[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.95' (ECDSA) to the list of known hosts. syzkaller login: [ 68.971494][ T8424] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 69.006574][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.007202][ T8424] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 69.014398][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.032607][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.048020][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.056796][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 69.065882][ T3160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.083388][ T8473] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 69.091515][ T8473] #PF: supervisor instruction fetch in kernel mode [ 69.097994][ T8473] #PF: error_code(0x0010) - not-present page [ 69.103947][ T8473] PGD 26f41067 P4D 26f41067 PUD 17c87067 PMD 0 [ 69.110177][ T8473] Oops: 0010 [#1] PREEMPT SMP KASAN [ 69.115460][ T8473] CPU: 1 PID: 8473 Comm: iou-wrk-8424 Not tainted 5.14.0-syzkaller #0 [ 69.123587][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 69.133621][ T8473] RIP: 0010:0x0 [ 69.137115][ T8473] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 69.144807][ T8473] RSP: 0018:ffffc900016af910 EFLAGS: 00010246 [ 69.150851][ T8473] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.158800][ T8473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888036b6c000 [ 69.166748][ T8473] RBP: ffff888036b6c000 R08: 0000000000000000 R09: ffff8880191787d7 [ 69.174693][ T8473] R10: ffffffff81e263e4 R11: 0000000000000000 R12: 0000000000000000 [ 69.182728][ T8473] R13: ffff888036b6c058 R14: ffff888036b6c040 R15: 0000000000000000 [ 69.190678][ T8473] FS: 0000000002442400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 69.199594][ T8473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.206163][ T8473] CR2: ffffffffffffffd6 CR3: 000000001d9bc000 CR4: 00000000001506e0 [ 69.214122][ T8473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.222111][ T8473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.230067][ T8473] Call Trace: [ 69.233325][ T8473] kiocb_done+0x1b3/0x980 [ 69.237644][ T8473] io_read+0x3d3/0x1140 [ 69.241781][ T8473] ? io_uring_setup+0x2d60/0x2d60 [ 69.246790][ T8473] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.253016][ T8473] ? put_dec_trunc8+0x28b/0x370 [ 69.257848][ T8473] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 69.264068][ T8473] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 69.270285][ T8473] ? number+0x7e2/0xae0 [ 69.274420][ T8473] io_issue_sqe+0x209/0x6ba0 [ 69.278994][ T8473] ? enable_ptr_key_workfn+0x30/0x30 [ 69.284270][ T8473] ? io_write+0xed0/0xed0 [ 69.288579][ T8473] ? rcu_read_lock_sched_held+0xd/0x70 [ 69.294015][ T8473] ? lock_acquire+0x442/0x510 [ 69.298668][ T8473] ? rcu_read_lock_sched_held+0xd/0x70 [ 69.304105][ T8473] ? lock_release+0x522/0x720 [ 69.308761][ T8473] ? io_worker_handle_work+0x7c1/0x1950 [ 69.314301][ T8473] ? lock_downgrade+0x6e0/0x6e0 [ 69.319128][ T8473] ? do_raw_spin_lock+0x120/0x2b0 [ 69.324132][ T8473] ? rwlock_bug.part.0+0x90/0x90 [ 69.329051][ T8473] io_wq_submit_work+0x1d4/0x300 [ 69.333971][ T8473] io_worker_handle_work+0xcb1/0x1950 [ 69.339337][ T8473] io_wqe_worker+0x2cc/0xbb0 [ 69.343916][ T8473] ? io_worker_handle_work+0x1950/0x1950 [ 69.349529][ T8473] ? rcu_read_lock_sched_held+0xd/0x70 [ 69.354970][ T8473] ? lock_release+0x522/0x720 [ 69.359626][ T8473] ? ret_from_fork+0x8/0x30 [ 69.364119][ T8473] ? lock_downgrade+0x6e0/0x6e0 [ 69.368947][ T8473] ? do_raw_spin_lock+0x120/0x2b0 [ 69.373950][ T8473] ? rwlock_bug.part.0+0x90/0x90 [ 69.378953][ T8473] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 69.385274][ T8473] ? io_worker_handle_work+0x1950/0x1950 [ 69.391330][ T8473] ? io_worker_handle_work+0x1950/0x1950 [ 69.396950][ T8473] ret_from_fork+0x1f/0x30 [ 69.401356][ T8473] Modules linked in: [ 69.405228][ T8473] CR2: 0000000000000000 [ 69.409359][ T8473] ---[ end trace f60cb53b8a968c33 ]--- [ 69.414797][ T8473] RIP: 0010:0x0 [ 69.418249][ T8473] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 69.425937][ T8473] RSP: 0018:ffffc900016af910 EFLAGS: 00010246 [ 69.431980][ T8473] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.439939][ T8473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888036b6c000 [ 69.447907][ T8473] RBP: ffff888036b6c000 R08: 0000000000000000 R09: ffff8880191787d7 [ 69.455856][ T8473] R10: ffffffff81e263e4 R11: 0000000000000000 R12: 0000000000000000 [ 69.463986][ T8473] R13: ffff888036b6c058 R14: ffff888036b6c040 R15: 0000000000000000 [ 69.471936][ T8473] FS: 0000000002442400(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 69.480856][ T8473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.487439][ T8473] CR2: ffffffffffffffd6 CR3: 000000001d9bc000 CR4: 00000000001506e0 [ 69.495392][ T8473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.503439][ T8473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.511415][ T8473] Kernel panic - not syncing: Fatal exception [ 69.518744][ T8473] Kernel Offset: disabled [ 69.523054][ T8473] Rebooting in 86400 seconds..