[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.42' (ECDSA) to the list of known hosts. 2021/05/04 00:19:43 fuzzer started 2021/05/04 00:19:44 dialing manager at 10.128.0.169:34381 2021/05/04 00:19:44 syscalls: 3586 2021/05/04 00:19:44 code coverage: enabled 2021/05/04 00:19:44 comparison tracing: enabled 2021/05/04 00:19:44 extra coverage: enabled 2021/05/04 00:19:44 setuid sandbox: enabled 2021/05/04 00:19:44 namespace sandbox: enabled 2021/05/04 00:19:44 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/04 00:19:44 fault injection: enabled 2021/05/04 00:19:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/04 00:19:44 net packet injection: enabled 2021/05/04 00:19:44 net device setup: enabled 2021/05/04 00:19:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/04 00:19:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/04 00:19:44 USB emulation: enabled 2021/05/04 00:19:44 hci packet injection: enabled 2021/05/04 00:19:44 wifi device emulation: enabled 2021/05/04 00:19:44 802.15.4 emulation: enabled 2021/05/04 00:19:44 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/04 00:19:44 fetching corpus: 50, signal 61748/65338 (executing program) 2021/05/04 00:19:45 fetching corpus: 100, signal 93725/98761 (executing program) 2021/05/04 00:19:45 fetching corpus: 150, signal 120714/127066 (executing program) 2021/05/04 00:19:45 fetching corpus: 200, signal 143645/151215 (executing program) syzkaller login: [ 71.178406][ T3256] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.184958][ T3256] ieee802154 phy1 wpan1: encryption failed: -22 2021/05/04 00:19:46 fetching corpus: 250, signal 158382/167196 (executing program) 2021/05/04 00:19:46 fetching corpus: 300, signal 172377/182352 (executing program) 2021/05/04 00:19:46 fetching corpus: 350, signal 182253/193396 (executing program) 2021/05/04 00:19:47 fetching corpus: 400, signal 193222/205431 (executing program) 2021/05/04 00:19:47 fetching corpus: 450, signal 204344/217510 (executing program) 2021/05/04 00:19:47 fetching corpus: 500, signal 212533/226695 (executing program) 2021/05/04 00:19:48 fetching corpus: 550, signal 227446/242288 (executing program) 2021/05/04 00:19:48 fetching corpus: 600, signal 233920/249727 (executing program) 2021/05/04 00:19:48 fetching corpus: 650, signal 240198/256932 (executing program) 2021/05/04 00:19:49 fetching corpus: 700, signal 247877/265413 (executing program) 2021/05/04 00:19:49 fetching corpus: 750, signal 259006/277034 (executing program) 2021/05/04 00:19:49 fetching corpus: 800, signal 266774/285436 (executing program) 2021/05/04 00:19:49 fetching corpus: 850, signal 275612/294856 (executing program) 2021/05/04 00:19:50 fetching corpus: 900, signal 281815/301750 (executing program) 2021/05/04 00:19:50 fetching corpus: 950, signal 288696/309259 (executing program) 2021/05/04 00:19:50 fetching corpus: 1000, signal 297084/318095 (executing program) 2021/05/04 00:19:51 fetching corpus: 1050, signal 303107/324630 (executing program) [ 76.507217][ C0] general protection fault, probably for non-canonical address 0xdffffd2c1ffffd41: 0000 [#1] PREEMPT SMP KASAN [ 76.519084][ C0] KASAN: probably user-memory-access in range [0x00000960ffffea08-0x00000960ffffea0f] [ 76.528615][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 76.537795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.547851][ C0] RIP: 0010:receive_buf+0xc5c/0x6250 [ 76.553150][ C0] Code: 48 89 9c 24 c8 00 00 00 44 89 a4 24 b8 00 00 00 48 8d 48 0a 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 4c 24 70 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 ba [ 76.572746][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00010206 [ 76.578797][ C0] RAX: dffffc0000000000 RBX: 000000000000464e RCX: 00000960ffffea0a [ 76.586759][ C0] RDX: 0000012c1ffffd41 RSI: ffffffff84c2a09d RDI: 0000000000000003 [ 76.594723][ C0] RBP: ffff88801cd94c00 R08: 000000000000001a R09: 0000000000000001 [ 76.602683][ C0] R10: ffffffff84c295d7 R11: 0000000000000000 R12: 000000000000022e [ 76.610639][ C0] R13: 000000000000000c R14: 0000000000000001 R15: ffff88801cd94c10 [ 76.618719][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 76.627779][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.634370][ C0] CR2: 000000c000453680 CR3: 0000000015695000 CR4: 00000000001506f0 [ 76.642332][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.650290][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.658248][ C0] Call Trace: [ 76.661509][ C0] [ 76.664354][ C0] ? xdp_linearize_page+0x840/0x840 [ 76.669543][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 76.675793][ C0] ? detach_buf_split+0x599/0x7b0 [ 76.680818][ C0] ? virtqueue_get_buf_ctx_split+0x423/0x5f0 [ 76.686781][ C0] virtnet_poll+0x58a/0x1180 [ 76.691358][ C0] ? receive_buf+0x6250/0x6250 [ 76.696420][ C0] ? tick_nohz_irq_exit+0xa6/0x150 [ 76.701513][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 76.706349][ C0] __napi_poll+0xaf/0x440 [ 76.710663][ C0] net_rx_action+0x801/0xb40 [ 76.715258][ C0] ? napi_threaded_poll+0x5b0/0x5b0 [ 76.720438][ C0] ? asm_common_interrupt+0x1e/0x40 [ 76.725653][ C0] __do_softirq+0x29b/0x9fe [ 76.730142][ C0] __irq_exit_rcu+0x136/0x200 [ 76.734801][ C0] irq_exit_rcu+0x5/0x20 [ 76.739023][ C0] common_interrupt+0xa4/0xd0 [ 76.743685][ C0] [ 76.746599][ C0] asm_common_interrupt+0x1e/0x40 [ 76.751609][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 76.757424][ C0] Code: fd 2a 5e f8 84 db 75 ac e8 44 24 5e f8 e8 6f 35 64 f8 e9 0c 00 00 00 e8 35 24 5e f8 0f 00 2d 3e 60 b7 00 e8 29 24 5e f8 fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 34 2c 5e f8 48 85 db [ 76.777016][ C0] RSP: 0018:ffffffff8bc07d60 EFLAGS: 00000293 [ 76.783066][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 76.791018][ C0] RDX: ffffffff8bcbc540 RSI: ffffffff8916d547 RDI: 0000000000000000 [ 76.798973][ C0] RBP: ffff888140f74864 R08: 0000000000000001 R09: 0000000000000001 [ 76.806924][ C0] R10: ffffffff817b0ad8 R11: 0000000000000000 R12: 0000000000000001 [ 76.814877][ C0] R13: ffff888140f74800 R14: ffff888140f74864 R15: ffff88801985a804 [ 76.822830][ C0] ? trace_hardirqs_on+0x38/0x1c0 [ 76.827841][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 76.833043][ C0] acpi_idle_enter+0x361/0x500 [ 76.837794][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 76.842890][ C0] cpuidle_enter+0x4a/0xa0 [ 76.847287][ C0] do_idle+0x3e8/0x590 [ 76.851342][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 76.856350][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 76.862575][ C0] cpu_startup_entry+0x14/0x20 [ 76.867323][ C0] start_kernel+0x47a/0x49b [ 76.871812][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 76.877692][ C0] Modules linked in: [ 76.881647][ C0] ---[ end trace 6969b58dea6849bf ]--- [ 76.887138][ C0] RIP: 0010:receive_buf+0xc5c/0x6250 [ 76.892458][ C0] Code: 48 89 9c 24 c8 00 00 00 44 89 a4 24 b8 00 00 00 48 8d 48 0a 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 4c 24 70 48 c1 ea 03 <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 ba [ 76.912115][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00010206 [ 76.918209][ C0] RAX: dffffc0000000000 RBX: 000000000000464e RCX: 00000960ffffea0a [ 76.926217][ C0] RDX: 0000012c1ffffd41 RSI: ffffffff84c2a09d RDI: 0000000000000003 [ 76.934222][ C0] RBP: ffff88801cd94c00 R08: 000000000000001a R09: 0000000000000001 [ 76.942221][ C0] R10: ffffffff84c295d7 R11: 0000000000000000 R12: 000000000000022e [ 76.950226][ C0] R13: 000000000000000c R14: 0000000000000001 R15: ffff88801cd94c10 [ 76.958229][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 76.967196][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.973782][ C0] CR2: 000000c000453680 CR3: 0000000015695000 CR4: 00000000001506f0 [ 76.981778][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.989800][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.997806][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 77.005790][ C0] Kernel Offset: disabled [ 77.010131][ C0] Rebooting in 86400 seconds..