[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.11' (ECDSA) to the list of known hosts. 2021/05/04 00:52:03 fuzzer started 2021/05/04 00:52:03 dialing manager at 10.128.0.169:34381 2021/05/04 00:52:04 syscalls: 3586 2021/05/04 00:52:04 code coverage: enabled 2021/05/04 00:52:04 comparison tracing: enabled 2021/05/04 00:52:04 extra coverage: enabled 2021/05/04 00:52:04 setuid sandbox: enabled 2021/05/04 00:52:04 namespace sandbox: enabled 2021/05/04 00:52:04 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/04 00:52:04 fault injection: enabled 2021/05/04 00:52:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/04 00:52:04 net packet injection: enabled 2021/05/04 00:52:04 net device setup: enabled 2021/05/04 00:52:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/04 00:52:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/04 00:52:04 USB emulation: enabled 2021/05/04 00:52:04 hci packet injection: enabled 2021/05/04 00:52:04 wifi device emulation: enabled 2021/05/04 00:52:04 802.15.4 emulation: enabled 2021/05/04 00:52:04 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/04 00:52:04 fetching corpus: 50, signal 46417/50108 (executing program) syzkaller login: [ 71.304389][ T3258] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.310970][ T3258] ieee802154 phy1 wpan1: encryption failed: -22 2021/05/04 00:52:04 fetching corpus: 100, signal 81576/86768 (executing program) 2021/05/04 00:52:05 fetching corpus: 150, signal 105622/112252 (executing program) 2021/05/04 00:52:05 fetching corpus: 200, signal 125012/132956 (executing program) 2021/05/04 00:52:05 fetching corpus: 250, signal 147481/156547 (executing program) 2021/05/04 00:52:06 fetching corpus: 300, signal 159310/169597 (executing program) 2021/05/04 00:52:06 fetching corpus: 350, signal 176261/187567 (executing program) 2021/05/04 00:52:07 fetching corpus: 400, signal 194846/206919 (executing program) 2021/05/04 00:52:07 fetching corpus: 450, signal 203590/216677 (executing program) 2021/05/04 00:52:07 fetching corpus: 500, signal 213953/227941 (executing program) 2021/05/04 00:52:08 fetching corpus: 550, signal 221548/236549 (executing program) 2021/05/04 00:52:08 fetching corpus: 600, signal 228716/244653 (executing program) 2021/05/04 00:52:08 fetching corpus: 650, signal 240674/257333 (executing program) 2021/05/04 00:52:08 fetching corpus: 700, signal 247478/264983 (executing program) 2021/05/04 00:52:09 fetching corpus: 750, signal 254953/273252 (executing program) 2021/05/04 00:52:09 Manager.Poll call failed: reading body read tcp 10.128.1.11:38948->10.128.0.169:34381: read: bad address [ 76.016075][ T8447] general protection fault, probably for non-canonical address 0xdffffc00400d5481: 0000 [#1] PREEMPT SMP KASAN [ 76.032446][ T8447] KASAN: probably user-memory-access in range [0x00000002006aa408-0x00000002006aa40f] [ 76.042597][ T8447] CPU: 0 PID: 8447 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 76.052456][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.062704][ T8447] RIP: 0010:skb_release_data+0x3a0/0x750 [ 76.068541][ T8447] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 76.089141][ T8447] RSP: 0018:ffffc900015bfbb0 EFLAGS: 00010206 [ 76.096040][ T8447] RAX: 00000000400d5481 RBX: 0000000000000011 RCX: 0000000000000000 [ 76.104337][ T8447] RDX: ffff888018af8000 RSI: ffffffff8703c746 RDI: 00000002006aa408 [ 76.113067][ T8447] RBP: 00000002006aa400 R08: 0000000000000011 R09: 00000000006aa400 [ 76.122573][ T8447] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 76.132638][ T8447] R13: ffff88802dc97ecc R14: dffffc0000000000 R15: ffff888013fc8dc0 [ 76.146793][ T8447] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 76.159819][ T8447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.166975][ T8447] CR2: 00007fe408f82258 CR3: 000000000bc8e000 CR4: 00000000001506f0 [ 76.175095][ T8447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.183792][ T8447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.192767][ T8447] Call Trace: [ 76.196059][ T8447] __kfree_skb+0x46/0x60 [ 76.200702][ T8447] __tcp_close+0x230/0x1170 [ 76.205968][ T8447] tcp_close+0x29/0xc0 [ 76.211362][ T8447] inet_release+0x12e/0x280 [ 76.217629][ T8447] __sock_release+0xcd/0x280 [ 76.223496][ T8447] sock_close+0x18/0x20 [ 76.228472][ T8447] __fput+0x288/0x920 [ 76.236746][ T8447] ? __sock_release+0x280/0x280 [ 76.244688][ T8447] task_work_run+0xdd/0x1a0 [ 76.253072][ T8447] do_exit+0xbfc/0x2a70 [ 76.258855][ T8447] ? io_schedule_timeout+0x140/0x140 [ 76.265108][ T8447] ? lockdep_hardirqs_on+0x79/0x100 [ 76.270907][ T8447] ? mm_update_next_owner+0x7a0/0x7a0 [ 76.276890][ T8447] ? preempt_schedule_thunk+0x16/0x18 [ 76.283065][ T8447] ? preempt_schedule_common+0x59/0xc0 [ 76.289023][ T8447] ? preempt_schedule_thunk+0x16/0x18 [ 76.296084][ T8447] ? trace_hardirqs_on+0x38/0x1c0 [ 76.301335][ T8447] do_group_exit+0x125/0x310 [ 76.306486][ T8447] __x64_sys_exit_group+0x3a/0x50 [ 76.311802][ T8447] do_syscall_64+0x3a/0xb0 [ 76.316304][ T8447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 76.322440][ T8447] RIP: 0033:0x46d96b [ 76.326786][ T8447] Code: Unable to access opcode bytes at RIP 0x46d941. [ 76.333901][ T8447] RSP: 002b:000000c000719880 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 76.343543][ T8447] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000046d96b [ 76.351912][ T8447] RDX: 000000000000007d RSI: 0000000000000000 RDI: 0000000000000001 [ 76.360364][ T8447] RBP: 000000c000719890 R08: 0000000000000004 R09: fffff80000000001 [ 76.368386][ T8447] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 76.377157][ T8447] R13: 0000000000000021 R14: 0000000000000020 R15: 0000000000000049 [ 76.386797][ T8447] Modules linked in: [ 76.392042][ T8447] ---[ end trace 2b8c03705c49e820 ]--- [ 76.398250][ T8447] RIP: 0010:skb_release_data+0x3a0/0x750 [ 76.404269][ T8447] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 76.426003][ T8447] RSP: 0018:ffffc900015bfbb0 EFLAGS: 00010206 [ 76.432565][ T8447] RAX: 00000000400d5481 RBX: 0000000000000011 RCX: 0000000000000000 [ 76.440937][ T8447] RDX: ffff888018af8000 RSI: ffffffff8703c746 RDI: 00000002006aa408 [ 76.449767][ T8447] RBP: 00000002006aa400 R08: 0000000000000011 R09: 00000000006aa400 [ 76.458113][ T8447] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 76.466973][ T8447] R13: ffff88802dc97ecc R14: dffffc0000000000 R15: ffff888013fc8dc0 [ 76.476606][ T8447] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 76.485697][ T8447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.492794][ T8447] CR2: 00007fe408f82258 CR3: 000000000bc8e000 CR4: 00000000001506f0 [ 76.501076][ T8447] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.509666][ T8447] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.518655][ T8447] Kernel panic - not syncing: Fatal exception [ 76.526592][ T8447] Kernel Offset: disabled [ 76.532288][ T8447] Rebooting in 86400 seconds..