[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 60.517736][ T6779] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 60.529666][ T6779] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 60.538056][ T6779] CPU: 1 PID: 6779 Comm: syz-executor668 Not tainted 5.8.0-rc2-syzkaller #0 [ 60.546898][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.556939][ T6779] RIP: 0010:qrtr_endpoint_post+0x92/0x1010 [ 60.562754][ T6779] Code: 44 89 e6 e8 80 51 50 fe 48 85 c0 48 89 c5 0f 84 c4 0e 00 00 e8 ef 6b 96 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 4a 0d 00 00 [ 60.582420][ T6779] RSP: 0018:ffffc90001657c48 EFLAGS: 00010202 [ 60.588491][ T6779] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: ffffffff862d38d2 [ 60.596468][ T6779] RDX: 0000000000000002 RSI: ffffffff87dce501 RDI: ffff88809f2887d0 [ 60.604590][ T6779] RBP: ffff88809f2887c0 R08: 0000000000000001 R09: ffff888087c978e3 [ 60.612600][ T6779] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 60.620613][ T6779] R13: ffff8880a762eb00 R14: ffffc90001657eb0 R15: 0000000000000000 [ 60.628580][ T6779] FS: 0000000000000000(0000) GS:ffff8880ae700000(0063) knlGS:0000000009fbf840 [ 60.637486][ T6779] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 60.644073][ T6779] CR2: 0000000020000000 CR3: 0000000094f94000 CR4: 00000000001406e0 [ 60.653438][ T6779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.661398][ T6779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.669434][ T6779] Call Trace: [ 60.672708][ T6779] ? __check_object_size+0x30/0x3e4 [ 60.677885][ T6779] qrtr_tun_write_iter+0xf5/0x180 [ 60.682920][ T6779] new_sync_write+0x422/0x650 [ 60.687582][ T6779] ? new_sync_read+0x6e0/0x6e0 [ 60.692348][ T6779] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 60.697982][ T6779] ? security_file_permission+0x239/0x470 [ 60.703683][ T6779] __vfs_write+0xc9/0x100 [ 60.708193][ T6779] vfs_write+0x268/0x5d0 [ 60.712437][ T6779] ksys_write+0x12d/0x250 [ 60.717020][ T6779] ? __ia32_sys_read+0xb0/0xb0 [ 60.721767][ T6779] ? do_fast_syscall_32+0x40/0x120 [ 60.726861][ T6779] do_syscall_32_irqs_on+0x3f/0x60 [ 60.731962][ T6779] do_fast_syscall_32+0x7f/0x120 [ 60.736877][ T6779] entry_SYSENTER_compat+0x6d/0x7c [ 60.741964][ T6779] RIP: 0023:0xf7fc7569 [ 60.746000][ T6779] Code: Bad RIP value. [ 60.750048][ T6779] RSP: 002b:00000000ffc683cc EFLAGS: 00000217 ORIG_RAX: 0000000000000004 [ 60.758510][ T6779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 60.767015][ T6779] RDX: 0000000000000000 RSI: 00000000000000a0 RDI: 0000000000000000 [ 60.775014][ T6779] RBP: 0000000000c10000 R08: 0000000000000000 R09: 0000000000000000 [ 60.782985][ T6779] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 60.790950][ T6779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.798917][ T6779] Modules linked in: [ 60.803347][ T6779] ---[ end trace 9bcb6cee7b01ad92 ]--- [ 60.808828][ T6779] RIP: 0010:qrtr_endpoint_post+0x92/0x1010 [ 60.814828][ T6779] Code: 44 89 e6 e8 80 51 50 fe 48 85 c0 48 89 c5 0f 84 c4 0e 00 00 e8 ef 6b 96 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 4a 0d 00 00 [ 60.834681][ T6779] RSP: 0018:ffffc90001657c48 EFLAGS: 00010202 [ 60.840851][ T6779] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: ffffffff862d38d2 [ 60.849008][ T6779] RDX: 0000000000000002 RSI: ffffffff87dce501 RDI: ffff88809f2887d0 [ 60.857057][ T6779] RBP: ffff88809f2887c0 R08: 0000000000000001 R09: ffff888087c978e3 [ 60.865098][ T6779] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 60.874101][ T6779] R13: ffff8880a762eb00 R14: ffffc90001657eb0 R15: 0000000000000000 [ 60.882102][ T6779] FS: 0000000000000000(0000) GS:ffff8880ae600000(0063) knlGS:0000000009fbf840 [ 60.891039][ T6779] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 60.897758][ T6779] CR2: 00007f405623c6c0 CR3: 0000000094f94000 CR4: 00000000001406f0 [ 60.906011][ T6779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 60.914024][ T6779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.922039][ T6779] Kernel panic - not syncing: Fatal exception [ 60.930721][ T6779] Kernel Offset: disabled [ 60.935180][ T6779] Rebooting in 86400 seconds..