[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 83.480979][ T26] audit: type=1400 audit(1635451501.337:8): avc: denied { execmem } for pid=6542 comm="syz-executor965" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 83.504287][ T6542] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 83.516029][ T6542] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 83.524427][ T6542] CPU: 1 PID: 6542 Comm: syz-executor965 Not tainted 5.15.0-rc7-syzkaller #0 [ 83.533258][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.543306][ T6542] RIP: 0010:fq_codel_enqueue+0x83e/0x10c0 [ 83.549039][ T6542] Code: f8 e2 25 fa 45 39 ec 0f 83 cb 00 00 00 e8 1a dc 25 fa 48 8b 44 24 10 80 38 00 0f 85 9a 06 00 00 49 8b 07 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 6e 06 00 00 48 8b 10 48 8d 78 28 49 89 17 48 [ 83.568634][ T6542] RSP: 0018:ffffc90001187310 EFLAGS: 00010246 [ 83.574689][ T6542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 83.582644][ T6542] RDX: 0000000000000000 RSI: ffffffff87504776 RDI: 0000000000000003 [ 83.590602][ T6542] RBP: ffffc900011874e0 R08: 0000000000000400 R09: 0000000000000001 [ 83.598561][ T6542] R10: ffffffff875046d6 R11: 0000000000000000 R12: 0000000000000400 [ 83.606517][ T6542] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888071660000 [ 83.614474][ T6542] FS: 0000555556b21300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 83.623392][ T6542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.629966][ T6542] CR2: 00007f9c09885040 CR3: 0000000021c77000 CR4: 00000000003506e0 [ 83.637925][ T6542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.645883][ T6542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.653841][ T6542] Call Trace: [ 83.657104][ T6542] ? lock_release+0x720/0x720 [ 83.661775][ T6542] ? INET_ECN_set_ce+0x790/0x790 [ 83.666705][ T6542] ? do_raw_spin_lock+0x120/0x2b0 [ 83.671717][ T6542] ? rwlock_bug.part.0+0x90/0x90 [ 83.676644][ T6542] dev_qdisc_enqueue+0x40/0x300 [ 83.681484][ T6542] __dev_queue_xmit+0x1f0e/0x36e0 [ 83.686504][ T6542] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 83.691779][ T6542] ? kmem_cache_alloc_node_trace+0x42a/0x5d0 [ 83.697754][ T6542] ? skb_release_data+0x129/0x790 [ 83.702791][ T6542] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 83.709023][ T6542] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 83.715257][ T6542] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 83.721487][ T6542] ? skb_headers_offset_update+0x12e/0x260 [ 83.727286][ T6542] ? pskb_expand_head+0x5a0/0x1060 [ 83.732398][ T6542] __bpf_redirect+0x5ba/0xd20 [ 83.737067][ T6542] ? skb_ensure_writable+0xdc/0x450 [ 83.742254][ T6542] bpf_clone_redirect+0x2ae/0x420 [ 83.747273][ T6542] ? __bpf_redirect+0xd20/0xd20 [ 83.752119][ T6542] ___bpf_prog_run+0x3592/0x77d0 [ 83.757047][ T6542] __bpf_prog_run512+0x91/0xd0 [ 83.761801][ T6542] ? __bpf_prog_run_args32+0x100/0x100 [ 83.767249][ T6542] ? __lock_acquire+0x162f/0x54a0 [ 83.772265][ T6542] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 83.778237][ T6542] ? find_held_lock+0x2d/0x110 [ 83.782989][ T6542] ? bpf_test_timer_enter+0xa0/0x160 [ 83.788268][ T6542] ? lock_downgrade+0x6e0/0x6e0 [ 83.793111][ T6542] ? ktime_get+0x38a/0x470 [ 83.797518][ T6542] ? lockdep_hardirqs_on+0x79/0x100 [ 83.802708][ T6542] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 83.808432][ T6542] ? ktime_get+0x30b/0x470 [ 83.812839][ T6542] bpf_test_run+0x37c/0xa20 [ 83.817681][ T6542] ? bpf_test_timer_continue+0x420/0x420 [ 83.823304][ T6542] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 83.829544][ T6542] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 83.835774][ T6542] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 83.842007][ T6542] ? eth_type_trans+0x29e/0x640 [ 83.846852][ T6542] ? __build_skb+0x50/0x60 [ 83.851276][ T6542] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 83.857522][ T6542] bpf_prog_test_run_skb+0xa7c/0x1cb0 [ 83.862888][ T6542] ? bpf_prog_test_run_raw_tp+0x630/0x630 [ 83.868609][ T6542] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 83.874496][ T6542] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 83.880742][ T6542] ? __fget_light+0x215/0x280 [ 83.885413][ T6542] ? __sys_bpf+0x2094/0x5df0 [ 83.889996][ T6542] ? bpf_prog_test_run_raw_tp+0x630/0x630 [ 83.895707][ T6542] __sys_bpf+0x2137/0x5df0 [ 83.900126][ T6542] ? bpf_link_get_from_fd+0x110/0x110 [ 83.905493][ T6542] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 83.911948][ T6542] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 83.917920][ T6542] ? find_held_lock+0x2d/0x110 [ 83.922673][ T6542] ? trace_hardirqs_on+0x38/0x1c0 [ 83.927705][ T6542] __x64_sys_bpf+0x75/0xb0 [ 83.932128][ T6542] ? syscall_enter_from_user_mode+0x21/0x70 [ 83.938015][ T6542] do_syscall_64+0x35/0xb0 [ 83.942420][ T6542] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 83.948316][ T6542] RIP: 0033:0x7fef7c1e24d9 [ 83.952720][ T6542] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 83.972413][ T6542] RSP: 002b:00007ffc95c98158 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.980826][ T6542] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef7c1e24d9 [ 83.988796][ T6542] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 000000000000000a [ 83.996755][ T6542] RBP: 00007fef7c1a64c0 R08: 0000000000000000 R09: 0000000000000000 [ 84.004719][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fef7c1a6550 [ 84.012692][ T6542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.020927][ T6542] Modules linked in: [ 84.024881][ T6542] ---[ end trace 0597f54336b28fa4 ]--- [ 84.030331][ T6542] RIP: 0010:fq_codel_enqueue+0x83e/0x10c0 [ 84.036125][ T6542] Code: f8 e2 25 fa 45 39 ec 0f 83 cb 00 00 00 e8 1a dc 25 fa 48 8b 44 24 10 80 38 00 0f 85 9a 06 00 00 49 8b 07 48 89 c2 48 c1 ea 03 <42> 80 3c 32 00 0f 85 6e 06 00 00 48 8b 10 48 8d 78 28 49 89 17 48 [ 84.055883][ T6542] RSP: 0018:ffffc90001187310 EFLAGS: 00010246 [ 84.061987][ T6542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 84.070539][ T6542] RDX: 0000000000000000 RSI: ffffffff87504776 RDI: 0000000000000003 [ 84.078810][ T6542] RBP: ffffc900011874e0 R08: 0000000000000400 R09: 0000000000000001 [ 84.086932][ T6542] R10: ffffffff875046d6 R11: 0000000000000000 R12: 0000000000000400 [ 84.094937][ T6542] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888071660000 [ 84.102994][ T6542] FS: 0000555556b21300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 84.112688][ T6542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.119321][ T6542] CR2: 00007f9c09885040 CR3: 0000000021c77000 CR4: 00000000003506e0 [ 84.127358][ T6542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.135521][ T6542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.143514][ T6542] Kernel panic - not syncing: Fatal exception in interrupt [ 84.150963][ T6542] Kernel Offset: disabled [ 84.155287][ T6542] Rebooting in 86400 seconds..