[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts. 2021/05/02 11:38:55 fuzzer started 2021/05/02 11:38:55 dialing manager at 10.128.0.169:44661 2021/05/02 11:38:55 syscalls: 3571 2021/05/02 11:38:55 code coverage: enabled 2021/05/02 11:38:55 comparison tracing: enabled 2021/05/02 11:38:55 extra coverage: enabled 2021/05/02 11:38:55 setuid sandbox: enabled 2021/05/02 11:38:55 namespace sandbox: enabled 2021/05/02 11:38:55 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/02 11:38:55 fault injection: enabled 2021/05/02 11:38:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/02 11:38:55 net packet injection: enabled 2021/05/02 11:38:55 net device setup: enabled 2021/05/02 11:38:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/02 11:38:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/02 11:38:55 USB emulation: enabled 2021/05/02 11:38:55 hci packet injection: enabled 2021/05/02 11:38:55 wifi device emulation: enabled 2021/05/02 11:38:55 802.15.4 emulation: enabled 2021/05/02 11:38:55 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/02 11:38:55 Manager.Poll call failed: reading body read tcp 10.128.1.38:48752->10.128.0.169:44661: read: bad address syzkaller login: [ 71.273515][ T3255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280115][ T3255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.350092][ T8459] general protection fault, probably for non-canonical address 0xdffffc0000148141: 0000 [#1] PREEMPT SMP KASAN [ 71.361860][ T8459] KASAN: probably user-memory-access in range [0x0000000000a40a08-0x0000000000a40a0f] [ 71.371416][ T8459] CPU: 0 PID: 8459 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 71.380968][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.391028][ T8459] RIP: 0010:skb_release_data+0x3a0/0x750 [ 71.396681][ T8459] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 71.416278][ T8459] RSP: 0000:ffffc9000169fbb0 EFLAGS: 00010206 [ 71.422330][ T8459] RAX: 0000000000148141 RBX: 0000000000000011 RCX: 0000000000000000 [ 71.430285][ T8459] RDX: ffff88801e9f8000 RSI: ffffffff8703c746 RDI: 0000000000a40a08 [ 71.438241][ T8459] RBP: 0000000000a40a00 R08: 0000000000000011 R09: 0000000000a40a00 [ 71.446198][ T8459] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 71.454157][ T8459] R13: ffff888029c0fecc R14: dffffc0000000000 R15: ffff888024ab78c0 [ 71.462115][ T8459] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 71.471035][ T8459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.477622][ T8459] CR2: 00007f7c1ee60000 CR3: 0000000012b6b000 CR4: 00000000001506f0 [ 71.485582][ T8459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.493535][ T8459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.501489][ T8459] Call Trace: [ 71.504758][ T8459] __kfree_skb+0x46/0x60 [ 71.508996][ T8459] __tcp_close+0x230/0x1170 [ 71.513502][ T8459] tcp_close+0x29/0xc0 [ 71.517558][ T8459] inet_release+0x12e/0x280 [ 71.522051][ T8459] __sock_release+0xcd/0x280 [ 71.526627][ T8459] sock_close+0x18/0x20 [ 71.530770][ T8459] __fput+0x288/0x920 [ 71.534738][ T8459] ? __sock_release+0x280/0x280 [ 71.539577][ T8459] task_work_run+0xdd/0x1a0 [ 71.544082][ T8459] do_exit+0xbfc/0x2a70 [ 71.548227][ T8459] ? io_schedule_timeout+0x140/0x140 [ 71.553505][ T8459] ? lockdep_hardirqs_on+0x79/0x100 [ 71.558690][ T8459] ? mm_update_next_owner+0x7a0/0x7a0 [ 71.564052][ T8459] ? preempt_schedule_thunk+0x16/0x18 [ 71.569414][ T8459] ? preempt_schedule_common+0x59/0xc0 [ 71.574865][ T8459] ? preempt_schedule_thunk+0x16/0x18 [ 71.580230][ T8459] ? trace_hardirqs_on+0x38/0x1c0 [ 71.585242][ T8459] do_group_exit+0x125/0x310 [ 71.589821][ T8459] __x64_sys_exit_group+0x3a/0x50 [ 71.594852][ T8459] do_syscall_64+0x3a/0xb0 [ 71.599264][ T8459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.605147][ T8459] RIP: 0033:0x46d96b [ 71.609026][ T8459] Code: Unable to access opcode bytes at RIP 0x46d941. [ 71.615869][ T8459] RSP: 002b:000000c0002f9880 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 71.624267][ T8459] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000046d96b [ 71.632224][ T8459] RDX: 000000000000007d RSI: 0000000000000000 RDI: 0000000000000001 [ 71.640179][ T8459] RBP: 000000c0002f9890 R08: 0000000000000004 R09: fffff80000000001 [ 71.648135][ T8459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003 [ 71.656090][ T8459] R13: 0000000000000002 R14: 0000000000000001 R15: 0000000000000049 [ 71.664051][ T8459] Modules linked in: [ 71.669731][ T8459] ---[ end trace 14fe2e2d852b37ce ]--- [ 71.675409][ T8459] RIP: 0010:skb_release_data+0x3a0/0x750 [ 71.681069][ T8459] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 71.700766][ T8459] RSP: 0000:ffffc9000169fbb0 EFLAGS: 00010206 [ 71.707300][ T8459] RAX: 0000000000148141 RBX: 0000000000000011 RCX: 0000000000000000 [ 71.715636][ T8459] RDX: ffff88801e9f8000 RSI: ffffffff8703c746 RDI: 0000000000a40a08 [ 71.723999][ T8459] RBP: 0000000000a40a00 R08: 0000000000000011 R09: 0000000000a40a00 [ 71.732450][ T8459] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 71.740453][ T8459] R13: ffff888029c0fecc R14: dffffc0000000000 R15: ffff888024ab78c0 [ 71.748491][ T8459] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 71.757524][ T8459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.764140][ T8459] CR2: 00007f7c1d24cab4 CR3: 000000001dc24000 CR4: 00000000001506e0 [ 71.772316][ T8459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.780290][ T8459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.788326][ T8459] Kernel panic - not syncing: Fatal exception [ 71.795031][ T8459] Kernel Offset: disabled [ 71.799346][ T8459] Rebooting in 86400 seconds..