Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.148' (ECDSA) to the list of known hosts. 2021/05/02 17:42:53 fuzzer started 2021/05/02 17:42:53 dialing manager at 10.128.0.169:44661 2021/05/02 17:42:54 syscalls: 3571 2021/05/02 17:42:54 code coverage: enabled 2021/05/02 17:42:54 comparison tracing: enabled 2021/05/02 17:42:54 extra coverage: enabled 2021/05/02 17:42:54 setuid sandbox: enabled 2021/05/02 17:42:54 namespace sandbox: enabled 2021/05/02 17:42:54 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/02 17:42:54 fault injection: enabled 2021/05/02 17:42:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/02 17:42:54 net packet injection: enabled 2021/05/02 17:42:54 net device setup: enabled 2021/05/02 17:42:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/02 17:42:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/02 17:42:54 USB emulation: enabled 2021/05/02 17:42:54 hci packet injection: enabled 2021/05/02 17:42:54 wifi device emulation: enabled 2021/05/02 17:42:54 802.15.4 emulation: enabled 2021/05/02 17:42:54 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 70.185368][ T8449] general protection fault, probably for non-canonical address 0xdffffc0000175a81: 0000 [#1] PREEMPT SMP KASAN [ 70.197140][ T8449] KASAN: probably user-memory-access in range [0x0000000000bad408-0x0000000000bad40f] [ 70.206687][ T8449] CPU: 1 PID: 8449 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 70.216245][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.227279][ T8449] RIP: 0010:skb_release_data+0x3a0/0x750 [ 70.233041][ T8449] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 70.252746][ T8449] RSP: 0018:ffffc9000193f878 EFLAGS: 00010206 [ 70.258825][ T8449] RAX: 0000000000175a81 RBX: 0000000000000011 RCX: 0000000000000000 [ 70.266800][ T8449] RDX: ffff888027841c80 RSI: ffffffff8703c746 RDI: 0000000000bad408 [ 70.274778][ T8449] RBP: 0000000000bad400 R08: 0000000000000011 R09: 0000000000bad400 [ 70.282768][ T8449] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 70.290739][ T8449] R13: ffff88802eb3fecc R14: dffffc0000000000 R15: ffff888019e6d780 [ 70.298762][ T8449] FS: 000000c00002e890(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 70.307694][ T8449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.314274][ T8449] CR2: 00007f32e73f87e0 CR3: 000000001dfec000 CR4: 00000000001506e0 [ 70.322261][ T8449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.330234][ T8449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.338297][ T8449] Call Trace: [ 70.341577][ T8449] __kfree_skb+0x46/0x60 [ 70.345843][ T8449] tcp_recvmsg_locked+0x130f/0x22f0 [ 70.351061][ T8449] ? tcp_splice_read+0x8b0/0x8b0 [ 70.356011][ T8449] ? mark_held_locks+0x9f/0xe0 [ 70.361215][ T8449] ? __local_bh_enable_ip+0xa0/0x120 [ 70.366521][ T8449] tcp_recvmsg+0x134/0x550 [ 70.370962][ T8449] ? tcp_recvmsg_locked+0x22f0/0x22f0 [ 70.376352][ T8449] ? aa_sk_perm+0x311/0xab0 [ 70.380861][ T8449] inet_recvmsg+0x11b/0x5e0 [ 70.385468][ T8449] ? inet_sendpage+0x140/0x140 [ 70.390337][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.397113][ T8449] ? security_socket_recvmsg+0x8f/0xc0 [ 70.402672][ T8449] sock_read_iter+0x33c/0x470 [ 70.407357][ T8449] ? ____sys_recvmsg+0x600/0x600 [ 70.412302][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.418568][ T8449] ? fsnotify+0xa58/0x1060 [ 70.423016][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 70.429296][ T8449] new_sync_read+0x5b7/0x6e0 [ 70.433926][ T8449] ? ksys_lseek+0x1b0/0x1b0 [ 70.438433][ T8449] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 70.444521][ T8449] vfs_read+0x35c/0x570 [ 70.448689][ T8449] ksys_read+0x1ee/0x250 [ 70.452948][ T8449] ? vfs_write+0xa40/0xa40 [ 70.457367][ T8449] ? syscall_enter_from_user_mode+0x27/0x70 [ 70.463281][ T8449] do_syscall_64+0x3a/0xb0 [ 70.467705][ T8449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 70.473600][ T8449] RIP: 0033:0x4af19b [ 70.477490][ T8449] Code: fb ff eb bd e8 a6 b6 fb ff e9 61 ff ff ff cc e8 9b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 70.497117][ T8449] RSP: 002b:000000c0001e5828 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 70.505533][ T8449] RAX: ffffffffffffffda RBX: 000000c00001e800 RCX: 00000000004af19b [ 70.513501][ T8449] RDX: 0000000000001000 RSI: 000000c000344000 RDI: 0000000000000006 [ 70.521469][ T8449] RBP: 000000c0001e5878 R08: 0000000000000001 R09: 0000000000000002 [ 70.529452][ T8449] R10: 0000000000006630 R11: 0000000000000212 R12: ffffffffffffffff [ 70.537430][ T8449] R13: 0000000000002000 R14: 0000000000000002 R15: 0000000000000002 [ 70.545416][ T8449] Modules linked in: [ 70.559205][ T8449] ---[ end trace b2bce295c4385702 ]--- [ 70.564699][ T8449] RIP: 0010:skb_release_data+0x3a0/0x750 [ 70.570835][ T8449] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 70.612516][ T8449] RSP: 0018:ffffc9000193f878 EFLAGS: 00010206 [ 70.619171][ T8449] RAX: 0000000000175a81 RBX: 0000000000000011 RCX: 0000000000000000 [ 70.627176][ T8449] RDX: ffff888027841c80 RSI: ffffffff8703c746 RDI: 0000000000bad408 [ 70.635673][ T8449] RBP: 0000000000bad400 R08: 0000000000000011 R09: 0000000000bad400 [ 70.658312][ T8449] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 70.666386][ T8449] R13: ffff88802eb3fecc R14: dffffc0000000000 R15: ffff888019e6d780 [ 70.678064][ T8449] FS: 000000c00002e890(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 70.687399][ T8449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.694345][ T8449] CR2: 00007f0511eb6000 CR3: 000000001dfec000 CR4: 00000000001506f0 [ 70.702919][ T8449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.711516][ T8449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.719745][ T8449] Kernel panic - not syncing: Fatal exception [ 70.726441][ T8449] Kernel Offset: disabled [ 70.730759][ T8449] Rebooting in 86400 seconds..