general protection fault, probably for non-canonical address 0xdffffc0000000066: 0000 [#1] PREEMPT SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000330-0x0000000000000337]
CPU: 0 PID: 4028 Comm: syz-executor.1 Not tainted 5.9.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:ax25_dev_ax25dev include/net/ax25.h:337 [inline]
RIP: 0010:ax25_send_frame+0xe4/0x640 net/ax25/ax25_out.c:56
Code: 00 48 85 c0 49 89 c4 0f 85 fb 03 00 00 e8 a4 dc 1e fa 49 8d bd 30 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 04 00 00 4d 8b ad 30 03 00 00 4d 85 ed 0f 84
RSP: 0018:ffffc90000007ac0 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: ffff88809925d008 RCX: 0000000000000002
RDX: 0000000000000066 RSI: ffffffff875787ac RDI: 0000000000000330
RBP: ffffffff8e04be20 R08: 0000000000000001 R09: ffffffff8d0fbb1f
R10: fffffbfff1a1f763 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000104 R15: 0000000000000000
FS:  00007ff23391f700(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000052cd18 CR3: 000000009e213000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 rose_send_frame+0xcc/0x2f0 net/rose/rose_link.c:106
 rose_transmit_clear_request+0x1d5/0x290 net/rose/rose_link.c:255
 rose_rx_call_request+0x4bd/0x19f6 net/rose/af_rose.c:998
 rose_loopback_timer+0x15d/0x470 net/rose/rose_loopback.c:100
 call_timer_fn+0x1ac/0x760 kernel/time/timer.c:1413
 expire_timers kernel/time/timer.c:1458 [inline]
 __run_timers.part.0+0x67c/0xaa0 kernel/time/timer.c:1755
 __run_timers kernel/time/timer.c:1736 [inline]
 run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1768
 __do_softirq+0x1f8/0xb23 kernel/softirq.c:298
 asm_call_on_stack+0xf/0x20 arch/x86/entry/entry_64.S:706
 </IRQ>
 __run_on_irqstack arch/x86/include/asm/irq_stack.h:22 [inline]
 run_on_irqstack_cond arch/x86/include/asm/irq_stack.h:48 [inline]
 do_softirq_own_stack+0x9d/0xd0 arch/x86/kernel/irq_64.c:77
 invoke_softirq kernel/softirq.c:393 [inline]
 __irq_exit_rcu kernel/softirq.c:423 [inline]
 irq_exit_rcu+0x235/0x280 kernel/softirq.c:435
 sysvec_apic_timer_interrupt+0x51/0xf0 arch/x86/kernel/apic/apic.c:1091
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:581
RIP: 0010:preempt_schedule_irq+0xb5/0x1b0 kernel/sched/core.c:4785
Code: d1 3b 49 f9 4c 89 f0 48 c1 e8 03 80 3c 18 00 0f 85 b9 00 00 00 48 83 3d e0 6e c9 01 00 0f 84 a5 00 00 00 fb 66 0f 1f 44 00 00 <bf> 01 00 00 00 e8 21 ce ff ff 4c 89 e8 48 c1 e8 03 80 3c 18 00 0f
RSP: 0018:ffffc900086c6fc8 EFLAGS: 00000286
RAX: 1ffffffff13f8d7f RBX: dffffc0000000000 RCX: 0000000000000006
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffed100ac92c00 R08: 0000000000000001 R09: ffffffff8d0fb9ff
R10: fffffbfff1a1f73f R11: 0000000000000000 R12: ffff888056496000
R13: ffffffff89fc6be0 R14: ffffffff89fc6bf8 R15: 0000000000000000
 irqentry_exit_cond_resched kernel/entry/common.c:333 [inline]
 irqentry_exit_cond_resched kernel/entry/common.c:325 [inline]
 irqentry_exit+0x65/0x90 kernel/entry/common.c:363
 asm_sysvec_reschedule_ipi+0x12/0x20 arch/x86/include/asm/idtentry.h:586
RIP: 0010:arch_local_irq_restore+0x4a/0x51 arch/x86/include/asm/paravirt.h:770
Code: 00 74 0c 48 c7 c7 e8 6b fc 89 e8 5f 14 e0 fd 48 83 3d 1f f9 24 06 00 75 07 e8 80 f1 9e fd 0f 0b e8 79 f1 9e fd 48 89 df 57 9d <0f> 1f 44 00 00 5b c3 e8 68 f1 9e fd 48 c7 c2 c0 09 f7 8d 48 89 ee
RSP: 0018:ffffc900086c70b0 EFLAGS: 00000216
RAX: 0000000000040000 RBX: 0000000000000216 RCX: ffffc900157f9000
RDX: 0000000000040000 RSI: ffffffff83d772d7 RDI: 0000000000000216
RBP: ffff8880559b4000 R08: 0000000000000001 R09: ffffffff8d0fb9ff
R10: fffffbfff1a1f73f R11: 0000000000000000 R12: ffff88821ab54040
R13: ffff8880a1ff5a00 R14: 0000000000000000 R15: ffffffff8b4045a0
 sysfs_warn_dup.cold+0x1c/0x2d fs/sysfs/dir.c:30
 sysfs_do_create_link_sd+0x11e/0x140 fs/sysfs/symlink.c:51
 sysfs_do_create_link fs/sysfs/symlink.c:80 [inline]
 sysfs_create_link+0x5f/0xc0 fs/sysfs/symlink.c:92
 device_add_class_symlinks drivers/base/core.c:2670 [inline]
 device_add+0x6ff/0x1c40 drivers/base/core.c:2878
 wiphy_register+0x1d71/0x2860 net/wireless/core.c:912
 ieee80211_register_hw+0x22ed/0x3a20 net/mac80211/main.c:1279
 mac80211_hwsim_new_radio+0x23c3/0x4650 drivers/net/wireless/mac80211_hwsim.c:3183
 hwsim_new_radio_nl+0x953/0xfb8 drivers/net/wireless/mac80211_hwsim.c:3744
 genl_family_rcv_msg_doit net/netlink/genetlink.c:669 [inline]
 genl_family_rcv_msg net/netlink/genetlink.c:714 [inline]
 genl_rcv_msg+0x61d/0x980 net/netlink/genetlink.c:731
 netlink_rcv_skb+0x15a/0x430 net/netlink/af_netlink.c:2470
 genl_rcv+0x24/0x40 net/netlink/genetlink.c:742
 netlink_unicast_kernel net/netlink/af_netlink.c:1304 [inline]
 netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1330
 netlink_sendmsg+0x856/0xd90 net/netlink/af_netlink.c:1919
 sock_sendmsg_nosec net/socket.c:651 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:671
 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2353
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2407
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2440
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45d5f9
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007ff23391ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
RAX: ffffffffffffffda RBX: 000000000002ce80 RCX: 000000000045d5f9
RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffd4935270f R14: 00007ff23391f9c0 R15: 000000000118cf4c
Modules linked in:
---[ end trace 43c0c4ea4f82bf94 ]---
RIP: 0010:ax25_dev_ax25dev include/net/ax25.h:337 [inline]
RIP: 0010:ax25_send_frame+0xe4/0x640 net/ax25/ax25_out.c:56
Code: 00 48 85 c0 49 89 c4 0f 85 fb 03 00 00 e8 a4 dc 1e fa 49 8d bd 30 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 b1 04 00 00 4d 8b ad 30 03 00 00 4d 85 ed 0f 84
RSP: 0018:ffffc90000007ac0 EFLAGS: 00010206
RAX: dffffc0000000000 RBX: ffff88809925d008 RCX: 0000000000000002
RDX: 0000000000000066 RSI: ffffffff875787ac RDI: 0000000000000330
RBP: ffffffff8e04be20 R08: 0000000000000001 R09: ffffffff8d0fbb1f
R10: fffffbfff1a1f763 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000104 R15: 0000000000000000
FS:  00007ff23391f700(0000) GS:ffff8880ae400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000052cd18 CR3: 000000009e213000 CR4: 00000000001506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400