[ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.43' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 71.787710][ T8444] general protection fault, probably for non-canonical address 0xdffffc00000000b3: 0000 [#1] PREEMPT SMP KASAN [ 71.799429][ T8444] KASAN: null-ptr-deref in range [0x0000000000000598-0x000000000000059f] [ 71.807853][ T8444] CPU: 1 PID: 8444 Comm: syz-executor328 Not tainted 5.14.0-rc2-syzkaller #0 [ 71.816590][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.826626][ T8444] RIP: 0010:add_del_if+0x57/0x140 [ 71.831780][ T8444] Code: 03 80 3c 02 00 0f 85 fd 00 00 00 48 8b 9d 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 98 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 00 00 00 4c 8b ab 98 05 00 00 48 b8 00 00 00 [ 71.851807][ T8444] RSP: 0018:ffffc9000194fa80 EFLAGS: 00010202 [ 71.857851][ T8444] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 71.865804][ T8444] RDX: 00000000000000b3 RSI: ffffffff87f667b6 RDI: 0000000000000598 [ 71.873857][ T8444] RBP: ffff888027c32c00 R08: 00000000000089a2 R09: ffffffff87f67f36 [ 71.881823][ T8444] R10: ffffffff87f68031 R11: 00000000000089a2 R12: 0000000000000001 [ 71.889788][ T8444] R13: ffffc9000194fd60 R14: 0000000000000000 R15: dffffc0000000000 [ 71.897755][ T8444] FS: 0000000000cd9300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 71.906679][ T8444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.913272][ T8444] CR2: 00000000200050c0 CR3: 0000000016297000 CR4: 00000000001506e0 [ 71.921241][ T8444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.929204][ T8444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.937168][ T8444] Call Trace: [ 71.940438][ T8444] br_ioctl_stub+0x1c6/0x7f0 [ 71.945036][ T8444] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 71.950672][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.956912][ T8444] ? full_name_hash+0xb5/0xf0 [ 71.961602][ T8444] ? br_dev_siocdevprivate+0x15c0/0x15c0 [ 71.967236][ T8444] br_ioctl_call+0x5e/0xa0 [ 71.971642][ T8444] dev_ifsioc+0xc1f/0xf60 [ 71.975967][ T8444] ? dev_load+0x79/0x200 [ 71.980199][ T8444] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 71.986171][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.992937][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 71.999169][ T8444] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 72.005160][ T8444] dev_ioctl+0x1b9/0xee0 [ 72.009396][ T8444] sock_do_ioctl+0x18b/0x210 [ 72.013991][ T8444] ? put_user_ifreq+0x140/0x140 [ 72.018836][ T8444] sock_ioctl+0x2f1/0x640 [ 72.023156][ T8444] ? br_ioctl_call+0xa0/0xa0 [ 72.027738][ T8444] ? lock_downgrade+0x6e0/0x6e0 [ 72.032590][ T8444] ? lock_downgrade+0x6e0/0x6e0 [ 72.037441][ T8444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.043672][ T8444] ? br_ioctl_call+0xa0/0xa0 [ 72.048253][ T8444] __x64_sys_ioctl+0x193/0x200 [ 72.053013][ T8444] do_syscall_64+0x35/0xb0 [ 72.057429][ T8444] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.063329][ T8444] RIP: 0033:0x43ee49 [ 72.067213][ T8444] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 72.086913][ T8444] RSP: 002b:00007ffe73c99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.095316][ T8444] RAX: ffffffffffffffda RBX: 0000000000400488 RCX: 000000000043ee49 [ 72.103276][ T8444] RDX: 00000000200050c0 RSI: 00000000000089a2 RDI: 0000000000000003 [ 72.111234][ T8444] RBP: 0000000000402e30 R08: 0000000000000000 R09: 0000000000400488 [ 72.119189][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402ec0 [ 72.127146][ T8444] R13: 0000000000000000 R14: 00000000004ac018 R15: 0000000000400488 [ 72.135110][ T8444] Modules linked in: [ 72.139456][ T8444] ---[ end trace 09ea9c7a46fcda85 ]--- [ 72.144909][ T8444] RIP: 0010:add_del_if+0x57/0x140 [ 72.150033][ T8444] Code: 03 80 3c 02 00 0f 85 fd 00 00 00 48 8b 9d 88 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d bb 98 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 ca 00 00 00 4c 8b ab 98 05 00 00 48 b8 00 00 00 [ 72.169756][ T8444] RSP: 0018:ffffc9000194fa80 EFLAGS: 00010202 [ 72.175828][ T8444] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 72.183828][ T8444] RDX: 00000000000000b3 RSI: ffffffff87f667b6 RDI: 0000000000000598 [ 72.191846][ T8444] RBP: ffff888027c32c00 R08: 00000000000089a2 R09: ffffffff87f67f36 [ 72.199854][ T8444] R10: ffffffff87f68031 R11: 00000000000089a2 R12: 0000000000000001 [ 72.207837][ T8444] R13: ffffc9000194fd60 R14: 0000000000000000 R15: dffffc0000000000 [ 72.215840][ T8444] FS: 0000000000cd9300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 72.225059][ T8444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.231761][ T8444] CR2: 00007fc3912ca6c0 CR3: 0000000016297000 CR4: 00000000001506f0 [ 72.239760][ T8444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.247722][ T8444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.255712][ T8444] Kernel panic - not syncing: Fatal exception [ 72.263014][ T8444] Kernel Offset: disabled [ 72.267323][ T8444] Rebooting in 86400 seconds..