1f81c0067 PMD 0 Oops: 0000 [#1] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 12550 Comm: syz-executor4 Not tainted 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: 0018:ffffc90000d7fd70 EFLAGS: 00010212 RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff816741f3 RDX: 00000000000000f3 RSI: ffffc900041cf000 RDI: ffff8801f83b588e RBP: ffffc90000d7fdb8 R08: 0000000000000001 R09: 0000000000000001 R10: ffffc90000d7fd38 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000c05 R14: 000000000000240f R15: 000000000000040e FS: 00007f4d4c898700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000001fa3f2006 CR4: 00000000001626f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: crypto_alg_lookup+0x31/0x50 crypto/api.c:201 crypto_larval_lookup.part.8+0x34/0x1c0 crypto/api.c:218 crypto_larval_lookup crypto/api.c:212 [inline] crypto_alg_mod_lookup+0x77/0x120 crypto/api.c:271 crypto_find_alg crypto/api.c:501 [inline] crypto_alloc_tfm+0x67/0x180 crypto/api.c:534 crypto_alloc_shash+0x2c/0x40 crypto/shash.c:436 sctp_listen_start net/sctp/socket.c:7496 [inline] sctp_inet_listen+0x1c1/0x240 net/sctp/socket.c:7584 SYSC_listen net/socket.c:1483 [inline] SyS_listen+0x71/0xb0 net/socket.c:1469 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a09 RSP: 002b:00007f4d4c897c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000032 RAX: ffffffffffffffda RBX: 000000000071bf58 RCX: 0000000000452a09 RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000013 RBP: 0000000000000499 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f3ef8 R13: 00000000ffffffff R14: 00007f4d4c8986d4 R15: 0000000000000003 Code: 89 7d d0 e8 70 61 c4 ff 48 8b 1d 89 df a6 01 48 81 fb 60 21 0e 83 0f 84 4c 01 00 00 c7 45 c4 fe ff ff ff 45 31 e4 e8 4d 61 c4 ff <44> 8b 6b 20 41 f6 c5 60 0f 85 03 01 00 00 e8 3a 61 c4 ff 44 89 RIP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: ffffc90000d7fd70 CR2: 0000000000000020 ---[ end trace 9c393c0027fa4666 ]--- BUG: unable to handle kernel NULL pointer dereference at 0000000000000020 IP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 PGD 20cf47067 P4D 20cf47067 PUD 1f90d3067 PMD 0 Oops: 0000 [#2] SMP Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 1 PID: 12552 Comm: syz-executor2 Tainted: G D 4.15.0-rc3-next-20171214+ #67 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: 0018:ffffc90000d47d70 EFLAGS: 00010212 RAX: 0000000000010000 RBX: 0000000000000000 RCX: ffffffff816741f3 RDX: 00000000000000ea RSI: ffffc90003536000 RDI: ffff8801f83b588e RBP: ffffc90000d47db8 R08: 0000000000000001 R09: ffffffff81674363 R10: ffffc90000d47d38 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000c05 R14: 000000000000240f R15: 000000000000040e FS: 00007facf71c3700(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000020 CR3: 00000001fc75a002 CR4: 00000000001626e0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 Call Trace: crypto_alg_lookup+0x31/0x50 crypto/api.c:201 crypto_larval_lookup.part.8+0x34/0x1c0 crypto/api.c:218 crypto_larval_lookup crypto/api.c:212 [inline] crypto_alg_mod_lookup+0x77/0x120 crypto/api.c:271 crypto_find_alg crypto/api.c:501 [inline] crypto_alloc_tfm+0x67/0x180 crypto/api.c:534 crypto_alloc_shash+0x2c/0x40 crypto/shash.c:436 sctp_listen_start net/sctp/socket.c:7496 [inline] sctp_inet_listen+0x1c1/0x240 net/sctp/socket.c:7584 SYSC_listen net/socket.c:1483 [inline] SyS_listen+0x71/0xb0 net/socket.c:1469 entry_SYSCALL_64_fastpath+0x1f/0x96 RIP: 0033:0x452a09 RSP: 002b:00007facf71c2c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000032 RAX: ffffffffffffffda RBX: 00007facf71c3700 RCX: 0000000000452a09 RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000013 RBP: 0000000000a2f880 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 R13: 0000000000a2f7ff R14: 00007facf71c39c0 R15: 0000000000000005 Code: 89 7d d0 e8 70 61 c4 ff 48 8b 1d 89 df a6 01 48 81 fb 60 21 0e 83 0f 84 4c 01 00 00 c7 45 c4 fe ff ff ff 45 31 e4 e8 4d 61 c4 ff <44> 8b 6b 20 41 f6 c5 60 0f 85 03 01 00 00 e8 3a 61 c4 ff 44 89 RIP: __crypto_alg_lookup+0x43/0x190 crypto/api.c:63 RSP: ffffc90000d47d70 CR2: 0000000000000020 ---[ end trace 9c393c0027fa4667 ]---