Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.77' (ECDSA) to the list of known hosts. 2021/04/26 02:51:58 fuzzer started 2021/04/26 02:51:59 dialing manager at 10.128.0.169:40357 2021/04/26 02:51:59 syscalls: 3560 2021/04/26 02:51:59 code coverage: enabled 2021/04/26 02:51:59 comparison tracing: enabled 2021/04/26 02:51:59 extra coverage: enabled 2021/04/26 02:51:59 setuid sandbox: enabled 2021/04/26 02:51:59 namespace sandbox: enabled 2021/04/26 02:51:59 Android sandbox: /sys/fs/selinux/policy does not exist 2021/04/26 02:51:59 fault injection: enabled 2021/04/26 02:51:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/04/26 02:51:59 net packet injection: enabled 2021/04/26 02:51:59 net device setup: enabled 2021/04/26 02:51:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/04/26 02:51:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/04/26 02:51:59 USB emulation: enabled 2021/04/26 02:51:59 hci packet injection: enabled 2021/04/26 02:51:59 wifi device emulation: enabled 2021/04/26 02:51:59 802.15.4 emulation: enabled 2021/04/26 02:51:59 fetching corpus: 0, signal 0/2000 (executing program) 2021/04/26 02:51:59 fetching corpus: 50, signal 59882/63373 (executing program) syzkaller login: [ 84.081417][ T8449] BUG: unable to handle page fault for address: 00000960ffffea08 [ 84.089179][ T8449] #PF: supervisor read access in kernel mode [ 84.095167][ T8449] #PF: error_code(0x0000) - not-present page [ 84.101189][ T8449] PGD 0 P4D 0 [ 84.104757][ T8449] Oops: 0000 [#1] PREEMPT SMP KASAN [ 84.110523][ T8449] CPU: 1 PID: 8449 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 84.120313][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.130758][ T8449] RIP: 0010:stack_depot_save+0x12b/0x4e0 [ 84.136464][ T8449] Code: 05 7a 64 b8 0c 89 da 81 e2 ff ff 0f 00 4c 8d 3c d0 4d 8b 37 4d 85 f6 75 11 e9 94 00 00 00 4d 8b 36 4d 85 f6 0f 84 88 00 00 00 <41> 39 5e 08 75 ee 45 3b 66 0c 75 e8 31 c0 49 8b 4c c6 18 48 39 4c [ 84.157221][ T8449] RSP: 0018:ffffc9000130ebc0 EFLAGS: 00010206 [ 84.163635][ T8449] RAX: ffff88823b000000 RBX: 000000004cbfd06f RCX: 0000000000000002 [ 84.172368][ T8449] RDX: 00000000000fd06f RSI: 0000000000000800 RDI: 00000000181d99fa [ 84.180451][ T8449] RBP: ffffc9000130ec30 R08: 000000007a8f96ff R09: 0000000000000000 [ 84.188450][ T8449] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000022 [ 84.196794][ T8449] R13: 0000000000000022 R14: 00000960ffffea00 R15: ffff88823b7e8378 [ 84.204826][ T8449] FS: 000000c00002e890(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 84.213779][ T8449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.220379][ T8449] CR2: 00000960ffffea08 CR3: 0000000026518000 CR4: 00000000001506e0 [ 84.228376][ T8449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.236364][ T8449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.244352][ T8449] Call Trace: [ 84.247741][ T8449] ? kmem_cache_free+0x97/0x750 [ 84.252774][ T8449] kasan_save_stack+0x32/0x40 [ 84.257484][ T8449] ? kasan_save_stack+0x1b/0x40 [ 84.262356][ T8449] ? kasan_set_track+0x1c/0x30 [ 84.267149][ T8449] ? kasan_set_free_info+0x20/0x30 [ 84.272279][ T8449] ? __kasan_slab_free+0xfb/0x130 [ 84.277331][ T8449] ? slab_free_freelist_hook+0xdf/0x240 [ 84.283699][ T8449] ? kmem_cache_free+0x97/0x750 [ 84.288713][ T8449] ? kfree_skbmem+0xef/0x1b0 [ 84.293385][ T8449] ? consume_skb+0xcf/0x160 [ 84.297905][ T8449] ? __dev_kfree_skb_any+0x6b/0x80 [ 84.303056][ T8449] ? napi_consume_skb+0x27b/0x340 [ 84.309593][ T8449] ? free_old_xmit_skbs+0xe4/0x270 [ 84.314768][ T8449] ? start_xmit+0x144/0x16c0 [ 84.319380][ T8449] ? dev_hard_start_xmit+0x1eb/0x920 [ 84.325746][ T8449] ? sch_direct_xmit+0x2e1/0xbd0 [ 84.330738][ T8449] ? __qdisc_run+0x4ba/0x15f0 [ 84.335429][ T8449] ? __dev_queue_xmit+0x1390/0x2e50 [ 84.340651][ T8449] ? ip_finish_output2+0xef0/0x2220 [ 84.345879][ T8449] ? __ip_finish_output+0x396/0x640 [ 84.351999][ T8449] ? ip_finish_output+0x35/0x200 [ 84.357452][ T8449] ? ip_output+0x196/0x310 [ 84.361886][ T8449] ? __ip_queue_xmit+0x8d3/0x1a30 [ 84.367034][ T8449] ? __tcp_transmit_skb+0x1889/0x38f0 [ 84.372495][ T8449] ? __tcp_send_ack.part.0+0x3d6/0x7a0 [ 84.377989][ T8449] ? tcp_send_ack+0x7d/0xa0 [ 84.382617][ T8449] ? tcp_cleanup_rbuf+0x46c/0x5b0 [ 84.387855][ T8449] ? tcp_recvmsg_locked+0x7aa/0x22f0 [ 84.393165][ T8449] ? tcp_recvmsg+0x134/0x550 [ 84.397787][ T8449] ? inet_recvmsg+0x11b/0x5e0 [ 84.402520][ T8449] ? sock_read_iter+0x33c/0x470 [ 84.407942][ T8449] ? new_sync_read+0x5b7/0x6e0 [ 84.412748][ T8449] ? vfs_read+0x35c/0x570 [ 84.417095][ T8449] ? ksys_read+0x1ee/0x250 [ 84.421876][ T8449] ? do_syscall_64+0x3a/0xb0 [ 84.426514][ T8449] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.432749][ T8449] ? mark_held_locks+0x9f/0xe0 [ 84.437581][ T8449] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 84.443435][ T8449] ? lockdep_hardirqs_on+0x79/0x100 [ 84.448659][ T8449] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 84.454487][ T8449] ? debug_check_no_obj_freed+0x20c/0x420 [ 84.460285][ T8449] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 84.466757][ T8449] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 84.473113][ T8449] kasan_set_track+0x1c/0x30 [ 84.477771][ T8449] kasan_set_free_info+0x20/0x30 [ 84.482822][ T8449] __kasan_slab_free+0xfb/0x130 [ 84.487825][ T8449] slab_free_freelist_hook+0xdf/0x240 [ 84.493333][ T8449] kmem_cache_free+0x97/0x750 [ 84.498123][ T8449] ? kfree_skbmem+0xef/0x1b0 [ 84.502744][ T8449] ? skb_release_data+0x622/0x750 [ 84.507830][ T8449] kfree_skbmem+0xef/0x1b0 [ 84.512274][ T8449] consume_skb+0xcf/0x160 [ 84.516621][ T8449] __dev_kfree_skb_any+0x6b/0x80 [ 84.521565][ T8449] napi_consume_skb+0x27b/0x340 [ 84.526451][ T8449] free_old_xmit_skbs+0xe4/0x270 [ 84.531441][ T8449] ? virtnet_set_coalesce+0x2a0/0x2a0 [ 84.536828][ T8449] ? dev_queue_xmit_nit+0x7c2/0xa90 [ 84.542112][ T8449] start_xmit+0x144/0x16c0 [ 84.546552][ T8449] dev_hard_start_xmit+0x1eb/0x920 [ 84.551714][ T8449] sch_direct_xmit+0x2e1/0xbd0 [ 84.556508][ T8449] ? dev_watchdog+0xd00/0xd00 [ 84.561207][ T8449] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 84.567476][ T8449] __qdisc_run+0x4ba/0x15f0 [ 84.572094][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 84.578452][ T8449] __dev_queue_xmit+0x1390/0x2e50 [ 84.583703][ T8449] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 84.589018][ T8449] ? __ip_finish_output+0x396/0x640 [ 84.594423][ T8449] ? mark_held_locks+0x9f/0xe0 [ 84.599307][ T8449] ? ip_finish_output2+0x15ac/0x2220 [ 84.604617][ T8449] ip_finish_output2+0xef0/0x2220 [ 84.611331][ T8449] ? ip_fragment.constprop.0+0x240/0x240 [ 84.617000][ T8449] ? __ip_finish_output+0x640/0x640 [ 84.622235][ T8449] __ip_finish_output+0x396/0x640 [ 84.627295][ T8449] ip_finish_output+0x35/0x200 [ 84.632101][ T8449] ip_output+0x196/0x310 [ 84.636376][ T8449] __ip_queue_xmit+0x8d3/0x1a30 [ 84.641258][ T8449] __tcp_transmit_skb+0x1889/0x38f0 [ 84.646509][ T8449] ? __tcp_select_window+0xad0/0xad0 [ 84.651816][ T8449] ? find_held_lock+0x2d/0x110 [ 84.656616][ T8449] ? __build_skb_around+0x23e/0x2f0 [ 84.661862][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 84.668155][ T8449] ? __alloc_skb+0x17c/0x340 [ 84.672792][ T8449] __tcp_send_ack.part.0+0x3d6/0x7a0 [ 84.678100][ T8449] tcp_send_ack+0x7d/0xa0 [ 84.682457][ T8449] tcp_cleanup_rbuf+0x46c/0x5b0 [ 84.687328][ T8449] tcp_recvmsg_locked+0x7aa/0x22f0 [ 84.692495][ T8449] ? tcp_splice_read+0x8b0/0x8b0 [ 84.697483][ T8449] ? mark_held_locks+0x9f/0xe0 [ 84.702279][ T8449] ? __local_bh_enable_ip+0xa0/0x120 [ 84.707633][ T8449] tcp_recvmsg+0x134/0x550 [ 84.712079][ T8449] ? tcp_recvmsg_locked+0x22f0/0x22f0 [ 84.717477][ T8449] ? aa_sk_perm+0x311/0xab0 [ 84.722027][ T8449] inet_recvmsg+0x11b/0x5e0 [ 84.726558][ T8449] ? inet_sendpage+0x140/0x140 [ 84.731346][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 84.737620][ T8449] ? security_socket_recvmsg+0x8f/0xc0 [ 84.743201][ T8449] sock_read_iter+0x33c/0x470 [ 84.749053][ T8449] ? ____sys_recvmsg+0x600/0x600 [ 84.755675][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 84.761971][ T8449] ? fsnotify+0xa58/0x1060 [ 84.766531][ T8449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 84.772916][ T8449] new_sync_read+0x5b7/0x6e0 [ 84.777534][ T8449] ? ksys_lseek+0x1b0/0x1b0 [ 84.782070][ T8449] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 84.788091][ T8449] vfs_read+0x35c/0x570 [ 84.792276][ T8449] ksys_read+0x1ee/0x250 [ 84.796543][ T8449] ? vfs_write+0xa40/0xa40 [ 84.800981][ T8449] ? syscall_enter_from_user_mode+0x27/0x70 [ 84.806901][ T8449] do_syscall_64+0x3a/0xb0 [ 84.811556][ T8449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 84.817625][ T8449] RIP: 0033:0x4af19b [ 84.821574][ T8449] Code: fb ff eb bd e8 a6 b6 fb ff e9 61 ff ff ff cc e8 9b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 84.843984][ T8449] RSP: 002b:000000c0002bb828 EFLAGS: 00000212 ORIG_RAX: 0000000000000000 [ 84.852549][ T8449] RAX: ffffffffffffffda RBX: 000000c00001c000 RCX: 00000000004af19b [ 84.863154][ T8449] RDX: 0000000000001000 RSI: 000000c00067c000 RDI: 0000000000000006 [ 84.871156][ T8449] RBP: 000000c0002bb878 R08: 0000000000000001 R09: 0000000000000002 [ 84.879167][ T8449] R10: 00000000000046cc R11: 0000000000000212 R12: 00000000000046c8 [ 84.887160][ T8449] R13: 0000000000000100 R14: 0000000000000008 R15: 0000000000000004 [ 84.895364][ T8449] Modules linked in: [ 84.899301][ T8449] CR2: 00000960ffffea08 [ 84.903487][ T8449] ---[ end trace 2a3d8d8bb214e392 ]--- [ 84.909523][ T8449] RIP: 0010:stack_depot_save+0x12b/0x4e0 [ 84.915195][ T8449] Code: 05 7a 64 b8 0c 89 da 81 e2 ff ff 0f 00 4c 8d 3c d0 4d 8b 37 4d 85 f6 75 11 e9 94 00 00 00 4d 8b 36 4d 85 f6 0f 84 88 00 00 00 <41> 39 5e 08 75 ee 45 3b 66 0c 75 e8 31 c0 49 8b 4c c6 18 48 39 4c [ 84.936874][ T8449] RSP: 0018:ffffc9000130ebc0 EFLAGS: 00010206 [ 84.943620][ T8449] RAX: ffff88823b000000 RBX: 000000004cbfd06f RCX: 0000000000000002 [ 84.951980][ T8449] RDX: 00000000000fd06f RSI: 0000000000000800 RDI: 00000000181d99fa [ 84.960285][ T8449] RBP: ffffc9000130ec30 R08: 000000007a8f96ff R09: 0000000000000000 [ 84.968538][ T8449] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000022 [ 84.976728][ T8449] R13: 0000000000000022 R14: 00000960ffffea00 R15: ffff88823b7e8378 [ 84.984722][ T8449] FS: 000000c00002e890(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 84.993711][ T8449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.000323][ T8449] CR2: 00000960ffffea08 CR3: 0000000026518000 CR4: 00000000001506e0 [ 85.008432][ T8449] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.016424][ T8449] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.024790][ T8449] Kernel panic - not syncing: Fatal exception in interrupt [ 85.032256][ T8449] Kernel Offset: disabled [ 85.036970][ T8449] Rebooting in 86400 seconds..