[ OK ] Started Getty on tty4. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.126' (ECDSA) to the list of known hosts. 2020/04/30 14:33:58 fuzzer started 2020/04/30 14:33:58 connecting to host at 10.128.0.26:38783 2020/04/30 14:33:58 checking machine... 2020/04/30 14:33:58 checking revisions... 2020/04/30 14:33:58 testing simple program... syzkaller login: [ 58.099357][ T7052] IPVS: ftp: loaded support on port[0] = 21 2020/04/30 14:33:58 building call list... [ 58.478528][ T102] tipc: TX() has been purged, node left! [ 59.695926][ T7038] can: request_module (can-proto-0) failed. executing program [ 61.577359][ T7038] can: request_module (can-proto-0) failed. [ 61.590008][ T7038] can: request_module (can-proto-0) failed. [ 62.068965][ T7038] ================================================================== [ 62.077195][ T7038] BUG: KASAN: null-ptr-deref in x25_disconnect+0x253/0x370 [ 62.084376][ T7038] Write of size 4 at addr 00000000000000d8 by task syz-fuzzer/7038 [ 62.092253][ T7038] [ 62.094590][ T7038] CPU: 0 PID: 7038 Comm: syz-fuzzer Not tainted 5.7.0-rc2-syzkaller #0 [ 62.102825][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.112992][ T7038] Call Trace: [ 62.116293][ T7038] dump_stack+0x188/0x20d [ 62.120635][ T7038] ? x25_disconnect+0x253/0x370 [ 62.125491][ T7038] ? __sock_release+0x280/0x280 [ 62.130359][ T7038] __kasan_report.cold+0x5/0x4d [ 62.135309][ T7038] ? rcu_read_lock_held+0x1/0xb0 [ 62.140247][ T7038] ? x25_disconnect+0x253/0x370 [ 62.145086][ T7038] ? x25_disconnect+0x253/0x370 [ 62.150009][ T7038] kasan_report+0x33/0x50 [ 62.154324][ T7038] check_memory_region+0x141/0x190 [ 62.159418][ T7038] x25_disconnect+0x253/0x370 [ 62.164082][ T7038] x25_release+0x345/0x420 [ 62.168480][ T7038] __sock_release+0xcd/0x280 [ 62.173077][ T7038] sock_close+0x18/0x20 [ 62.177248][ T7038] __fput+0x33e/0x880 [ 62.181263][ T7038] task_work_run+0xf4/0x1b0 [ 62.185776][ T7038] exit_to_usermode_loop+0x2fa/0x360 [ 62.191055][ T7038] do_syscall_64+0x6b1/0x7d0 [ 62.195633][ T7038] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 62.201506][ T7038] RIP: 0033:0x4afb40 [ 62.205383][ T7038] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 62.225329][ T7038] RSP: 002b:000000c0000774f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 62.233743][ T7038] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 62.241721][ T7038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.249683][ T7038] RBP: 000000c000077538 R08: 0000000000000000 R09: 0000000000000000 [ 62.257645][ T7038] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 62.265668][ T7038] R13: 0000000000000167 R14: 0000000000000166 R15: 0000000000000200 [ 62.273649][ T7038] ================================================================== [ 62.281692][ T7038] Disabling lock debugging due to kernel taint [ 62.287892][ T7038] Kernel panic - not syncing: panic_on_warn set ... [ 62.294482][ T7038] CPU: 0 PID: 7038 Comm: syz-fuzzer Tainted: G B 5.7.0-rc2-syzkaller #0 [ 62.304097][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.314130][ T7038] Call Trace: [ 62.317404][ T7038] dump_stack+0x188/0x20d [ 62.321735][ T7038] ? __sock_release+0x280/0x280 [ 62.326578][ T7038] panic+0x2e3/0x75c [ 62.330468][ T7038] ? add_taint.cold+0x16/0x16 [ 62.335128][ T7038] ? x25_disconnect+0x253/0x370 [ 62.340741][ T7038] ? trace_hardirqs_on+0x55/0x220 [ 62.345758][ T7038] ? x25_disconnect+0x253/0x370 [ 62.350600][ T7038] ? __sock_release+0x280/0x280 [ 62.356145][ T7038] end_report+0x4d/0x53 [ 62.360287][ T7038] __kasan_report.cold+0xd/0x4d [ 62.365121][ T7038] ? rcu_read_lock_held+0x1/0xb0 [ 62.370038][ T7038] ? x25_disconnect+0x253/0x370 [ 62.374946][ T7038] ? x25_disconnect+0x253/0x370 [ 62.379784][ T7038] kasan_report+0x33/0x50 [ 62.384113][ T7038] check_memory_region+0x141/0x190 [ 62.389239][ T7038] x25_disconnect+0x253/0x370 [ 62.393918][ T7038] x25_release+0x345/0x420 [ 62.398316][ T7038] __sock_release+0xcd/0x280 [ 62.402882][ T7038] sock_close+0x18/0x20 [ 62.407170][ T7038] __fput+0x33e/0x880 [ 62.411157][ T7038] task_work_run+0xf4/0x1b0 [ 62.415680][ T7038] exit_to_usermode_loop+0x2fa/0x360 [ 62.420949][ T7038] do_syscall_64+0x6b1/0x7d0 [ 62.425568][ T7038] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 62.431467][ T7038] RIP: 0033:0x4afb40 [ 62.435340][ T7038] Code: 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 49 c7 c2 00 00 00 00 49 c7 c0 00 00 00 00 49 c7 c1 00 00 00 00 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 28 ff ff ff ff 48 c7 44 24 30 [ 62.455273][ T7038] RSP: 002b:000000c0000774f8 EFLAGS: 00000216 ORIG_RAX: 0000000000000003 [ 62.463664][ T7038] RAX: 0000000000000000 RBX: 000000c00002c000 RCX: 00000000004afb40 [ 62.471636][ T7038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.479722][ T7038] RBP: 000000c000077538 R08: 0000000000000000 R09: 0000000000000000 [ 62.487678][ T7038] R10: 0000000000000000 R11: 0000000000000216 R12: ffffffffffffffff [ 62.496780][ T7038] R13: 0000000000000167 R14: 0000000000000166 R15: 0000000000000200 [ 62.505411][ T7038] Kernel Offset: disabled [ 62.509880][ T7038] Rebooting in 86400 seconds..