[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts. syzkaller login: [ 72.387506][ T8444] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 72.399643][ T8444] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 72.408043][ T8444] CPU: 0 PID: 8444 Comm: syz-executor265 Not tainted 5.13.0-rc6-syzkaller #0 [ 72.416810][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.426850][ T8444] RIP: 0010:hwsim_set_edge_lqi+0xf4/0x7d0 [ 72.432672][ T8444] Code: 00 0f 85 9c 06 00 00 4d 85 ed 48 8b 5b 10 0f 84 6e 05 00 00 e8 4d 3c 4a fc 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c2 [ 72.452300][ T8444] RSP: 0018:ffffc9000133f568 EFLAGS: 00010246 [ 72.458440][ T8444] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.466397][ T8444] RDX: 0000000000000000 RSI: ffffffff852a9fa3 RDI: ffff88801662e690 [ 72.474354][ T8444] RBP: ffffc9000133f678 R08: 0000000000000001 R09: ffffc9000133f6a8 [ 72.482311][ T8444] R10: fffff52000267ed6 R11: 0000000000000000 R12: ffffc9000133f698 [ 72.490283][ T8444] R13: ffff88801fd81c14 R14: ffff8880179218c0 R15: 0000000000000000 [ 72.498240][ T8444] FS: 0000000001f49300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 72.507160][ T8444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.513731][ T8444] CR2: 0000000020000000 CR3: 0000000018653000 CR4: 00000000001506f0 [ 72.521803][ T8444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.529871][ T8444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.537833][ T8444] Call Trace: [ 72.541101][ T8444] ? hwsim_del_edge_nl+0x7c0/0x7c0 [ 72.546208][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.552436][ T8444] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 72.559829][ T8444] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 72.567128][ T8444] genl_family_rcv_msg_doit+0x228/0x320 [ 72.572732][ T8444] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 72.581065][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.587337][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.593667][ T8444] ? ns_capable+0xde/0x100 [ 72.598078][ T8444] genl_rcv_msg+0x328/0x580 [ 72.602583][ T8444] ? genl_get_cmd+0x480/0x480 [ 72.607256][ T8444] ? hwsim_del_edge_nl+0x7c0/0x7c0 [ 72.612368][ T8444] ? lock_release+0x720/0x720 [ 72.617035][ T8444] netlink_rcv_skb+0x153/0x420 [ 72.621968][ T8444] ? genl_get_cmd+0x480/0x480 [ 72.626676][ T8444] ? netlink_ack+0xaa0/0xaa0 [ 72.631366][ T8444] genl_rcv+0x24/0x40 [ 72.635333][ T8444] netlink_unicast+0x533/0x7d0 [ 72.640090][ T8444] ? netlink_attachskb+0x870/0x870 [ 72.645189][ T8444] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.651432][ T8444] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.657662][ T8444] ? __phys_addr_symbol+0x2c/0x70 [ 72.662889][ T8444] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 72.668612][ T8444] ? __check_object_size+0x171/0x3f0 [ 72.673888][ T8444] netlink_sendmsg+0x856/0xd90 [ 72.678646][ T8444] ? netlink_unicast+0x7d0/0x7d0 executing program [ 72.683570][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.689800][ T8444] ? netlink_unicast+0x7d0/0x7d0 [ 72.694811][ T8444] sock_sendmsg+0xcf/0x120 [ 72.699229][ T8444] ____sys_sendmsg+0x6e8/0x810 [ 72.703999][ T8444] ? kernel_sendmsg+0x50/0x50 [ 72.708667][ T8444] ? do_recvmmsg+0x6d0/0x6d0 [ 72.713359][ T8444] ? do_huge_pmd_anonymous_page+0x1245/0x2570 [ 72.719536][ T8444] ? lock_downgrade+0x6e0/0x6e0 [ 72.724746][ T8444] ___sys_sendmsg+0xf3/0x170 [ 72.729343][ T8444] ? sendmsg_copy_msghdr+0x160/0x160 [ 72.734813][ T8444] ? __lock_acquire+0x16a7/0x5230 [ 72.744788][ T8444] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.750777][ T8444] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 72.756760][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.762995][ T8444] ? __fget_light+0x215/0x280 [ 72.767682][ T8444] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 72.774005][ T8444] __sys_sendmsg+0xe5/0x1b0 [ 72.778519][ T8444] ? __sys_sendmsg_sock+0x30/0x30 [ 72.783738][ T8444] ? syscall_enter_from_user_mode+0x27/0x70 [ 72.789668][ T8444] do_syscall_64+0x3a/0xb0 [ 72.794107][ T8444] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.800212][ T8444] RIP: 0033:0x43eec9 [ 72.804249][ T8444] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.824113][ T8444] RSP: 002b:00007ffe1e04e7b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.832537][ T8444] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043eec9 [ 72.840495][ T8444] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 72.848450][ T8444] RBP: 0000000000402eb0 R08: 0000000000000000 R09: 0000000000400488 [ 72.856406][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402f40 [ 72.864361][ T8444] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 72.872334][ T8444] Modules linked in: [ 72.881131][ T8444] ---[ end trace d7684556b3649ded ]--- [ 72.886689][ T8444] RIP: 0010:hwsim_set_edge_lqi+0xf4/0x7d0 [ 72.892511][ T8444] Code: 00 0f 85 9c 06 00 00 4d 85 ed 48 8b 5b 10 0f 84 6e 05 00 00 e8 4d 3c 4a fc 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 c2 [ 72.912481][ T8444] RSP: 0018:ffffc9000133f568 EFLAGS: 00010246 [ 72.919203][ T8444] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.927811][ T8444] RDX: 0000000000000000 RSI: ffffffff852a9fa3 RDI: ffff88801662e690 [ 72.935859][ T8444] RBP: ffffc9000133f678 R08: 0000000000000001 R09: ffffc9000133f6a8 [ 72.943990][ T8444] R10: fffff52000267ed6 R11: 0000000000000000 R12: ffffc9000133f698 [ 72.952096][ T8444] R13: ffff88801fd81c14 R14: ffff8880179218c0 R15: 0000000000000000 [ 72.960359][ T8444] FS: 0000000001f49300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 72.969784][ T8444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.976464][ T8444] CR2: 00007ffffd2e8ff8 CR3: 0000000018653000 CR4: 00000000001506e0 [ 72.984941][ T8444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.994526][ T8444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.002644][ T8444] Kernel panic - not syncing: Fatal exception [ 73.010148][ T8444] Kernel Offset: disabled [ 73.014857][ T8444] Rebooting in 86400 seconds..