[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.208' (ECDSA) to the list of known hosts. 2020/04/28 10:54:40 fuzzer started 2020/04/28 10:54:41 connecting to host at 10.128.0.26:33701 2020/04/28 10:54:41 checking machine... 2020/04/28 10:54:41 checking revisions... 2020/04/28 10:54:41 testing simple program... syzkaller login: [ 57.824157][ T7052] IPVS: ftp: loaded support on port[0] = 21 2020/04/28 10:54:41 building call list... [ 58.196767][ T21] tipc: TX() has been purged, node left! [ 59.423814][ T7040] can: request_module (can-proto-0) failed. executing program [ 61.360760][ T7040] can: request_module (can-proto-0) failed. [ 61.372032][ T7040] can: request_module (can-proto-0) failed. [ 61.826281][ T7040] ================================================================== [ 61.834482][ T7040] BUG: KASAN: null-ptr-deref in x25_disconnect+0x253/0x370 [ 61.841670][ T7040] Write of size 4 at addr 00000000000000d8 by task syz-fuzzer/7040 [ 61.849547][ T7040] [ 61.851860][ T7040] CPU: 1 PID: 7040 Comm: syz-fuzzer Not tainted 5.7.0-rc2-syzkaller #0 [ 61.860071][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.870219][ T7040] Call Trace: [ 61.873499][ T7040] dump_stack+0x188/0x20d [ 61.877886][ T7040] ? x25_disconnect+0x253/0x370 [ 61.882737][ T7040] ? __sock_release+0x280/0x280 [ 61.887580][ T7040] __kasan_report.cold+0x5/0x4d [ 61.892504][ T7040] ? rcu_read_lock_held+0x1/0xb0 [ 61.897439][ T7040] ? x25_disconnect+0x253/0x370 [ 61.902269][ T7040] ? x25_disconnect+0x253/0x370 [ 61.907110][ T7040] kasan_report+0x33/0x50 [ 61.911451][ T7040] check_memory_region+0x141/0x190 [ 61.916553][ T7040] x25_disconnect+0x253/0x370 [ 61.921237][ T7040] x25_release+0x345/0x420 [ 61.925711][ T7040] __sock_release+0xcd/0x280 [ 61.930420][ T7040] sock_close+0x18/0x20 [ 61.934662][ T7040] __fput+0x33e/0x880 [ 61.938629][ T7040] task_work_run+0xf4/0x1b0 [ 61.943309][ T7040] exit_to_usermode_loop+0x2fa/0x360 [ 61.948592][ T7040] do_syscall_64+0x6b1/0x7d0 [ 61.953184][ T7040] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.959073][ T7040] RIP: 0033:0x4afb40 [ 61.962962][ T7040] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 61.982647][ T7040] RSP: 002b:000000c0001c54f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 61.991041][ T7040] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 61.999077][ T7040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.007026][ T7040] RBP: 000000c0001c5538 R08: 0000000000000000 R09: 0000000000000000 [ 62.014975][ T7040] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 62.022943][ T7040] R13: 0000000000000163 R14: 0000000000000162 R15: 0000000000000200 [ 62.034286][ T7040] ================================================================== [ 62.042326][ T7040] Disabling lock debugging due to kernel taint [ 62.048549][ T7040] Kernel panic - not syncing: panic_on_warn set ... [ 62.055224][ T7040] CPU: 1 PID: 7040 Comm: syz-fuzzer Tainted: G B 5.7.0-rc2-syzkaller #0 [ 62.064945][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.075013][ T7040] Call Trace: [ 62.078284][ T7040] dump_stack+0x188/0x20d [ 62.082591][ T7040] ? __sock_release+0x280/0x280 [ 62.087457][ T7040] panic+0x2e3/0x75c [ 62.091338][ T7040] ? add_taint.cold+0x16/0x16 [ 62.095997][ T7040] ? x25_disconnect+0x253/0x370 [ 62.100836][ T7040] ? trace_hardirqs_on+0x55/0x220 [ 62.105849][ T7040] ? x25_disconnect+0x253/0x370 [ 62.110675][ T7040] ? __sock_release+0x280/0x280 [ 62.115508][ T7040] end_report+0x4d/0x53 [ 62.119637][ T7040] __kasan_report.cold+0xd/0x4d [ 62.124468][ T7040] ? rcu_read_lock_held+0x1/0xb0 [ 62.129379][ T7040] ? x25_disconnect+0x253/0x370 [ 62.134204][ T7040] ? x25_disconnect+0x253/0x370 [ 62.139024][ T7040] kasan_report+0x33/0x50 [ 62.143337][ T7040] check_memory_region+0x141/0x190 [ 62.148419][ T7040] x25_disconnect+0x253/0x370 [ 62.153068][ T7040] x25_release+0x345/0x420 [ 62.157541][ T7040] __sock_release+0xcd/0x280 [ 62.162105][ T7040] sock_close+0x18/0x20 [ 62.166247][ T7040] __fput+0x33e/0x880 [ 62.170211][ T7040] task_work_run+0xf4/0x1b0 [ 62.174686][ T7040] exit_to_usermode_loop+0x2fa/0x360 [ 62.180029][ T7040] do_syscall_64+0x6b1/0x7d0 [ 62.184593][ T7040] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 62.190465][ T7040] RIP: 0033:0x4afb40 [ 62.194344][ T7040] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 62.214112][ T7040] RSP: 002b:000000c0001c54f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 62.222505][ T7040] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 62.230474][ T7040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.238437][ T7040] RBP: 000000c0001c5538 R08: 0000000000000000 R09: 0000000000000000 [ 62.246394][ T7040] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 62.254347][ T7040] R13: 0000000000000163 R14: 0000000000000162 R15: 0000000000000200 [ 62.263667][ T7040] Kernel Offset: disabled [ 62.267984][ T7040] Rebooting in 86400 seconds..