Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.460946] kasan: CONFIG_KASAN_INLINE enabled [ 29.465775] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 29.473133] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 29.479421] Modules linked in: [ 29.482591] CPU: 1 PID: 7998 Comm: syz-executor733 Not tainted 4.14.218-syzkaller #0 [ 29.490447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.499790] task: ffff8880ac7c0180 task.stack: ffff888095800000 [ 29.505836] RIP: 0010:nl802154_del_llsec_key+0x15a/0x2f0 [ 29.511273] RSP: 0018:ffff888095807698 EFLAGS: 00010246 [ 29.516796] RAX: dffffc0000000000 RBX: ffff88823a100ac0 RCX: 0000000000000000 [ 29.524056] RDX: 0000000000000000 RSI: ffff888095807850 RDI: ffff88823a100be8 [ 29.531302] RBP: 1ffff11012b00ed5 R08: 0000000000000001 R09: ffff888095807990 [ 29.538558] R10: ffff8880958076af R11: ffff8880ac7c0180 R12: ffff8882382b6340 [ 29.545812] R13: ffff8880ab91cfd0 R14: ffffffff886f1c70 R15: ffff8880b3b14a40 [ 29.553064] FS: 000000000073d300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 29.561272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.567145] CR2: 0000000020000048 CR3: 000000009eb9f000 CR4: 00000000001406e0 [ 29.574399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.581727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.588981] Call Trace: [ 29.591558] ? nl802154_post_doit+0x150/0x150 [ 29.596030] ? lock_acquire+0x170/0x3f0 [ 29.599980] ? nl802154_set_llsec_params+0x420/0x420 [ 29.605063] ? nl802154_pre_doit+0xb2/0xb20 [ 29.609367] ? validate_nla+0x192/0x5e0 [ 29.613341] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 29.618517] ? nla_parse+0x157/0x1f0 [ 29.622217] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 29.627299] genl_family_rcv_msg+0x572/0xb20 [ 29.631684] ? genl_rcv+0x40/0x40 [ 29.635111] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 29.640546] ? trace_hardirqs_on+0x10/0x10 [ 29.644766] ? sock_sendmsg+0xb5/0x100 [ 29.648641] genl_rcv_msg+0xaf/0x140 [ 29.652341] netlink_rcv_skb+0x125/0x390 [ 29.656550] ? genl_family_rcv_msg+0xb20/0xb20 [ 29.661139] ? netlink_ack+0x9a0/0x9a0 [ 29.665008] ? lock_acquire+0x170/0x3f0 [ 29.668970] genl_rcv+0x24/0x40 [ 29.672237] netlink_unicast+0x437/0x610 [ 29.676276] ? netlink_sendskb+0xd0/0xd0 [ 29.680310] ? __check_object_size+0x179/0x230 [ 29.684868] netlink_sendmsg+0x62e/0xb80 [ 29.689869] ? nlmsg_notify+0x170/0x170 [ 29.693821] ? kernel_recvmsg+0x210/0x210 [ 29.697948] ? security_socket_sendmsg+0x83/0xb0 [ 29.702679] ? nlmsg_notify+0x170/0x170 [ 29.706631] sock_sendmsg+0xb5/0x100 [ 29.710322] ___sys_sendmsg+0x6c8/0x800 [ 29.714272] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 29.719004] ? netlink_dump+0xad0/0xad0 [ 29.722973] ? nlmsg_notify+0x170/0x170 [ 29.726926] ? security_socket_recvmsg+0x8b/0xc0 [ 29.731656] ? SyS_recvfrom+0x27f/0x340 [ 29.735622] ? SyS_send+0x40/0x40 [ 29.739057] ? __fdget+0x167/0x1f0 [ 29.742568] ? sockfd_lookup_light+0xb2/0x160 [ 29.747036] __sys_sendmsg+0xa3/0x120 [ 29.750823] ? SyS_shutdown+0x160/0x160 [ 29.754826] ? move_addr_to_kernel+0x60/0x60 [ 29.759214] ? __do_page_fault+0x159/0xad0 [ 29.763422] SyS_sendmsg+0x27/0x40 [ 29.766965] ? __sys_sendmsg+0x120/0x120 [ 29.771001] do_syscall_64+0x1d5/0x640 [ 29.774900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.780063] RIP: 0033:0x43f909 [ 29.783235] RSP: 002b:00007ffebb0c1bf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 29.790918] RAX: ffffffffffffffda RBX: 00000000004004a0 RCX: 000000000043f909 [ 29.798168] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 29.805430] RBP: 0000000000403370 R08: 000000000000000c R09: 00000000004004a0 [ 29.812688] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000403400 [ 29.819949] R13: 0000000000000000 R14: 00000000004ad018 R15: 00000000004004a0 [ 29.827200] Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 85 01 00 00 48 8b 93 28 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 [ 29.846288] RIP: nl802154_del_llsec_key+0x15a/0x2f0 RSP: ffff888095807698 [ 29.856297] ---[ end trace 693e1f50e6d35add ]--- [ 29.861047] Kernel panic - not syncing: Fatal exception [ 29.866908] Kernel Offset: disabled [ 29.870537] Rebooting in 86400 seconds..