INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts. 2018/03/30 07:04:55 parsed 1 programs 2018/03/30 07:04:55 executed programs: 0 syzkaller login: [ 23.576847] IPVS: ftp: loaded support on port[0] = 21 [ 23.610701] FAULT_INJECTION: forcing a failure. [ 23.610701] name failslab, interval 1, probability 0, space 0, times 1 [ 23.621908] CPU: 0 PID: 4316 Comm: syz-executor0 Not tainted 4.16.0-rc6+ #286 [ 23.629150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.638471] Call Trace: [ 23.641054] dump_stack+0x194/0x24d [ 23.644654] ? arch_local_irq_restore+0x53/0x53 [ 23.649294] ? lock_acquire+0x1d5/0x580 [ 23.653236] ? __is_insn_slot_addr+0x1fc/0x330 [ 23.657886] should_fail+0x8c0/0xa40 [ 23.661573] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 23.666646] ? lock_acquire+0x1d5/0x580 [ 23.670590] ? lock_acquire+0x1d5/0x580 [ 23.674534] ? is_bpf_text_address+0x7b/0x120 [ 23.678997] ? lock_downgrade+0x980/0x980 [ 23.683122] ? lock_release+0xa40/0xa40 [ 23.687068] ? lock_acquire+0x1d5/0x580 [ 23.691018] ? lock_acquire+0x1d5/0x580 [ 23.694966] ? depot_save_stack+0x2ca/0x460 [ 23.699255] ? lock_downgrade+0x980/0x980 [ 23.703377] ? lock_acquire+0x1d5/0x580 [ 23.707322] ? nametbl_find_seq+0x1d0/0x580 [ 23.711611] ? lock_downgrade+0x980/0x980 [ 23.715735] ? lock_release+0xa40/0xa40 [ 23.719684] ? trace_hardirqs_on+0xd/0x10 [ 23.723806] should_failslab+0xec/0x120 [ 23.727752] kmem_cache_alloc_trace+0x4b/0x740 [ 23.732306] ? nametbl_find_seq+0x3dd/0x580 [ 23.736599] tipc_nameseq_create+0xad/0x540 [ 23.740889] ? lock_release+0xa40/0xa40 [ 23.744833] ? __tipc_nl_add_monitor+0xf80/0xf80 [ 23.749556] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 23.754720] ? __radix_tree_replace+0x1af/0x310 [ 23.759365] ? tipc_nametbl_subscribe+0x2bc/0xf80 [ 23.764182] tipc_nametbl_subscribe+0xb8e/0xf80 [ 23.768819] ? radix_tree_iter_replace+0x4c/0x60 [ 23.773552] ? tipc_nametbl_withdraw+0x9a0/0x9a0 [ 23.778275] ? kasan_unpoison_shadow+0x35/0x50 [ 23.782827] ? kasan_unpoison_shadow+0x35/0x50 [ 23.787378] ? kasan_kmalloc+0xad/0xe0 [ 23.791237] ? kmem_cache_alloc_trace+0x2e0/0x740 [ 23.796048] ? tipc_conn_rcv_sub.isra.5+0x1f7/0x760 [ 23.801038] ? __lockdep_init_map+0xe4/0x650 [ 23.805416] ? lockdep_init_map+0x9/0x10 [ 23.809447] tipc_sub_subscribe+0x342/0x510 [ 23.813739] ? tipc_sub_get+0x20/0x20 [ 23.817510] ? tipc_conn_data_ready+0x150/0x150 [ 23.822150] tipc_conn_rcv_sub.isra.5+0x383/0x760 [ 23.827052] ? tipc_conn_close+0x140/0x140 [ 23.831260] ? lock_release+0xa40/0xa40 [ 23.835213] ? _parse_integer+0xe9/0x140 [ 23.839249] tipc_topsrv_kern_subscr+0x5fb/0x9d0 [ 23.843978] ? tipc_topsrv_queue_evt+0x6d0/0x6d0 [ 23.848702] ? tipc_group_create+0x2b6/0x990 [ 23.853086] ? lock_downgrade+0x980/0x980 [ 23.857205] ? kasan_unpoison_shadow+0x35/0x50 [ 23.861756] ? memset+0x31/0x40 [ 23.865015] ? tipc_bcast_stop+0x350/0x350 [ 23.869234] ? kstrtouint_from_user+0x10c/0x160 [ 23.873884] tipc_group_create+0x6f2/0x990 [ 23.878098] ? tipc_group_size+0x50/0x50 [ 23.882135] ? lock_release+0xa40/0xa40 [ 23.886080] ? check_same_owner+0x320/0x320 [ 23.890379] ? handle_mm_fault+0x35b/0xb10 [ 23.894583] ? do_raw_spin_trylock+0x190/0x190 [ 23.899137] ? __might_sleep+0x95/0x190 [ 23.903084] ? lock_sock_nested+0x91/0x110 [ 23.907286] ? trace_hardirqs_on+0xd/0x10 [ 23.911407] ? __local_bh_enable_ip+0x121/0x230 [ 23.916055] tipc_setsockopt+0x28a/0xcf0 [ 23.920088] ? fsnotify+0x7b3/0x1140 [ 23.923772] ? tipc_sk_leave+0x200/0x200 [ 23.927807] ? __fdget+0x18/0x20 [ 23.931146] ? security_socket_setsockopt+0x89/0xb0 [ 23.936136] SyS_setsockopt+0x189/0x360 [ 23.940082] ? SyS_recv+0x40/0x40 [ 23.943502] ? SyS_write+0x184/0x220 [ 23.947186] ? SyS_read+0x220/0x220 [ 23.950787] ? SyS_recv+0x40/0x40 [ 23.954212] do_syscall_64+0x281/0x940 [ 23.958069] ? __do_page_fault+0xc90/0xc90 [ 23.962272] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 23.966998] ? syscall_return_slowpath+0x550/0x550 [ 23.971903] ? syscall_return_slowpath+0x2ac/0x550 [ 23.976810] ? prepare_exit_to_usermode+0x350/0x350 [ 23.981795] ? prepare_exit_to_usermode+0x227/0x350 [ 23.986779] ? perf_trace_sys_enter+0xcb0/0xcb0 [ 23.991418] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 23.996234] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 24.001397] RIP: 0033:0x4548b9 [ 24.004561] RSP: 002b:00007ffd0cd21a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 24.012235] RAX: ffffffffffffffda RBX: 0000000000e83914 RCX: 00000000004548b9 [ 24.019472] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 24.026709] RBP: 000000000072bea0 R08: 0000000000000094 R09: 0000000000000000 [ 24.033949] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000004 [ 24.041190] R13: 00000000000005ee R14: 00000000006faef0 R15: 0000000000000003 [ 24.048488] Name sequence creation failed, no memory [ 24.053594] Failed to create subscription for {2147483648,0,4294967295} [ 24.061842] list_del corruption. prev->next should be 00000000319847ee, but was (null) [ 24.070895] ------------[ cut here ]------------ [ 24.075633] kernel BUG at lib/list_debug.c:53! [ 24.080229] invalid opcode: 0000 [#1] SMP KASAN [ 24.084879] Dumping ftrace buffer: [ 24.088400] (ftrace buffer empty) [ 24.092093] Modules linked in: [ 24.095275] CPU: 1 PID: 4316 Comm: syz-executor0 Not tainted 4.16.0-rc6+ #286 [ 24.102526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.111862] RIP: 0010:__list_del_entry_valid+0xef/0x150 [ 24.117195] RSP: 0018:ffff8801b1caeec8 EFLAGS: 00010282 [ 24.122527] RAX: 0000000000000054 RBX: ffffffff886eefe0 RCX: 0000000000000000 [ 24.129770] RDX: 0000000000000054 RSI: 1ffff10036395d8e RDI: ffffed0036395dcd [ 24.137019] RBP: ffff8801b1caeee0 R08: 0000000000000000 R09: 1ffff10036395d35 [ 24.144265] R10: ffff8801b1caeda8 R11: ffffffff87b3b618 R12: ffffffffffffffff [ 24.151505] R13: ffff8801b1caf080 R14: ffff8801b40cf058 R15: ffff8801d51d8900 [ 24.158748] FS: 0000000000000000(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 24.166947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.172809] CR2: 00007fe5f91ef9ce CR3: 0000000007a22005 CR4: 00000000001606e0 [ 24.180057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.187303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.194542] Call Trace: [ 24.197104] ? _raw_spin_lock_bh+0x39/0x40 [ 24.201329] tipc_nametbl_unsubscribe+0x337/0x990 [ 24.206153] ? SyS_exit_group+0x1d/0x20 [ 24.210099] ? do_syscall_64+0x281/0x940 [ 24.214138] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 24.219476] ? tipc_nametbl_subscribe+0xf80/0xf80 [ 24.224305] ? __radix_tree_lookup+0x435/0x5e0 [ 24.228879] ? kasan_unpoison_shadow+0x35/0x50 [ 24.233438] ? lock_acquire+0x1d5/0x580 [ 24.237385] ? lock_acquire+0x1d5/0x580 [ 24.241331] ? tipc_conn_delete_sub+0x237/0x4a0 [ 24.245976] ? tipc_conn_delete_sub+0x1f0/0x4a0 [ 24.250631] tipc_sub_unsubscribe+0x6d/0x2e0 [ 24.255022] ? tipc_conn_lookup+0x78/0x90 [ 24.259148] ? tipc_sub_subscribe+0x510/0x510 [ 24.263613] ? tipc_conn_delete_sub+0x237/0x4a0 [ 24.268265] tipc_conn_delete_sub+0x324/0x4a0 [ 24.272738] ? tipc_topsrv_accept+0x340/0x340 [ 24.277204] ? trace_hardirqs_on+0xd/0x10 [ 24.281320] ? __local_bh_enable_ip+0x121/0x230 [ 24.285959] ? _raw_spin_unlock_bh+0x30/0x40 [ 24.290341] tipc_topsrv_kern_unsubscr+0x21d/0x350 [ 24.295239] ? tipc_dest_del+0x350/0x350 [ 24.299270] ? tipc_topsrv_kern_subscr+0x9d0/0x9d0 [ 24.304176] ? tipc_node_distr_xmit+0x212/0x2b0 [ 24.308818] ? tipc_node_add_conn+0x700/0x700 [ 24.313288] tipc_group_delete+0x2c0/0x3d0 [ 24.317497] ? tipc_msg_create+0x1fc/0x280 [ 24.321703] ? tipc_group_create+0x990/0x990 [ 24.326084] ? __tipc_shutdown+0x916/0xc80 [ 24.330293] ? tipc_sk_respond+0x550/0x550 [ 24.334500] tipc_sk_leave+0x10b/0x200 [ 24.338359] ? tipc_sk_withdraw+0x6e0/0x6e0 [ 24.342655] ? lock_sock_nested+0x91/0x110 [ 24.346861] ? __local_bh_enable_ip+0x121/0x230 [ 24.351502] tipc_release+0x154/0xff0 [ 24.355277] ? is_bpf_text_address+0xa4/0x120 [ 24.359766] ? tipc_sk_backlog_rcv+0x390/0x390 [ 24.364319] ? unwind_get_return_address+0x61/0xa0 [ 24.369219] ? __save_stack_trace+0x7e/0xd0 [ 24.373515] ? save_stack+0xa3/0xd0 [ 24.377117] ? locks_remove_file+0x3fa/0x5a0 [ 24.381498] ? save_stack+0x43/0xd0 [ 24.385104] ? __kasan_slab_free+0x11a/0x170 [ 24.389490] ? fcntl_setlk+0x1100/0x1100 [ 24.393522] ? fsnotify+0x7b3/0x1140 [ 24.397208] ? SyS_exit_group+0x1d/0x20 [ 24.401166] ? fsnotify_first_mark+0x2b0/0x2b0 [ 24.405735] sock_release+0x8d/0x1e0 [ 24.409429] ? sock_alloc_file+0x560/0x560 [ 24.413642] sock_close+0x16/0x20 [ 24.417073] __fput+0x327/0x7e0 [ 24.420335] ? fput+0x140/0x140 [ 24.423588] ? lock_release+0xa40/0xa40 [ 24.427537] ____fput+0x15/0x20 [ 24.430794] task_work_run+0x199/0x270 [ 24.434666] ? task_work_cancel+0x210/0x210 [ 24.438967] ? _raw_spin_unlock+0x22/0x30 [ 24.443093] ? switch_task_namespaces+0x87/0xc0 [ 24.447753] do_exit+0x9bb/0x1ad0 [ 24.451182] ? mm_update_next_owner+0x930/0x930 [ 24.455821] ? lock_downgrade+0x980/0x980 [ 24.459938] ? _raw_spin_unlock+0x22/0x30 [ 24.464057] ? lock_release+0xa40/0xa40 [ 24.468003] ? list_lru_count_node+0x70/0x70 [ 24.472392] ? do_raw_spin_trylock+0x190/0x190 [ 24.476946] ? mntput_no_expire+0x15e/0xa90 [ 24.481240] ? mnt_get_count+0x150/0x150 [ 24.485270] ? dput.part.20+0x207/0x830 [ 24.489216] ? lock_acquire+0x1d5/0x580 [ 24.493157] ? task_work_run+0x16c/0x270 [ 24.497189] ? lock_downgrade+0x980/0x980 [ 24.501306] ? lock_release+0xa40/0xa40 [ 24.505251] ? do_raw_spin_trylock+0x190/0x190 [ 24.509803] ? check_same_owner+0x320/0x320 [ 24.514100] ? fput+0xd2/0x140 [ 24.517281] ? trace_hardirqs_on+0xd/0x10 [ 24.521402] ? _raw_spin_unlock_irq+0x27/0x70 [ 24.525866] ? task_work_run+0x1f4/0x270 [ 24.529900] ? SyS_futex+0x269/0x390 [ 24.533585] do_group_exit+0x149/0x400 [ 24.537445] ? do_futex+0x22a0/0x22a0 [ 24.542112] ? exit_to_usermode_loop+0x198/0x2f0 [ 24.546841] ? SyS_exit+0x30/0x30 [ 24.550264] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 24.555772] ? do_group_exit+0x400/0x400 [ 24.559802] SyS_exit_group+0x1d/0x20 [ 24.563571] do_syscall_64+0x281/0x940 [ 24.567427] ? __do_page_fault+0xc90/0xc90 [ 24.571639] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 24.576366] ? syscall_return_slowpath+0x550/0x550 [ 24.581263] ? syscall_return_slowpath+0x2ac/0x550 [ 24.586161] ? prepare_exit_to_usermode+0x350/0x350 [ 24.591149] ? prepare_exit_to_usermode+0x227/0x350 [ 24.596134] ? perf_trace_sys_enter+0xcb0/0xcb0 [ 24.600770] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 24.605587] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 24.610747] RIP: 0033:0x4548b9 [ 24.613905] RSP: 002b:00007ffd0cd21bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 24.621580] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004548b9 [ 24.628820] RDX: 00000000000005ee RSI: 0000000000730d18 RDI: 0000000000000000 [ 24.636057] RBP: 00007ffd0cd222a0 R08: 0000000000000000 R09: 00000000004107e0 [ 24.643297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.650537] R13: 00000000004107e0 R14: 0000000000000000 R15: 0000000000000000 [ 24.657782] Code: 4c 89 e2 48 c7 c7 40 8e e5 86 e8 65 67 a7 fe 0f 0b 48 c7 c7 a0 8e e5 86 e8 57 67 a7 fe 0f 0b 48 c7 c7 00 8f e5 86 e8 49 67 a7 fe <0f> 0b 48 c7 c7 60 8f e5 86 e8 3b 67 a7 fe 0f 0b 48 89 df 48 89 [ 24.676858] RIP: __list_del_entry_valid+0xef/0x150 RSP: ffff8801b1caeec8 [ 24.683728] ---[ end trace af0e8b33290f591e ]--- [ 24.688465] Kernel panic - not syncing: Fatal exception in interrupt [ 24.695273] Dumping ftrace buffer: [ 24.698780] (ftrace buffer empty) [ 24.702459] Kernel Offset: disabled [ 24.706056] Rebooting in 86400 seconds..