[ 39.849145] audit: type=1800 audit(1546388180.959:25): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 39.885696] audit: type=1800 audit(1546388180.959:26): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 39.912177] audit: type=1800 audit(1546388180.959:27): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 80.106642] cron (7925) used greatest stack depth: 19848 bytes left Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. 2019/01/02 00:17:30 parsed 1 programs 2019/01/02 00:17:31 executed programs: 0 [ 110.818068] IPVS: ftp: loaded support on port[0] = 21 [ 110.886331] chnl_net:caif_netlink_parms(): no params data found [ 110.921525] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.928402] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.935441] device bridge_slave_0 entered promiscuous mode [ 110.942941] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.949399] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.956429] device bridge_slave_1 entered promiscuous mode [ 110.973662] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 110.982850] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 111.002521] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 111.010087] team0: Port device team_slave_0 added [ 111.015672] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 111.023010] team0: Port device team_slave_1 added [ 111.028480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 111.035786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 111.119532] device hsr_slave_0 entered promiscuous mode [ 111.167455] device hsr_slave_1 entered promiscuous mode [ 111.207814] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 111.214854] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 111.229268] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.235670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.242682] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.249081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.282936] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 111.290324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.298633] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 111.306710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.326173] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.334023] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.341787] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 111.352047] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 111.358231] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.366332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.373988] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.380354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.390663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.398814] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.405135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.425853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.436197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.447324] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 111.454916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.462867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.470461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.478274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.486036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.493111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.505755] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 111.515688] 8021q: adding VLAN 0 to HW filter on device batadv0 2019/01/02 00:17:36 executed programs: 51 [ 117.199855] list_del corruption, ffff88809aaa3db0->next is LIST_POISON1 (dead000000000100) [ 117.208973] ------------[ cut here ]------------ [ 117.213735] kernel BUG at lib/list_debug.c:45! [ 117.218386] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 117.223754] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 4.20.0-rc7-next-20181224 #1 [ 117.231629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.240985] Workqueue: events p9_read_work [ 117.245240] RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f [ 117.250962] Code: e8 d5 5d d6 fd 0f 0b 4c 89 f6 48 c7 c7 e0 a0 81 88 e8 c4 5d d6 fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 a0 81 88 e8 b0 5d d6 fd <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 a0 81 88 e8 9c 5d d6 fd 0f 0b [ 117.269855] RSP: 0018:ffff8880a949f8b8 EFLAGS: 00010282 [ 117.275215] RAX: 000000000000004e RBX: ffff88809aaa3d00 RCX: 0000000000000000 [ 117.282483] RDX: 0000000000000000 RSI: ffffffff8167d966 RDI: ffffed1015293f09 [ 117.289746] RBP: ffff8880a949f8d0 R08: 000000000000004e R09: ffffed1015cc5021 [ 117.297010] R10: ffffed1015cc5020 R11: ffff8880ae628107 R12: dead000000000200 [ 117.304309] R13: dead000000000100 R14: ffff88809aaa3db0 R15: 0000000000000015 [ 117.311579] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 117.319796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.325866] CR2: 00007f3befc90db8 CR3: 0000000094a4a000 CR4: 00000000001406f0 [ 117.333135] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.340395] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.347655] Call Trace: [ 117.350246] p9_read_work+0xa7f/0x1140 [ 117.354133] ? check_preemption_disabled+0x48/0x290 [ 117.359151] ? p9_conn_cancel+0xd70/0xd70 [ 117.363294] ? __lock_is_held+0xb6/0x140 [ 117.367379] process_one_work+0xd0c/0x1ce0 [ 117.371636] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 117.377777] ? __switch_to_asm+0x34/0x70 [ 117.381873] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 117.386545] ? __schedule+0x89f/0x1e60 [ 117.390433] ? pci_mmcfg_check_reserved+0x170/0x170 [ 117.395448] ? lockdep_hardirqs_on+0x415/0x5d0 [ 117.400054] ? worker_thread+0x3b7/0x14a0 [ 117.404196] ? find_held_lock+0x35/0x120 [ 117.408267] ? lock_acquire+0x1db/0x570 [ 117.412239] ? worker_thread+0x3cd/0x14a0 [ 117.416388] ? kasan_check_write+0x14/0x20 [ 117.420632] ? do_raw_spin_lock+0x156/0x360 [ 117.424966] ? lock_release+0xc40/0xc40 [ 117.428939] ? rwlock_bug.part.0+0x90/0x90 [ 117.433170] ? trace_hardirqs_on_caller+0x310/0x310 [ 117.438190] worker_thread+0x143/0x14a0 [ 117.442186] ? process_one_work+0x1ce0/0x1ce0 [ 117.446675] ? __kthread_parkme+0xc3/0x1b0 [ 117.450910] ? lock_acquire+0x1db/0x570 [ 117.454915] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 117.460029] ? lockdep_hardirqs_on+0x415/0x5d0 [ 117.464604] ? trace_hardirqs_on+0xbd/0x310 [ 117.468931] ? __kthread_parkme+0xc3/0x1b0 [ 117.473162] ? trace_hardirqs_off_caller+0x300/0x300 [ 117.478260] ? do_raw_spin_trylock+0x270/0x270 [ 117.482834] ? schedule+0x108/0x350 [ 117.486458] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 117.491555] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 117.497084] ? __kthread_parkme+0xfb/0x1b0 [ 117.501328] kthread+0x357/0x430 [ 117.504693] ? process_one_work+0x1ce0/0x1ce0 [ 117.509182] ? kthread_stop+0x920/0x920 [ 117.513166] ret_from_fork+0x3a/0x50 [ 117.516892] Modules linked in: [ 117.520142] ---[ end trace 299dfe67513d3dcc ]--- [ 117.524908] RIP: 0010:__list_del_entry_valid.cold+0x23/0x4f [ 117.530644] Code: e8 d5 5d d6 fd 0f 0b 4c 89 f6 48 c7 c7 e0 a0 81 88 e8 c4 5d d6 fd 0f 0b 4c 89 ea 4c 89 f6 48 c7 c7 20 a0 81 88 e8 b0 5d d6 fd <0f> 0b 4c 89 e2 4c 89 f6 48 c7 c7 80 a0 81 88 e8 9c 5d d6 fd 0f 0b [ 117.549559] RSP: 0018:ffff8880a949f8b8 EFLAGS: 00010282 [ 117.554957] RAX: 000000000000004e RBX: ffff88809aaa3d00 RCX: 0000000000000000 [ 117.562236] RDX: 0000000000000000 RSI: ffffffff8167d966 RDI: ffffed1015293f09 [ 117.569518] RBP: ffff8880a949f8d0 R08: 000000000000004e R09: ffffed1015cc5021 [ 117.576794] R10: ffffed1015cc5020 R11: ffff8880ae628107 R12: dead000000000200 [ 117.584076] R13: dead000000000100 R14: ffff88809aaa3db0 R15: 0000000000000015 [ 117.591364] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 117.599602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.605490] CR2: 00007f3befc90db8 CR3: 0000000094a4a000 CR4: 00000000001406f0 [ 117.612776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.620058] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.627338] Kernel panic - not syncing: Fatal exception [ 118.838651] Shutting down cpus with NMI [ 118.843593] Kernel Offset: disabled [ 118.847222] Rebooting in 86400 seconds..