[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.194' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 60.157723][ T7047] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 60.169761][ T7047] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 60.178327][ T7047] CPU: 0 PID: 7047 Comm: syz-executor810 Not tainted 5.7.0-rc6-syzkaller #0 [ 60.187007][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.197202][ T7047] RIP: 0010:fq_codel_enqueue+0xa75/0x11b0 [ 60.202988][ T7047] Code: 27 fb 44 3b 64 24 70 0f 83 dd 00 00 00 e8 b3 6b 27 fb 48 8b 44 24 40 80 38 00 0f 85 5a 05 00 00 49 8b 06 48 89 c2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 52 05 00 00 48 8b 10 49 89 16 48 89 c2 48 c1 [ 60.222661][ T7047] RSP: 0018:ffffc90000eb76a0 EFLAGS: 00010246 [ 60.228700][ T7047] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90000eb7880 [ 60.236650][ T7047] RDX: 0000000000000000 RSI: ffffffff864bc96d RDI: 0000000000000000 [ 60.244603][ T7047] RBP: ffffc90000eb77b0 R08: ffff88809668e040 R09: fffffbfff185dd44 [ 60.252701][ T7047] R10: ffffffff8c2eea1f R11: fffffbfff185dd43 R12: 0000000000000400 [ 60.260658][ T7047] R13: dffffc0000000000 R14: ffff888089180000 R15: ffffc90000eb7880 [ 60.268787][ T7047] FS: 0000000000dab880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 60.277697][ T7047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.284617][ T7047] CR2: 0000000020000100 CR3: 00000000a6fdd000 CR4: 00000000001406f0 [ 60.292576][ T7047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.300661][ T7047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.308680][ T7047] Call Trace: [ 60.311969][ T7047] ? drop_func+0x60/0x60 [ 60.316200][ T7047] ? rwlock_bug.part.0+0x90/0x90 [ 60.321123][ T7047] ? rcu_read_lock_bh_held+0x5a/0xb0 [ 60.326492][ T7047] ? rcu_read_lock_sched_held+0xd0/0xd0 [ 60.332013][ T7047] __dev_queue_xmit+0x154a/0x30a0 [ 60.337020][ T7047] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 60.343602][ T7047] ? _copy_from_iter+0x307/0xb60 [ 60.348645][ T7047] ? __check_object_size+0x171/0x437 [ 60.354006][ T7047] ? packet_parse_headers.isra.0+0x11c/0x470 [ 60.359985][ T7047] ? packet_seq_start+0x150/0x150 [ 60.364986][ T7047] ? packet_sendmsg+0x24fd/0x5e90 [ 60.370007][ T7047] packet_sendmsg+0x24fd/0x5e90 [ 60.374843][ T7047] ? aa_label_sk_perm+0x89/0xe0 [ 60.379668][ T7047] ? aa_sk_perm+0x319/0xab0 [ 60.384154][ T7047] ? packet_notifier+0x860/0x860 [ 60.389249][ T7047] ? aa_af_perm+0x260/0x260 [ 60.394062][ T7047] ? lock_downgrade+0x840/0x840 [ 60.398924][ T7047] ? packet_notifier+0x860/0x860 [ 60.403839][ T7047] sock_sendmsg+0xcf/0x120 [ 60.408326][ T7047] sock_write_iter+0x289/0x3c0 [ 60.414373][ T7047] ? sock_sendmsg+0x120/0x120 [ 60.419124][ T7047] ? packet_do_bind+0x452/0xc00 [ 60.424044][ T7047] new_sync_write+0x4a2/0x700 [ 60.428718][ T7047] ? new_sync_read+0x7a0/0x7a0 [ 60.433489][ T7047] ? apparmor_path_rmdir+0x30/0x30 [ 60.438592][ T7047] ? security_file_permission+0x8c/0x470 [ 60.445168][ T7047] __vfs_write+0xc9/0x100 [ 60.449515][ T7047] vfs_write+0x268/0x5d0 [ 60.453736][ T7047] ksys_write+0x1ee/0x250 [ 60.458061][ T7047] ? __ia32_sys_read+0xb0/0xb0 [ 60.462820][ T7047] ? trace_hardirqs_off_caller+0x55/0x230 [ 60.468532][ T7047] do_syscall_64+0xf6/0x7d0 [ 60.473647][ T7047] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.479520][ T7047] RIP: 0033:0x440599 [ 60.483406][ T7047] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 60.503097][ T7047] RSP: 002b:00007ffd0ad38c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.511578][ T7047] RAX: ffffffffffffffda RBX: 00000000004a173e RCX: 0000000000440599 [ 60.519542][ T7047] RDX: 000000000000006c RSI: 00000000200003c0 RDI: 0000000000000005 [ 60.527597][ T7047] RBP: 54c6c2ff093a6d32 R08: 00000000004002c8 R09: 00000000004002c8 [ 60.535595][ T7047] R10: 00000000004002c8 R11: 0000000000000246 R12: 0000000000010000 [ 60.543589][ T7047] R13: 0000000000401eb0 R14: 0000000000000000 R15: 0000000000000000 [ 60.551679][ T7047] Modules linked in: [ 60.555724][ T7047] ---[ end trace 21d07d74fc71f165 ]--- [ 60.561223][ T7047] RIP: 0010:fq_codel_enqueue+0xa75/0x11b0 [ 60.566958][ T7047] Code: 27 fb 44 3b 64 24 70 0f 83 dd 00 00 00 e8 b3 6b 27 fb 48 8b 44 24 40 80 38 00 0f 85 5a 05 00 00 49 8b 06 48 89 c2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 52 05 00 00 48 8b 10 49 89 16 48 89 c2 48 c1 [ 60.586615][ T7047] RSP: 0018:ffffc90000eb76a0 EFLAGS: 00010246 [ 60.592729][ T7047] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90000eb7880 [ 60.600732][ T7047] RDX: 0000000000000000 RSI: ffffffff864bc96d RDI: 0000000000000000 [ 60.609511][ T7047] RBP: ffffc90000eb77b0 R08: ffff88809668e040 R09: fffffbfff185dd44 [ 60.617656][ T7047] R10: ffffffff8c2eea1f R11: fffffbfff185dd43 R12: 0000000000000400 [ 60.625866][ T7047] R13: dffffc0000000000 R14: ffff888089180000 R15: ffffc90000eb7880 [ 60.633882][ T7047] FS: 0000000000dab880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 60.642843][ T7047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.649768][ T7047] CR2: 0000000020000100 CR3: 00000000a6fdd000 CR4: 00000000001406f0 [ 60.657979][ T7047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.666000][ T7047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.674135][ T7047] Kernel panic - not syncing: Fatal exception in interrupt [ 60.683117][ T7047] Kernel Offset: disabled [ 60.687470][ T7047] Rebooting in 86400 seconds..