[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.50' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 89.098957][ T7169] general protection fault, probably for non-canonical address 0xdffffc001fffffe9: 0000 [#1] PREEMPT SMP KASAN [ 89.098964][ T7169] KASAN: probably user-memory-access in range [0x00000000ffffff48-0x00000000ffffff4f] [ 89.098974][ T7169] CPU: 1 PID: 7169 Comm: syz-executor973 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 89.098979][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.098993][ T7169] RIP: 0010:do_con_write.part.0+0x9a3/0x1dc0 [ 89.099003][ T7169] Code: 24 ae 00 00 00 45 01 ef e8 2a 2c 88 fd 48 8b 44 24 60 80 38 00 0f 85 af 11 00 00 49 8b 9c 24 f0 03 00 00 48 89 d8 48 c1 e8 03 <0f> b6 14 28 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e6 [ 89.099009][ T7169] RSP: 0018:ffffc90001727a58 EFLAGS: 00010202 [ 89.099020][ T7169] RAX: 000000001fffffe9 RBX: 00000000ffffff48 RCX: ffffffff83eb0816 [ 89.099028][ T7169] RDX: 0000000000000000 RSI: ffffffff83eb0866 RDI: 0000000000000003 [ 89.099036][ T7169] RBP: dffffc0000000000 R08: ffff888090be8080 R09: fffffbfff15169c1 [ 89.099044][ T7169] R10: ffffffff8a8b4e07 R11: fffffbfff15169c0 R12: ffff8880a8672000 [ 89.099052][ T7169] R13: 0000000000000000 R14: ffff8880a86723dc R15: 0000000000000778 [ 89.099062][ T7169] FS: 0000000000801880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 89.099071][ T7169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.099079][ T7169] CR2: 000055ef16025180 CR3: 000000009ecd0000 CR4: 00000000001406e0 [ 89.099091][ T7169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.099098][ T7169] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.099102][ T7169] Call Trace: [ 89.099128][ T7169] ? do_con_trol+0x5d10/0x5d10 [ 89.099141][ T7169] ? rwlock_bug.part.0+0x90/0x90 [ 89.099155][ T7169] ? mark_held_locks+0x9f/0xe0 [ 89.099164][ T7169] con_write+0x41/0xe0 [ 89.099174][ T7169] n_tty_write+0x3f0/0xf90 [ 89.099186][ T7169] ? n_tty_read+0x1b30/0x1b30 [ 89.099195][ T7169] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 89.099204][ T7169] ? __might_fault+0x190/0x1d0 [ 89.099213][ T7169] tty_write+0x495/0x800 [ 89.099221][ T7169] ? n_tty_read+0x1b30/0x1b30 [ 89.099230][ T7169] ? hung_up_tty_compat_ioctl+0x40/0x40 [ 89.099239][ T7169] __vfs_write+0x76/0x100 [ 89.099248][ T7169] vfs_write+0x268/0x5d0 [ 89.099257][ T7169] ksys_write+0x12d/0x250 [ 89.099266][ T7169] ? __ia32_sys_read+0xb0/0xb0 [ 89.099275][ T7169] ? trace_hardirqs_off_caller+0x55/0x230 [ 89.099286][ T7169] do_syscall_64+0xf6/0x7d0 [ 89.099297][ T7169] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 89.099303][ T7169] RIP: 0033:0x441699 [ 89.099311][ T7169] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 89.099315][ T7169] RSP: 002b:00007ffd3528d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.099322][ T7169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441699 [ 89.099326][ T7169] RDX: 0000000000000320 RSI: 00000000200001c0 RDI: 0000000000000003 [ 89.099330][ T7169] RBP: 00000000006cc018 R08: 000000000000000e R09: 00000000004002c8 [ 89.099335][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402410 [ 89.099339][ T7169] R13: 00000000004024a0 R14: 0000000000000000 R15: 0000000000000000 [ 89.099345][ T7169] Modules linked in: [ 89.099356][ T7169] ---[ end trace 93389c7790f1c7d4 ]--- [ 89.099365][ T7169] RIP: 0010:do_con_write.part.0+0x9a3/0x1dc0 [ 89.099372][ T7169] Code: 24 ae 00 00 00 45 01 ef e8 2a 2c 88 fd 48 8b 44 24 60 80 38 00 0f 85 af 11 00 00 49 8b 9c 24 f0 03 00 00 48 89 d8 48 c1 e8 03 <0f> b6 14 28 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 e6 [ 89.099376][ T7169] RSP: 0018:ffffc90001727a58 EFLAGS: 00010202 [ 89.099382][ T7169] RAX: 000000001fffffe9 RBX: 00000000ffffff48 RCX: ffffffff83eb0816 [ 89.099386][ T7169] RDX: 0000000000000000 RSI: ffffffff83eb0866 RDI: 0000000000000003 [ 89.099391][ T7169] RBP: dffffc0000000000 R08: ffff888090be8080 R09: fffffbfff15169c1 [ 89.099396][ T7169] R10: ffffffff8a8b4e07 R11: fffffbfff15169c0 R12: ffff8880a8672000 [ 89.099400][ T7169] R13: 0000000000000000 R14: ffff8880a86723dc R15: 0000000000000778 [ 89.099406][ T7169] FS: 0000000000801880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 89.099411][ T7169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.099416][ T7169] CR2: 000055ef16025180 CR3: 000000009ecd0000 CR4: 00000000001406e0 [ 89.099420][ T7169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 89.099424][ T7169] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 89.099428][ T7169] Kernel panic - not syncing: Fatal exception [ 89.100532][ T7169] Kernel Offset: disabled