Starting Load/Save RF Kill Switch Status... [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 70.939645][ T8438] netlink: 'syz-executor324': attribute type 2 has an invalid length. [ 70.958030][ T8438] device Z0 entered promiscuous mode [ 70.965573][ T8437] ================================================================================ [ 70.976441][ T8437] UBSAN: shift-out-of-bounds in net/netlink/af_netlink.c:160:19 [ 70.984268][ T8437] shift exponent 32 is too large for 32-bit type 'int' [ 70.992017][ T8437] CPU: 1 PID: 8437 Comm: syz-executor324 Not tainted 5.11.0-rc7-syzkaller #0 [ 71.000813][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.011068][ T8437] Call Trace: [ 71.014368][ T8437] dump_stack+0x107/0x163 [ 71.018757][ T8437] ubsan_epilogue+0xb/0x5a [ 71.023206][ T8437] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 71.030000][ T8437] ? vimc_cap_s_fmt_vid_cap+0x553/0x710 [ 71.035595][ T8437] netlink_recvmsg.cold+0x1a/0x1f [ 71.040668][ T8437] ? netlink_dump+0xb70/0xb70 [ 71.045389][ T8437] ? aa_af_perm+0x230/0x230 [ 71.049930][ T8437] ? __might_fault+0xd3/0x180 [ 71.054667][ T8437] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.060944][ T8437] ? security_socket_recvmsg+0x8f/0xc0 [ 71.066752][ T8437] ? netlink_dump+0xb70/0xb70 [ 71.071474][ T8437] ____sys_recvmsg+0x2c4/0x600 [ 71.076331][ T8437] ? move_addr_to_kernel.part.0+0x110/0x110 [ 71.082267][ T8437] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.088581][ T8437] ? __import_iovec+0x293/0x500 [ 71.093479][ T8437] ? import_iovec+0x10c/0x150 [ 71.098199][ T8437] ___sys_recvmsg+0x127/0x200 [ 71.103525][ T8437] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 71.109197][ T8437] ? __fget_files+0x266/0x3d0 [ 71.113921][ T8437] ? lock_downgrade+0x6d0/0x6d0 [ 71.118808][ T8437] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 71.124832][ T8437] ? __fget_files+0x288/0x3d0 [ 71.129550][ T8437] ? __fget_light+0xea/0x280 [ 71.134169][ T8437] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.140449][ T8437] __sys_recvmsg+0xe2/0x1a0 [ 71.144986][ T8437] ? __sys_recvmsg_sock+0x150/0x150 [ 71.150233][ T8437] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.156528][ T8437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 71.162459][ T8437] do_syscall_64+0x2d/0x70 [ 71.166903][ T8437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.172802][ T8437] RIP: 0033:0x444bf9 [ 71.176704][ T8437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.196323][ T8437] RSP: 002b:00007f68a1130318 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 71.204751][ T8437] RAX: ffffffffffffffda RBX: 00000000004ca408 RCX: 0000000000444bf9 [ 71.212738][ T8437] RDX: 0000000000000002 RSI: 0000000020000440 RDI: 0000000000000003 [ 71.220709][ T8437] RBP: 00000000004ca400 R08: 0000000000000000 R09: 0000000000000000 [ 71.228685][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 8001000a373e1537 [ 71.236662][ T8437] R13: 00007ffc4d11dcaf R14: 00007f68a1130400 R15: 0000000000022000 [ 71.248541][ T8437] ================================================================================ [ 71.257915][ T8437] Kernel panic - not syncing: panic_on_warn set ... [ 71.264518][ T8437] CPU: 1 PID: 8437 Comm: syz-executor324 Not tainted 5.11.0-rc7-syzkaller #0 [ 71.273314][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.283364][ T8437] Call Trace: [ 71.286636][ T8437] dump_stack+0x107/0x163 [ 71.290972][ T8437] panic+0x306/0x73d [ 71.294865][ T8437] ? __warn_printk+0xf3/0xf3 [ 71.299553][ T8437] ? ubsan_epilogue+0x3e/0x5a [ 71.304229][ T8437] ubsan_epilogue+0x54/0x5a [ 71.308780][ T8437] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 71.315569][ T8437] ? vimc_cap_s_fmt_vid_cap+0x553/0x710 [ 71.321132][ T8437] netlink_recvmsg.cold+0x1a/0x1f [ 71.326169][ T8437] ? netlink_dump+0xb70/0xb70 [ 71.330849][ T8437] ? aa_af_perm+0x230/0x230 [ 71.335375][ T8437] ? __might_fault+0xd3/0x180 [ 71.340077][ T8437] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.346330][ T8437] ? security_socket_recvmsg+0x8f/0xc0 [ 71.351804][ T8437] ? netlink_dump+0xb70/0xb70 [ 71.356508][ T8437] ____sys_recvmsg+0x2c4/0x600 [ 71.361288][ T8437] ? move_addr_to_kernel.part.0+0x110/0x110 [ 71.367194][ T8437] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.373448][ T8437] ? __import_iovec+0x293/0x500 [ 71.378298][ T8437] ? import_iovec+0x10c/0x150 [ 71.382992][ T8437] ___sys_recvmsg+0x127/0x200 [ 71.387674][ T8437] ? __copy_msghdr_from_user+0x4b0/0x4b0 [ 71.393299][ T8437] ? __fget_files+0x266/0x3d0 [ 71.398000][ T8437] ? lock_downgrade+0x6d0/0x6d0 [ 71.402855][ T8437] ? do_huge_pmd_anonymous_page+0x8f1/0x2390 [ 71.408835][ T8437] ? __fget_files+0x288/0x3d0 [ 71.413513][ T8437] ? __fget_light+0xea/0x280 [ 71.418094][ T8437] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 71.424367][ T8437] __sys_recvmsg+0xe2/0x1a0 [ 71.428969][ T8437] ? __sys_recvmsg_sock+0x150/0x150 [ 71.434164][ T8437] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.440427][ T8437] ? syscall_enter_from_user_mode+0x1d/0x50 [ 71.446426][ T8437] do_syscall_64+0x2d/0x70 [ 71.450854][ T8437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.456751][ T8437] RIP: 0033:0x444bf9 [ 71.460662][ T8437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.480325][ T8437] RSP: 002b:00007f68a1130318 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 71.489886][ T8437] RAX: ffffffffffffffda RBX: 00000000004ca408 RCX: 0000000000444bf9 [ 71.497855][ T8437] RDX: 0000000000000002 RSI: 0000000020000440 RDI: 0000000000000003 [ 71.505840][ T8437] RBP: 00000000004ca400 R08: 0000000000000000 R09: 0000000000000000 [ 71.513813][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 8001000a373e1537 [ 71.521795][ T8437] R13: 00007ffc4d11dcaf R14: 00007f68a1130400 R15: 0000000000022000 [ 71.530548][ T8437] Kernel Offset: disabled [ 71.534972][ T8437] Rebooting in 86400 seconds..