[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 61.870855][ T7044] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 61.882575][ T7044] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 61.891079][ T7044] CPU: 1 PID: 7044 Comm: syz-executor941 Not tainted 5.7.0-rc1-syzkaller #0 [ 61.899731][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.909778][ T7044] RIP: 0010:fq_codel_enqueue+0xa75/0x11b0 [ 61.915476][ T7044] Code: 28 fb 44 3b 64 24 70 0f 83 dd 00 00 00 e8 73 4b 28 fb 48 8b 44 24 40 80 38 00 0f 85 5a 05 00 00 49 8b 06 48 89 c2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 52 05 00 00 48 8b 10 49 89 16 48 89 c2 48 c1 [ 61.935060][ T7044] RSP: 0018:ffffc900010777f0 EFLAGS: 00010246 [ 61.941103][ T7044] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900010779d0 [ 61.949065][ T7044] RDX: 0000000000000000 RSI: ffffffff864ae88d RDI: 0000000000000000 [ 61.957026][ T7044] RBP: ffffc90001077900 R08: ffff888094d3a200 R09: fffffbfff185cd54 [ 61.964977][ T7044] R10: ffffffff8c2e6a9f R11: fffffbfff185cd53 R12: 0000000000000400 [ 61.972926][ T7044] R13: dffffc0000000000 R14: ffff888089160000 R15: ffffc900010779d0 [ 61.980883][ T7044] FS: 0000000001bad880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 61.989794][ T7044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.996364][ T7044] CR2: 0000000020000080 CR3: 00000000a26e6000 CR4: 00000000001406e0 [ 62.004313][ T7044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.012260][ T7044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.020212][ T7044] Call Trace: [ 62.023497][ T7044] ? drop_func+0x60/0x60 [ 62.027737][ T7044] ? rwlock_bug.part.0+0x90/0x90 [ 62.032650][ T7044] ? rcu_read_lock_bh_held+0x5a/0xb0 [ 62.037907][ T7044] ? rcu_read_lock_sched_held+0xd0/0xd0 [ 62.043455][ T7044] __dev_queue_xmit+0x154a/0x30a0 [ 62.048499][ T7044] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 62.053781][ T7044] ? _copy_from_iter+0x2a0/0xb60 [ 62.058708][ T7044] ? __phys_addr_symbol+0x2c/0x70 [ 62.063721][ T7044] ? __check_object_size+0x171/0x437 [ 62.068994][ T7044] ? packet_parse_headers.isra.0+0x117/0x470 [ 62.074992][ T7044] ? __unregister_prot_hook+0x320/0x320 [ 62.080526][ T7044] ? packet_sendmsg+0x23cc/0x5ce0 [ 62.085552][ T7044] packet_sendmsg+0x23cc/0x5ce0 [ 62.090400][ T7044] ? mark_held_locks+0xe0/0xe0 [ 62.095150][ T7044] ? aa_label_sk_perm+0x89/0xe0 [ 62.100016][ T7044] ? aa_sk_perm+0x319/0xab0 [ 62.104499][ T7044] ? packet_notifier+0x860/0x860 [ 62.109425][ T7044] ? aa_af_perm+0x260/0x260 [ 62.113927][ T7044] ? packet_do_bind+0x452/0xc00 [ 62.118770][ T7044] ? packet_notifier+0x860/0x860 [ 62.123685][ T7044] sock_sendmsg+0xcf/0x120 [ 62.128093][ T7044] __sys_sendto+0x220/0x330 [ 62.132595][ T7044] ? __ia32_sys_getpeername+0xb0/0xb0 [ 62.137942][ T7044] ? packet_do_bind+0x452/0xc00 [ 62.142771][ T7044] ? __sys_bind+0x13e/0x250 [ 62.147252][ T7044] ? __ia32_sys_socketpair+0xf0/0xf0 [ 62.152511][ T7044] ? sock_create_kern+0x40/0x40 [ 62.157340][ T7044] ? fpregs_mark_activate+0x320/0x320 [ 62.162688][ T7044] __x64_sys_sendto+0xdd/0x1b0 [ 62.167436][ T7044] ? lockdep_hardirqs_on+0x463/0x620 [ 62.172698][ T7044] do_syscall_64+0xf6/0x7d0 [ 62.177179][ T7044] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 62.183057][ T7044] RIP: 0033:0x4404e9 [ 62.186942][ T7044] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.206547][ T7044] RSP: 002b:00007fffdb99dfc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 62.214952][ T7044] RAX: ffffffffffffffda RBX: 00000000004a167e RCX: 00000000004404e9 [ 62.222924][ T7044] RDX: 00000000000001e8 RSI: 0000000020000480 RDI: 0000000000000005 [ 62.230885][ T7044] RBP: 54c6c2ff093a6d32 R08: 0000000000000000 R09: 0000000000000000 [ 62.238929][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000010000 [ 62.246888][ T7044] R13: 0000000000401e00 R14: 0000000000000000 R15: 0000000000000000 [ 62.254844][ T7044] Modules linked in: [ 62.258808][ T7044] ---[ end trace f6a5cb32d6c06217 ]--- [ 62.264304][ T7044] RIP: 0010:fq_codel_enqueue+0xa75/0x11b0 [ 62.270048][ T7044] Code: 28 fb 44 3b 64 24 70 0f 83 dd 00 00 00 e8 73 4b 28 fb 48 8b 44 24 40 80 38 00 0f 85 5a 05 00 00 49 8b 06 48 89 c2 48 c1 ea 03 <42> 80 3c 2a 00 0f 85 52 05 00 00 48 8b 10 49 89 16 48 89 c2 48 c1 [ 62.291286][ T7044] RSP: 0018:ffffc900010777f0 EFLAGS: 00010246 [ 62.297395][ T7044] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900010779d0 [ 62.305418][ T7044] RDX: 0000000000000000 RSI: ffffffff864ae88d RDI: 0000000000000000 [ 62.313523][ T7044] RBP: ffffc90001077900 R08: ffff888094d3a200 R09: fffffbfff185cd54 [ 62.321574][ T7044] R10: ffffffff8c2e6a9f R11: fffffbfff185cd53 R12: 0000000000000400 [ 62.329583][ T7044] R13: dffffc0000000000 R14: ffff888089160000 R15: ffffc900010779d0 [ 62.337599][ T7044] FS: 0000000001bad880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 62.346585][ T7044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.353200][ T7044] CR2: 0000000020000080 CR3: 00000000a26e6000 CR4: 00000000001406e0 [ 62.361215][ T7044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.369189][ T7044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.377222][ T7044] Kernel panic - not syncing: Fatal exception in interrupt [ 62.385786][ T7044] Kernel Offset: disabled [ 62.390134][ T7044] Rebooting in 86400 seconds..