INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.22' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 28.320051] FAULT_INJECTION: forcing a failure. [ 28.320051] name failslab, interval 1, probability 0, space 0, times 1 [ 28.331347] CPU: 1 PID: 4417 Comm: syzkaller042635 Not tainted 4.16.0-rc6+ #284 [ 28.338796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.348128] Call Trace: [ 28.350724] dump_stack+0x194/0x24d [ 28.354362] ? arch_local_irq_restore+0x53/0x53 [ 28.359036] should_fail+0x8c0/0xa40 [ 28.362731] ? trace_hardirqs_off+0x10/0x10 [ 28.367035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 28.372133] ? is_bpf_text_address+0x7b/0x120 [ 28.376619] ? trace_hardirqs_off+0x10/0x10 [ 28.381026] ? print_irqtrace_events+0x270/0x270 [ 28.385771] ? find_held_lock+0x35/0x1d0 [ 28.389825] ? nametbl_find_seq+0x1d0/0x580 [ 28.394120] ? lock_downgrade+0x980/0x980 [ 28.398248] ? lock_release+0xa40/0xa40 [ 28.402210] should_failslab+0xec/0x120 [ 28.406160] kmem_cache_alloc_trace+0x4b/0x740 [ 28.410723] ? nametbl_find_seq+0x3dd/0x580 [ 28.415031] tipc_nameseq_create+0xad/0x540 [ 28.419343] ? lock_release+0xa40/0xa40 [ 28.423293] ? __tipc_nl_add_monitor+0xf80/0xf80 [ 28.428215] ? tipc_nametbl_subscribe+0x2bc/0xf80 [ 28.433049] tipc_nametbl_subscribe+0xb8e/0xf80 [ 28.437707] ? print_irqtrace_events+0x270/0x270 [ 28.442444] ? find_held_lock+0x35/0x1d0 [ 28.446499] ? __lock_is_held+0xb6/0x140 [ 28.450556] ? tipc_nametbl_withdraw+0x9a0/0x9a0 [ 28.455290] ? mark_held_locks+0xaf/0x100 [ 28.459415] ? __raw_spin_lock_init+0x1c/0x100 [ 28.463973] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.468970] ? __lockdep_init_map+0xe4/0x650 [ 28.473361] ? lockdep_init_map+0x9/0x10 [ 28.477414] tipc_sub_subscribe+0x342/0x510 [ 28.481716] ? tipc_sub_get+0x20/0x20 [ 28.485506] tipc_conn_rcv_sub.isra.5+0x383/0x760 [ 28.490347] ? tipc_conn_close+0x140/0x140 [ 28.494576] ? lock_release+0xa40/0xa40 [ 28.498538] ? __lock_is_held+0xb6/0x140 [ 28.502604] tipc_topsrv_kern_subscr+0x5fb/0x9d0 [ 28.507359] ? tipc_topsrv_queue_evt+0x6d0/0x6d0 [ 28.512099] ? tipc_group_create+0x2b6/0x990 [ 28.516492] ? lock_downgrade+0x980/0x980 [ 28.520635] ? memset+0x31/0x40 [ 28.523904] ? tipc_bcast_stop+0x350/0x350 [ 28.528143] tipc_group_create+0x6f2/0x990 [ 28.532379] ? tipc_group_size+0x50/0x50 [ 28.536431] ? mark_held_locks+0xaf/0x100 [ 28.540562] ? do_raw_spin_trylock+0x190/0x190 [ 28.545141] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.550140] ? lock_sock_nested+0x91/0x110 [ 28.554354] ? trace_hardirqs_on+0xd/0x10 [ 28.558480] ? __local_bh_enable_ip+0x121/0x230 [ 28.563141] tipc_setsockopt+0x28a/0xcf0 [ 28.567194] ? tipc_sk_leave+0x200/0x200 [ 28.571244] ? __fdget+0x18/0x20 [ 28.574601] ? security_socket_setsockopt+0x89/0xb0 [ 28.579613] SyS_setsockopt+0x189/0x360 [ 28.583569] ? SyS_recv+0x40/0x40 [ 28.587011] ? SyS_write+0x184/0x220 [ 28.590718] ? SyS_read+0x220/0x220 [ 28.594328] ? do_syscall_64+0xb7/0x940 [ 28.598288] ? SyS_recv+0x40/0x40 [ 28.601727] do_syscall_64+0x281/0x940 [ 28.605594] ? __do_page_fault+0xc90/0xc90 [ 28.609810] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 28.614557] ? syscall_return_slowpath+0x550/0x550 [ 28.619472] ? syscall_return_slowpath+0x2ac/0x550 [ 28.624390] ? prepare_exit_to_usermode+0x350/0x350 [ 28.629388] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 28.634745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 28.639571] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 28.644738] RIP: 0033:0x440609 [ 28.647909] RSP: 002b:00007ffd8ad0f2b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 28.655597] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440609 [ 28.662859] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 28.670113] RBP: 00000000006cc018 R08: 0000000000000010 R09: 00000000006c0034 [ 28.677359] R10: 0000000020265000 R11: 0000000000000246 R12: 0000000000000004 [ 28.684608] R13: ffffffffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 28.692146] Name sequence creation failed, no memory [ 28.697270] Failed to create subscription for {1020,0,4294967295} [ 28.704540] list_del corruption. prev->next should be 0000000093d23372, but was (null) [ 28.713617] ------------[ cut here ]------------ [ 28.718358] kernel BUG at lib/list_debug.c:53! [ 28.722963] invalid opcode: 0000 [#1] SMP KASAN [ 28.727620] Dumping ftrace buffer: [ 28.731137] (ftrace buffer empty) [ 28.734824] Modules linked in: [ 28.738001] CPU: 1 PID: 4417 Comm: syzkaller042635 Not tainted 4.16.0-rc6+ #284 [ 28.745430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.754786] RIP: 0010:__list_del_entry_valid+0xef/0x150 [ 28.760124] RSP: 0018:ffff8801b150eec8 EFLAGS: 00010282 [ 28.765462] RAX: 0000000000000054 RBX: ffffffff886edfe0 RCX: 0000000000000000 [ 28.772727] RDX: 0000000000000054 RSI: 1ffff100362a1d8e RDI: ffffed00362a1dcd [ 28.781209] RBP: ffff8801b150eee0 R08: 1ffff100362a1d25 R09: 0000000000000000 [ 28.788460] R10: ffff8801b150eda8 R11: 0000000000000000 R12: ffffffffffffffff [ 28.795718] R13: ffff8801b150f080 R14: ffff8801b110a958 R15: ffff8801d3c83840 [ 28.802979] FS: 0000000001df9880(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 28.811186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.817045] CR2: 0000000020265000 CR3: 0000000007a22002 CR4: 00000000001606e0 [ 28.824293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.831545] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.838793] Call Trace: [ 28.841357] ? _raw_spin_lock_bh+0x39/0x40 [ 28.845565] tipc_nametbl_unsubscribe+0x337/0x990 [ 28.850399] ? __lock_acquire+0x664/0x3e00 [ 28.854629] ? tipc_nametbl_subscribe+0xf80/0xf80 [ 28.859492] ? trace_hardirqs_off+0x10/0x10 [ 28.863827] ? lock_acquire+0x1d5/0x580 [ 28.867800] ? lock_acquire+0x1d5/0x580 [ 28.871764] ? tipc_conn_delete_sub+0x237/0x4a0 [ 28.876429] ? tipc_conn_delete_sub+0x1f0/0x4a0 [ 28.881187] tipc_sub_unsubscribe+0x6d/0x2e0 [ 28.885573] ? tipc_sub_subscribe+0x510/0x510 [ 28.890053] ? tipc_conn_delete_sub+0x237/0x4a0 [ 28.894700] tipc_conn_delete_sub+0x324/0x4a0 [ 28.899194] ? tipc_topsrv_accept+0x340/0x340 [ 28.904104] ? trace_hardirqs_on+0xd/0x10 [ 28.908225] ? __local_bh_enable_ip+0x121/0x230 [ 28.912872] ? _raw_spin_unlock_bh+0x30/0x40 [ 28.917518] tipc_topsrv_kern_unsubscr+0x21d/0x350 [ 28.922431] ? tipc_dest_del+0x350/0x350 [ 28.926498] ? tipc_topsrv_kern_subscr+0x9d0/0x9d0 [ 28.931408] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 28.936573] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 28.941746] ? tipc_node_distr_xmit+0x212/0x2b0 [ 28.946404] tipc_group_delete+0x2c0/0x3d0 [ 28.950619] ? tipc_group_create+0x990/0x990 [ 28.955020] ? __tipc_shutdown+0x916/0xc80 [ 28.959234] ? find_held_lock+0x35/0x1d0 [ 28.963276] ? tipc_sk_respond+0x550/0x550 [ 28.967672] tipc_sk_leave+0x10b/0x200 [ 28.971547] ? tipc_sk_withdraw+0x6e0/0x6e0 [ 28.975845] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 28.980837] ? lock_sock_nested+0x91/0x110 [ 28.985160] ? __local_bh_enable_ip+0x121/0x230 [ 28.989817] tipc_release+0x154/0xff0 [ 28.993596] ? mntput_no_expire+0x130/0xa90 [ 28.997902] ? tipc_sk_backlog_rcv+0x390/0x390 [ 29.002461] ? lock_release+0xa40/0xa40 [ 29.006415] ? list_lru_count_node+0x70/0x70 [ 29.010800] ? do_raw_spin_trylock+0x190/0x190 [ 29.015354] ? locks_remove_file+0x3fa/0x5a0 [ 29.019738] ? fcntl_setlk+0x1100/0x1100 [ 29.023776] ? fsnotify+0x7b3/0x1140 [ 29.027474] ? fsnotify_first_mark+0x2b0/0x2b0 [ 29.032049] sock_release+0x8d/0x1e0 [ 29.035736] ? sock_alloc_file+0x560/0x560 [ 29.039959] sock_close+0x16/0x20 [ 29.043405] __fput+0x327/0x7e0 [ 29.046676] ? fput+0x140/0x140 [ 29.049931] ? check_same_owner+0x320/0x320 [ 29.054231] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.058703] ____fput+0x15/0x20 [ 29.061958] task_work_run+0x199/0x270 [ 29.065835] ? task_work_cancel+0x210/0x210 [ 29.070131] ? _raw_spin_unlock+0x22/0x30 [ 29.074254] ? switch_task_namespaces+0x87/0xc0 [ 29.078906] do_exit+0x9bb/0x1ad0 [ 29.082334] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.087005] ? finish_task_switch+0x1c1/0x7e0 [ 29.091481] ? mm_update_next_owner+0x930/0x930 [ 29.096125] ? copy_overflow+0x20/0x20 [ 29.100005] ? __schedule+0x903/0x1ec0 [ 29.103872] ? __sched_text_start+0x8/0x8 [ 29.107989] ? lock_downgrade+0x980/0x980 [ 29.112120] ? __local_bh_enable_ip+0x121/0x230 [ 29.116776] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.121781] ? release_sock+0x1d4/0x2a0 [ 29.125728] ? __local_bh_enable_ip+0x121/0x230 [ 29.130372] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.134766] ? release_sock+0x1d4/0x2a0 [ 29.138729] ? __release_sock+0x360/0x360 [ 29.142854] ? tipc_nametbl_build_group+0x2a0/0x3a0 [ 29.147860] ? schedule+0xf5/0x430 [ 29.151382] ? __schedule+0x1ec0/0x1ec0 [ 29.155332] ? __fdget+0x18/0x20 [ 29.158672] ? security_socket_setsockopt+0x89/0xb0 [ 29.163666] ? exit_to_usermode_loop+0x8c/0x2f0 [ 29.168310] do_group_exit+0x149/0x400 [ 29.172171] ? trace_hardirqs_off+0xd/0x10 [ 29.176378] ? exit_to_usermode_loop+0x198/0x2f0 [ 29.181200] ? SyS_exit+0x30/0x30 [ 29.184630] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 29.190157] ? do_syscall_64+0xb7/0x940 [ 29.194108] ? do_group_exit+0x400/0x400 [ 29.198148] SyS_exit_group+0x1d/0x20 [ 29.201926] do_syscall_64+0x281/0x940 [ 29.205789] ? __do_page_fault+0xc90/0xc90 [ 29.210000] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.214746] ? syscall_return_slowpath+0x550/0x550 [ 29.219651] ? syscall_return_slowpath+0x2ac/0x550 [ 29.224566] ? prepare_exit_to_usermode+0x350/0x350 [ 29.229560] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 29.234900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.239729] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 29.244893] RIP: 0033:0x43f268 [ 29.248070] RSP: 002b:00007ffd8ad0f2f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.255765] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043f268 [ 29.263027] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 29.270274] RBP: 00000000004bfb68 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 29.277522] R10: 0000000020265000 R11: 0000000000000246 R12: 0000000000000001 [ 29.284782] R13: 00000000006d2180 R14: 0000000000000000 R15: 0000000000000000 [ 29.292038] Code: 4c 89 e2 48 c7 c7 40 8e e5 86 e8 a5 67 a7 fe 0f 0b 48 c7 c7 a0 8e e5 86 e8 97 67 a7 fe 0f 0b 48 c7 c7 00 8f e5 86 e8 89 67 a7 fe <0f> 0b 48 c7 c7 60 8f e5 86 e8 7b 67 a7 fe 0f 0b 48 89 df 48 89 [ 29.311224] RIP: __list_del_entry_valid+0xef/0x150 RSP: ffff8801b150eec8 [ 29.318086] ---[ end trace 54edd7bee5f3e4c0 ]--- [ 29.322834] Kernel panic - not syncing: Fatal exception in interrupt [ 29.329810] Dumping ftrace buffer: [ 29.333330] (ftrace buffer empty) [ 29.337024] Kernel Offset: disabled [ 29.340638] Rebooting in 86400 seconds..