[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.150' (ECDSA) to the list of known hosts. 2020/05/01 05:44:43 fuzzer started 2020/05/01 05:44:43 connecting to host at 10.128.0.26:43101 2020/05/01 05:44:43 checking machine... 2020/05/01 05:44:43 checking revisions... 2020/05/01 05:44:43 testing simple program... syzkaller login: [ 57.075577][ T7060] IPVS: ftp: loaded support on port[0] = 21 2020/05/01 05:44:43 building call list... [ 57.439873][ T329] tipc: TX() has been purged, node left! [ 58.716771][ T7051] can: request_module (can-proto-0) failed. executing program [ 60.535277][ T7051] can: request_module (can-proto-0) failed. [ 60.547394][ T7051] can: request_module (can-proto-0) failed. [ 61.058621][ T7051] ================================================================== [ 61.066953][ T7051] BUG: KASAN: null-ptr-deref in x25_disconnect+0x253/0x370 [ 61.074147][ T7051] Write of size 4 at addr 00000000000000d8 by task syz-fuzzer/7051 [ 61.082028][ T7051] [ 61.084361][ T7051] CPU: 1 PID: 7051 Comm: syz-fuzzer Not tainted 5.7.0-rc2-syzkaller #0 [ 61.092573][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.102641][ T7051] Call Trace: [ 61.105932][ T7051] dump_stack+0x188/0x20d [ 61.110250][ T7051] ? x25_disconnect+0x253/0x370 [ 61.115187][ T7051] ? __sock_release+0x280/0x280 [ 61.120100][ T7051] __kasan_report.cold+0x5/0x4d [ 61.125138][ T7051] ? rcu_read_lock_held+0x1/0xb0 [ 61.130156][ T7051] ? x25_disconnect+0x253/0x370 [ 61.134985][ T7051] ? x25_disconnect+0x253/0x370 [ 61.139821][ T7051] kasan_report+0x33/0x50 [ 61.144129][ T7051] check_memory_region+0x141/0x190 [ 61.149246][ T7051] x25_disconnect+0x253/0x370 [ 61.153914][ T7051] x25_release+0x345/0x420 [ 61.158327][ T7051] __sock_release+0xcd/0x280 [ 61.162914][ T7051] sock_close+0x18/0x20 [ 61.167157][ T7051] __fput+0x33e/0x880 [ 61.171127][ T7051] task_work_run+0xf4/0x1b0 [ 61.175627][ T7051] exit_to_usermode_loop+0x2fa/0x360 [ 61.180906][ T7051] do_syscall_64+0x6b1/0x7d0 [ 61.185492][ T7051] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.191360][ T7051] RIP: 0033:0x4afb40 [ 61.195230][ T7051] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 61.214937][ T7051] RSP: 002b:000000c0000894f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 61.223342][ T7051] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 61.231472][ T7051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.239421][ T7051] RBP: 000000c000089538 R08: 0000000000000000 R09: 0000000000000000 [ 61.247368][ T7051] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 61.255328][ T7051] R13: 0000000000000167 R14: 0000000000000166 R15: 0000000000000200 [ 61.263526][ T7051] ================================================================== [ 61.271754][ T7051] Disabling lock debugging due to kernel taint [ 61.278063][ T7051] Kernel panic - not syncing: panic_on_warn set ... [ 61.284651][ T7051] CPU: 1 PID: 7051 Comm: syz-fuzzer Tainted: G B 5.7.0-rc2-syzkaller #0 [ 61.294358][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.304439][ T7051] Call Trace: [ 61.307723][ T7051] dump_stack+0x188/0x20d [ 61.312053][ T7051] ? __sock_release+0x280/0x280 [ 61.316919][ T7051] panic+0x2e3/0x75c [ 61.320807][ T7051] ? add_taint.cold+0x16/0x16 [ 61.325461][ T7051] ? x25_disconnect+0x253/0x370 [ 61.330393][ T7051] ? trace_hardirqs_on+0x55/0x220 [ 61.335414][ T7051] ? x25_disconnect+0x253/0x370 [ 61.340250][ T7051] ? __sock_release+0x280/0x280 [ 61.345201][ T7051] end_report+0x4d/0x53 [ 61.349368][ T7051] __kasan_report.cold+0xd/0x4d [ 61.354319][ T7051] ? rcu_read_lock_held+0x1/0xb0 [ 61.359264][ T7051] ? x25_disconnect+0x253/0x370 [ 61.364112][ T7051] ? x25_disconnect+0x253/0x370 [ 61.368957][ T7051] kasan_report+0x33/0x50 [ 61.373280][ T7051] check_memory_region+0x141/0x190 [ 61.378383][ T7051] x25_disconnect+0x253/0x370 [ 61.383036][ T7051] x25_release+0x345/0x420 [ 61.387442][ T7051] __sock_release+0xcd/0x280 [ 61.392030][ T7051] sock_close+0x18/0x20 [ 61.396230][ T7051] __fput+0x33e/0x880 [ 61.400206][ T7051] task_work_run+0xf4/0x1b0 [ 61.407683][ T7051] exit_to_usermode_loop+0x2fa/0x360 [ 61.412968][ T7051] do_syscall_64+0x6b1/0x7d0 [ 61.417536][ T7051] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.423403][ T7051] RIP: 0033:0x4afb40 [ 61.427274][ T7051] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 61.446944][ T7051] RSP: 002b:000000c0000894f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 61.455363][ T7051] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 61.463316][ T7051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.471344][ T7051] RBP: 000000c000089538 R08: 0000000000000000 R09: 0000000000000000 [ 61.479310][ T7051] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 61.487273][ T7051] R13: 0000000000000167 R14: 0000000000000166 R15: 0000000000000200 [ 61.496759][ T7051] Kernel Offset: disabled [ 61.501097][ T7051] Rebooting in 86400 seconds..