Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts. 2020/05/01 05:44:41 fuzzer started 2020/05/01 05:44:41 connecting to host at 10.128.0.26:39401 2020/05/01 05:44:41 checking machine... 2020/05/01 05:44:41 checking revisions... 2020/05/01 05:44:41 testing simple program... syzkaller login: [ 56.774066][ T7053] IPVS: ftp: loaded support on port[0] = 21 2020/05/01 05:44:41 building call list... [ 57.155349][ T451] tipc: TX() has been purged, node left! [ 58.402692][ T7046] can: request_module (can-proto-0) failed. executing program [ 60.418650][ T7046] can: request_module (can-proto-0) failed. [ 60.430156][ T7046] can: request_module (can-proto-0) failed. [ 60.884449][ T7046] ================================================================== [ 60.892783][ T7046] BUG: KASAN: null-ptr-deref in x25_disconnect+0x253/0x370 [ 60.899964][ T7046] Write of size 4 at addr 00000000000000d8 by task syz-fuzzer/7046 [ 60.907847][ T7046] [ 60.910160][ T7046] CPU: 0 PID: 7046 Comm: syz-fuzzer Not tainted 5.7.0-rc2-syzkaller #0 [ 60.918380][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.928429][ T7046] Call Trace: [ 60.931716][ T7046] dump_stack+0x188/0x20d [ 60.936029][ T7046] ? x25_disconnect+0x253/0x370 [ 60.940859][ T7046] ? __sock_release+0x280/0x280 [ 60.945686][ T7046] __kasan_report.cold+0x5/0x4d [ 60.950531][ T7046] ? rcu_read_lock_held+0x1/0xb0 [ 60.955483][ T7046] ? x25_disconnect+0x253/0x370 [ 60.960343][ T7046] ? x25_disconnect+0x253/0x370 [ 60.965178][ T7046] kasan_report+0x33/0x50 [ 60.969524][ T7046] check_memory_region+0x141/0x190 [ 60.974667][ T7046] x25_disconnect+0x253/0x370 [ 60.979353][ T7046] x25_release+0x345/0x420 [ 60.983756][ T7046] __sock_release+0xcd/0x280 [ 60.988332][ T7046] sock_close+0x18/0x20 [ 60.992470][ T7046] __fput+0x33e/0x880 [ 60.996454][ T7046] task_work_run+0xf4/0x1b0 [ 61.000941][ T7046] exit_to_usermode_loop+0x2fa/0x360 [ 61.006206][ T7046] do_syscall_64+0x6b1/0x7d0 [ 61.010792][ T7046] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.016676][ T7046] RIP: 0033:0x4afb40 [ 61.020562][ T7046] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 61.040171][ T7046] RSP: 002b:000000c0001b94f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 61.048565][ T7046] RAX: 0000000000000000 RBX: 000000c00002e500 RCX: 00000000004afb40 [ 61.056531][ T7046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.064494][ T7046] RBP: 000000c0001b9538 R08: 0000000000000000 R09: 0000000000000000 [ 61.072462][ T7046] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 61.080426][ T7046] R13: 0000000000000167 R14: 0000000000000166 R15: 0000000000000200 [ 61.088405][ T7046] ================================================================== [ 61.096441][ T7046] Disabling lock debugging due to kernel taint [ 61.102638][ T7046] Kernel panic - not syncing: panic_on_warn set ... [ 61.109230][ T7046] CPU: 0 PID: 7046 Comm: syz-fuzzer Tainted: G B 5.7.0-rc2-syzkaller #0 [ 61.118851][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.128891][ T7046] Call Trace: [ 61.132181][ T7046] dump_stack+0x188/0x20d [ 61.136504][ T7046] ? __sock_release+0x280/0x280 [ 61.141421][ T7046] panic+0x2e3/0x75c [ 61.145316][ T7046] ? add_taint.cold+0x16/0x16 [ 61.149997][ T7046] ? x25_disconnect+0x253/0x370 [ 61.154836][ T7046] ? trace_hardirqs_on+0x55/0x220 [ 61.159854][ T7046] ? x25_disconnect+0x253/0x370 [ 61.164736][ T7046] ? __sock_release+0x280/0x280 [ 61.169583][ T7046] end_report+0x4d/0x53 [ 61.173718][ T7046] __kasan_report.cold+0xd/0x4d [ 61.178553][ T7046] ? rcu_read_lock_held+0x1/0xb0 [ 61.183466][ T7046] ? x25_disconnect+0x253/0x370 [ 61.188333][ T7046] ? x25_disconnect+0x253/0x370 [ 61.193281][ T7046] kasan_report+0x33/0x50 [ 61.197596][ T7046] check_memory_region+0x141/0x190 [ 61.202960][ T7046] x25_disconnect+0x253/0x370 [ 61.207615][ T7046] x25_release+0x345/0x420 [ 61.213048][ T7046] __sock_release+0xcd/0x280 [ 61.217614][ T7046] sock_close+0x18/0x20 [ 61.221747][ T7046] __fput+0x33e/0x880 [ 61.225706][ T7046] task_work_run+0xf4/0x1b0 [ 61.230204][ T7046] exit_to_usermode_loop+0x2fa/0x360 [ 61.235467][ T7046] do_syscall_64+0x6b1/0x7d0 [ 61.240033][ T7046] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.245959][ T7046] RIP: 0033:0x4afb40 [ 61.249855][ T7046] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 61.269531][ T7046] RSP: 002b:000000c0001b94f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 61.277922][ T7046] RAX: 0000000000000000 RBX: 000000c00002e500 RCX: 00000000004afb40 [ 61.285868][ T7046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.293819][ T7046] RBP: 000000c0001b9538 R08: 0000000000000000 R09: 0000000000000000 [ 61.301779][ T7046] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 61.309741][ T7046] R13: 0000000000000167 R14: 0000000000000166 R15: 0000000000000200 [ 61.319264][ T7046] Kernel Offset: disabled [ 61.323606][ T7046] Rebooting in 86400 seconds..