[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.120' (ECDSA) to the list of known hosts. 2021/05/03 06:58:48 fuzzer started 2021/05/03 06:58:48 dialing manager at 10.128.0.169:44661 2021/05/03 06:58:48 syscalls: 3571 2021/05/03 06:58:48 code coverage: enabled 2021/05/03 06:58:48 comparison tracing: enabled 2021/05/03 06:58:48 extra coverage: enabled 2021/05/03 06:58:48 setuid sandbox: enabled 2021/05/03 06:58:48 namespace sandbox: enabled 2021/05/03 06:58:48 Android sandbox: /sys/fs/selinux/policy does not exist 2021/05/03 06:58:48 fault injection: enabled 2021/05/03 06:58:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/03 06:58:48 net packet injection: enabled 2021/05/03 06:58:48 net device setup: enabled 2021/05/03 06:58:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/05/03 06:58:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/03 06:58:48 USB emulation: enabled 2021/05/03 06:58:48 hci packet injection: enabled 2021/05/03 06:58:48 wifi device emulation: enabled 2021/05/03 06:58:48 802.15.4 emulation: enabled 2021/05/03 06:58:48 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/03 06:58:48 Manager.Poll call failed: reading body read tcp 10.128.1.120:57852->10.128.0.169:44661: read: bad address syzkaller login: [ 70.853758][ T8435] general protection fault, probably for non-canonical address 0xdffffc000012f501: 0000 [#1] PREEMPT SMP KASAN [ 70.865521][ T8435] KASAN: probably user-memory-access in range [0x000000000097a808-0x000000000097a80f] [ 70.875081][ T8435] CPU: 0 PID: 8435 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 70.884643][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.894675][ T8435] RIP: 0010:skb_release_data+0x3a0/0x750 [ 70.900307][ T8435] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 70.919893][ T8435] RSP: 0018:ffffc9000167f960 EFLAGS: 00010202 [ 70.925939][ T8435] RAX: 000000000012f501 RBX: 0000000000000011 RCX: 0000000000000000 [ 70.933903][ T8435] RDX: ffff8880305bd580 RSI: ffffffff8703c746 RDI: 000000000097a808 [ 70.941865][ T8435] RBP: 000000000097a800 R08: 0000000000000011 R09: 000000000097a800 [ 70.949814][ T8435] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 70.957870][ T8435] R13: ffff88802d3afecc R14: dffffc0000000000 R15: ffff88801aabe140 [ 70.965831][ T8435] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 70.974740][ T8435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.981391][ T8435] CR2: 00007f9ff4f7d000 CR3: 00000000247b4000 CR4: 00000000001506f0 [ 70.989346][ T8435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.997297][ T8435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.005251][ T8435] Call Trace: [ 71.008514][ T8435] __kfree_skb+0x46/0x60 [ 71.012742][ T8435] __tcp_close+0x230/0x1170 [ 71.017243][ T8435] tcp_close+0x29/0xc0 [ 71.021293][ T8435] inet_release+0x12e/0x280 [ 71.025786][ T8435] __sock_release+0xcd/0x280 [ 71.030368][ T8435] sock_close+0x18/0x20 [ 71.034518][ T8435] __fput+0x288/0x920 [ 71.038484][ T8435] ? __sock_release+0x280/0x280 [ 71.043320][ T8435] task_work_run+0xdd/0x1a0 [ 71.047806][ T8435] do_exit+0xbfc/0x2a70 [ 71.051943][ T8435] ? find_held_lock+0x2d/0x110 [ 71.056780][ T8435] ? mm_update_next_owner+0x7a0/0x7a0 [ 71.062145][ T8435] ? get_signal+0x337/0x2150 [ 71.066728][ T8435] ? lock_downgrade+0x6e0/0x6e0 [ 71.071562][ T8435] do_group_exit+0x125/0x310 [ 71.076138][ T8435] get_signal+0x47f/0x2150 [ 71.080544][ T8435] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 71.086247][ T8435] ? find_held_lock+0x2d/0x110 [ 71.090995][ T8435] ? copy_siginfo_to_user32+0xa0/0xa0 [ 71.096350][ T8435] ? __do_sys_futex+0x2ab/0x470 [ 71.101185][ T8435] ? do_futex+0x1780/0x1780 [ 71.105709][ T8435] exit_to_user_mode_prepare+0x171/0x280 [ 71.111328][ T8435] syscall_exit_to_user_mode+0x19/0x60 [ 71.116771][ T8435] do_syscall_64+0x47/0xb0 [ 71.121183][ T8435] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 71.127082][ T8435] RIP: 0033:0x46e163 [ 71.130967][ T8435] Code: Unable to access opcode bytes at RIP 0x46e139. [ 71.137795][ T8435] RSP: 002b:000000c000463f00 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 71.146196][ T8435] RAX: fffffffffffffe00 RBX: 000000c000452000 RCX: 000000000046e163 [ 71.154154][ T8435] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00000000018803b8 [ 71.162112][ T8435] RBP: 000000c000463f48 R08: 0000000000000000 R09: 0000000000000000 [ 71.170078][ T8435] R10: 0000000000000000 R11: 0000000000000286 R12: 000000000043b6a0 [ 71.178028][ T8435] R13: 0000000000000000 R14: 0000000000947a14 R15: 0000000000000000 [ 71.185999][ T8435] Modules linked in: [ 71.190361][ T8435] ---[ end trace 9158407759c9cc7a ]--- [ 71.192900][ T3257] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.202208][ T8435] RIP: 0010:skb_release_data+0x3a0/0x750 [ 71.202225][ T3257] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.214302][ T8435] Code: 48 8b 04 24 48 c1 e8 03 42 80 3c 30 00 0f 85 d3 02 00 00 49 63 c4 48 c1 e0 04 4a 8b 6c 28 30 48 8d 7d 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 0f 85 a7 02 00 00 48 8b 45 08 31 ff 48 89 c3 48 89 [ 71.234107][ T8435] RSP: 0018:ffffc9000167f960 EFLAGS: 00010202 [ 71.240220][ T8435] RAX: 000000000012f501 RBX: 0000000000000011 RCX: 0000000000000000 [ 71.248293][ T8435] RDX: ffff8880305bd580 RSI: ffffffff8703c746 RDI: 000000000097a808 [ 71.256343][ T8435] RBP: 000000000097a800 R08: 0000000000000011 R09: 000000000097a800 [ 71.264515][ T8435] R10: ffffffff8703c733 R11: 0000000000000000 R12: 0000000000000010 [ 71.272609][ T8435] R13: ffff88802d3afecc R14: dffffc0000000000 R15: ffff88801aabe140 [ 71.280587][ T8435] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 71.289552][ T8435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.296169][ T8435] CR2: 00007f2934154000 CR3: 00000000244dc000 CR4: 00000000001506e0 [ 71.304179][ T8435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.312176][ T8435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.320143][ T8435] Kernel panic - not syncing: Fatal exception [ 71.326754][ T8435] Kernel Offset: disabled [ 71.331081][ T8435] Rebooting in 86400 seconds..