[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.63' (ECDSA) to the list of known hosts. 2021/04/23 20:58:18 fuzzer started 2021/04/23 20:58:18 dialing manager at 10.128.0.169:34587 2021/04/23 20:58:19 syscalls: 1690 2021/04/23 20:58:19 code coverage: enabled 2021/04/23 20:58:19 comparison tracing: enabled 2021/04/23 20:58:19 extra coverage: enabled 2021/04/23 20:58:19 setuid sandbox: enabled 2021/04/23 20:58:19 namespace sandbox: enabled 2021/04/23 20:58:19 Android sandbox: /sys/fs/selinux/policy does not exist 2021/04/23 20:58:19 fault injection: enabled 2021/04/23 20:58:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/04/23 20:58:19 net packet injection: enabled 2021/04/23 20:58:19 net device setup: enabled 2021/04/23 20:58:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/04/23 20:58:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/04/23 20:58:19 USB emulation: enabled 2021/04/23 20:58:19 hci packet injection: enabled 2021/04/23 20:58:19 wifi device emulation: enabled 2021/04/23 20:58:19 802.15.4 emulation: enabled 2021/04/23 20:58:19 fetching corpus: 0, signal 0/2000 (executing program) 2021/04/23 20:58:19 fetching corpus: 50, signal 37540/40977 (executing program) syzkaller login: [ 71.844664][ T8393] general protection fault, probably for non-canonical address 0xdffffc000000040e: 0000 [#1] PREEMPT SMP KASAN [ 71.856523][ T8393] KASAN: probably user-memory-access in range [0x0000000000002070-0x0000000000002077] [ 71.866050][ T8393] CPU: 0 PID: 8393 Comm: syz-fuzzer Not tainted 5.12.0-rc7-syzkaller #0 [ 71.874386][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.884447][ T8393] RIP: 0010:pfifo_fast_dequeue+0x355/0xb30 [ 71.890270][ T8393] Code: df 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 10 07 00 00 4d 8d 6c 24 28 8b 6b 10 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 e5 20 83 c0 03 38 d0 7c 08 84 d2 [ 71.910054][ T8393] RSP: 0018:ffffc900010ff1e0 EFLAGS: 00010203 [ 71.916110][ T8393] RAX: dffffc0000000000 RBX: ffff888015173000 RCX: 0000000000000002 [ 71.924263][ T8393] RDX: 000000000000040e RSI: ffffffff871bc1f4 RDI: ffff888015173010 [ 71.932218][ T8393] RBP: 0000000000000174 R08: 0000000000000002 R09: 0000000000000000 [ 71.940172][ T8393] R10: ffffffff871bc1e6 R11: 0000000000000000 R12: 000000000000204e [ 71.948138][ T8393] R13: 0000000000002076 R14: 0000000000000002 R15: 00000000000003e8 [ 71.956104][ T8393] FS: 000000c00027a490(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 71.965293][ T8393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.971864][ T8393] CR2: 00007f9e2862d798 CR3: 0000000018dfa000 CR4: 00000000001506f0 [ 71.979819][ T8393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.987783][ T8393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.995756][ T8393] Call Trace: [ 71.999039][ T8393] __qdisc_run+0x1ae/0x15f0 [ 72.003558][ T8393] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.009831][ T8393] __dev_queue_xmit+0x142e/0x2e30 [ 72.014948][ T8393] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 72.020242][ T8393] ? __ip_finish_output+0x396/0x640 [ 72.025443][ T8393] ? mark_held_locks+0x9f/0xe0 [ 72.030211][ T8393] ? ip_finish_output2+0x15e9/0x21f0 [ 72.035491][ T8393] ip_finish_output2+0xeec/0x21f0 [ 72.040505][ T8393] ? ip_fragment.constprop.0+0x240/0x240 [ 72.046136][ T8393] ? __ip_finish_output+0x640/0x640 [ 72.051341][ T8393] __ip_finish_output+0x396/0x640 [ 72.056700][ T8393] ip_finish_output+0x35/0x200 [ 72.061455][ T8393] ip_output+0x196/0x310 [ 72.065687][ T8393] __ip_queue_xmit+0x905/0x1a20 [ 72.070599][ T8393] __tcp_transmit_skb+0x1889/0x38f0 [ 72.075794][ T8393] ? __tcp_select_window+0xad0/0xad0 [ 72.081160][ T8393] ? find_held_lock+0x2d/0x110 [ 72.085923][ T8393] ? __build_skb_around+0x23e/0x2f0 [ 72.091108][ T8393] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.097397][ T8393] ? __alloc_skb+0x17c/0x340 [ 72.102038][ T8393] __tcp_send_ack.part.0+0x3d6/0x7a0 [ 72.107417][ T8393] tcp_send_ack+0x7d/0xa0 [ 72.111771][ T8393] tcp_cleanup_rbuf+0x46c/0x5b0 [ 72.116648][ T8393] tcp_recvmsg_locked+0x7aa/0x22f0 [ 72.122892][ T8393] ? tcp_splice_read+0x8b0/0x8b0 [ 72.128258][ T8393] ? mark_held_locks+0x9f/0xe0 [ 72.133011][ T8393] ? __local_bh_enable_ip+0xa0/0x120 [ 72.138282][ T8393] tcp_recvmsg+0x134/0x550 [ 72.142710][ T8393] ? tcp_recvmsg_locked+0x22f0/0x22f0 [ 72.148251][ T8393] ? aa_sk_perm+0x31b/0xab0 [ 72.153330][ T8393] inet_recvmsg+0x11b/0x5d0 [ 72.157829][ T8393] ? inet_sendpage+0x140/0x140 [ 72.162593][ T8393] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.169027][ T8393] ? security_socket_recvmsg+0x8f/0xc0 [ 72.175531][ T8393] sock_read_iter+0x33c/0x470 [ 72.180245][ T8393] ? ____sys_recvmsg+0x600/0x600 [ 72.185302][ T8393] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.192178][ T8393] ? fsnotify+0xa16/0x1070 [ 72.196590][ T8393] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.203964][ T8393] new_sync_read+0x5b7/0x6e0 [ 72.208559][ T8393] ? ksys_lseek+0x1b0/0x1b0 [ 72.213055][ T8393] vfs_read+0x35c/0x570 [ 72.217204][ T8393] ksys_read+0x1ee/0x250 [ 72.221433][ T8393] ? vfs_write+0xa30/0xa30 [ 72.225840][ T8393] ? syscall_enter_from_user_mode+0x27/0x70 [ 72.231739][ T8393] do_syscall_64+0x2d/0x70 [ 72.236142][ T8393] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.242033][ T8393] RIP: 0033:0x4af19b [ 72.245935][ T8393] Code: fb ff eb bd e8 a6 b6 fb ff e9 61 ff ff ff cc e8 9b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 72.265854][ T8393] RSP: 002b:000000c0003e3828 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 72.274258][ T8393] RAX: ffffffffffffffda RBX: 000000c00001e800 RCX: 00000000004af19b [ 72.282227][ T8393] RDX: 0000000000001000 RSI: 000000c0001c4000 RDI: 0000000000000006 [ 72.290376][ T8393] RBP: 000000c0003e3878 R08: 0000000000000001 R09: 0000000000000002 [ 72.298347][ T8393] R10: 0000000000006124 R11: 0000000000000212 R12: 000000000000611e [ 72.306304][ T8393] R13: 0000000000001000 R14: 0000000000000002 R15: 0000000000000002 [ 72.314299][ T8393] Modules linked in: [ 72.318273][ T8393] ---[ end trace ff9609b5f766c49c ]--- [ 72.325336][ T8393] RIP: 0010:pfifo_fast_dequeue+0x355/0xb30 [ 72.331240][ T8393] Code: df 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 10 07 00 00 4d 8d 6c 24 28 8b 6b 10 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <0f> b6 14 02 4c 89 e8 83 e0 07 83 e5 20 83 c0 03 38 d0 7c 08 84 d2 [ 72.351258][ T8393] RSP: 0018:ffffc900010ff1e0 EFLAGS: 00010203 [ 72.357616][ T8393] RAX: dffffc0000000000 RBX: ffff888015173000 RCX: 0000000000000002 [ 72.365754][ T8393] RDX: 000000000000040e RSI: ffffffff871bc1f4 RDI: ffff888015173010 [ 72.373813][ T8393] RBP: 0000000000000174 R08: 0000000000000002 R09: 0000000000000000 [ 72.381882][ T8393] R10: ffffffff871bc1e6 R11: 0000000000000000 R12: 000000000000204e [ 72.390240][ T8393] R13: 0000000000002076 R14: 0000000000000002 R15: 00000000000003e8 [ 72.398298][ T8393] FS: 000000c00027a490(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 72.407571][ T8393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.414320][ T8393] CR2: 00007f9e2862d798 CR3: 0000000018dfa000 CR4: 00000000001506f0 [ 72.423201][ T8393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.431245][ T8393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.439237][ T8393] Kernel panic - not syncing: Fatal exception in interrupt [ 72.446909][ T8393] Kernel Offset: disabled [ 72.451473][ T8393] Rebooting in 86400 seconds..