Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2021/05/01 08:09:21 fuzzer started 2021/05/01 08:09:22 dialing manager at 10.128.0.169:44661 2021/05/01 08:09:22 syscalls: 3571 2021/05/01 08:09:22 code coverage: enabled 2021/05/01 08:09:22 comparison tracing: enabled 2021/05/01 08:09:22 extra coverage: enabled 2021/05/01 08:09:22 setuid sandbox: enabled 2021/05/01 08:09:22 namespace sandbox: enabled 2021/05/01 08:09:22 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/01 08:09:22 fault injection: enabled 2021/05/01 08:09:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/01 08:09:22 net packet injection: enabled 2021/05/01 08:09:22 net device setup: enabled 2021/05/01 08:09:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/01 08:09:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/01 08:09:22 USB emulation: enabled 2021/05/01 08:09:22 hci packet injection: enabled 2021/05/01 08:09:22 wifi device emulation: enabled 2021/05/01 08:09:22 802.15.4 emulation: enabled 2021/05/01 08:09:22 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/01 08:09:22 Manager.Poll call failed: reading body read tcp 10.128.0.63:36046->10.128.0.169:44661: read: bad address syzkaller login: [ 71.866857][ T8471] general protection fault, probably for non-canonical address 0xdffffc000014fac1: 0000 [#1] PREEMPT SMP KASAN [ 71.878638][ T8471] KASAN: probably user-memory-access in range [0x0000000000a7d608-0x0000000000a7d60f] [ 71.888202][ T8471] CPU: 0 PID: 8471 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 71.897786][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.907873][ T8471] RIP: 0010:skb_release_data+0x3a0/0x750 [ 71.913568][ T8471] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 71.933213][ T8471] RSP: 0018:ffffc9000168fbb0 EFLAGS: 00010202 [ 71.939311][ T8471] RAX: 000000000014fac1 RBX: 0000000000000011 RCX: 0000000000000000 [ 71.947305][ T8471] RDX: ffff88802413b900 RSI: ffffffff8703c746 RDI: 0000000000a7d608 [ 71.955299][ T8471] RBP: 0000000000a7d600 R08: 0000000000000011 R09: 0000000000a7d600 [ 71.966650][ T8471] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 71.974683][ T8471] R13: ffff88803304fecc R14: dffffc0000000000 R15: ffff88801dededc0 [ 71.982683][ T8471] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 71.991628][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.998245][ T8471] CR2: 00007ffd9a4ca270 CR3: 0000000029582000 CR4: 00000000001506f0 [ 72.006241][ T8471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.014239][ T8471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.022247][ T8471] Call Trace: [ 72.025556][ T8471] __kfree_skb+0x46/0x60 [ 72.029822][ T8471] __tcp_close+0x230/0x1170 [ 72.034395][ T8471] tcp_close+0x29/0xc0 [ 72.038486][ T8471] inet_release+0x12e/0x280 [ 72.043020][ T8471] __sock_release+0xcd/0x280 [ 72.047653][ T8471] sock_close+0x18/0x20 [ 72.051837][ T8471] __fput+0x288/0x920 [ 72.055865][ T8471] ? __sock_release+0x280/0x280 [ 72.060761][ T8471] task_work_run+0xdd/0x1a0 [ 72.065293][ T8471] do_exit+0xbfc/0x2a70 [ 72.069491][ T8471] ? io_schedule_timeout+0x140/0x140 [ 72.074797][ T8471] ? lockdep_hardirqs_on+0x79/0x100 [ 72.080012][ T8471] ? mm_update_next_owner+0x7a0/0x7a0 [ 72.085420][ T8471] ? preempt_schedule_thunk+0x16/0x18 [ 72.090840][ T8471] ? preempt_schedule_common+0x59/0xc0 [ 72.096341][ T8471] ? preempt_schedule_thunk+0x16/0x18 [ 72.101748][ T8471] ? trace_hardirqs_on+0x38/0x1c0 [ 72.106799][ T8471] do_group_exit+0x125/0x310 [ 72.111429][ T8471] __x64_sys_exit_group+0x3a/0x50 [ 72.116470][ T8471] do_syscall_64+0x3a/0xb0 [ 72.120904][ T8471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.126848][ T8471] RIP: 0033:0x46d96b [ 72.130751][ T8471] Code: Unable to access opcode bytes at RIP 0x46d941. [ 72.137600][ T8471] RSP: 002b:000000c00003b880 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 72.146135][ T8471] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000046d96b [ 72.154152][ T8471] RDX: 000000000000007d RSI: 0000000000000000 RDI: 0000000000000001 [ 72.162158][ T8471] RBP: 000000c00003b890 R08: 0000000000000004 R09: fffff80000000001 [ 72.170764][ T8471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 72.178761][ T8471] R13: 0000000000000040 R14: 000000000000001a R15: 0000000000000040 [ 72.186767][ T8471] Modules linked in: [ 72.197459][ T8471] ---[ end trace d88f73c58511e65d ]--- [ 72.202972][ T8471] RIP: 0010:skb_release_data+0x3a0/0x750 [ 72.208820][ T8471] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 72.229000][ T8471] RSP: 0018:ffffc9000168fbb0 EFLAGS: 00010202 [ 72.235073][ T8471] RAX: 000000000014fac1 RBX: 0000000000000011 RCX: 0000000000000000 [ 72.243206][ T8471] RDX: ffff88802413b900 RSI: ffffffff8703c746 RDI: 0000000000a7d608 [ 72.251267][ T8471] RBP: 0000000000a7d600 R08: 0000000000000011 R09: 0000000000a7d600 [ 72.259296][ T8471] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 72.267329][ T8471] R13: ffff88803304fecc R14: dffffc0000000000 R15: ffff88801dededc0 [ 72.275325][ T8471] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 72.284330][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.291020][ T8471] CR2: 00005564746383b8 CR3: 0000000012ad5000 CR4: 00000000001506e0 [ 72.299040][ T8471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.307013][ T8471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.315073][ T8471] Kernel panic - not syncing: Fatal exception [ 72.321630][ T8471] Kernel Offset: disabled [ 72.325971][ T8471] Rebooting in 86400 seconds..