INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.27' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 28.851861] device lo entered promiscuous mode [ 28.866894] FAULT_INJECTION: forcing a failure. [ 28.866894] name failslab, interval 1, probability 0, space 0, times 1 [ 28.878220] CPU: 1 PID: 4418 Comm: syzkaller542553 Not tainted 4.16.0-rc6+ #284 [ 28.885660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 28.894992] Call Trace: [ 28.897560] dump_stack+0x194/0x24d [ 28.901166] ? arch_local_irq_restore+0x53/0x53 [ 28.905832] should_fail+0x8c0/0xa40 [ 28.909521] ? trace_hardirqs_off+0x10/0x10 [ 28.913817] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 28.918898] ? is_bpf_text_address+0x7b/0x120 [ 28.923374] ? trace_hardirqs_off+0x10/0x10 [ 28.927674] ? print_irqtrace_events+0x270/0x270 [ 28.932427] ? depot_save_stack+0x2ca/0x460 [ 28.936739] ? find_held_lock+0x35/0x1d0 [ 28.940800] ? nametbl_find_seq+0x1d0/0x580 [ 28.945107] ? lock_downgrade+0x980/0x980 [ 28.949239] ? lock_release+0xa40/0xa40 [ 28.953195] should_failslab+0xec/0x120 [ 28.957146] kmem_cache_alloc_trace+0x4b/0x740 [ 28.961705] ? nametbl_find_seq+0x3dd/0x580 [ 28.966019] tipc_nameseq_create+0xad/0x540 [ 28.970315] ? lock_release+0xa40/0xa40 [ 28.974262] ? __tipc_nl_add_monitor+0xf80/0xf80 [ 28.978998] ? tipc_nametbl_subscribe+0x2bc/0xf80 [ 28.983824] tipc_nametbl_subscribe+0xb8e/0xf80 [ 28.988464] ? print_irqtrace_events+0x270/0x270 [ 28.993196] ? find_held_lock+0x35/0x1d0 [ 28.997236] ? __lock_is_held+0xb6/0x140 [ 29.001278] ? tipc_nametbl_withdraw+0x9a0/0x9a0 [ 29.006014] ? mark_held_locks+0xaf/0x100 [ 29.010149] ? __raw_spin_lock_init+0x1c/0x100 [ 29.014708] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.019699] ? __lockdep_init_map+0xe4/0x650 [ 29.024083] ? lockdep_init_map+0x9/0x10 [ 29.028121] tipc_sub_subscribe+0x342/0x510 [ 29.032422] ? tipc_sub_get+0x20/0x20 [ 29.036207] tipc_conn_rcv_sub.isra.5+0x383/0x760 [ 29.041035] ? tipc_conn_close+0x140/0x140 [ 29.045248] ? lock_release+0xa40/0xa40 [ 29.049203] ? __lock_is_held+0xb6/0x140 [ 29.053255] tipc_topsrv_kern_subscr+0x5fb/0x9d0 [ 29.057992] ? tipc_topsrv_queue_evt+0x6d0/0x6d0 [ 29.062724] ? tipc_group_create+0x2b6/0x990 [ 29.067108] ? lock_downgrade+0x980/0x980 [ 29.071238] ? memset+0x31/0x40 [ 29.074497] ? tipc_bcast_stop+0x350/0x350 [ 29.078712] tipc_group_create+0x6f2/0x990 [ 29.082925] ? tipc_group_size+0x50/0x50 [ 29.086983] ? mark_held_locks+0xaf/0x100 [ 29.091106] ? do_raw_spin_trylock+0x190/0x190 [ 29.095664] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.100654] ? lock_sock_nested+0x91/0x110 [ 29.104872] ? trace_hardirqs_on+0xd/0x10 [ 29.109006] ? __local_bh_enable_ip+0x121/0x230 [ 29.113677] tipc_setsockopt+0x28a/0xcf0 [ 29.117717] ? tipc_sk_leave+0x200/0x200 [ 29.121761] ? __fdget+0x18/0x20 [ 29.125105] ? security_socket_setsockopt+0x89/0xb0 [ 29.130100] SyS_setsockopt+0x189/0x360 [ 29.134054] ? SyS_recv+0x40/0x40 [ 29.137478] ? SyS_write+0x184/0x220 [ 29.141169] ? SyS_read+0x220/0x220 [ 29.144770] ? do_syscall_64+0xb7/0x940 [ 29.148721] ? SyS_recv+0x40/0x40 [ 29.152150] do_syscall_64+0x281/0x940 [ 29.156016] ? __do_page_fault+0xc90/0xc90 [ 29.160233] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.164967] ? syscall_return_slowpath+0x550/0x550 [ 29.169869] ? syscall_return_slowpath+0x2ac/0x550 [ 29.174773] ? prepare_exit_to_usermode+0x350/0x350 [ 29.179772] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 29.185115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.189945] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 29.195110] RIP: 0033:0x440919 [ 29.198274] RSP: 002b:00007fffae3a6978 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 29.205954] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000440919 [ 29.213197] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 29.220454] RBP: 00000000006cb018 R08: 000000000000feda R09: 00007fffae3a0034 [ 29.227695] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000008 [ 29.234939] R13: ffffffffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 29.242279] Name sequence creation failed, no memory [ 29.247425] Failed to create subscription for {2147483648,0,4294967295} [ 29.256182] list_del corruption. prev->next should be 000000006a45cd4e, but was (null) [ 29.265307] ------------[ cut here ]------------ [ 29.270038] kernel BUG at lib/list_debug.c:53! [ 29.274636] invalid opcode: 0000 [#1] SMP KASAN [ 29.279283] Dumping ftrace buffer: [ 29.282792] (ftrace buffer empty) [ 29.286472] Modules linked in: [ 29.289637] CPU: 1 PID: 4418 Comm: syzkaller542553 Not tainted 4.16.0-rc6+ #284 [ 29.297052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.306383] RIP: 0010:__list_del_entry_valid+0xef/0x150 [ 29.311715] RSP: 0018:ffff8801b14feec8 EFLAGS: 00010282 [ 29.317062] RAX: 0000000000000054 RBX: ffffffff886edfe0 RCX: 0000000000000000 [ 29.324304] RDX: 0000000000000054 RSI: 1ffff1003629fd8e RDI: ffffed003629fdcd [ 29.331544] RBP: ffff8801b14feee0 R08: 1ffff1003629fd25 R09: 0000000000000000 [ 29.338784] R10: ffff8801b14feda8 R11: 0000000000000000 R12: ffffffffffffffff [ 29.346042] R13: ffff8801b14ff080 R14: ffff8801b40a5718 R15: ffff8801d40b3780 [ 29.353284] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 29.361488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.367339] CR2: 00007ffccb8b5b10 CR3: 0000000007a22004 CR4: 00000000001606e0 [ 29.374581] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.381821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.389061] Call Trace: [ 29.391619] ? _raw_spin_lock_bh+0x39/0x40 [ 29.395826] tipc_nametbl_unsubscribe+0x337/0x990 [ 29.400641] ? SyS_exit_group+0x1d/0x20 [ 29.404586] ? do_syscall_64+0x281/0x940 [ 29.408624] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 29.413961] ? tipc_nametbl_subscribe+0xf80/0xf80 [ 29.418789] ? find_held_lock+0x35/0x1d0 [ 29.422821] ? trace_hardirqs_off+0x10/0x10 [ 29.427117] ? lock_acquire+0x1d5/0x580 [ 29.431060] ? lock_acquire+0x1d5/0x580 [ 29.435009] ? tipc_conn_delete_sub+0x237/0x4a0 [ 29.439654] ? tipc_conn_delete_sub+0x1f0/0x4a0 [ 29.444384] tipc_sub_unsubscribe+0x6d/0x2e0 [ 29.448763] ? tipc_sub_subscribe+0x510/0x510 [ 29.453232] ? tipc_conn_delete_sub+0x237/0x4a0 [ 29.457873] tipc_conn_delete_sub+0x324/0x4a0 [ 29.462344] ? tipc_topsrv_accept+0x340/0x340 [ 29.466817] ? trace_hardirqs_on+0xd/0x10 [ 29.470945] ? __local_bh_enable_ip+0x121/0x230 [ 29.475584] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.479978] tipc_topsrv_kern_unsubscr+0x21d/0x350 [ 29.484880] ? tipc_dest_del+0x350/0x350 [ 29.488923] ? tipc_topsrv_kern_subscr+0x9d0/0x9d0 [ 29.493820] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 29.498983] ? tipc_node_distr_xmit+0x212/0x2b0 [ 29.503623] ? tipc_node_add_conn+0x700/0x700 [ 29.508089] tipc_group_delete+0x2c0/0x3d0 [ 29.512294] ? tipc_msg_create+0x1fc/0x280 [ 29.516501] ? tipc_group_create+0x990/0x990 [ 29.520896] ? __tipc_shutdown+0x916/0xc80 [ 29.525103] ? find_held_lock+0x35/0x1d0 [ 29.529138] ? tipc_sk_respond+0x550/0x550 [ 29.533348] tipc_sk_leave+0x10b/0x200 [ 29.537211] ? tipc_sk_withdraw+0x6e0/0x6e0 [ 29.541505] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.546503] ? lock_sock_nested+0x91/0x110 [ 29.550710] ? __local_bh_enable_ip+0x121/0x230 [ 29.555353] tipc_release+0x154/0xff0 [ 29.559128] ? mntput_no_expire+0x130/0xa90 [ 29.563430] ? tipc_sk_backlog_rcv+0x390/0x390 [ 29.567983] ? lock_release+0xa40/0xa40 [ 29.571927] ? list_lru_count_node+0x70/0x70 [ 29.576311] ? do_raw_spin_trylock+0x190/0x190 [ 29.580884] ? locks_remove_file+0x3fa/0x5a0 [ 29.585262] ? fcntl_setlk+0x1100/0x1100 [ 29.589293] ? fsnotify+0x7b3/0x1140 [ 29.592985] ? fsnotify_first_mark+0x2b0/0x2b0 [ 29.597541] sock_release+0x8d/0x1e0 [ 29.601227] ? sock_alloc_file+0x560/0x560 [ 29.605441] sock_close+0x16/0x20 [ 29.608867] __fput+0x327/0x7e0 [ 29.612121] ? fput+0x140/0x140 [ 29.615372] ? check_same_owner+0x320/0x320 [ 29.619664] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.624133] ____fput+0x15/0x20 [ 29.627386] task_work_run+0x199/0x270 [ 29.631246] ? task_work_cancel+0x210/0x210 [ 29.635537] ? _raw_spin_unlock+0x22/0x30 [ 29.639655] ? switch_task_namespaces+0x87/0xc0 [ 29.644299] do_exit+0x9bb/0x1ad0 [ 29.647722] ? _raw_spin_unlock_irq+0x27/0x70 [ 29.652188] ? finish_task_switch+0x1c1/0x7e0 [ 29.656662] ? mm_update_next_owner+0x930/0x930 [ 29.661299] ? copy_overflow+0x20/0x20 [ 29.665166] ? __schedule+0x903/0x1ec0 [ 29.669039] ? __sched_text_start+0x8/0x8 [ 29.673155] ? lock_downgrade+0x980/0x980 [ 29.677275] ? __local_bh_enable_ip+0x121/0x230 [ 29.681913] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 29.686902] ? release_sock+0x1d4/0x2a0 [ 29.690846] ? __local_bh_enable_ip+0x121/0x230 [ 29.695486] ? _raw_spin_unlock_bh+0x30/0x40 [ 29.699864] ? release_sock+0x1d4/0x2a0 [ 29.703809] ? __release_sock+0x360/0x360 [ 29.707928] ? tipc_nametbl_build_group+0x2a0/0x3a0 [ 29.712927] ? schedule+0xf5/0x430 [ 29.716437] ? __schedule+0x1ec0/0x1ec0 [ 29.720386] ? __fdget+0x18/0x20 [ 29.723724] ? security_socket_setsockopt+0x89/0xb0 [ 29.728713] ? exit_to_usermode_loop+0x8c/0x2f0 [ 29.733366] do_group_exit+0x149/0x400 [ 29.737224] ? trace_hardirqs_off+0xd/0x10 [ 29.741440] ? exit_to_usermode_loop+0x198/0x2f0 [ 29.746167] ? SyS_exit+0x30/0x30 [ 29.749590] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 29.755109] ? do_syscall_64+0xb7/0x940 [ 29.759054] ? do_group_exit+0x400/0x400 [ 29.763087] SyS_exit_group+0x1d/0x20 [ 29.766856] do_syscall_64+0x281/0x940 [ 29.770712] ? __do_page_fault+0xc90/0xc90 [ 29.774916] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 29.779642] ? syscall_return_slowpath+0x550/0x550 [ 29.784541] ? syscall_return_slowpath+0x2ac/0x550 [ 29.789451] ? prepare_exit_to_usermode+0x350/0x350 [ 29.794437] ? retint_user+0x18/0x18 [ 29.798124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.802941] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 29.808117] RIP: 0033:0x43f5d8 [ 29.811277] RSP: 002b:00007fffae3a69a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.818957] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000043f5d8 [ 29.826213] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000000000000000 [ 29.833454] RBP: 00000000004bf708 R08: 00000000000000e7 R09: ffffffffffffffd0 [ 29.840697] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 29.847937] R13: 00000000006d11c0 R14: 0000000000000000 R15: 0000000000000000 [ 29.855185] Code: 4c 89 e2 48 c7 c7 40 8e e5 86 e8 a5 67 a7 fe 0f 0b 48 c7 c7 a0 8e e5 86 e8 97 67 a7 fe 0f 0b 48 c7 c7 00 8f e5 86 e8 89 67 a7 fe <0f> 0b 48 c7 c7 60 8f e5 86 e8 7b 67 a7 fe 0f 0b 48 89 df 48 89 [ 29.874259] RIP: __list_del_entry_valid+0xef/0x150 RSP: ffff8801b14feec8 [ 29.881114] ---[ end trace c0a58eabd4b15e7a ]--- [ 29.885874] Kernel panic - not syncing: Fatal exception in interrupt [ 29.892767] Dumping ftrace buffer: [ 29.896287] (ftrace buffer empty) [ 29.899968] Kernel Offset: disabled [ 29.903566] Rebooting in 86400 seconds..