[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.69' (ECDSA) to the list of known hosts. 2021/05/01 17:06:00 fuzzer started 2021/05/01 17:06:00 dialing manager at 10.128.0.169:44661 2021/05/01 17:06:00 syscalls: 3571 2021/05/01 17:06:00 code coverage: enabled 2021/05/01 17:06:00 comparison tracing: enabled 2021/05/01 17:06:00 extra coverage: enabled 2021/05/01 17:06:00 setuid sandbox: enabled 2021/05/01 17:06:00 namespace sandbox: enabled 2021/05/01 17:06:00 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/01 17:06:00 fault injection: enabled 2021/05/01 17:06:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/01 17:06:00 net packet injection: enabled 2021/05/01 17:06:00 net device setup: enabled 2021/05/01 17:06:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/01 17:06:00 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/01 17:06:00 USB emulation: enabled 2021/05/01 17:06:00 hci packet injection: enabled 2021/05/01 17:06:00 wifi device emulation: enabled 2021/05/01 17:06:00 802.15.4 emulation: enabled 2021/05/01 17:06:00 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/01 17:06:01 Manager.Poll call failed: reading body read tcp 10.128.0.69:38908->10.128.0.169:44661: read: bad address syzkaller login: [ 71.682057][ T8416] general protection fault, probably for non-canonical address 0xdffffc000013d381: 0000 [#1] PREEMPT SMP KASAN [ 71.694006][ T8416] KASAN: probably user-memory-access in range [0x00000000009e9c08-0x00000000009e9c0f] [ 71.703646][ T8416] CPU: 0 PID: 8416 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 71.713182][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.723972][ T8416] RIP: 0010:skb_release_data+0x3a0/0x750 [ 71.729628][ T8416] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 71.749243][ T8416] RSP: 0018:ffffc9000165f960 EFLAGS: 00010206 [ 71.755571][ T8416] RAX: 000000000013d381 RBX: 0000000000000011 RCX: 0000000000000000 [ 71.763546][ T8416] RDX: ffff8880148f3900 RSI: ffffffff8703c746 RDI: 00000000009e9c08 [ 71.771527][ T8416] RBP: 00000000009e9c00 R08: 0000000000000011 R09: 00000000009e9c00 [ 71.779503][ T8416] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 71.787477][ T8416] R13: ffff88802e86fecc R14: dffffc0000000000 R15: ffff8880128b5c80 [ 71.795443][ T8416] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 71.804368][ T8416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.810959][ T8416] CR2: 00007fee1a473f58 CR3: 00000000259a8000 CR4: 00000000001506f0 [ 71.818941][ T8416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.826897][ T8416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.834873][ T8416] Call Trace: [ 71.838167][ T8416] __kfree_skb+0x46/0x60 [ 71.842420][ T8416] __tcp_close+0x230/0x1170 [ 71.846942][ T8416] tcp_close+0x29/0xc0 [ 71.850998][ T8416] inet_release+0x12e/0x280 [ 71.855495][ T8416] __sock_release+0xcd/0x280 [ 71.860077][ T8416] sock_close+0x18/0x20 [ 71.864233][ T8416] __fput+0x288/0x920 [ 71.868221][ T8416] ? __sock_release+0x280/0x280 [ 71.873062][ T8416] task_work_run+0xdd/0x1a0 [ 71.877572][ T8416] do_exit+0xbfc/0x2a70 [ 71.881726][ T8416] ? find_held_lock+0x2d/0x110 [ 71.886484][ T8416] ? mm_update_next_owner+0x7a0/0x7a0 [ 71.891844][ T8416] ? get_signal+0x337/0x2150 [ 71.896423][ T8416] ? lock_downgrade+0x6e0/0x6e0 [ 71.901285][ T8416] do_group_exit+0x125/0x310 [ 71.906354][ T8416] get_signal+0x47f/0x2150 [ 71.910780][ T8416] ? _raw_spin_unlock_irq+0x2a/0x40 [ 71.915979][ T8416] ? __switch_to+0x57c/0x10a0 [ 71.920652][ T8416] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 71.926459][ T8416] ? io_schedule_timeout+0x140/0x140 [ 71.932187][ T8416] ? preempt_schedule_irq+0x82/0x90 [ 71.937389][ T8416] ? copy_siginfo_to_user32+0xa0/0xa0 [ 71.942954][ T8416] ? __do_sys_futex+0x2ab/0x470 [ 71.948241][ T8416] ? do_futex+0x1780/0x1780 [ 71.952755][ T8416] exit_to_user_mode_prepare+0x171/0x280 [ 71.958389][ T8416] syscall_exit_to_user_mode+0x19/0x60 [ 71.963970][ T8416] do_syscall_64+0x47/0xb0 [ 71.968389][ T8416] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.974277][ T8416] RIP: 0033:0x46e163 [ 71.978164][ T8416] Code: Unable to access opcode bytes at RIP 0x46e139. [ 71.985016][ T8416] RSP: 002b:000000c0004c7f00 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 71.993423][ T8416] RAX: fffffffffffffe00 RBX: 000000c0004b6000 RCX: 000000000046e163 [ 72.001497][ T8416] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000018803b8 [ 72.009463][ T8416] RBP: 000000c0004c7f48 R08: 0000000000000000 R09: 0000000000000000 [ 72.017424][ T8416] R10: 0000000000000000 R11: 0000000000000286 R12: 000000000043b6a0 [ 72.025395][ T8416] R13: 0000000000000000 R14: 0000000000947a14 R15: 0000000000000000 [ 72.034240][ T8416] Modules linked in: [ 72.039684][ T8416] ---[ end trace 401b43f3091899a7 ]--- [ 72.045155][ T8416] RIP: 0010:skb_release_data+0x3a0/0x750 [ 72.050883][ T8416] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 72.070702][ T8416] RSP: 0018:ffffc9000165f960 EFLAGS: 00010206 [ 72.077082][ T8416] RAX: 000000000013d381 RBX: 0000000000000011 RCX: 0000000000000000 [ 72.085085][ T8416] RDX: ffff8880148f3900 RSI: ffffffff8703c746 RDI: 00000000009e9c08 [ 72.093169][ T8416] RBP: 00000000009e9c00 R08: 0000000000000011 R09: 00000000009e9c00 [ 72.101926][ T8416] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 72.109966][ T8416] R13: ffff88802e86fecc R14: dffffc0000000000 R15: ffff8880128b5c80 [ 72.118034][ T8416] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 72.127346][ T8416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.133955][ T8416] CR2: 00007f934f4dc000 CR3: 0000000012a7b000 CR4: 00000000001506e0 [ 72.142092][ T8416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.150177][ T8416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.158504][ T8416] Kernel panic - not syncing: Fatal exception [ 72.165382][ T8416] Kernel Offset: disabled [ 72.169716][ T8416] Rebooting in 86400 seconds..