general protection fault, probably for non-canonical address 0xdffffc0020000001: 0000 [#1] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x0000000100000008-0x000000010000000f] CPU: 1 PID: 81 Comm: kworker/u4:2 Not tainted 5.6.0-rc1-next-20200213-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events_unbound flush_to_ldisc RIP: 0010:do_con_write.part.0+0xa01/0x1ef0 drivers/tty/vt/vt.c:2771 Code: 7e fe ff ff 45 01 ef e8 3d 67 80 fd 48 8b 85 c8 fe ff ff 80 38 00 0f 85 71 12 00 00 49 8b 9e a0 03 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 RSP: 0018:ffffc900010d77b8 EFLAGS: 00010203 RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83f58e10 RDX: 0000000000000000 RSI: ffffffff83f58e63 RDI: 0000000000000003 RBP: ffffc900010d7948 R08: ffff8880a9720100 R09: ffff8880a9720998 R10: fffffbfff154be58 R11: ffffffff8aa5f2c7 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff8880953c3000 R15: 000000000000075e FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000180 CR3: 00000000a0249000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_con_write drivers/tty/vt/vt.c:3157 [inline] con_put_char+0xfa/0x110 drivers/tty/vt/vt.c:3156 tty_put_char+0xc5/0x160 drivers/tty/tty_io.c:3033 __process_echoes+0x5c8/0xa40 drivers/tty/n_tty.c:728 flush_echoes drivers/tty/n_tty.c:829 [inline] __receive_buf drivers/tty/n_tty.c:1648 [inline] n_tty_receive_buf_common+0xc77/0x2b70 drivers/tty/n_tty.c:1742 n_tty_receive_buf2+0x34/0x40 drivers/tty/n_tty.c:1777 tty_ldisc_receive_buf+0xad/0x1c0 drivers/tty/tty_buffer.c:461 tty_port_default_receive_buf+0x7d/0xb0 drivers/tty/tty_port.c:38 receive_buf drivers/tty/tty_buffer.c:481 [inline] flush_to_ldisc+0x222/0x390 drivers/tty/tty_buffer.c:533 process_one_work+0xa05/0x17a0 kernel/workqueue.c:2266 worker_thread+0x98/0xe40 kernel/workqueue.c:2412 kthread+0x361/0x430 kernel/kthread.c:255 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace f9775c64c0622a4b ]--- RIP: 0010:do_con_write.part.0+0xa01/0x1ef0 drivers/tty/vt/vt.c:2771 Code: 7e fe ff ff 45 01 ef e8 3d 67 80 fd 48 8b 85 c8 fe ff ff 80 38 00 0f 85 71 12 00 00 49 8b 9e a0 03 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 14 20 48 89 d8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 RSP: 0018:ffffc900010d77b8 EFLAGS: 00010203 RAX: 0000000020000001 RBX: 000000010000000e RCX: ffffffff83f58e10 RDX: 0000000000000000 RSI: ffffffff83f58e63 RDI: 0000000000000003 RBP: ffffc900010d7948 R08: ffff8880a9720100 R09: ffff8880a9720998 R10: fffffbfff154be58 R11: ffffffff8aa5f2c7 R12: dffffc0000000000 R13: 0000000000000000 R14: ffff8880953c3000 R15: 000000000000075e FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000180 CR3: 00000000a0249000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400