[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.110' (ECDSA) to the list of known hosts. 2020/05/02 11:11:22 fuzzer started 2020/05/02 11:11:22 connecting to host at 10.128.0.26:46221 2020/05/02 11:11:22 checking machine... 2020/05/02 11:11:22 checking revisions... 2020/05/02 11:11:22 testing simple program... syzkaller login: [ 55.755547][ T7034] IPVS: ftp: loaded support on port[0] = 21 2020/05/02 11:11:22 building call list... [ 56.117255][ T72] tipc: TX() has been purged, node left! [ 57.395272][ T7023] can: request_module (can-proto-0) failed. executing program [ 59.390839][ T7023] can: request_module (can-proto-0) failed. [ 59.402830][ T7023] can: request_module (can-proto-0) failed. [ 59.876897][ T7023] ================================================================== [ 59.885149][ T7023] BUG: KASAN: null-ptr-deref in x25_disconnect+0x253/0x370 [ 59.892422][ T7023] Write of size 4 at addr 00000000000000d8 by task syz-fuzzer/7023 [ 59.900284][ T7023] [ 59.902595][ T7023] CPU: 1 PID: 7023 Comm: syz-fuzzer Not tainted 5.7.0-rc2-syzkaller #0 [ 59.910814][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.920856][ T7023] Call Trace: [ 59.924128][ T7023] dump_stack+0x188/0x20d [ 59.928464][ T7023] ? x25_disconnect+0x253/0x370 [ 59.933288][ T7023] ? __sock_release+0x280/0x280 [ 59.938112][ T7023] __kasan_report.cold+0x5/0x4d [ 59.942954][ T7023] ? rcu_read_lock_held+0x1/0xb0 [ 59.947865][ T7023] ? x25_disconnect+0x253/0x370 [ 59.952690][ T7023] ? x25_disconnect+0x253/0x370 [ 59.957534][ T7023] kasan_report+0x33/0x50 [ 59.961840][ T7023] check_memory_region+0x141/0x190 [ 59.966926][ T7023] x25_disconnect+0x253/0x370 [ 59.971592][ T7023] x25_release+0x345/0x420 [ 59.975999][ T7023] __sock_release+0xcd/0x280 [ 59.980603][ T7023] sock_close+0x18/0x20 [ 59.984735][ T7023] __fput+0x33e/0x880 [ 59.988966][ T7023] task_work_run+0xf4/0x1b0 [ 59.993983][ T7023] exit_to_usermode_loop+0x2fa/0x360 [ 59.999247][ T7023] do_syscall_64+0x6b1/0x7d0 [ 60.003814][ T7023] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.009698][ T7023] RIP: 0033:0x4afb40 [ 60.013581][ T7023] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 60.033186][ T7023] RSP: 002b:000000c00007b4f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 60.041585][ T7023] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 60.049533][ T7023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.057477][ T7023] RBP: 000000c00007b538 R08: 0000000000000000 R09: 0000000000000000 [ 60.065433][ T7023] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 60.073393][ T7023] R13: 0000000000000162 R14: 0000000000000161 R15: 0000000000000200 [ 60.081359][ T7023] ================================================================== [ 60.089391][ T7023] Disabling lock debugging due to kernel taint [ 60.095577][ T7023] Kernel panic - not syncing: panic_on_warn set ... [ 60.102162][ T7023] CPU: 1 PID: 7023 Comm: syz-fuzzer Tainted: G B 5.7.0-rc2-syzkaller #0 [ 60.111771][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.121798][ T7023] Call Trace: [ 60.125065][ T7023] dump_stack+0x188/0x20d [ 60.129369][ T7023] ? __sock_release+0x280/0x280 [ 60.134191][ T7023] panic+0x2e3/0x75c [ 60.138073][ T7023] ? add_taint.cold+0x16/0x16 [ 60.142744][ T7023] ? x25_disconnect+0x253/0x370 [ 60.147591][ T7023] ? trace_hardirqs_on+0x55/0x220 [ 60.152587][ T7023] ? x25_disconnect+0x253/0x370 [ 60.157412][ T7023] ? __sock_release+0x280/0x280 [ 60.162232][ T7023] end_report+0x4d/0x53 [ 60.166359][ T7023] __kasan_report.cold+0xd/0x4d [ 60.171187][ T7023] ? rcu_read_lock_held+0x1/0xb0 [ 60.176096][ T7023] ? x25_disconnect+0x253/0x370 [ 60.180922][ T7023] ? x25_disconnect+0x253/0x370 [ 60.185747][ T7023] kasan_report+0x33/0x50 [ 60.190052][ T7023] check_memory_region+0x141/0x190 [ 60.195138][ T7023] x25_disconnect+0x253/0x370 [ 60.199788][ T7023] x25_release+0x345/0x420 [ 60.204181][ T7023] __sock_release+0xcd/0x280 [ 60.208895][ T7023] sock_close+0x18/0x20 [ 60.213042][ T7023] __fput+0x33e/0x880 [ 60.217036][ T7023] task_work_run+0xf4/0x1b0 [ 60.221519][ T7023] exit_to_usermode_loop+0x2fa/0x360 [ 60.226780][ T7023] do_syscall_64+0x6b1/0x7d0 [ 60.231460][ T7023] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 60.237338][ T7023] RIP: 0033:0x4afb40 [ 60.241241][ T7023] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 60.260991][ T7023] RSP: 002b:000000c00007b4f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 60.269372][ T7023] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 60.277335][ T7023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.285289][ T7023] RBP: 000000c00007b538 R08: 0000000000000000 R09: 0000000000000000 [ 60.293242][ T7023] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 60.301572][ T7023] R13: 0000000000000162 R14: 0000000000000161 R15: 0000000000000200 [ 60.311364][ T7023] Kernel Offset: disabled [ 60.315705][ T7023] Rebooting in 86400 seconds..