Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.98' (ECDSA) to the list of known hosts. 2021/05/02 14:10:49 fuzzer started 2021/05/02 14:10:50 dialing manager at 10.128.0.169:44661 2021/05/02 14:10:50 syscalls: 3571 2021/05/02 14:10:50 code coverage: enabled 2021/05/02 14:10:50 comparison tracing: enabled 2021/05/02 14:10:50 extra coverage: enabled 2021/05/02 14:10:50 setuid sandbox: enabled 2021/05/02 14:10:50 namespace sandbox: enabled 2021/05/02 14:10:50 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/02 14:10:50 fault injection: enabled 2021/05/02 14:10:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/02 14:10:50 net packet injection: enabled 2021/05/02 14:10:50 net device setup: enabled 2021/05/02 14:10:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/02 14:10:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/02 14:10:50 USB emulation: enabled 2021/05/02 14:10:50 hci packet injection: enabled 2021/05/02 14:10:50 wifi device emulation: enabled 2021/05/02 14:10:50 802.15.4 emulation: enabled 2021/05/02 14:10:50 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/02 14:10:50 fetching corpus: 50, signal 50090/53815 (executing program) syzkaller login: [ 71.929305][ T8423] general protection fault, probably for non-canonical address 0xdffffc0000136a01: 0000 [#1] PREEMPT SMP KASAN [ 71.941089][ T8423] KASAN: probably user-memory-access in range [0x00000000009b5008-0x00000000009b500f] [ 71.950608][ T8423] CPU: 1 PID: 8423 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 71.960130][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.970181][ T8423] RIP: 0010:skb_release_data+0x3a0/0x750 [ 71.975819][ T8423] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 71.995417][ T8423] RSP: 0018:ffffc9000163f878 EFLAGS: 00010202 [ 72.001507][ T8423] RAX: 0000000000136a01 RBX: 0000000000000011 RCX: 0000000000000000 [ 72.009472][ T8423] RDX: ffff888021d80000 RSI: ffffffff8703c746 RDI: 00000000009b5008 [ 72.017452][ T8423] RBP: 00000000009b5000 R08: 0000000000000011 R09: 00000000009b5000 [ 72.025404][ T8423] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 72.033358][ T8423] R13: ffff888031dcfecc R14: dffffc0000000000 R15: ffff88801a0d5b40 [ 72.041348][ T8423] FS: 000000c00002e890(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 72.050277][ T8423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.056860][ T8423] CR2: 000000c000dda000 CR3: 0000000012fbe000 CR4: 00000000001506e0 [ 72.064828][ T8423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.072801][ T8423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.080770][ T8423] Call Trace: [ 72.084050][ T8423] __kfree_skb+0x46/0x60 [ 72.088312][ T8423] tcp_recvmsg_locked+0x130f/0x22f0 [ 72.093544][ T8423] ? tcp_splice_read+0x8b0/0x8b0 [ 72.098484][ T8423] ? mark_held_locks+0x9f/0xe0 [ 72.103252][ T8423] ? __local_bh_enable_ip+0xa0/0x120 [ 72.108550][ T8423] tcp_recvmsg+0x134/0x550 [ 72.112969][ T8423] ? tcp_recvmsg_locked+0x22f0/0x22f0 [ 72.118351][ T8423] ? aa_sk_perm+0x311/0xab0 [ 72.122854][ T8423] inet_recvmsg+0x11b/0x5e0 [ 72.127361][ T8423] ? inet_sendpage+0x140/0x140 [ 72.132153][ T8423] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.138415][ T8423] ? security_socket_recvmsg+0x8f/0xc0 [ 72.143876][ T8423] sock_read_iter+0x33c/0x470 [ 72.148567][ T8423] ? ____sys_recvmsg+0x600/0x600 [ 72.153507][ T8423] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.159762][ T8423] ? fsnotify+0xa58/0x1060 [ 72.164179][ T8423] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 72.170429][ T8423] new_sync_read+0x5b7/0x6e0 [ 72.175019][ T8423] ? ksys_lseek+0x1b0/0x1b0 [ 72.179530][ T8423] vfs_read+0x35c/0x570 [ 72.183687][ T8423] ksys_read+0x1ee/0x250 [ 72.187927][ T8423] ? vfs_write+0xa40/0xa40 [ 72.192377][ T8423] ? syscall_enter_from_user_mode+0x27/0x70 [ 72.198274][ T8423] do_syscall_64+0x3a/0xb0 [ 72.202695][ T8423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.208601][ T8423] RIP: 0033:0x4af19b [ 72.212492][ T8423] Code: fb ff eb bd e8 a6 b6 fb ff e9 61 ff ff ff cc e8 9b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 72.232099][ T8423] RSP: 002b:000000c0002b9828 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 72.240525][ T8423] RAX: ffffffffffffffda RBX: 000000c00001e800 RCX: 00000000004af19b [ 72.248506][ T8423] RDX: 0000000000001000 RSI: 000000c0002f2000 RDI: 0000000000000006 [ 72.256475][ T8423] RBP: 000000c0002b9878 R08: 0000000000000001 R09: 0000000000000002 [ 72.264458][ T8423] R10: 00000000000042f0 R11: 0000000000000212 R12: 00000000000042ec [ 72.272424][ T8423] R13: 0000000000000400 R14: 0000000000000004 R15: 0000000000000004 [ 72.280414][ T8423] Modules linked in: [ 72.285049][ T8423] ---[ end trace c4807d2b966d1380 ]--- [ 72.290510][ T8423] RIP: 0010:skb_release_data+0x3a0/0x750 [ 72.296754][ T8423] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 72.317468][ T8423] RSP: 0018:ffffc9000163f878 EFLAGS: 00010202 [ 72.323636][ T8423] RAX: 0000000000136a01 RBX: 0000000000000011 RCX: 0000000000000000 [ 72.331673][ T8423] RDX: ffff888021d80000 RSI: ffffffff8703c746 RDI: 00000000009b5008 [ 72.339702][ T8423] RBP: 00000000009b5000 R08: 0000000000000011 R09: 00000000009b5000 [ 72.347754][ T8423] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 72.355784][ T8423] R13: ffff888031dcfecc R14: dffffc0000000000 R15: ffff88801a0d5b40 [ 72.364085][ T8423] FS: 000000c00002e890(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 72.373104][ T8423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.379703][ T8423] CR2: 00005621f82a5908 CR3: 0000000012fbe000 CR4: 00000000001506f0 [ 72.387749][ T8423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.395830][ T8423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.404154][ T8423] Kernel panic - not syncing: Fatal exception [ 72.410714][ T8423] Kernel Offset: disabled [ 72.415041][ T8423] Rebooting in 86400 seconds..