[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.5' (ECDSA) to the list of known hosts. 2021/04/28 12:14:02 fuzzer started 2021/04/28 12:14:03 dialing manager at 10.128.0.169:37665 2021/04/28 12:14:03 syscalls: 3571 2021/04/28 12:14:03 code coverage: enabled 2021/04/28 12:14:03 comparison tracing: enabled 2021/04/28 12:14:03 extra coverage: enabled 2021/04/28 12:14:03 setuid sandbox: enabled 2021/04/28 12:14:03 namespace sandbox: enabled 2021/04/28 12:14:03 Android sandbox: /sys/fs/selinux/policy does not exist 2021/04/28 12:14:03 fault injection: enabled 2021/04/28 12:14:03 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/04/28 12:14:03 net packet injection: enabled 2021/04/28 12:14:03 net device setup: enabled 2021/04/28 12:14:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/04/28 12:14:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/04/28 12:14:03 USB emulation: enabled 2021/04/28 12:14:03 hci packet injection: enabled 2021/04/28 12:14:03 wifi device emulation: enabled 2021/04/28 12:14:03 802.15.4 emulation: enabled 2021/04/28 12:14:03 fetching corpus: 0, signal 0/2000 (executing program) 2021/04/28 12:14:03 fetching corpus: 50, signal 53167/56880 (executing program) 2021/04/28 12:14:03 fetching corpus: 100, signal 75527/80894 (executing program) 2021/04/28 12:14:03 fetching corpus: 150, signal 100357/107240 (executing program) 2021/04/28 12:14:04 fetching corpus: 200, signal 114903/123304 (executing program) 2021/04/28 12:14:04 fetching corpus: 250, signal 129036/138870 (executing program) 2021/04/28 12:14:04 fetching corpus: 300, signal 146565/157710 (executing program) 2021/04/28 12:14:04 fetching corpus: 350, signal 153997/166585 (executing program) syzkaller login: [ 74.586462][ C0] list_del corruption. prev->next should be ffff88801d258008, but was ffff88800000004e [ 74.596427][ C0] ------------[ cut here ]------------ [ 74.602061][ C0] kernel BUG at lib/list_debug.c:51! [ 74.607384][ C0] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 74.613484][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted 5.12.0-rc8-next-20210423-syzkaller #0 [ 74.622958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.633011][ C0] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4a [ 74.639365][ C0] Code: e8 0d a6 f2 ff 0f 0b 48 89 f1 48 c7 c7 a0 ed c2 89 4c 89 e6 e8 f9 a5 f2 ff 0f 0b 48 89 ee 48 c7 c7 40 ef c2 89 e8 e8 a5 f2 ff <0f> 0b 4c 89 ea 48 89 ee 48 c7 c7 80 ee c2 89 e8 d4 a5 f2 ff 0f 0b [ 74.658981][ C0] RSP: 0018:ffffc90000d27af0 EFLAGS: 00010082 [ 74.665058][ C0] RAX: 0000000000000054 RBX: 0000000000000200 RCX: 0000000000000000 [ 74.673070][ C0] RDX: ffff8880123d0000 RSI: ffffffff815cebe5 RDI: fffff520001a4f50 [ 74.681055][ C0] RBP: ffff88801d258008 R08: 0000000000000054 R09: 0000000000000000 [ 74.689206][ C0] R10: ffffffff815c8a2e R11: 0000000000000000 R12: ffff88801d258008 [ 74.697185][ C0] R13: ffff88800000004e R14: ffff88801d258024 R15: 0000000000000000 [ 74.705344][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 74.715250][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.721840][ C0] CR2: 00007f794a4698d0 CR3: 0000000015e74000 CR4: 00000000001506f0 [ 74.729818][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.737781][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.745745][ C0] Call Trace: [ 74.749037][ C0] napi_complete_done+0x644/0x880 [ 74.754077][ C0] virtnet_poll+0xbeb/0x1180 [ 74.758666][ C0] ? receive_buf+0x6250/0x6250 [ 74.763424][ C0] ? finish_task_switch.isra.0+0x15d/0x810 [ 74.769233][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 74.774099][ C0] __napi_poll+0xaf/0x440 [ 74.778445][ C0] net_rx_action+0x801/0xb40 [ 74.783037][ C0] ? napi_threaded_poll+0x5b0/0x5b0 [ 74.788242][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 74.793124][ C0] __do_softirq+0x29b/0x9fe [ 74.797638][ C0] ? __irq_exit_rcu+0x200/0x200 [ 74.802514][ C0] run_ksoftirqd+0x2d/0x60 [ 74.807038][ C0] smpboot_thread_fn+0x655/0x9e0 [ 74.812126][ C0] ? __smpboot_create_thread.part.0+0x370/0x370 [ 74.818401][ C0] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 74.824789][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 74.829847][ C0] ? __smpboot_create_thread.part.0+0x370/0x370 [ 74.836139][ C0] kthread+0x3b1/0x4a0 [ 74.840211][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 74.846099][ C0] ret_from_fork+0x1f/0x30 [ 74.850550][ C0] Modules linked in: [ 74.854493][ C0] ---[ end trace 96c0e575804b4636 ]--- [ 74.859952][ C0] RIP: 0010:__list_del_entry_valid.cold+0xf/0x4a [ 74.866277][ C0] Code: e8 0d a6 f2 ff 0f 0b 48 89 f1 48 c7 c7 a0 ed c2 89 4c 89 e6 e8 f9 a5 f2 ff 0f 0b 48 89 ee 48 c7 c7 40 ef c2 89 e8 e8 a5 f2 ff <0f> 0b 4c 89 ea 48 89 ee 48 c7 c7 80 ee c2 89 e8 d4 a5 f2 ff 0f 0b [ 74.885878][ C0] RSP: 0018:ffffc90000d27af0 EFLAGS: 00010082 [ 74.891938][ C0] RAX: 0000000000000054 RBX: 0000000000000200 RCX: 0000000000000000 [ 74.899903][ C0] RDX: ffff8880123d0000 RSI: ffffffff815cebe5 RDI: fffff520001a4f50 [ 74.907889][ C0] RBP: ffff88801d258008 R08: 0000000000000054 R09: 0000000000000000 [ 74.915855][ C0] R10: ffffffff815c8a2e R11: 0000000000000000 R12: ffff88801d258008 [ 74.923843][ C0] R13: ffff88800000004e R14: ffff88801d258024 R15: 0000000000000000 [ 74.931824][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 74.940751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.947327][ C0] CR2: 00007f794a4698d0 CR3: 0000000015e74000 CR4: 00000000001506f0 [ 74.955292][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.963270][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.971243][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 74.978964][ C0] Kernel Offset: disabled [ 74.983407][ C0] Rebooting in 86400 seconds..