Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 74.758982][ T8459] general protection fault, probably for non-canonical address 0xdffffc00000000b3: 0000 [#1] PREEMPT SMP KASAN [ 74.770911][ T8459] KASAN: null-ptr-deref in range [0x0000000000000598-0x000000000000059f] [ 74.779408][ T8459] CPU: 1 PID: 8459 Comm: syz-executor202 Not tainted 5.14.0-rc2-syzkaller #0 [ 74.788151][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.798187][ T8459] RIP: 0010:add_del_if+0x57/0x140 [ 74.803215][ T8459] Code: 03 80 3c 02 00 0f 85 fd 00 00 00 48 8b 9d 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 98 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 00 00 00 4c 8b ab 98 05 00 00 48 b8 00 00 00 [ 74.823057][ T8459] RSP: 0018:ffffc900015bfa80 EFLAGS: 00010202 [ 74.829126][ T8459] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.837175][ T8459] RDX: 00000000000000b3 RSI: ffffffff87f667b6 RDI: 0000000000000598 [ 74.845149][ T8459] RBP: ffff888147908c00 R08: 00000000000089a2 R09: ffffffff87f67f36 [ 74.853229][ T8459] R10: ffffffff87f68031 R11: 00000000000089a3 R12: 0000000000000000 [ 74.861327][ T8459] R13: ffffc900015bfd60 R14: 0000000000000000 R15: dffffc0000000000 [ 74.869294][ T8459] FS: 0000000001cb1300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 74.878321][ T8459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.885336][ T8459] CR2: 0000000020000080 CR3: 0000000033d1a000 CR4: 00000000001506e0 [ 74.893778][ T8459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.901944][ T8459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.910023][ T8459] Call Trace: [ 74.913413][ T8459] br_ioctl_stub+0x1c6/0x7f0 [ 74.918364][ T8459] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 74.923987][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.930247][ T8459] ? full_name_hash+0xb5/0xf0 [ 74.934908][ T8459] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 74.940636][ T8459] br_ioctl_call+0x5e/0xa0 [ 74.945166][ T8459] dev_ifsioc+0xc1f/0xf60 [ 74.949494][ T8459] ? dev_load+0x79/0x200 [ 74.953734][ T8459] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 74.959706][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.965953][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 74.972176][ T8459] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 74.978145][ T8459] dev_ioctl+0x1b9/0xee0 [ 74.982395][ T8459] sock_do_ioctl+0x18b/0x210 [ 74.986996][ T8459] ? put_user_ifreq+0x140/0x140 [ 74.991849][ T8459] sock_ioctl+0x2f1/0x640 [ 74.996169][ T8459] ? br_ioctl_call+0xa0/0xa0 [ 75.000767][ T8459] ? lock_downgrade+0x6e0/0x6e0 [ 75.005610][ T8459] ? lock_downgrade+0x6e0/0x6e0 [ 75.015340][ T8459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 75.021849][ T8459] ? br_ioctl_call+0xa0/0xa0 [ 75.027621][ T8459] __x64_sys_ioctl+0x193/0x200 [ 75.032543][ T8459] do_syscall_64+0x35/0xb0 [ 75.037138][ T8459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 75.043115][ T8459] RIP: 0033:0x43ee49 [ 75.047819][ T8459] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 75.067630][ T8459] RSP: 002b:00007ffc5cbf3e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.076110][ T8459] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043ee49 [ 75.084331][ T8459] RDX: 0000000020000080 RSI: 00000000000089a3 RDI: 0000000000000003 [ 75.092469][ T8459] RBP: 0000000000402e30 R08: 0000000000000000 R09: 0000000000400488 [ 75.100830][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402ec0 [ 75.108801][ T8459] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 75.117146][ T8459] Modules linked in: [ 75.122902][ T8459] ---[ end trace 6d98a953afb42cf9 ]--- [ 75.128416][ T8459] RIP: 0010:add_del_if+0x57/0x140 [ 75.133459][ T8459] Code: 03 80 3c 02 00 0f 85 fd 00 00 00 48 8b 9d 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 98 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 00 00 00 4c 8b ab 98 05 00 00 48 b8 00 00 00 [ 75.154373][ T8459] RSP: 0018:ffffc900015bfa80 EFLAGS: 00010202 [ 75.160933][ T8459] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 75.169168][ T8459] RDX: 00000000000000b3 RSI: ffffffff87f667b6 RDI: 0000000000000598 [ 75.177345][ T8459] RBP: ffff888147908c00 R08: 00000000000089a2 R09: ffffffff87f67f36 [ 75.185492][ T8459] R10: ffffffff87f68031 R11: 00000000000089a3 R12: 0000000000000000 [ 75.193664][ T8459] R13: ffffc900015bfd60 R14: 0000000000000000 R15: dffffc0000000000 [ 75.201683][ T8459] FS: 0000000001cb1300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 75.211205][ T8459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.217825][ T8459] CR2: 00007f9154630000 CR3: 0000000033d1a000 CR4: 00000000001506f0 [ 75.225977][ T8459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.233999][ T8459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.242933][ T8459] Kernel panic - not syncing: Fatal exception [ 75.250892][ T8459] Kernel Offset: disabled [ 75.255239][ T8459] Rebooting in 86400 seconds..