[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.32' (ECDSA) to the list of known hosts. 2020/05/01 18:02:29 fuzzer started 2020/05/01 18:02:29 connecting to host at 10.128.0.26:35363 2020/05/01 18:02:29 checking machine... 2020/05/01 18:02:29 checking revisions... 2020/05/01 18:02:30 testing simple program... syzkaller login: [ 55.089216][ T7034] IPVS: ftp: loaded support on port[0] = 21 2020/05/01 18:02:30 building call list... [ 55.487069][ T37] tipc: TX() has been purged, node left! [ 56.669030][ T7018] can: request_module (can-proto-0) failed. executing program [ 58.652571][ T7018] can: request_module (can-proto-0) failed. [ 58.664098][ T7018] can: request_module (can-proto-0) failed. [ 59.156865][ T7018] ================================================================== [ 59.165169][ T7018] BUG: KASAN: null-ptr-deref in x25_disconnect+0x253/0x370 [ 59.172371][ T7018] Write of size 4 at addr 00000000000000d8 by task syz-fuzzer/7018 [ 59.180234][ T7018] [ 59.182642][ T7018] CPU: 0 PID: 7018 Comm: syz-fuzzer Not tainted 5.7.0-rc2-syzkaller #0 [ 59.190847][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.200890][ T7018] Call Trace: [ 59.204179][ T7018] dump_stack+0x188/0x20d [ 59.208595][ T7018] ? x25_disconnect+0x253/0x370 [ 59.213553][ T7018] ? __sock_release+0x280/0x280 [ 59.218435][ T7018] __kasan_report.cold+0x5/0x4d [ 59.223272][ T7018] ? rcu_read_lock_held+0x1/0xb0 [ 59.228190][ T7018] ? x25_disconnect+0x253/0x370 [ 59.233016][ T7018] ? x25_disconnect+0x253/0x370 [ 59.237942][ T7018] kasan_report+0x33/0x50 [ 59.242266][ T7018] check_memory_region+0x141/0x190 [ 59.247378][ T7018] x25_disconnect+0x253/0x370 [ 59.252120][ T7018] x25_release+0x345/0x420 [ 59.256799][ T7018] __sock_release+0xcd/0x280 [ 59.261713][ T7018] sock_close+0x18/0x20 [ 59.265845][ T7018] __fput+0x33e/0x880 [ 59.269820][ T7018] task_work_run+0xf4/0x1b0 [ 59.274336][ T7018] exit_to_usermode_loop+0x2fa/0x360 [ 59.279640][ T7018] do_syscall_64+0x6b1/0x7d0 [ 59.284450][ T7018] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.290437][ T7018] RIP: 0033:0x4afb40 [ 59.294397][ T7018] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 59.314451][ T7018] RSP: 002b:000000c0001d94f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 59.322845][ T7018] RAX: 0000000000000000 RBX: 000000c00002e500 RCX: 00000000004afb40 [ 59.331334][ T7018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.339386][ T7018] RBP: 000000c0001d9538 R08: 0000000000000000 R09: 0000000000000000 [ 59.347445][ T7018] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 59.355838][ T7018] R13: 0000000000000161 R14: 0000000000000160 R15: 0000000000000200 [ 59.363920][ T7018] ================================================================== [ 59.372115][ T7018] Disabling lock debugging due to kernel taint [ 59.378341][ T7018] Kernel panic - not syncing: panic_on_warn set ... [ 59.385112][ T7018] CPU: 0 PID: 7018 Comm: syz-fuzzer Tainted: G B 5.7.0-rc2-syzkaller #0 [ 59.394994][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.405752][ T7018] Call Trace: [ 59.409206][ T7018] dump_stack+0x188/0x20d [ 59.413532][ T7018] ? __sock_release+0x280/0x280 [ 59.418370][ T7018] panic+0x2e3/0x75c [ 59.422247][ T7018] ? add_taint.cold+0x16/0x16 [ 59.426922][ T7018] ? x25_disconnect+0x253/0x370 [ 59.431755][ T7018] ? trace_hardirqs_on+0x55/0x220 [ 59.436932][ T7018] ? x25_disconnect+0x253/0x370 [ 59.442036][ T7018] ? __sock_release+0x280/0x280 [ 59.446979][ T7018] end_report+0x4d/0x53 [ 59.451145][ T7018] __kasan_report.cold+0xd/0x4d [ 59.456082][ T7018] ? rcu_read_lock_held+0x1/0xb0 [ 59.461003][ T7018] ? x25_disconnect+0x253/0x370 [ 59.465859][ T7018] ? x25_disconnect+0x253/0x370 [ 59.470712][ T7018] kasan_report+0x33/0x50 [ 59.475042][ T7018] check_memory_region+0x141/0x190 [ 59.480464][ T7018] x25_disconnect+0x253/0x370 [ 59.485524][ T7018] x25_release+0x345/0x420 [ 59.490068][ T7018] __sock_release+0xcd/0x280 [ 59.494648][ T7018] sock_close+0x18/0x20 [ 59.498805][ T7018] __fput+0x33e/0x880 [ 59.503200][ T7018] task_work_run+0xf4/0x1b0 [ 59.507680][ T7018] exit_to_usermode_loop+0x2fa/0x360 [ 59.512952][ T7018] do_syscall_64+0x6b1/0x7d0 [ 59.517523][ T7018] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 59.523389][ T7018] RIP: 0033:0x4afb40 [ 59.527545][ T7018] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 59.548688][ T7018] RSP: 002b:000000c0001d94f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 59.557175][ T7018] RAX: 0000000000000000 RBX: 000000c00002e500 RCX: 00000000004afb40 [ 59.565390][ T7018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 59.573368][ T7018] RBP: 000000c0001d9538 R08: 0000000000000000 R09: 0000000000000000 [ 59.581322][ T7018] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 59.589547][ T7018] R13: 0000000000000161 R14: 0000000000000160 R15: 0000000000000200 [ 59.598931][ T7018] Kernel Offset: disabled [ 59.603545][ T7018] Rebooting in 86400 seconds..