[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.54' (ECDSA) to the list of known hosts. 2021/05/04 02:36:34 fuzzer started 2021/05/04 02:36:35 dialing manager at 10.128.0.169:34381 2021/05/04 02:36:35 syscalls: 3586 2021/05/04 02:36:35 code coverage: enabled 2021/05/04 02:36:35 comparison tracing: enabled 2021/05/04 02:36:35 extra coverage: enabled 2021/05/04 02:36:35 setuid sandbox: enabled 2021/05/04 02:36:35 namespace sandbox: enabled 2021/05/04 02:36:35 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/04 02:36:35 fault injection: enabled 2021/05/04 02:36:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/04 02:36:35 net packet injection: enabled 2021/05/04 02:36:35 net device setup: enabled 2021/05/04 02:36:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/04 02:36:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/04 02:36:35 USB emulation: enabled 2021/05/04 02:36:35 hci packet injection: enabled 2021/05/04 02:36:35 wifi device emulation: enabled 2021/05/04 02:36:35 802.15.4 emulation: enabled 2021/05/04 02:36:35 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/04 02:36:35 fetching corpus: 50, signal 60600/64193 (executing program) 2021/05/04 02:36:35 fetching corpus: 100, signal 95481/100550 (executing program) 2021/05/04 02:36:36 fetching corpus: 150, signal 112148/118671 (executing program) 2021/05/04 02:36:36 fetching corpus: 200, signal 128943/136872 (executing program) 2021/05/04 02:36:36 fetching corpus: 250, signal 143375/152553 (executing program) 2021/05/04 02:36:36 fetching corpus: 300, signal 157211/167632 (executing program) 2021/05/04 02:36:36 fetching corpus: 350, signal 168728/180331 (executing program) 2021/05/04 02:36:36 Manager.Poll call failed: reading body read tcp 10.128.1.54:33020->10.128.0.169:34381: read: bad address syzkaller login: [ 84.344852][ T8455] general protection fault, probably for non-canonical address 0xdffffc00401770c1: 0000 [#1] PREEMPT SMP KASAN [ 84.357327][ T8455] KASAN: probably user-memory-access in range [0x0000000200bb8608-0x0000000200bb860f] [ 84.366872][ T8455] CPU: 0 PID: 8455 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 84.376404][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.386447][ T8455] RIP: 0010:skb_release_data+0x3a0/0x750 [ 84.392243][ T8455] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 84.414373][ T8455] RSP: 0018:ffffc90000eff960 EFLAGS: 00010202 [ 84.420482][ T8455] RAX: 00000000401770c1 RBX: 0000000000000011 RCX: 0000000000000000 [ 84.428522][ T8455] RDX: ffff8880216e8000 RSI: ffffffff8703c746 RDI: 0000000200bb8608 [ 84.437157][ T8455] RBP: 0000000200bb8600 R08: 0000000000000011 R09: 0000000000bb8600 [ 84.445150][ T8455] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 84.453665][ T8455] R13: ffff88802ee07ecc R14: dffffc0000000000 R15: ffff888015d918c0 [ 84.461632][ T8455] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 84.471193][ T8455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.478619][ T8455] CR2: 00007f3a5d20c518 CR3: 000000000bc8e000 CR4: 00000000001506f0 [ 84.487804][ T8455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.495776][ T8455] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.503922][ T8455] Call Trace: [ 84.507202][ T8455] __kfree_skb+0x46/0x60 [ 84.511455][ T8455] __tcp_close+0x230/0x1170 [ 84.515980][ T8455] tcp_close+0x29/0xc0 [ 84.520052][ T8455] inet_release+0x12e/0x280 [ 84.524565][ T8455] __sock_release+0xcd/0x280 [ 84.529151][ T8455] sock_close+0x18/0x20 [ 84.533305][ T8455] __fput+0x288/0x920 [ 84.537309][ T8455] ? __sock_release+0x280/0x280 [ 84.542149][ T8455] task_work_run+0xdd/0x1a0 [ 84.546713][ T8455] do_exit+0xbfc/0x2a70 [ 84.550866][ T8455] ? find_held_lock+0x2d/0x110 [ 84.555769][ T8455] ? mm_update_next_owner+0x7a0/0x7a0 [ 84.561142][ T8455] ? get_signal+0x337/0x2150 [ 84.565725][ T8455] ? lock_downgrade+0x6e0/0x6e0 [ 84.570567][ T8455] do_group_exit+0x125/0x310 [ 84.575169][ T8455] get_signal+0x47f/0x2150 [ 84.579688][ T8455] ? do_epoll_create+0x1c0/0x1c0 [ 84.584635][ T8455] ? __x64_sys_epoll_pwait+0x266/0x310 [ 84.590091][ T8455] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 84.595815][ T8455] ? finish_wait+0x260/0x260 [ 84.600488][ T8455] ? nsec_to_clock_t+0x30/0x30 [ 84.605268][ T8455] ? ktime_get_ts64+0x455/0x560 [ 84.610147][ T8455] ? set_user_sigmask+0x213/0x2a0 [ 84.615223][ T8455] ? __set_current_blocked+0x110/0x110 [ 84.620930][ T8455] ? copy_siginfo_to_user32+0xa0/0xa0 [ 84.626524][ T8455] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 84.632779][ T8455] ? do_compat_epoll_pwait.part.0+0xe2/0x1d0 [ 84.638760][ T8455] ? __ia32_sys_epoll_wait+0x270/0x270 [ 84.644220][ T8455] exit_to_user_mode_prepare+0x171/0x280 [ 84.649843][ T8455] syscall_exit_to_user_mode+0x19/0x60 [ 84.655321][ T8455] do_syscall_64+0x47/0xb0 [ 84.659742][ T8455] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.665633][ T8455] RIP: 0033:0x46e380 [ 84.669650][ T8455] Code: Unable to access opcode bytes at RIP 0x46e356. [ 84.676503][ T8455] RSP: 002b:00007ffe5bc72270 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 84.684904][ T8455] RAX: fffffffffffffffc RBX: 000000000000037d RCX: 000000000046e380 [ 84.692865][ T8455] RDX: 0000000000000080 RSI: 00007ffe5bc722c0 RDI: 0000000000000003 [ 84.700912][ T8455] RBP: 00007ffe5bc728c0 R08: 0000000000000000 R09: 0000000000000000 [ 84.709173][ T8455] R10: 000000000000037d R11: 0000000000000246 R12: 0000000000000003 [ 84.717770][ T8455] R13: 000000000184f420 R14: 000000000000000f R15: 0000000000000d56 [ 84.725753][ T8455] Modules linked in: [ 84.731961][ T8455] ---[ end trace eefa10b5501ffaf6 ]--- [ 84.737478][ T8455] RIP: 0010:skb_release_data+0x3a0/0x750 [ 84.743156][ T8455] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 84.763706][ T8455] RSP: 0018:ffffc90000eff960 EFLAGS: 00010202 [ 84.769801][ T8455] RAX: 00000000401770c1 RBX: 0000000000000011 RCX: 0000000000000000 [ 84.778405][ T8455] RDX: ffff8880216e8000 RSI: ffffffff8703c746 RDI: 0000000200bb8608 [ 84.786627][ T8455] RBP: 0000000200bb8600 R08: 0000000000000011 R09: 0000000000bb8600 [ 84.794678][ T8455] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 84.802805][ T8455] R13: ffff88802ee07ecc R14: dffffc0000000000 R15: ffff888015d918c0 [ 84.810874][ T8455] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 84.819933][ T8455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.826610][ T8455] CR2: 00007f3a5d1e56c8 CR3: 000000002497b000 CR4: 00000000001506e0 [ 84.834781][ T8455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.842765][ T8455] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.851078][ T8455] Kernel panic - not syncing: Fatal exception [ 84.857685][ T8455] Kernel Offset: disabled [ 84.862009][ T8455] Rebooting in 86400 seconds..