syzkaller login: [ 182.416861][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 182.476846][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 182.501858][ T2894] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:60553' (ECDSA) to the list of known hosts. 1970/01/01 00:03:33 fuzzer started 1970/01/01 00:03:41 dialing manager at localhost:33369 1970/01/01 00:03:44 syscalls: 2779 1970/01/01 00:03:44 code coverage: enabled 1970/01/01 00:03:44 comparison tracing: enabled 1970/01/01 00:03:44 extra coverage: enabled 1970/01/01 00:03:44 setuid sandbox: enabled 1970/01/01 00:03:44 namespace sandbox: enabled 1970/01/01 00:03:44 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:03:44 fault injection: enabled 1970/01/01 00:03:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:03:44 net packet injection: enabled 1970/01/01 00:03:44 net device setup: enabled 1970/01/01 00:03:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:03:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:03:44 USB emulation: enabled 1970/01/01 00:03:44 hci packet injection: /dev/vhci does not exist 1970/01/01 00:03:44 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:03:44 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x8 pc=0x2e0564] goroutine 1 [running]: github.com/google/syzkaller/prog.(*ChoiceTable).Enabled(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prio.go:239 main.(*Fuzzer).checkDisabledCalls(0x3fa42ae4e0, 0x3fa455ea80) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:469 +0x54 main.(*Fuzzer).deserializeInput(0x3fa42ae4e0, 0x3fa405a1e0, 0x5d, 0x5d, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:460 +0x118 main.(*Fuzzer).addCandidateInput(0x3fa42ae4e0, 0x3fa405a1e0, 0x5d, 0x5d, 0x101) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:438 +0x44 main.(*Fuzzer).poll(0x3fa42ae4e0, 0x3fa455e101, 0x0, 0x3fa428c3f8) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:409 +0x414 main.main() /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:273 +0x1008 VM DIAGNOSIS: 12:18:22 Registers: info registers vcpu 0 pc ffffffe0000cff50 mhartid 0000000000000000 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc 0000003fdc88d848 mcause 0000000000000009 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe0027db208 x2/sp ffffffe00b5938b0 x3/gp ffffffe004588c00 x4/tp ffffffe00ddaaf80 x5/t0 ffffffe00dcd12e0 x6/t1 0000000000000806 x7/t2 ffffffffffffffff x8/s0 ffffffe00b593a60 x9/s1 ffffffe00e1eb280 x10/a0 0000000000000001 x11/a1 00000000000f0000 x12/a2 0000000000000100 x13/a3 ffffffe00099be94 x14/a4 0000000000000003 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffffe00dcd104f x18/s2 ffffffe00449c000 x19/s3 ffffffe00b5939d8 x20/s4 ffffffe00d7f7110 x21/s5 ffffffe00d7f7110 x22/s6 ffffffe006586000 x23/s7 ffffffe00449c000 x24/s8 ffffffe006586000 x25/s9 ffffffe00458c0d0 x26/s10 ffffffe00447c980 x27/s11 0000000000000000 x28/t3 f99ec574eafb0b00 x29/t4 ffffffc401b9a209 x30/t5 ffffffc401b9a20a x31/t6 ffffffe00dcd1078 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe0001a262c mhartid 0000000000000001 mstatus 00000000000000a0 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc 0000000000081ac8 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe002a96d3e x2/sp ffffffe00a8cfd60 x3/gp ffffffe004588c00 x4/tp ffffffe00a360000 x5/t0 0000000000000200 x6/t1 0000000000000001 x7/t2 0000000000000000 x8/s0 ffffffe00a8cfd00 x9/s1 0000000000000001 x10/a0 ffffffe00876fc58 x11/a1 ffffffe00a361000 x12/a2 0000000000000002 x13/a3 ffffffe00043d74c x14/a4 0000000000000003 x15/a5 ffffffe00a361000 x16/a6 0000000000f00000 x17/a7 ffffffe00043d63e x18/s2 0000000000000001 x19/s3 ffffffe0044c0453 x20/s4 0000000000000002 x21/s5 ffffffe00876fc00 x22/s6 0000000000000001 x23/s7 ffffffe00876fc58 x24/s8 ffffffe0044c0453 x25/s9 0000000000000000 x26/s10 ffffffe003637620 x27/s11 0000000000000001 x28/t3 f99ec574eafb0b00 x29/t4 0000003fa43ae910 x30/t5 0000003fa43ae909 x31/t6 0000000000081740 f0/ft0 0000000000000000 f1/ft1 408289f2defe24cc f2/ft2 411f802000000000 f3/ft3 4134118000000000 f4/ft4 412a752000000000 f5/ft5 4038d53847ac00a7 f6/ft6 3feca4bda4ab9482 f7/ft7 3fdae314e2f0c29e f8/fs0 3fed2d4196c96f5b f9/fs1 3fca84c067bcacec f10/fa0 3fcd985a5eb0a075 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000