[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.7' (ECDSA) to the list of known hosts. executing program executing program syzkaller login: [ 45.230117] list_del corruption, ffff8880afd1fa70->next is LIST_POISON1 (dead000000000100) [ 45.238881] ------------[ cut here ]------------ [ 45.243620] kernel BUG at lib/list_debug.c:45! [ 45.248189] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.253537] CPU: 0 PID: 8126 Comm: syz-executor566 Not tainted 4.19.211-syzkaller #0 [ 45.261401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.270747] RIP: 0010:__list_del_entry_valid.cold+0x23/0x4a [ 45.276455] Code: e8 11 43 f7 ff 0f 0b 48 89 ee 48 c7 c7 40 e4 b3 88 e8 00 43 f7 ff 0f 0b 4c 89 ea 48 89 ee 48 c7 c7 80 e3 b3 88 e8 ec 42 f7 ff <0f> 0b 4c 89 e2 48 89 ee 48 c7 c7 e0 e3 b3 88 e8 d8 42 f7 ff 0f 0b [ 45.295333] RSP: 0018:ffff8880afd1f950 EFLAGS: 00010086 [ 45.300676] RAX: 000000000000004e RBX: ffff8880afd1fa58 RCX: 0000000000000000 [ 45.307923] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed1015fa3f1c [ 45.315169] RBP: ffff8880afd1fa70 R08: 000000000000004e R09: 0000000000000000 [ 45.322414] R10: 0000000000000005 R11: 0000000000000000 R12: dead000000000200 [ 45.329661] R13: dead000000000100 R14: ffff8880afd1fa78 R15: 0000000000000007 [ 45.336910] FS: 00007f372240b700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 45.345131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.350989] CR2: 0000000020400000 CR3: 000000009b222000 CR4: 00000000003406f0 [ 45.358236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.365501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.372746] Call Trace: [ 45.375324] remove_wait_queue+0x2c/0x180 [ 45.379454] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 45.384015] __tipc_sendstream+0x373/0x9d0 [ 45.388249] ? tipc_sendmsg+0x70/0x70 [ 45.392032] ? do_wait_intr_irq+0x270/0x270 [ 45.396335] ? mark_held_locks+0xa6/0xf0 [ 45.400376] ? __local_bh_enable_ip+0x159/0x270 [ 45.405022] tipc_sendstream+0x4c/0x70 [ 45.408910] ? __tipc_sendstream+0x9d0/0x9d0 [ 45.413298] sock_sendmsg+0xc3/0x120 [ 45.416994] ___sys_sendmsg+0x7bb/0x8e0 [ 45.420944] ? copy_msghdr_from_user+0x440/0x440 [ 45.425694] ? __fget+0x32f/0x510 [ 45.429127] ? lock_downgrade+0x720/0x720 [ 45.433258] ? check_preemption_disabled+0x41/0x280 [ 45.438266] ? check_preemption_disabled+0x41/0x280 [ 45.443259] ? __fget+0x356/0x510 [ 45.446691] ? do_dup2+0x450/0x450 [ 45.450210] ? __fdget+0x1d0/0x230 [ 45.453729] __x64_sys_sendmsg+0x132/0x220 [ 45.457955] ? __sys_sendmsg+0x1b0/0x1b0 [ 45.462003] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 45.467361] ? trace_hardirqs_off_caller+0x6e/0x210 [ 45.472354] ? do_syscall_64+0x21/0x620 [ 45.476318] do_syscall_64+0xf9/0x620 [ 45.480112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 45.485278] RIP: 0033:0x7f372249bb69 [ 45.488968] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 45.507846] RSP: 002b:00007f372240b308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.515530] RAX: ffffffffffffffda RBX: 00007f3722523428 RCX: 00007f372249bb69 [ 45.522779] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 45.530031] RBP: 00007f3722523420 R08: 00007f372240b700 R09: 0000000000000000 [ 45.537278] R10: 00007f372240b700 R11: 0000000000000246 R12: 00007f372252342c [ 45.544542] R13: 00007f37224f1074 R14: 70756f7267632f2e R15: 0000000000022000 [ 45.551789] Modules linked in: [ 45.554967] ---[ end trace 4b8f6bbc64f67f4c ]--- [ 45.559704] RIP: 0010:__list_del_entry_valid.cold+0x23/0x4a [ 45.565396] Code: e8 11 43 f7 ff 0f 0b 48 89 ee 48 c7 c7 40 e4 b3 88 e8 00 43 f7 ff 0f 0b 4c 89 ea 48 89 ee 48 c7 c7 80 e3 b3 88 e8 ec 42 f7 ff <0f> 0b 4c 89 e2 48 89 ee 48 c7 c7 e0 e3 b3 88 e8 d8 42 f7 ff 0f 0b [ 45.584274] RSP: 0018:ffff8880afd1f950 EFLAGS: 00010086 [ 45.589615] RAX: 000000000000004e RBX: ffff8880afd1fa58 RCX: 0000000000000000 [ 45.596866] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed1015fa3f1c [ 45.604115] RBP: ffff8880afd1fa70 R08: 000000000000004e R09: 0000000000000000 [ 45.611364] R10: 0000000000000005 R11: 0000000000000000 R12: dead000000000200 [ 45.618611] R13: dead000000000100 R14: ffff8880afd1fa78 R15: 0000000000000007 [ 45.625887] FS: 00007f372240b700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 45.634090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.639950] CR2: 0000000020400000 CR3: 000000009b222000 CR4: 00000000003406f0 [ 45.647200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.654453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.661699] Kernel panic - not syncing: Fatal exception [ 45.667213] Kernel Offset: disabled [ 45.670821] Rebooting in 86400 seconds..