[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. 2020/04/29 13:23:22 fuzzer started 2020/04/29 13:23:24 connecting to host at 10.128.0.26:36973 2020/04/29 13:23:24 checking machine... 2020/04/29 13:23:24 checking revisions... 2020/04/29 13:23:24 testing simple program... syzkaller login: [ 57.604741][ T7072] IPVS: ftp: loaded support on port[0] = 21 2020/04/29 13:23:24 building call list... [ 57.959193][ T86] tipc: TX() has been purged, node left! [ 59.374490][ T7098] can: request_module (can-proto-0) failed. executing program [ 61.083120][ T7098] can: request_module (can-proto-0) failed. [ 61.094327][ T7098] can: request_module (can-proto-0) failed. [ 61.577631][ T7098] ================================================================== [ 61.586398][ T7098] BUG: KASAN: null-ptr-deref in x25_disconnect+0x253/0x370 [ 61.593569][ T7098] Write of size 4 at addr 00000000000000d8 by task syz-fuzzer/7098 [ 61.601436][ T7098] [ 61.603742][ T7098] CPU: 1 PID: 7098 Comm: syz-fuzzer Not tainted 5.7.0-rc2-syzkaller #0 [ 61.611960][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.621989][ T7098] Call Trace: [ 61.625255][ T7098] dump_stack+0x188/0x20d [ 61.629561][ T7098] ? x25_disconnect+0x253/0x370 [ 61.634388][ T7098] ? __sock_release+0x280/0x280 [ 61.639211][ T7098] __kasan_report.cold+0x5/0x4d [ 61.644038][ T7098] ? rcu_read_lock_held+0x1/0xb0 [ 61.648962][ T7098] ? x25_disconnect+0x253/0x370 [ 61.653786][ T7098] ? x25_disconnect+0x253/0x370 [ 61.658611][ T7098] kasan_report+0x33/0x50 [ 61.662941][ T7098] check_memory_region+0x141/0x190 [ 61.668025][ T7098] x25_disconnect+0x253/0x370 [ 61.672677][ T7098] x25_release+0x345/0x420 [ 61.677072][ T7098] __sock_release+0xcd/0x280 [ 61.681635][ T7098] sock_close+0x18/0x20 [ 61.685762][ T7098] __fput+0x33e/0x880 [ 61.689724][ T7098] task_work_run+0xf4/0x1b0 [ 61.694223][ T7098] exit_to_usermode_loop+0x2fa/0x360 [ 61.699493][ T7098] do_syscall_64+0x6b1/0x7d0 [ 61.704069][ T7098] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.709937][ T7098] RIP: 0033:0x4afb40 [ 61.713812][ T7098] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 61.733388][ T7098] RSP: 002b:000000c0001974f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 61.741769][ T7098] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 61.750070][ T7098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.758022][ T7098] RBP: 000000c000197538 R08: 0000000000000000 R09: 0000000000000000 [ 61.765968][ T7098] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 61.773974][ T7098] R13: 0000000000000163 R14: 0000000000000162 R15: 0000000000000200 [ 61.781936][ T7098] ================================================================== [ 61.791105][ T7098] Disabling lock debugging due to kernel taint [ 61.797297][ T7098] Kernel panic - not syncing: panic_on_warn set ... [ 61.803880][ T7098] CPU: 1 PID: 7098 Comm: syz-fuzzer Tainted: G B 5.7.0-rc2-syzkaller #0 [ 61.813576][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.823603][ T7098] Call Trace: [ 61.826870][ T7098] dump_stack+0x188/0x20d [ 61.831177][ T7098] ? __sock_release+0x280/0x280 [ 61.835997][ T7098] panic+0x2e3/0x75c [ 61.839879][ T7098] ? add_taint.cold+0x16/0x16 [ 61.844529][ T7098] ? x25_disconnect+0x253/0x370 [ 61.849353][ T7098] ? trace_hardirqs_on+0x55/0x220 [ 61.854365][ T7098] ? x25_disconnect+0x253/0x370 [ 61.859201][ T7098] ? __sock_release+0x280/0x280 [ 61.864028][ T7098] end_report+0x4d/0x53 [ 61.868181][ T7098] __kasan_report.cold+0xd/0x4d [ 61.873018][ T7098] ? rcu_read_lock_held+0x1/0xb0 [ 61.877949][ T7098] ? x25_disconnect+0x253/0x370 [ 61.882834][ T7098] ? x25_disconnect+0x253/0x370 [ 61.887671][ T7098] kasan_report+0x33/0x50 [ 61.891990][ T7098] check_memory_region+0x141/0x190 [ 61.897075][ T7098] x25_disconnect+0x253/0x370 [ 61.901726][ T7098] x25_release+0x345/0x420 [ 61.906128][ T7098] __sock_release+0xcd/0x280 [ 61.910702][ T7098] sock_close+0x18/0x20 [ 61.914829][ T7098] __fput+0x33e/0x880 [ 61.918784][ T7098] task_work_run+0xf4/0x1b0 [ 61.923275][ T7098] exit_to_usermode_loop+0x2fa/0x360 [ 61.928532][ T7098] do_syscall_64+0x6b1/0x7d0 [ 61.933094][ T7098] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 61.939660][ T7098] RIP: 0033:0x4afb40 [ 61.943535][ T7098] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 61.963121][ T7098] RSP: 002b:000000c0001974f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 61.971514][ T7098] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 61.979472][ T7098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 61.987415][ T7098] RBP: 000000c000197538 R08: 0000000000000000 R09: 0000000000000000 [ 61.995358][ T7098] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 62.003662][ T7098] R13: 0000000000000163 R14: 0000000000000162 R15: 0000000000000200 [ 62.013508][ T7098] Kernel Offset: disabled [ 62.017830][ T7098] Rebooting in 86400 seconds..