Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [*] Starting Phase 2 reproducer for ieee802154_llsec_dump_table GPF... [+] Successfully opened /dev/net/tun. [+] Successfully created TUN interface 'tun0'. [+] Successfully set TUN link type to ARPHRD_IEEE802154. [+] Successfully opened NETLINK_GENERIC socket. [+] Sent CTRL_CMD_GETFAMILY query for family '802.15.4 MAC'. [+] Received generic netlink reply (612 bytes). [+] Successfully resolved '802.15.4 MAC' family ID: 29 [*] Sending IEEE802154_LLSEC_LIST_KEY dump request... [ 99.807820][ T6025] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 99.820010][ T6025] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 99.828420][ T6025] CPU: 0 UID: 0 PID: 6025 Comm: syz-executor400 Not tainted syzkaller #0 PREEMPT(full) [ 99.838142][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 99.848190][ T6025] RIP: 0010:ieee802154_llsec_dump_table+0x204/0x5d0 [ 99.854793][ T6025] Code: 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 d3 02 00 00 4d 8b be b8 07 00 00 49 8d 7f 38 4c 89 bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 a5 02 00 00 4d 8b 7f 38 4d 85 ff 0f 84 b2 01 00 [ 99.874400][ T6025] RSP: 0018:ffffc900031ef4a0 EFLAGS: 00010202 [ 99.880472][ T6025] RAX: 0000000000000007 RBX: dffffc0000000000 RCX: 0000000000000000 [ 99.888425][ T6025] RDX: ffff8880314ccb00 RSI: ffffffff8b9ff162 RDI: 0000000000000038 [ 99.896379][ T6025] RBP: 0000000000000026 R08: 0000000000000324 R09: 0000000000000324 [ 99.904367][ T6025] R10: ffffc900031ef40f R11: ffffc900031ef520 R12: ffff888036830610 [ 99.912336][ T6025] R13: 0000000000000000 R14: ffff88805d7a8000 R15: 0000000000000000 [ 99.920325][ T6025] FS: 000055558d27f400(0000) GS:ffff88812248e000(0000) knlGS:0000000000000000 [ 99.929254][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.935837][ T6025] CR2: 00007fff8aa5bff8 CR3: 000000002ce9b000 CR4: 00000000003526f0 [ 99.943833][ T6025] Call Trace: [ 99.947109][ T6025] [ 99.950034][ T6025] ? __pfx_llsec_iter_keys+0x10/0x10 [ 99.955319][ T6025] ? __pfx_ieee802154_llsec_dump_table+0x10/0x10 [ 99.961642][ T6025] ? __alloc_skb+0x4e9/0x710 [ 99.966217][ T6025] ? __alloc_skb+0x5b7/0x710 [ 99.970832][ T6025] genl_dumpit+0x125/0x230 [ 99.975255][ T6025] netlink_dump+0x53b/0xd00 [ 99.979750][ T6025] ? __pfx_netlink_dump+0x10/0x10 [ 99.984767][ T6025] ? __asan_memset+0x23/0x50 [ 99.989350][ T6025] ? genl_start+0x67a/0x970 [ 99.993850][ T6025] __netlink_dump_start+0x6d6/0x990 [ 99.999040][ T6025] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 100.004749][ T6025] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 100.010979][ T6025] ? hook_capable+0x1bc/0x500 [ 100.015646][ T6025] ? rcu_is_watching+0x13/0xc0 [ 100.020409][ T6025] ? __pfx_genl_start+0x10/0x10 [ 100.025263][ T6025] ? __pfx_genl_dumpit+0x10/0x10 [ 100.030199][ T6025] ? __pfx_genl_done+0x10/0x10 [ 100.034958][ T6025] ? bpf_lsm_capable+0x9/0x10 [ 100.039619][ T6025] ? security_capable+0x80/0x260 [ 100.044547][ T6025] genl_rcv_msg+0x471/0x800 [ 100.049042][ T6025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.054056][ T6025] ? __lock_acquire+0x5c0/0x1f40 [ 100.058984][ T6025] ? __pfx_ieee802154_llsec_dump_keys+0x10/0x10 [ 100.065218][ T6025] ? __lock_acquire+0x5c0/0x1f40 [ 100.070147][ T6025] netlink_rcv_skb+0x159/0x420 [ 100.074896][ T6025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.079907][ T6025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.085182][ T6025] ? netlink_deliver_tap+0x1ae/0xb50 [ 100.090481][ T6025] genl_rcv+0x28/0x40 [ 100.094453][ T6025] netlink_unicast+0x668/0x950 [ 100.099203][ T6025] ? __pfx_netlink_unicast+0x10/0x10 [ 100.104493][ T6025] netlink_sendmsg+0x9ac/0x10c0 [ 100.109372][ T6025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.114654][ T6025] ? selinux_socket_sendmsg+0x198/0x2f0 [ 100.120193][ T6025] ? __sys_sendto+0x492/0x4e0 [ 100.124857][ T6025] __sys_sendto+0x492/0x4e0 [ 100.129354][ T6025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.134648][ T6025] ? __pfx___sys_sendto+0x10/0x10 [ 100.139666][ T6025] ? fd_install+0x223/0x580 [ 100.144198][ T6025] ? find_held_lock+0x2b/0x80 [ 100.148879][ T6025] ? __task_pid_nr_ns+0x1ca/0x510 [ 100.153903][ T6025] ? __task_pid_nr_ns+0x1ca/0x510 [ 100.158916][ T6025] __x64_sys_sendto+0xe0/0x1c0 [ 100.163666][ T6025] ? do_syscall_64+0xae/0x790 [ 100.168328][ T6025] ? lockdep_hardirqs_on+0x7d/0x110 [ 100.173516][ T6025] do_syscall_64+0x123/0x790 [ 100.178091][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.183968][ T6025] RIP: 0033:0x7f0fada8d8b7 [ 100.188379][ T6025] Code: 48 89 fa 4c 89 df e8 98 1d 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.207969][ T6025] RSP: 002b:00007fff8aa5c1d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 100.216366][ T6025] RAX: ffffffffffffffda RBX: 000055558d27f400 RCX: 00007f0fada8d8b7 [ 100.224322][ T6025] RDX: 0000000000000014 RSI: 00007fff8aa5c220 RDI: 0000000000000004 [ 100.232276][ T6025] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 100.240228][ T6025] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f0fadac9d23 [ 100.248179][ T6025] R13: 00007fff8aa5c390 R14: 000000000000001d R15: 0000000000000002 [ 100.256137][ T6025] [ 100.259150][ T6025] Modules linked in: [ 100.263322][ T6025] ---[ end trace 0000000000000000 ]--- [ 100.271698][ T30] audit: ty ** replaying previous printk message ** [ 100.271698][ T30] audit: type=1400 audit(1793247661.996:208): avc: denied { read } for pid=4971 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 100.271735][ T30] audit: type=1400 audit(1793247661.996:209): avc: denied { search } for pid=4971 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.271765][ T30] audit: type=1400 audit(1793247661.996:210): avc: denied { write search } for pid=4971 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.271805][ T30] audit: type=1400 audit(1793247661.996:211): avc: denied { add_name } for pid=4971 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.271834][ T30] audit: type=1400 audit(1793247661.996:212): avc: denied { create } for pid=4971 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.271865][ T30] audit: type=1400 audit(1793247661.996:213): avc: denied { append open } for pid=4971 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.273016][ T30] audit: type=1400 audit(1793247661.996:214): avc: denied { getattr } for pid=4971 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.275540][ T6025] RIP: 0010:ieee802154_llsec_dump_table+0x204/0x5d0 [ 100.275579][ T6025] Code: 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 d3 02 00 00 4d 8b be b8 07 00 00 49 8d 7f 38 4c 89 bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 a5 02 00 00 4d 8b 7f 38 4d 85 ff 0f 84 b2 01 00 [ 100.275598][ T6025] RSP: 0018:ffffc900031ef4a0 EFLAGS: 00010202 [ 100.275615][ T6025] RAX: 0000000000000007 RBX: dffffc0000000000 RCX: 0000000000000000 [ 100.275628][ T6025] RDX: ffff8880314ccb00 RSI: ffffffff8b9ff162 RDI: 0000000000000038 [ 100.275641][ T6025] RBP: 0000000000000026 R08: 0000000000000324 R09: 0000000000000324 [ 100.275654][ T6025] R10: ffffc900031ef40f R11: ffffc900031ef520 R12: ffff888036830610 [ 100.275668][ T6025] R13: 0000000000000000 R14: ffff88805d7a8000 R15: 0000000000000000 [ 100.275681][ T6025] FS: 000055558d27f400(0000) GS:ffff88812258e000(0000) knlGS:0000000000000000 [ 100.275701][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.275714][ T6025] CR2: 00007ffdac0fedc4 CR3: 000000002ce9b000 CR4: 00000000003526f0 [ 100.275729][ T6025] Kernel panic - not syncing: Fatal exception [ 100.533636][ T6025] Kernel Offset: disabled [ 100.537947][ T6025] Rebooting in 86400 seconds..