Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts.
2021/05/02 23:14:44 fuzzer started
2021/05/02 23:14:45 dialing manager at 10.128.0.169:44661
2021/05/02 23:14:45 syscalls: 3571
2021/05/02 23:14:45 code coverage: enabled
2021/05/02 23:14:45 comparison tracing: enabled
2021/05/02 23:14:45 extra coverage: enabled
2021/05/02 23:14:45 setuid sandbox: enabled
2021/05/02 23:14:45 namespace sandbox: enabled
2021/05/02 23:14:45 Android sandbox: /sys/fs/selinux/policy does not exist
2021/05/02 23:14:45 fault injection: enabled
2021/05/02 23:14:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/05/02 23:14:45 net packet injection: enabled
2021/05/02 23:14:45 net device setup: enabled
2021/05/02 23:14:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/05/02 23:14:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/05/02 23:14:45 USB emulation: enabled
2021/05/02 23:14:45 hci packet injection: enabled
2021/05/02 23:14:45 wifi device emulation: enabled
2021/05/02 23:14:45 802.15.4 emulation: enabled
2021/05/02 23:14:45 fetching corpus: 0, signal 0/2000 (executing program)
2021/05/02 23:14:45 fetching corpus: 50, signal 51447/55180 (executing program)
syzkaller login: [   75.310813][ T8470] ==================================================================
[   75.319019][ T8470] BUG: KASAN: use-after-free in __skb_datagram_iter+0x6b8/0x770
[   75.326653][ T8470] Read of size 4 at addr ffff88802ec20004 by task syz-fuzzer/8470
[   75.334438][ T8470] 
[   75.336743][ T8470] CPU: 1 PID: 8470 Comm: syz-fuzzer Not tainted 5.12.0-rc8-next-20210423-syzkaller #0
[   75.346262][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   75.356315][ T8470] Call Trace:
[   75.359610][ T8470]  dump_stack+0x141/0x1d7
[   75.363937][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.369206][ T8470]  print_address_description.constprop.0.cold+0x5b/0x2f8
[   75.376220][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.381487][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.386774][ T8470]  kasan_report.cold+0x7c/0xd8
[   75.391534][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.396806][ T8470]  __skb_datagram_iter+0x6b8/0x770
[   75.401906][ T8470]  ? zerocopy_sg_from_iter+0x110/0x110
[   75.407353][ T8470]  skb_copy_datagram_iter+0x40/0x50
[   75.412551][ T8470]  tcp_recvmsg_locked+0x1048/0x22f0
[   75.417746][ T8470]  ? tcp_splice_read+0x8b0/0x8b0
[   75.422684][ T8470]  ? mark_held_locks+0x9f/0xe0
[   75.427451][ T8470]  ? __local_bh_enable_ip+0xa0/0x120
[   75.432724][ T8470]  tcp_recvmsg+0x134/0x550
[   75.437128][ T8470]  ? tcp_recvmsg_locked+0x22f0/0x22f0
[   75.442491][ T8470]  ? aa_sk_perm+0x311/0xab0
[   75.446981][ T8470]  inet_recvmsg+0x11b/0x5e0
[   75.451474][ T8470]  ? inet_sendpage+0x140/0x140
[   75.456573][ T8470]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   75.462799][ T8470]  ? security_socket_recvmsg+0x8f/0xc0
[   75.468245][ T8470]  sock_read_iter+0x33c/0x470
[   75.472920][ T8470]  ? ____sys_recvmsg+0x600/0x600
[   75.477857][ T8470]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   75.484087][ T8470]  ? fsnotify+0xa58/0x1060
[   75.488492][ T8470]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   75.494724][ T8470]  new_sync_read+0x5b7/0x6e0
[   75.499300][ T8470]  ? ksys_lseek+0x1b0/0x1b0
[   75.503801][ T8470]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[   75.509781][ T8470]  vfs_read+0x35c/0x570
[   75.513923][ T8470]  ksys_read+0x1ee/0x250
[   75.518172][ T8470]  ? vfs_write+0xa40/0xa40
[   75.522581][ T8470]  ? syscall_enter_from_user_mode+0x27/0x70
[   75.528470][ T8470]  do_syscall_64+0x3a/0xb0
[   75.532881][ T8470]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   75.538761][ T8470] RIP: 0033:0x4af19b
[   75.542642][ T8470] Code: fb ff eb bd e8 a6 b6 fb ff e9 61 ff ff ff cc e8 9b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[   75.562232][ T8470] RSP: 002b:000000c000369828 EFLAGS: 00000212 ORIG_RAX: 0000000000000000
[   75.570628][ T8470] RAX: ffffffffffffffda RBX: 000000c00001c000 RCX: 00000000004af19b
[   75.578610][ T8470] RDX: 0000000000001000 RSI: 000000c000375000 RDI: 0000000000000006
[   75.586577][ T8470] RBP: 000000c000369878 R08: 0000000000000001 R09: 0000000000000002
[   75.594545][ T8470] R10: 0000000000003541 R11: 0000000000000212 R12: 000000000000353d
[   75.602522][ T8470] R13: 0000000000000400 R14: 0000000000000008 R15: 0000000000000004
[   75.610484][ T8470] 
[   75.612789][ T8470] The buggy address belongs to the page:
[   75.618395][ T8470] page:ffffea0000bb0800 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x2ec20
[   75.628796][ T8470] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   75.635894][ T8470] raw: 00fff00000000000 ffffea00007ad008 ffffea0000d1f808 0000000000000000
[   75.644471][ T8470] raw: 0000000000000000 0000000000000003 00000000ffffff7f 0000000000000000
[   75.653036][ T8470] page dumped because: kasan: bad access detected
[   75.659426][ T8470] 
[   75.661731][ T8470] Memory state around the buggy address:
[   75.667348][ T8470]  ffff88802ec1ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   75.675401][ T8470]  ffff88802ec1ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   75.683446][ T8470] >ffff88802ec20000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   75.691521][ T8470]                    ^
[   75.695757][ T8470]  ffff88802ec20080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   75.703810][ T8470]  ffff88802ec20100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   75.711871][ T8470] ==================================================================
[   75.719914][ T8470] Disabling lock debugging due to kernel taint
[   75.727213][ T8470] Kernel panic - not syncing: panic_on_warn set ...
[   75.733853][ T8470] CPU: 1 PID: 8470 Comm: syz-fuzzer Tainted: G    B             5.12.0-rc8-next-20210423-syzkaller #0
[   75.744794][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   75.754865][ T8470] Call Trace:
[   75.758145][ T8470]  dump_stack+0x141/0x1d7
[   75.762488][ T8470]  panic+0x306/0x73d
[   75.766409][ T8470]  ? __warn_printk+0xf3/0xf3
[   75.771023][ T8470]  ? preempt_schedule_common+0x59/0xc0
[   75.776494][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.781780][ T8470]  ? preempt_schedule_thunk+0x16/0x18
[   75.787158][ T8470]  ? trace_hardirqs_on+0x38/0x1c0
[   75.792186][ T8470]  ? trace_hardirqs_on+0x51/0x1c0
[   75.797211][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.802497][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.807778][ T8470]  end_report.cold+0x5a/0x5a
[   75.812374][ T8470]  kasan_report.cold+0x6a/0xd8
[   75.817145][ T8470]  ? __skb_datagram_iter+0x6b8/0x770
[   75.822441][ T8470]  __skb_datagram_iter+0x6b8/0x770
[   75.827583][ T8470]  ? zerocopy_sg_from_iter+0x110/0x110
[   75.833048][ T8470]  skb_copy_datagram_iter+0x40/0x50
[   75.838256][ T8470]  tcp_recvmsg_locked+0x1048/0x22f0
[   75.843471][ T8470]  ? tcp_splice_read+0x8b0/0x8b0
[   75.848419][ T8470]  ? mark_held_locks+0x9f/0xe0
[   75.853196][ T8470]  ? __local_bh_enable_ip+0xa0/0x120
[   75.858492][ T8470]  tcp_recvmsg+0x134/0x550
[   75.862922][ T8470]  ? tcp_recvmsg_locked+0x22f0/0x22f0
[   75.868309][ T8470]  ? aa_sk_perm+0x311/0xab0
[   75.872816][ T8470]  inet_recvmsg+0x11b/0x5e0
[   75.877328][ T8470]  ? inet_sendpage+0x140/0x140
[   75.882100][ T8470]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   75.888353][ T8470]  ? security_socket_recvmsg+0x8f/0xc0
[   75.893842][ T8470]  sock_read_iter+0x33c/0x470
[   75.898543][ T8470]  ? ____sys_recvmsg+0x600/0x600
[   75.903495][ T8470]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   75.909748][ T8470]  ? fsnotify+0xa58/0x1060
[   75.914172][ T8470]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[   75.920422][ T8470]  new_sync_read+0x5b7/0x6e0
[   75.925019][ T8470]  ? ksys_lseek+0x1b0/0x1b0
[   75.929532][ T8470]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[   75.935529][ T8470]  vfs_read+0x35c/0x570
[   75.939691][ T8470]  ksys_read+0x1ee/0x250
[   75.943936][ T8470]  ? vfs_write+0xa40/0xa40
[   75.948363][ T8470]  ? syscall_enter_from_user_mode+0x27/0x70
[   75.954268][ T8470]  do_syscall_64+0x3a/0xb0
[   75.958693][ T8470]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[   75.964591][ T8470] RIP: 0033:0x4af19b
[   75.968486][ T8470] Code: fb ff eb bd e8 a6 b6 fb ff e9 61 ff ff ff cc e8 9b 82 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30
[   75.988095][ T8470] RSP: 002b:000000c000369828 EFLAGS: 00000212 ORIG_RAX: 0000000000000000
[   75.996955][ T8470] RAX: ffffffffffffffda RBX: 000000c00001c000 RCX: 00000000004af19b
[   76.004950][ T8470] RDX: 0000000000001000 RSI: 000000c000375000 RDI: 0000000000000006
[   76.012930][ T8470] RBP: 000000c000369878 R08: 0000000000000001 R09: 0000000000000002
[   76.020906][ T8470] R10: 0000000000003541 R11: 0000000000000212 R12: 000000000000353d
[   76.028882][ T8470] R13: 0000000000000400 R14: 0000000000000008 R15: 0000000000000004
[   76.037256][ T8470] Kernel Offset: disabled
[   76.041579][ T8470] Rebooting in 86400 seconds..