[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.135' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 57.017796][ T7041] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 57.029781][ T7041] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 57.038233][ T7041] CPU: 1 PID: 7041 Comm: syz-executor408 Not tainted 5.7.0-rc5-syzkaller #0 [ 57.047052][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.057214][ T7041] RIP: 0010:fq_codel_enqueue+0xa75/0x11b0 [ 57.062919][ T7041] Code: 26 fb 44 3b 64 24 70 0f 83 dd 00 00 00 e8 e3 5e 26 fb 48 8b 44 24 40 80 38 00 0f 85 5a 05 00 00 49 8b 06 48 89 c2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 52 05 00 00 48 8b 10 49 89 16 48 89 c2 48 c1 [ 57.082529][ T7041] RSP: 0018:ffffc900048c76a0 EFLAGS: 00010246 [ 57.088610][ T7041] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900048c7880 [ 57.096625][ T7041] RDX: 0000000000000000 RSI: ffffffff864cd3cd RDI: 0000000000000000 [ 57.104584][ T7041] RBP: ffffc900048c77b0 R08: ffff88808fa2a340 R09: fffffbfff186074c [ 57.112640][ T7041] R10: ffffffff8c303a5f R11: fffffbfff186074b R12: 0000000000000400 [ 57.120596][ T7041] R13: dffffc0000000000 R14: ffff888089680000 R15: ffffc900048c7880 [ 57.128564][ T7041] FS: 00007fa9cf69e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 57.137493][ T7041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.144051][ T7041] CR2: 0000000020000102 CR3: 00000000a2479000 CR4: 00000000001406e0 [ 57.152018][ T7041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.160924][ T7041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.168868][ T7041] Call Trace: [ 57.172151][ T7041] ? drop_func+0x60/0x60 [ 57.176383][ T7041] ? rwlock_bug.part.0+0x90/0x90 [ 57.181294][ T7041] ? rcu_read_lock_bh_held+0x5a/0xb0 [ 57.186555][ T7041] ? rcu_read_lock_sched_held+0xd0/0xd0 [ 57.192078][ T7041] __dev_queue_xmit+0x154a/0x3090 [ 57.197096][ T7041] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 57.202356][ T7041] ? _copy_from_iter+0x307/0xb60 [ 57.207375][ T7041] ? __check_object_size+0x171/0x437 [ 57.212639][ T7041] ? packet_parse_headers.isra.0+0x11c/0x470 [ 57.218607][ T7041] ? packet_seq_start+0x150/0x150 [ 57.223621][ T7041] ? packet_sendmsg+0x24fd/0x5e90 [ 57.228621][ T7041] packet_sendmsg+0x24fd/0x5e90 [ 57.233475][ T7041] ? aa_label_sk_perm+0x89/0xe0 [ 57.238914][ T7041] ? aa_sk_perm+0x319/0xab0 [ 57.243484][ T7041] ? packet_notifier+0x860/0x860 [ 57.248482][ T7041] ? aa_af_perm+0x260/0x260 [ 57.252981][ T7041] ? lock_downgrade+0x840/0x840 [ 57.257810][ T7041] ? packet_notifier+0x860/0x860 [ 57.262725][ T7041] sock_sendmsg+0xcf/0x120 [ 57.267118][ T7041] sock_write_iter+0x288/0x3c0 [ 57.271859][ T7041] ? sock_sendmsg+0x120/0x120 [ 57.276513][ T7041] ? find_held_lock+0x2d/0x110 [ 57.281250][ T7041] ? __fget_files+0x30d/0x500 [ 57.285899][ T7041] new_sync_write+0x4a2/0x700 [ 57.290547][ T7041] ? new_sync_read+0x7a0/0x7a0 [ 57.295313][ T7041] ? rcu_read_lock_held_common+0x130/0x130 [ 57.301092][ T7041] ? apparmor_path_rmdir+0x30/0x30 [ 57.306178][ T7041] ? security_file_permission+0x8c/0x470 [ 57.312305][ T7041] __vfs_write+0xc9/0x100 [ 57.316618][ T7041] vfs_write+0x268/0x5d0 [ 57.320836][ T7041] ksys_write+0x1ee/0x250 [ 57.325199][ T7041] ? __ia32_sys_read+0xb0/0xb0 [ 57.330111][ T7041] ? trace_hardirqs_off_caller+0x55/0x230 [ 57.335855][ T7041] do_syscall_64+0xf6/0x7d0 [ 57.340335][ T7041] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 57.346208][ T7041] RIP: 0033:0x445c39 [ 57.350074][ T7041] Code: e8 bc b7 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b 12 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 57.371069][ T7041] RSP: 002b:00007fa9cf69dd98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.379455][ T7041] RAX: ffffffffffffffda RBX: 00000000006dac48 RCX: 0000000000445c39 [ 57.387400][ T7041] RDX: 000000000000006c RSI: 00000000200003c0 RDI: 0000000000000005 [ 57.395346][ T7041] RBP: 00000000006dac40 R08: 0000000000000000 R09: 0000000000000000 [ 57.403305][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dac4c [ 57.411248][ T7041] R13: 00000000004ae10e R14: 54c6c2ff093a6d32 R15: 0000000000010000 [ 57.419196][ T7041] Modules linked in: [ 57.423142][ T7041] ---[ end trace 4bf5d461e4972ca9 ]--- [ 57.428669][ T7041] RIP: 0010:fq_codel_enqueue+0xa75/0x11b0 [ 57.434463][ T7041] Code: 26 fb 44 3b 64 24 70 0f 83 dd 00 00 00 e8 e3 5e 26 fb 48 8b 44 24 40 80 38 00 0f 85 5a 05 00 00 49 8b 06 48 89 c2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 52 05 00 00 48 8b 10 49 89 16 48 89 c2 48 c1 [ 57.454137][ T7041] RSP: 0018:ffffc900048c76a0 EFLAGS: 00010246 [ 57.460276][ T7041] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900048c7880 [ 57.468293][ T7041] RDX: 0000000000000000 RSI: ffffffff864cd3cd RDI: 0000000000000000 [ 57.476750][ T7041] RBP: ffffc900048c77b0 R08: ffff88808fa2a340 R09: fffffbfff186074c [ 57.484718][ T7041] R10: ffffffff8c303a5f R11: fffffbfff186074b R12: 0000000000000400 [ 57.492796][ T7041] R13: dffffc0000000000 R14: ffff888089680000 R15: ffffc900048c7880 [ 57.500753][ T7041] FS: 00007fa9cf69e700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 57.509688][ T7041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.516258][ T7041] CR2: 0000000020000102 CR3: 00000000a2479000 CR4: 00000000001406e0 [ 57.524217][ T7041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.532175][ T7041] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.540487][ T7041] Kernel panic - not syncing: Fatal exception in interrupt [ 57.549085][ T7041] Kernel Offset: disabled [ 57.553400][ T7041] Rebooting in 86400 seconds..