[ 46.922221] audit: type=1800 audit(1555115137.964:27): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 [ 46.941733] audit: type=1800 audit(1555115137.964:28): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 47.679710] audit: type=1800 audit(1555115138.764:29): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 47.699219] audit: type=1800 audit(1555115138.764:30): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.63' (ECDSA) to the list of known hosts. syzkaller login: [ 57.039953] IPVS: ftp: loaded support on port[0] = 21 [ 57.113074] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.120211] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.127693] device bridge_slave_0 entered promiscuous mode [ 57.134896] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.141499] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.148808] device bridge_slave_1 entered promiscuous mode [ 57.163394] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.172322] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.188171] team0: Port device team_slave_0 added [ 57.194134] team0: Port device team_slave_1 added [ 57.218598] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.225084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.232135] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.238492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.269275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.279773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.289129] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.296661] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.303900] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.314382] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.323641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.331520] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.337875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.347447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.355223] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.361621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.377610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.387219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.394517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.405743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.415263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready executing program [ 57.461967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.755519] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.005630] usb 1-1: Using ep0 maxpacket: 32 [ 58.135865] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 58.143663] usb 1-1: config 0 has no interface number 0 [ 58.149423] usb 1-1: New USB device found, idVendor=1286, idProduct=2042, bcdDevice= 5.38 [ 58.157963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.170480] usb 1-1: config 0 descriptor?? [ 58.415624] usb 1-1: string descriptor 0 read error: -71 [ 58.433112] usb 1-1: USB disconnect, device number 2 [ 58.444900] usb 1-1: Direct firmware load for mrvl/usb8766_uapsta.bin failed with error -2 [ 58.453430] usb 1-1: Failed to get firmware mrvl/usb8766_uapsta.bin [ 58.460069] usb 1-1: info: _mwifiex_fw_dpc: unregister device [ 58.466272] INFO: trying to register non-static key. [ 58.471374] the code is fine but needs lockdep annotation. [ 58.476986] turning off the locking correctness validator. [ 58.482610] CPU: 0 PID: 531 Comm: kworker/0:2 Not tainted 5.1.0-rc4-319354-g9a33b36 #3 [ 58.490918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.500283] Workqueue: events request_firmware_work_func [ 58.505723] Call Trace: [ 58.508317] dump_stack+0xe8/0x16e [ 58.511864] register_lock_class+0x11b8/0x1250 [ 58.516453] ? mark_held_locks+0x9f/0xe0 [ 58.520523] ? _raw_spin_unlock_irq+0x29/0x40 [ 58.525017] ? is_dynamic_key+0x1b0/0x1b0 [ 58.529173] ? finish_task_switch+0x1cb/0x6b0 [ 58.533774] ? __switch_to_asm+0x34/0x70 [ 58.537832] ? __switch_to_asm+0x40/0x70 [ 58.542094] __lock_acquire+0xfb/0x37c0 [ 58.546069] ? firmware_map_remove+0x1a1/0x1a1 [ 58.550696] ? mark_held_locks+0xe0/0xe0 [ 58.554753] ? _cond_resched+0x15/0x30 [ 58.558634] ? usb_kill_urb+0x19d/0x2c0 [ 58.562591] lock_acquire+0x10d/0x2f0 [ 58.566380] ? del_timer_sync+0x5/0x150 [ 58.570344] del_timer_sync+0x4c/0x150 [ 58.574412] ? del_timer_sync+0x5/0x150 [ 58.578420] mwifiex_unregister_dev+0x41b/0x690 [ 58.583271] _mwifiex_fw_dpc+0x711/0xdd0 [ 58.587320] ? mwifiex_usb_prepare_tx_aggr_skb+0x8c0/0x8c0 [ 58.592935] ? slab_free_freelist_hook+0x5e/0x140 [ 58.597813] ? mwifiex_free_adapter+0x3a0/0x3a0 [ 58.602470] ? _request_firmware+0x913/0x10d0 [ 58.607013] ? kfree+0xce/0x290 [ 58.610284] ? _request_firmware+0x10b/0x10d0 [ 58.614769] ? assign_fw+0x410/0x410 [ 58.618474] ? find_held_lock+0x2d/0x110 [ 58.622517] ? process_one_work+0x831/0x1580 [ 58.626912] ? _mwifiex_fw_dpc+0xdd0/0xdd0 [ 58.631130] request_firmware_work_func+0x12d/0x249 [ 58.636142] ? request_firmware_into_buf+0x90/0x90 [ 58.641275] ? _raw_spin_unlock_irq+0x29/0x40 [ 58.645767] process_one_work+0x90f/0x1580 [ 58.650291] ? wq_pool_ids_show+0x300/0x300 [ 58.654755] ? do_raw_spin_lock+0x11f/0x290 [ 58.659080] worker_thread+0x9b/0xe20 [ 58.662869] ? process_one_work+0x1580/0x1580 [ 58.667419] kthread+0x313/0x420 [ 58.670773] ? kthread_park+0x1a0/0x1a0 [ 58.674871] ret_from_fork+0x3a/0x50 [ 58.678715] ------------[ cut here ]------------ [ 58.683613] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 58.694014] WARNING: CPU: 0 PID: 531 at lib/debugobjects.c:325 debug_print_object+0x162/0x250 [ 58.702845] Kernel panic - not syncing: panic_on_warn set ... [ 58.708722] CPU: 0 PID: 531 Comm: kworker/0:2 Not tainted 5.1.0-rc4-319354-g9a33b36 #3 [ 58.716848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.726220] Workqueue: events request_firmware_work_func [ 58.731782] Call Trace: [ 58.734360] dump_stack+0xe8/0x16e [ 58.737944] ? debug_print_object+0xe0/0x250 [ 58.742351] panic+0x29d/0x5f2 [ 58.745534] ? __warn_printk+0xf8/0xf8 [ 58.749416] ? debug_print_object+0x162/0x250 [ 58.753895] ? __probe_kernel_read+0x171/0x1b0 [ 58.758462] ? __warn.cold+0x5/0x48 [ 58.762087] ? __warn+0xe9/0x1d0 [ 58.765448] ? debug_print_object+0x162/0x250 [ 58.769932] __warn.cold+0x20/0x48 [ 58.773479] ? tick_nohz_tick_stopped+0x12/0x60 [ 58.778170] ? debug_print_object+0x162/0x250 [ 58.782656] report_bug+0x262/0x2a0 [ 58.786370] do_error_trap+0x130/0x1f0 [ 58.790253] ? debug_print_object+0x162/0x250 [ 58.794785] do_invalid_op+0x37/0x40 [ 58.798576] ? debug_print_object+0x162/0x250 [ 58.803136] invalid_op+0x14/0x20 [ 58.806581] RIP: 0010:debug_print_object+0x162/0x250 [ 58.811894] Code: dd e0 a1 b3 8e 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 bf 00 00 00 48 8b 14 dd e0 a1 b3 8e 48 c7 c7 60 96 b3 8e e8 8e 93 d2 fd <0f> 0b 83 05 e9 d6 59 10 01 48 83 c4 20 5b 5d 41 5c 41 5d c3 48 89 [ 58.830882] RSP: 0018:ffff88809faff8d8 EFLAGS: 00010286 [ 58.836234] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 58.843530] RDX: 0000000000000000 RSI: ffffffff815b1e42 RDI: ffffed1013f5ff0d [ 58.851090] RBP: 0000000000000001 R08: ffff88809f8a3100 R09: ffffed1015a04fc9 [ 58.858499] R10: ffffed1015a04fc8 R11: ffff8880ad027e47 R12: ffffffff917e7780 [ 58.865756] R13: ffffffff8161ec90 R14: 1ffff11013f5ff28 R15: ffff88809ad11c78 [ 58.873250] ? __internal_add_timer+0x1e0/0x1e0 [ 58.877906] ? vprintk_func+0x82/0x118 [ 58.881778] ? debug_print_object+0x162/0x250 [ 58.886261] debug_object_assert_init+0x23d/0x2f0 [ 58.891129] ? debug_object_destroy+0x230/0x230 [ 58.895831] ? trace_hardirqs_on_caller+0x5a/0x1d0 [ 58.900762] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 58.905581] try_to_del_timer_sync+0x72/0x110 [ 58.910074] ? detach_if_pending+0x430/0x430 [ 58.914479] ? trace_hardirqs_on+0x55/0x1c0 [ 58.918924] del_timer_sync+0x112/0x150 [ 58.922907] mwifiex_unregister_dev+0x41b/0x690 [ 58.927564] _mwifiex_fw_dpc+0x711/0xdd0 [ 58.931708] ? mwifiex_usb_prepare_tx_aggr_skb+0x8c0/0x8c0 [ 58.937330] ? slab_free_freelist_hook+0x5e/0x140 [ 58.942165] ? mwifiex_free_adapter+0x3a0/0x3a0 [ 58.946827] ? _request_firmware+0x913/0x10d0 [ 58.951492] ? kfree+0xce/0x290 [ 58.955018] ? _request_firmware+0x10b/0x10d0 [ 58.959500] ? assign_fw+0x410/0x410 [ 58.963249] ? find_held_lock+0x2d/0x110 [ 58.967301] ? process_one_work+0x831/0x1580 [ 58.971738] ? _mwifiex_fw_dpc+0xdd0/0xdd0 [ 58.975962] request_firmware_work_func+0x12d/0x249 [ 58.980969] ? request_firmware_into_buf+0x90/0x90 [ 58.985894] ? _raw_spin_unlock_irq+0x29/0x40 [ 58.990380] process_one_work+0x90f/0x1580 [ 58.994599] ? wq_pool_ids_show+0x300/0x300 [ 58.998908] ? do_raw_spin_lock+0x11f/0x290 [ 59.003317] worker_thread+0x9b/0xe20 [ 59.007113] ? process_one_work+0x1580/0x1580 [ 59.011598] kthread+0x313/0x420 [ 59.015047] ? kthread_park+0x1a0/0x1a0 [ 59.019219] ret_from_fork+0x3a/0x50 [ 59.023658] Kernel Offset: disabled [ 59.027315] Rebooting in 86400 seconds..